Warning: Permanently added '[localhost]:37822' (ECDSA) to the list of known hosts. 2024/11/12 12:23:11 fuzzer started 2024/11/12 12:23:12 dialing manager at localhost:46317 syzkaller login: [ 66.977441] cgroup: Unknown subsys name 'net' [ 67.133783] cgroup: Unknown subsys name 'cpuset' [ 67.166087] cgroup: Unknown subsys name 'rlimit' 2024/11/12 12:23:29 syscalls: 202 2024/11/12 12:23:29 code coverage: enabled 2024/11/12 12:23:29 comparison tracing: enabled 2024/11/12 12:23:29 extra coverage: enabled 2024/11/12 12:23:29 setuid sandbox: enabled 2024/11/12 12:23:29 namespace sandbox: enabled 2024/11/12 12:23:29 Android sandbox: enabled 2024/11/12 12:23:29 fault injection: enabled 2024/11/12 12:23:29 leak checking: enabled 2024/11/12 12:23:29 net packet injection: enabled 2024/11/12 12:23:29 net device setup: enabled 2024/11/12 12:23:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 12:23:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 12:23:29 USB emulation: enabled 2024/11/12 12:23:29 hci packet injection: enabled 2024/11/12 12:23:29 wifi device emulation: enabled 2024/11/12 12:23:29 802.15.4 emulation: enabled 2024/11/12 12:23:29 fetching corpus: 0, signal 0/0 (executing program) 2024/11/12 12:23:31 starting 8 fuzzer processes 12:23:31 executing program 0: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x6f00f784}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xf3}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa3}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x943}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x385e}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000200)=@phonet, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/17, 0x11}], 0x2, &(0x7f00000003c0)=""/141, 0x8d}, 0x4}, {{&(0x7f0000000480)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)}], 0x1, &(0x7f0000000580)=""/213, 0xd5}, 0x7}, {{&(0x7f0000000680)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/246, 0xf6}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000900)=""/188, 0xbc}, {&(0x7f00000009c0)=""/161, 0xa1}, {&(0x7f0000000a80)=""/161, 0xa1}], 0x5, &(0x7f0000000bc0)}, 0x80000001}, {{&(0x7f0000000c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c80)=""/149, 0x95}, {&(0x7f0000000d40)=""/196, 0xc4}], 0x2}, 0xffffffff}], 0x4, 0x140, &(0x7f0000000f80)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001080)={&(0x7f0000000fc0), 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10045}, 0x4080) recvmsg(r1, &(0x7f0000002500)={&(0x7f00000010c0)=@ax25={{0x3, @default}, [@bcast, @remote, @rose, @bcast, @remote, @rose, @netrom, @netrom]}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001140)=""/13, 0xd}, {&(0x7f0000001180)=""/246, 0xf6}, {&(0x7f0000001280)=""/211, 0xd3}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/9, 0x9}], 0x5, &(0x7f0000002440)=""/134, 0x86}, 0x40012022) r2 = getegid() sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x28, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x93b0298cdd528943}, 0x400c4) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002680), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000002880)={&(0x7f0000002780), 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x44, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d07}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10048c01}, 0x1000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000028c0), 0x82001, 0x0) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x40) setgroups(0x1, &(0x7f0000002a00)=[0xee01]) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = getegid() setgroups(0x5, &(0x7f0000002bc0)=[r2, r2, r6, r2, r2]) r7 = socket(0x1d, 0x1, 0x3a) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c40), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x64, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}}, 0x20000000) 12:23:31 executing program 1: socketpair(0x23, 0x1, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20910) recvmmsg(r1, &(0x7f0000009500)=[{{&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/27, 0x1b}, {&(0x7f0000000580)=""/52, 0x34}, {&(0x7f00000005c0)=""/78, 0x4e}, {&(0x7f0000000640)=""/98, 0x62}, {&(0x7f00000006c0)=""/229, 0xe5}], 0xa, &(0x7f0000000880)=""/73, 0x49}, 0x6}, {{&(0x7f0000000900)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/109, 0x6d}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000ac0)=""/54, 0x36}, {&(0x7f0000000b00)}], 0x4, &(0x7f0000000b80)=""/128, 0x80}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/104, 0x68}, {&(0x7f0000000c80)=""/150, 0x96}], 0x2, &(0x7f0000000d80)=""/187, 0xbb}, 0x401}, {{&(0x7f0000000e40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/138, 0x8a}, {&(0x7f0000000f80)=""/218, 0xda}], 0x2, &(0x7f00000010c0)=""/69, 0x45}, 0x4}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001140)=""/19, 0x13}, {&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/106, 0x6a}, {&(0x7f0000001280)=""/173, 0xad}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/33, 0x21}], 0x6, &(0x7f0000001440)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000002440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000024c0)=""/24, 0x18}, {&(0x7f0000002500)=""/21, 0x15}, {&(0x7f0000002540)=""/112, 0x70}, {&(0x7f00000025c0)=""/190, 0xbe}, {&(0x7f0000002680)=""/169, 0xa9}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x6}, 0x800}, {{&(0x7f00000037c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000003840)=""/249, 0xf9}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/255, 0xff}], 0x4}, 0x4}, {{&(0x7f0000005a80)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/78, 0x4e}, {&(0x7f0000005b80)=""/4096, 0x1000}], 0x2, &(0x7f0000006bc0)=""/165, 0xa5}, 0x1000}, {{&(0x7f0000006c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000006d00)=""/6, 0x6}, {&(0x7f0000006d40)=""/35, 0x23}, {&(0x7f0000006d80)=""/190, 0xbe}], 0x3, &(0x7f0000006e80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000007e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000007f00)=""/75, 0x4b}, {&(0x7f0000007f80)=""/97, 0x61}, {&(0x7f0000008000)=""/76, 0x4c}, {&(0x7f0000008080)=""/233, 0xe9}, {&(0x7f0000008180)=""/161, 0xa1}, {&(0x7f0000008240)=""/120, 0x78}, {&(0x7f00000082c0)=""/84, 0x54}, {&(0x7f0000008340)=""/4096, 0x1000}, {&(0x7f0000009340)=""/81, 0x51}], 0x9, &(0x7f0000009480)=""/91, 0x5b}, 0x922}], 0xa, 0x10000, &(0x7f0000009780)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000009880)={'gretap0\x00', &(0x7f00000097c0)={'erspan0\x00', r4, 0x7800, 0x700, 0x10001, 0x6, {{0x24, 0x4, 0x3, 0x2a, 0x90, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010101, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x3a, 0x1, 0xb, [{@multicast2, 0xfffffe29}, {@remote, 0x8000}]}, @ssrr={0x89, 0xb, 0x42, [@broadcast, @loopback]}, @timestamp_prespec={0x44, 0x54, 0x3b, 0x3, 0x8, [{@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@remote, 0x8001}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x7fffffff}, {@loopback, 0xfffff800}, {@multicast1, 0x1}, {@rand_addr=0x64010100, 0x1}]}]}}}}}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000009900), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000099c0)={&(0x7f00000098c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000009980)={&(0x7f0000009940)={0x1c, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x801) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000009a00)) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000009a80), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000009b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000009c40)={&(0x7f0000009a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000009c00)={&(0x7f0000009bc0)={0x34, r10, 0x109, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x34}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000009c80)={0x1000000c}) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000009dc0)={&(0x7f0000009cc0)={0x10, 0x0, 0x0, 0x3020}, 0xc, &(0x7f0000009d80)={&(0x7f0000009d00)={0x50, 0xe, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4048851) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000009f00)={&(0x7f0000009e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000009ec0)={&(0x7f0000009e40)={0x54, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x2800}, 0x4004000) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f000000a040)={&(0x7f0000009f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000a000)={&(0x7f0000009f80)={0x7c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f000000a080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd=r12, 0xef, 0x1, 0x426, 0x4}, 0x8) recvmsg(r7, &(0x7f000000a680)={&(0x7f000000a0c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f000000a540)=[{&(0x7f000000a140)=""/246, 0xf6}, {&(0x7f000000a240)=""/14, 0xe}, {&(0x7f000000a280)=""/101, 0x65}, {&(0x7f000000a300)=""/106, 0x6a}, {&(0x7f000000a380)=""/242, 0xf2}, {&(0x7f000000a480)=""/58, 0x3a}, {&(0x7f000000a4c0)=""/66, 0x42}], 0x7, &(0x7f000000a5c0)=""/150, 0x96}, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r13, &(0x7f000000a800)={&(0x7f000000a6c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000a7c0)={&(0x7f000000a700)={0x88, 0x17, 0xa, 0x105, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008014}, 0x4c050) 12:23:31 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x7) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r2 = epoll_create1(0x80000) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x402740) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000280)={r2, r3, 0x9}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000002c0)={0x80000002}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000400)={0x0, 0x3, 0xeac0, 0x2, 0x8}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x80) epoll_wait(r0, &(0x7f0000000580)=[{}, {}, {}], 0x3, 0xd) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) socketpair(0x0, 0x6, 0x6, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x18, 0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r7 = epoll_create(0x8000000) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f0000000800)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000840)={{0x2, 0x3, 0x0, 0x1, 0x40}, 0xfd, 0x4, 0x6}) 12:23:31 executing program 3: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x25}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x8, 0x104, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0xc000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4cb}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x51}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x44) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0), 0x2e8100, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}}, 0x40) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc449}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xbe0d}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x4804) syz_open_dev$sg(&(0x7f0000000c80), 0xf, 0x10000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003880), 0x202000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000003980)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x70, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000000}, 0x30048840) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000003a00), r5) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003a40), 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x2c, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000003b80), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x8b56c83e788e06cb}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x44, r9, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6fe7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x61}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20008081) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d00)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0xb9}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x6}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x2e}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7f, 0x3}}]}}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x40}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x20, 0x6}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}]}}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x947}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 12:23:31 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x17b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x40004000}, 0x40810) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x608141, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x81, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r2}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x68}}, 0x4840) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x3c}}, 0x40000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x800) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x24058051) syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000089) 12:23:31 executing program 4: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x50000000}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001440), 0x40000, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000001540)={&(0x7f0000001480), 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c003}, 0x2000c010) epoll_wait(r0, &(0x7f0000001580)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001600)={0x200e}) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000001640)=[{}, {}, {}, {}, {}], 0x5, 0x3ff) r2 = getpgrp(0xffffffffffffffff) clone3(&(0x7f0000001900)={0x3c3e21fbec562e19, &(0x7f0000001680)=0xffffffffffffffff, &(0x7f00000016c0)=0x0, &(0x7f0000001700), {0x1}, &(0x7f0000001740)=""/222, 0xde, &(0x7f0000001840)=""/90, &(0x7f00000018c0)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x2000, 0x158, 0x1}, 0x18) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r5, &(0x7f0000001a00)={0xffffffffffffffff, r0, 0x8}) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000001a80), 0x8001, 0x200000) r6 = openat$cgroup_ro(r0, &(0x7f0000001ac0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000001b00), 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r7, &(0x7f0000001b40)={r6, r3, 0x1ba}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001b80), 0x2000, 0x0) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000002800)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000027c0)={&(0x7f0000001c00)={0xbb8, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x1, 0x7ff}, 0x5, 0x9, 0x3, 0xfff, 0x22, 'syz0\x00', "2b5ea5c72e453caca299c67836a52fd09c327988fce62f68092f7fab7ac115ac", "0ebb01fe8a084f2b7bf017f9073260cd8a4e600f6aae653192646991b89e695e", [{0x9, 0x1, {0x0, 0xe0a4}}, {0xffff, 0x8cf, {0x0, 0x70}}, {0x4b, 0x7f, {0x3, 0x2}}, {0x7, 0xff, {0x3}}, {0x9, 0x20, {0x3, 0x5}}, {0xe8b, 0x80, {0x1, 0x7490}}, {0x2, 0x80, {0x2, 0x4}}, {0x1, 0x1000, {0x2, 0x6}}, {0x400, 0x20, {0x2, 0x7ddf}}, {0x4, 0x7ff, {0x2, 0x401}}, {0x81, 0x400, {0x2, 0x6}}, {0x3c, 0x7, {0x2, 0x200}}, {0x3ff, 0xa, {0x1, 0x4}}, {0x7f, 0x7, {0x0, 0x8}}, {0x7, 0x3b9a, {0x1, 0x20}}, {0xfff, 0x3, {0x3, 0xe64}}, {0xcad, 0x800, {0x1, 0x5}}, {0x1, 0x0, {0x0, 0x3}}, {0x0, 0x3, {0xd9639ee6ebcb40a6, 0x10000}}, {0x1, 0x40, {0x0, 0xfffffffc}}, {0x5, 0x1ff, {0x2}}, {0x8, 0x3ff, {0x2, 0x8}}, {0x9, 0x3, {0x1, 0x81}}, {0x3, 0x1, {0x1, 0xffffff91}}, {0x1ff, 0x7fff, {0x2, 0x73}}, {0x1, 0x7fff, {0x1}}, {0x40, 0x5, {0x2, 0x5}}, {0x5, 0x4, {0x1, 0x8}}, {0x0, 0x1000, {0x0, 0x5}}, {0x1ff, 0x7f, {0x1, 0x5}}, {0x0, 0x4, {0x3, 0x7}}, {0x800, 0x98d, {0x1, 0x401}}, {0x7, 0x80}, {0x8001, 0xf3, {0x1, 0x80000001}}, {0x101, 0x401, {0x3, 0xc0d}}, {0x1, 0x7, {0x2, 0x6}}, {0x9, 0x59e7, {0x1, 0x9}}, {0x6, 0x80, {0x2, 0x2}}, {0x1, 0xddbc, {0x1, 0x3}}, {0x8, 0x9, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x50c}, 0x7f, 0x6, 0x100, 0x8, 0x11, 'syz0\x00', "2e8125d9d178aa8d34f054083502f032192de46a33d0fb1ef814133439403bcd", "fd3b7cb61e09812acb568c5cb2addea57c84d9f3fd3fd46da383091a81069408", [{0x8, 0x2, {0x0, 0x9}}, {0x7ff, 0x8001, {0x3, 0x800}}, {0x9, 0x5, {0x0, 0x8}}, {0x21, 0x1, {0x0, 0x800}}, {0x0, 0x6, {0x3}}, {0x3, 0xa9, {0x0, 0x7}}, {0x7fff, 0x7, {0x3, 0x7ff}}, {0x8, 0x2, {0x3, 0x200}}, {0xffff, 0x35b, {0x1, 0xf8}}, {0x1, 0x8000, {0x1, 0xf192}}, {0x547, 0x7122, {0x2, 0x10001}}, {0x9, 0x9, {0x3, 0xc0000000}}, {0x3, 0x9, {0x3, 0x40}}, {0x100, 0x0, {0x3, 0xdc}}, {0x4e17, 0x7, {0x2, 0x8}}, {0x6, 0x7, {0x2, 0x10000}}, {0x0, 0x4e34, {0x0, 0x1}}, {0x5, 0x200, {0x1, 0x800}}, {0x1, 0x3, {0x1, 0x1}}, {0x71, 0xe204, {0x0, 0x1}}, {0x7, 0x3, {0x2, 0x3}}, {0x400, 0x6d32, {0x3, 0x1}}, {0x2, 0x1, {0x1, 0x3}}, {0x9, 0x8, {0x0, 0x3}}, {0x3b, 0x0, {0x1, 0xff}}, {0x7, 0xcacd, {0x0, 0x26}}, {0x1a, 0x3, {0x1, 0xd7}}, {0x69, 0x280, {0x2, 0xa0}}, {0x4, 0x3, {0x2, 0xfffffff9}}, {0xc23c, 0xd45, {0x1, 0x1}}, {0x6, 0x400, {0x0, 0x80}}, {0x8d76, 0x1, {0x0, 0x80000000}}, {0x3, 0x34, {0x2, 0x1}}, {0x30a4, 0x2ee0, {0x3, 0x4}}, {0x20, 0x4, {0x2, 0x4}}, {0x7f, 0xe16, {0x1, 0x71}}, {0x4, 0x3, {0x0, 0x3}}, {0x3, 0x6, {0x1, 0xfb770082}}, {0x1f9a, 0xdf, {0x2, 0xffffffff}}, {0x8000, 0x5, {0xdcff5a30cebe1865, 0xeb}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x1, 0x6, 0x1, 0x401, 0x21, 'syz0\x00', "f5ff2d88feb5df4dd75b6d5cfeb11f679a9cec7a86b7b3179cd9094ef70420fb", "a4fc42501f8e5db514a5ffc6d0668a92220a98cc446a106a408ebf36606349c3", [{0x6, 0xa478, {0x3, 0xffffffff}}, {0x4, 0x8, {0x1, 0xfd}}, {0x3ff, 0x8, {0x3, 0xfffffffc}}, {0x7, 0xce, {0x0, 0x8}}, {0x7, 0x6, {0x0, 0x9}}, {0x4, 0x5, {0x0, 0x7}}, {0x0, 0x8, {0x3, 0xfffffff9}}, {0x3, 0xffc0, {0x2, 0x7}}, {0x2, 0x401, {0x1}}, {0x7, 0x1, {0x2, 0xfffffff9}}, {0xf0ea, 0x6, {0x1, 0xfffffffb}}, {0xfff, 0x4, {0x437638c862a42242, 0x7}}, {0x9, 0x7, {0x3, 0x1ff}}, {0x20, 0xbda1, {0x0, 0x200e}}, {0xc000, 0x6, {0x0, 0xdbc}}, {0xff, 0x9, {0x1}}, {0x8, 0x4, {0x5, 0x9}}, {0x4, 0x15, {0x1, 0xffffffff}}, {0x4, 0x3ff, {0x1}}, {0xfe00, 0xfffe, {0x1, 0x1}}, {0x8, 0x400, {0x2, 0x3}}, {0xf800, 0x1f, {0x2, 0x2}}, {0x16a, 0x2, {0x0, 0x3}}, {0x1, 0x5, {0x0, 0x5778}}, {0x1, 0x20, {0x0, 0x6}}, {0x7, 0x4, {0x3}}, {0xc4, 0x3, {0x1, 0x3}}, {0x9, 0x81, {0x2}}, {0x5, 0x4, {0x0, 0x401}}, {0x20, 0x71, {0x3, 0x3}}, {0x9, 0xff, {0x0, 0x95}}, {0x3, 0x1, {0x2, 0xffff8000}}, {0x0, 0x4c2d, {0x1, 0x101}}, {0x2, 0x6, {0x1, 0x100}}, {0x6, 0x20, {0x2}}, {0x2, 0x1, {0x3, 0xfec}}, {0xbe5, 0x80, {0x3, 0x9}}, {0x6, 0x1, {0x3, 0x5}}, {0xcb24, 0x4, {0x3, 0x2}}, {0x1000, 0x8, {0x2, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x80000000}, 0x9, 0x15, 0x8, 0x1, 0xb, 'syz1\x00', "89739922efe9b4ed923cc4e623851eee0d0c867f4f4b61f47ca22b60d9c1437f", "4ad6b8dab9922403037d07881965e402ad6633124cdfc85274a1bd45155dbc98", [{0xd7, 0x4, {0x3, 0x80}}, {0x0, 0x3ff, {0x1, 0x1}}, {0x2040, 0xca, {0x2, 0x1}}, {0x5, 0x5, {0x0, 0x80000001}}, {0x6, 0x9, {0x3, 0x9}}, {0x0, 0xc9, {0x3, 0xfff}}, {0x6, 0x5, {0x1, 0x6}}, {0x1, 0x1, {0x2, 0x4}}, {0x9, 0x1, {0x2, 0x2}}, {0x1, 0xff, {0x0, 0x3}}, {0x3f, 0x9, {0x3}}, {0x9, 0x80, {0x2, 0x628c}}, {0x1f, 0x5, {0x3, 0x4}}, {0x9f35, 0x2, {0x1, 0xf8000000}}, {0x79e1, 0x0, {0x3, 0xeaf}}, {0x800, 0x6, {0x0, 0xffff}}, {0x2, 0x4, {0x3}}, {0x45e, 0x6, {0x3, 0x73c}}, {0x9, 0x81, {0x1, 0xfffffffc}}, {0x1, 0x6, {0x0, 0xbc}}, {0x4, 0xffc5, {0x2, 0x7fffffff}}, {0x101, 0x4, {0x1, 0x4}}, {0x100, 0x8, {0x2, 0x5de32d4}}, {0x24f, 0x1, {0x1, 0x4}}, {0x5, 0x7ff, {0x1, 0x7}}, {0x4b10, 0x8, {0x1, 0x10000}}, {0xb853, 0x2, {0x1, 0x67e36327}}, {0x996c, 0x6, {0x1, 0x6}}, {0x3, 0xde89, {0x3, 0x3}}, {0x5, 0x5, {0x1, 0xffff}}, {0x9, 0x5f, {0x2, 0xfffffe01}}, {0x5, 0x2, {0x1, 0xfff}}, {0x401, 0x100, {0x1, 0x5}}, {0x4, 0x1, {0x1, 0x9a2a}}, {0x6, 0x5, {0x3, 0x3}}, {0x1, 0x7ff, {0x1, 0x8001}}, {0x9, 0x6, {0x1, 0xfffffff7}}, {0x0, 0xff, {0x1, 0x8}}, {0x40, 0x8, {0x2, 0x17fd30d5}}, {0x4870, 0x14, {0x0, 0xda}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x20, 0xfa, 0x5133, 0xfff, 0x1, 'syz1\x00', "4bd559e9919450b77e6d51cedac927c05b4f25ee461c30e6f0aaf205d4be81d2", "1420ca2629d88625e016ce4adc0ff829ea881a047b8bfbc180a90fc939818f88", [{0xb85, 0x80, {0x3, 0x7}}, {0x4da, 0xb800, {0x3, 0xfa7}}, {0x7fff, 0x14d4, {0x0, 0xfffffffc}}, {0x8, 0x40, {0x1, 0xc8b}}, {0x3, 0x8000, {0x2, 0x5b53}}, {0xfffe, 0x7, {0x1, 0x4}}, {0x9, 0x0, {0x3, 0xff}}, {0xfe00, 0x2, {0x2, 0x9}}, {0x4, 0x3ff, {0x3, 0x7}}, {0x9, 0x2, {0x2, 0x4}}, {0x2, 0x81, {0x2, 0x7}}, {0x200, 0x8b, {0x2, 0x3ff}}, {0x0, 0x20, {0x3, 0x20}}, {0xf8f, 0xfff8, {0x2, 0x8}}, {0x3, 0x1010, {0x0, 0x9}}, {0x0, 0x6974, {0x0, 0x401}}, {0x2, 0x0, {0x1, 0x1ff}}, {0x0, 0x2, {0x0, 0xffff0db8}}, {0x74, 0x3, {0x0, 0x83}}, {0x8000, 0xffe0, {0x3, 0x3}}, {0xa3, 0x5, {0x3, 0x400}}, {0x3f, 0x800, {0x1, 0xfffffffb}}, {0x1000, 0x80, {0x2, 0x7}}, {0xfd8, 0xff, {0x2, 0xb9}}, {0x5, 0x8, {0x1, 0x7}}, {0x3, 0xfb32, {0x2, 0x2}}, {0x6, 0x1, {0x1}}, {0x8, 0x6, {0x1, 0xffffffff}}, {0x9, 0x3, {0x1, 0x1}}, {0xf0, 0x1f, {0x1, 0x9a12d21}}, {0x2, 0x1, {0x3, 0x1fe}}, {0x6a, 0x8, {0x1, 0x80000001}}, {0xde3, 0x0, {0x1, 0x5}}, {0x1, 0x1ff, {0x3, 0x9}}, {0x0, 0x8, {0x3, 0x9}}, {0x400, 0x2, {0x1, 0x1}}, {0x80, 0x9, {0x1, 0x508}}, {0x9f, 0x1, {0x1, 0x401}}, {0x3, 0x6, {0x1, 0x8c09}}, {0x4, 0x401, {0x3, 0x50}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000880) [ 85.090742] audit: type=1400 audit(1731414211.276:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:23:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040074}, 0x48000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x48040}, 0x8004) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x80, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff9}]}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x881) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) r5 = openat$cgroup_ro(r0, &(0x7f0000002040)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000002180)={&(0x7f0000002080), 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x68, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xac5b}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x59}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x2c}}, 0x20000000) socketpair(0xb, 0x800, 0x1ff, &(0x7f00000022c0)) socketpair(0x9, 0x1, 0x7fffffff, &(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000002300), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) 12:23:31 executing program 7: clock_getres(0x1, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x40, 0x6, 0x3, 0x5, 0x0, 0x4, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0xffffffffffffffc1, 0x9, 0x7, 0x1, 0x5, 0x3, 0x0, 0x6, 0x0, 0x100000001}, r0, 0x6, 0xffffffffffffffff, 0xa) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1}, 0x7784) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000240), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x61, &(0x7f00000002c0)={0x0, 0x989680}) clock_gettime(0x4, &(0x7f0000000300)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040090) setns(r3, 0x20000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000540)={0x0, 0x80, 0x5, 0x9, 0x1, 0x0, 0x0, 0x8, 0x84, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7bd2, 0xe, @perf_bp={&(0x7f0000000500), 0x2}, 0x8000, 0xffffffffffffff7f, 0xb203, 0x1, 0x0, 0x401, 0x3, 0x0, 0x2f5, 0x0, 0x100000001}) futimesat(r3, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={{}, {0x77359400}}) msync(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000640)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x7ff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004800}, 0x4840) [ 86.420737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.422488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.423815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.427166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.429026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.435520] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.463895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.471382] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.473486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.480351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.481893] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.483438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.550306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.560330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.562349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.574503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.581358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.583403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.610796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.612845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.617302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.618894] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.629235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.631277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.635355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.637586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.644482] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.645823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.654277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.655001] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.657937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.660190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.660217] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.661802] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.662982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.665435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.681001] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.690710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.702595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.705510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.711472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.712656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.731415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.733762] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.742297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.744261] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.746884] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.750674] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.505573] Bluetooth: hci1: command tx timeout [ 88.506329] Bluetooth: hci0: command tx timeout [ 88.633183] Bluetooth: hci2: command tx timeout [ 88.697212] Bluetooth: hci3: command tx timeout [ 88.699346] Bluetooth: hci5: command tx timeout [ 88.700159] Bluetooth: hci4: command tx timeout [ 88.825256] Bluetooth: hci7: command tx timeout [ 88.826757] Bluetooth: hci6: command tx timeout [ 90.553164] Bluetooth: hci0: command tx timeout [ 90.553513] Bluetooth: hci1: command tx timeout [ 90.681189] Bluetooth: hci2: command tx timeout [ 90.745318] Bluetooth: hci5: command tx timeout [ 90.745361] Bluetooth: hci4: command tx timeout [ 90.745797] Bluetooth: hci3: command tx timeout [ 90.873315] Bluetooth: hci6: command tx timeout [ 90.873361] Bluetooth: hci7: command tx timeout [ 92.601367] Bluetooth: hci1: command tx timeout [ 92.601918] Bluetooth: hci0: command tx timeout [ 92.730253] Bluetooth: hci2: command tx timeout [ 92.793473] Bluetooth: hci4: command tx timeout [ 92.794004] Bluetooth: hci5: command tx timeout [ 92.797452] Bluetooth: hci3: command tx timeout [ 92.921307] Bluetooth: hci7: command tx timeout [ 92.921846] Bluetooth: hci6: command tx timeout [ 94.649183] Bluetooth: hci0: command tx timeout [ 94.649277] Bluetooth: hci1: command tx timeout [ 94.777146] Bluetooth: hci2: command tx timeout [ 94.841269] Bluetooth: hci5: command tx timeout [ 94.841372] Bluetooth: hci3: command tx timeout [ 94.842735] Bluetooth: hci4: command tx timeout [ 94.969153] Bluetooth: hci6: command tx timeout [ 94.969196] Bluetooth: hci7: command tx timeout [ 149.569529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.572352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.573493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.583498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.590188] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.591371] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.597468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.600460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.603891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.605636] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.607573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.608519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.633556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.647777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.651489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.673358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.677757] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.681487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.730925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.733687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.737472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.744302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.749753] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.753372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.826355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.836751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.839860] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.850342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.851276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.861369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.862744] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.873667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.880759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.890816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.900896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.908298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.912016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.914530] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.915661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.922318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.924310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.945341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.946551] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.947999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.959830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.962361] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.964442] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 149.971189] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.673202] Bluetooth: hci0: command tx timeout [ 151.673216] Bluetooth: hci1: command tx timeout [ 151.801702] Bluetooth: hci2: command tx timeout [ 151.865701] Bluetooth: hci3: command tx timeout [ 151.993348] Bluetooth: hci6: command tx timeout [ 152.057203] Bluetooth: hci7: command tx timeout [ 152.058477] Bluetooth: hci5: command tx timeout [ 152.058509] Bluetooth: hci4: command tx timeout [ 153.721188] Bluetooth: hci1: command tx timeout [ 153.721855] Bluetooth: hci0: command tx timeout [ 153.849209] Bluetooth: hci2: command tx timeout [ 153.913133] Bluetooth: hci3: command tx timeout [ 154.041239] Bluetooth: hci6: command tx timeout [ 154.105557] Bluetooth: hci7: command tx timeout [ 154.106413] Bluetooth: hci5: command tx timeout [ 154.106873] Bluetooth: hci4: command tx timeout [ 155.769221] Bluetooth: hci1: command tx timeout [ 155.769244] Bluetooth: hci0: command tx timeout [ 155.898120] Bluetooth: hci2: command tx timeout [ 155.961136] Bluetooth: hci3: command tx timeout [ 156.089211] Bluetooth: hci6: command tx timeout [ 156.153232] Bluetooth: hci4: command tx timeout [ 156.154135] Bluetooth: hci5: command tx timeout [ 156.154737] Bluetooth: hci7: command tx timeout [ 157.818124] Bluetooth: hci0: command tx timeout [ 157.818666] Bluetooth: hci1: command tx timeout [ 157.946378] Bluetooth: hci2: command tx timeout [ 158.010075] Bluetooth: hci3: command tx timeout [ 158.137269] Bluetooth: hci6: command tx timeout [ 158.201257] Bluetooth: hci7: command tx timeout [ 158.202638] Bluetooth: hci5: command tx timeout [ 158.204201] Bluetooth: hci4: command tx timeout [ 212.004938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.007604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.012336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.027717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.033624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.035967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.036767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.038193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.041387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.050381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.070396] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.071788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.168931] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.178815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.182623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.187481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.189450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.191327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.234339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.237533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.261484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.286338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.299264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.302271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.407381] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.410314] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.411557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.419230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.424962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.426792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.444740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.450288] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.451566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.456557] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.458563] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.460392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.471244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.487888] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.512611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.514271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.532764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.538365] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.540351] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.541716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.550288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.599170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.637679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.651823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.073140] Bluetooth: hci0: command tx timeout [ 214.137262] Bluetooth: hci1: command tx timeout [ 214.265154] Bluetooth: hci2: command tx timeout [ 214.330235] Bluetooth: hci3: command tx timeout [ 214.458142] Bluetooth: hci4: command tx timeout [ 214.521129] Bluetooth: hci6: command tx timeout [ 214.651121] Bluetooth: hci7: command tx timeout [ 214.779129] Bluetooth: hci5: command tx timeout [ 216.122222] Bluetooth: hci0: command tx timeout [ 216.186127] Bluetooth: hci1: command tx timeout [ 216.314310] Bluetooth: hci2: command tx timeout [ 216.378151] Bluetooth: hci3: command tx timeout [ 216.506190] Bluetooth: hci4: command tx timeout [ 216.570250] Bluetooth: hci6: command tx timeout [ 216.698116] Bluetooth: hci7: command tx timeout [ 216.825286] Bluetooth: hci5: command tx timeout [ 218.169114] Bluetooth: hci0: command tx timeout [ 218.234389] Bluetooth: hci1: command tx timeout [ 218.362172] Bluetooth: hci2: command tx timeout [ 218.427114] Bluetooth: hci3: command tx timeout [ 218.553431] Bluetooth: hci4: command tx timeout [ 218.618167] Bluetooth: hci6: command tx timeout [ 218.746149] Bluetooth: hci7: command tx timeout [ 218.874204] Bluetooth: hci5: command tx timeout [ 220.218103] Bluetooth: hci0: command tx timeout [ 220.282144] Bluetooth: hci1: command tx timeout [ 220.410339] Bluetooth: hci2: command tx timeout [ 220.474147] Bluetooth: hci3: command tx timeout [ 220.603143] Bluetooth: hci4: command tx timeout [ 220.666529] Bluetooth: hci6: command tx timeout [ 220.793167] Bluetooth: hci7: command tx timeout [ 220.922123] Bluetooth: hci5: command tx timeout [ 274.507351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.509108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.510284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.515428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.517278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.518868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.816628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.820347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.822612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.826236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.832350] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.840466] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.884908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.888250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.890286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.895301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.898829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.900904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.953859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.971552] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.975319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.978200] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.983735] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.986953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.990371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.992347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.995736] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.997882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.000722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.009253] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.014456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.019448] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.021282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.024236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.056293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.060597] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.066679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.067844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.069223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.097504] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.098781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.123163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.141362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.145128] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.146395] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.152261] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.154245] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.155324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.601136] Bluetooth: hci0: command tx timeout [ 276.857104] Bluetooth: hci1: command tx timeout [ 276.921149] Bluetooth: hci2: command tx timeout [ 277.049316] Bluetooth: hci5: command tx timeout [ 277.113113] Bluetooth: hci3: command tx timeout [ 277.114195] Bluetooth: hci4: command tx timeout [ 277.177590] Bluetooth: hci6: command tx timeout [ 277.241519] Bluetooth: hci7: command tx timeout [ 278.649205] Bluetooth: hci0: command tx timeout [ 278.906092] Bluetooth: hci1: command tx timeout [ 278.969307] Bluetooth: hci2: command tx timeout [ 279.098095] Bluetooth: hci5: command tx timeout [ 279.161282] Bluetooth: hci4: command tx timeout [ 279.161800] Bluetooth: hci3: command tx timeout [ 279.226229] Bluetooth: hci6: command tx timeout [ 279.289067] Bluetooth: hci7: command tx timeout [ 280.697108] Bluetooth: hci0: command tx timeout [ 280.955139] Bluetooth: hci1: command tx timeout [ 281.017208] Bluetooth: hci2: command tx timeout [ 281.145130] Bluetooth: hci5: command tx timeout [ 281.210190] Bluetooth: hci3: command tx timeout [ 281.210690] Bluetooth: hci4: command tx timeout [ 281.273441] Bluetooth: hci6: command tx timeout [ 281.337084] Bluetooth: hci7: command tx timeout [ 282.745315] Bluetooth: hci0: command tx timeout [ 283.001582] Bluetooth: hci1: command tx timeout [ 283.065193] Bluetooth: hci2: command tx timeout [ 283.193080] Bluetooth: hci5: command tx timeout [ 283.257174] Bluetooth: hci4: command tx timeout [ 283.257677] Bluetooth: hci3: command tx timeout [ 283.321780] Bluetooth: hci6: command tx timeout [ 283.385169] Bluetooth: hci7: command tx timeout [ 337.404058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.406452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.408474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.425180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.428292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.429478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.489679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.493126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.499479] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.563566] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.565388] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.568915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.587761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.587917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.592849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.619292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.630497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.632444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.643320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.645382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.647219] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.649341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.659433] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.661583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.683177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.689492] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.691232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.693285] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.693724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.697249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.701273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.702329] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.711241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.721541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.732949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.734755] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.736027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.756843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.757764] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.763354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.781895] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.783048] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.793265] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.861417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.863590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.874329] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.896615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.899761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.449129] Bluetooth: hci0: command tx timeout [ 339.642089] Bluetooth: hci1: command tx timeout [ 339.771103] Bluetooth: hci5: command tx timeout [ 339.771118] Bluetooth: hci3: command tx timeout [ 339.771556] Bluetooth: hci2: command tx timeout [ 339.899170] Bluetooth: hci6: command tx timeout [ 339.900060] Bluetooth: hci4: command tx timeout [ 339.962229] Bluetooth: hci7: command tx timeout [ 341.498037] Bluetooth: hci0: command tx timeout [ 341.689071] Bluetooth: hci1: command tx timeout [ 341.817371] Bluetooth: hci5: command tx timeout [ 341.817925] Bluetooth: hci2: command tx timeout [ 341.818077] Bluetooth: hci3: command tx timeout [ 341.945674] Bluetooth: hci4: command tx timeout [ 341.946261] Bluetooth: hci6: command tx timeout [ 342.009170] Bluetooth: hci7: command tx timeout [ 343.545091] Bluetooth: hci0: command tx timeout [ 343.739039] Bluetooth: hci1: command tx timeout [ 343.865177] Bluetooth: hci3: command tx timeout [ 343.865727] Bluetooth: hci2: command tx timeout [ 343.866131] Bluetooth: hci5: command tx timeout [ 343.994115] Bluetooth: hci6: command tx timeout [ 343.994147] Bluetooth: hci4: command tx timeout [ 344.057082] Bluetooth: hci7: command tx timeout [ 345.593203] Bluetooth: hci0: command tx timeout [ 345.785184] Bluetooth: hci1: command tx timeout [ 345.913293] Bluetooth: hci2: command tx timeout [ 345.913843] Bluetooth: hci5: command tx timeout [ 345.914417] Bluetooth: hci3: command tx timeout [ 346.041416] Bluetooth: hci6: command tx timeout [ 346.041560] Bluetooth: hci4: command tx timeout [ 346.105229] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:28:41 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000065 RCX=ffffffff812f079e RDX=fffffbfff0fdc5e6 RSI=0000000000000008 RDI=ffffffff87ee2f28 RBP=ffff88802f0d3700 RSP=ffff88806ce09aa0 R8 =0000000000000000 R9 =fffffbfff0fdc5e5 R10=ffffffff87ee2f2f R11=00000000000a95ad R12=0000000000000008 R13=ffff88802f0d4208 R14=0000000000000100 R15=ffff88802f0d4208 RIP=ffffffff812f079e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8fb7590540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8fb76b6c50 CR3=000000002664e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8115d96d RDX=1ffff1100fffb0d0 RSI=ffffffff8115d9ab RDI=0000000000000006 RBP=000000000ddde000 RSP=ffff88802f00fc18 R8 =ffff88806c375520 R9 =0000000000000000 R10=0000000000000800 R11=00000000000c33ea R12=ffff88807ffd8680 R13=ffff88807ffd7680 R14=0000000000000000 R15=ffff88800ddde000 RIP=ffffffff8115d9cf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f089ae3a438 CR3=00000000360c0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000