Warning: Permanently added '[localhost]:29425' (ECDSA) to the list of known hosts. 2025/01/25 17:33:47 fuzzer started 2025/01/25 17:33:47 dialing manager at localhost:40883 syzkaller login: [ 69.632360] cgroup: Unknown subsys name 'net' [ 69.747510] cgroup: Unknown subsys name 'cpuset' [ 69.771572] cgroup: Unknown subsys name 'rlimit' [ 75.514790] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 17:34:04 syscalls: 225 2025/01/25 17:34:04 code coverage: enabled 2025/01/25 17:34:04 comparison tracing: enabled 2025/01/25 17:34:04 extra coverage: enabled 2025/01/25 17:34:04 setuid sandbox: enabled 2025/01/25 17:34:04 namespace sandbox: enabled 2025/01/25 17:34:04 Android sandbox: enabled 2025/01/25 17:34:04 fault injection: enabled 2025/01/25 17:34:04 leak checking: enabled 2025/01/25 17:34:04 net packet injection: enabled 2025/01/25 17:34:04 net device setup: enabled 2025/01/25 17:34:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 17:34:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 17:34:04 USB emulation: enabled 2025/01/25 17:34:04 hci packet injection: enabled 2025/01/25 17:34:04 wifi device emulation: enabled 2025/01/25 17:34:04 802.15.4 emulation: enabled 2025/01/25 17:34:04 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 17:34:06 starting 8 fuzzer processes 17:34:06 executing program 0: mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/122) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/20) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x101) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffc8a9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x89f}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5c96970}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000081}, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00'}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000380)) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x4000010, 0xffffffffffffffff, 0x200) shmget(0x3, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x40080) shmget(0x0, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x13, 0xffffffffffffffff, 0xbc1f5000) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0xa4}}, 0x10) get_mempolicy(&(0x7f0000000640), &(0x7f0000000680), 0x80000000, &(0x7f0000ffb000/0x2000)=nil, 0x4) r0 = socket(0x9, 0x0, 0x10000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@broadcast, @in=@remote}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) 17:34:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x1, 0x6, 0x503, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000050) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x55}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80) r1 = openat$incfs(r0, &(0x7f00000004c0)='.pending_reads\x00', 0x180, 0x2489fa2b0022568f) sendmsg$nl_netfilter(r1, &(0x7f0000000dc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000540)={0x82c, 0xa, 0x8, 0x401, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x9}, [@nested={0x130, 0x37, 0x0, 0x1, [@generic="bc97347446821eab4d309195b90417b4d5e428c5e33039a316e01f1e2a03ec1a23dc727142fd267f971fd2e365f3bec0e1587f61a002a893be0d4ac9b0ec07718097464664e07272cd97f6ecf0f1f078ee964870d253ca02f7eea249235aeab2e61f88e18b92697201db94b898", @typed={0x6, 0x89, 0x0, 0x0, @str='*\x00'}, @typed={0xc, 0x3d, 0x0, 0x0, @u64=0xbcf}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @generic="fd1a193e35bce6c34ce7d629d29990af892673551542893a32178e8f50e8dd923b48baa567ea00c7b7e54ba60194e12d494d99067d9928b89bdbacc6ee36a6e2e3869e89c34773091b8b672252411879cb16beef8e4fb7ddaa40d7b4a61fdd60ed9e048448c851028fa761e1e642e7eab5fe51fb5071fcec32083ecbb4227d6ff053f23e9d9dc9723bca21af32891432b5ed64ee3fb516937c775b", @typed={0x8, 0x2c, 0x0, 0x0, @str='@&/\x00'}]}, @nested={0x36c, 0x0, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @ipv4=@local}, @generic="4e4296f7a7758bae7397458f5c92423729acef80d67c0198eef8284d0744796b696221d5e823a69cb3bdc0675c782309cf86f7d512d04c894c5b425e2d82d1893810e0354dd50c9e3efd65d04ea33cd2b65a7791fd8224272dcbb8405650194eefefa0f98de131dd0c754ab8bf563c5eb0475b87a163fa20fc3896250b9d3308220a3639ed2fb8ea115b0df8cd12", @generic="00ebbd64796d7e23926ba199af7f9fa854133d1cd276aaab57a6a1917ac95d7c87757aa11594c2cd4fc0f5f220506fbd596b7a35442f8f95bfbbf381fba70efea22556ef1bf9a38f3042ca72cd1fee4c32a18570e9087dbef754d22051dbabcd5cdf813f148e6253d70adc7d0b7b969b10888116870d8b22a73e8f4e6e1dd56132a78ab66857e32dd5374738ef504f81f25ddb8848fd", @generic="5c09c079121061565213c661113de5238f13315e6f11ab18aa51bfc5b66b112de6d4c79f83ad1df1a835b1a8e3ebed5b28b3e23948", @typed={0x4e, 0x4a, 0x0, 0x0, @binary="2cfbb0f64468733356bb29c816153cd47402960bc0bdab7f4e7bf13a3e7bc3b39a063180df3930223c496bf5d4f304d1e884df925dc17ac40a5500ffedb39f95b122bc8a7642bae763f9"}, @generic="f6fea73572a813aa158ef313c9ce309d7a16af2b990233f55ce32fc1a84d4a1afce10e3599747224bd91b4a5a7f8a3e467e4e8ea502d0d8c51b7ea4ec2ec982520d93b14083c91a91e582ff33b00c06a91a3bffffb7a6ce98d4e251ee0f948564357711963a0d2c3c620e73fcdfcd35b893e285f5354f251cc2ada276ed280a62e3702973ab5d936de7db1cc448b2363", @generic="79e7da606f2842173b6e75ec68a355d55a7e2dd2efb3e850aa3c57578332ea8445257171ccc6f78f79cfff533e737903f56fafd2d5552ca44d6fb3c8f995db5f0e2ec98c3177238dc186c7c71ef5f833b352687140027296410173310237b9d383ce3077d53b9b52822414e06a4ef2780ca4c532a9885c875c59faa6a3daaebefd72d1585a069c2f570eeaca68339f224c5fa1253e2b95d05f79925fa628f5af2026370b730f7af52d12251b364f087d9869efd5619f8ed3bcc46c98efcbc16ab5dd65b8191e98fa4488fdce102a8796df4f6b37c6550783694e6f8f071236d86cc0719e75e91c100239708c049d54b0f57f42a125f252", @generic="ec9078fb01575473e582361560bcc55aa6defb6d6fe502f57d7570f8aa599e48fa9794a733a34378548f04963e9eb901"]}, @generic="739675f2642aa180d77668dd889a7c397d078011282869f2055eac98ec89a90dbe7d", @nested={0x34f, 0x51, 0x0, 0x1, [@generic="04cac0d237ff8662e937233f24ed608c2aeb9b0dcbee07ef8d386ab9e86a5e0c66ffe8bd7517f88864b2249d7295ce1ba670b97fbb1d51a6d5f7d76ed2d29d646e652001858fc36287978ba5527e64472b08870ce1a0fc15c9107ae3e0b2bbcd590b93f4da23d7385a1ab6ef56f3fc8eee73f7dd5df00fcea712acc412b89b4826d9b32fe2836093a984c82cb7988a8ce9206c71e133955c069dc2b8fadc55f3e9863e01238ccef2dcdca05cb1c811b05136165f90048ea08f4554f8c61b10709e2d6ee17c616702bf1ec939989050dbeb184c06e34a1855257e7d6bb6d57b0e6ae3d976c889c6bf8e04c9eea9f70e0cbf9d1474", @generic="efa5da353691820f2a548022f498deaf9ee7f30351c8645b7d49da243e0009ee3a4b3ae260967b709277ae31c17e3cbbcee71cb23ab93ba8d2866af4586c47ed4eb508ff93513b8e63f7067fe748484fc8ca63b85d3599f1925da218726af7d0c6d41ed88d1883809c00fe8b563d597538b01c939ef7c11d09bfd21837b90ccd5f95e2770feafd96d63cac7169afb64b166ad769baaedd20cfe8482612d007c28c297ae342bf163eb281984092a9eca6a4d6fccbd5de", @generic="fb671ea8f0f9ee6e81af9965c949b8dd72bcecf3c5491ead39898adcf6952b3bf7350cbe4cb428bd0a438817a827986212c3850d7782c001723580b6dc42d918621bd958b869aeb91228c9f9da396f090d17f28859b517cc50629f90dd6f7d7d993a8317720e4fa84841914c4b60f902b0ed1d9d938f0d8578eaf4e4801ba72b0b9a22c73670a0e57067f329a297c4434ec0e7fcd97d7015b7a80e5e40e927180c04c4fd", @generic="2b91adb630500f8df65c1d755071f05abafdf85efd7b7810aa879c0b5644454903711bd67b0956cd8409a88f8d4fb2953212b97fe9a4b8183d47f52b2c87005d210d42453b8d4b428f340849aca2946a4924b41f35c0235d69ba09a52232a5016fb551dfab8799e36cb08f5bf9ccc8324889379ff058c5d7a650699a4ae4d517c5bfe54d9d9491de5214aa64ee41ad47d141d26f3faf32b381837e3566400ddec69f34ee7b933235c39ea11cfce5875b8b96b2857bc1ebeac1402477828ce856a712a45b66abede01caa081bff79da100ec6117a29dc9c3be51bfdf301e8abe43203f655aab9fc29120ee510ea", @typed={0x8, 0x21, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x27, 0x0, 0x0, @u32=0x80000001}]}, @typed={0x8, 0x91, 0x0, 0x0, @ipv4=@local}]}, 0x82c}, 0x1, 0x0, 0x0, 0x20000080}, 0x885) bind$netlink(r1, &(0x7f0000000e00)={0x10, 0x0, 0x7, 0x4000}, 0xc) r2 = socket(0x11, 0x2, 0x1f) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0xa, 0x3, 0xab, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x25, 0x1, 'blkio.bfq.io_wait_time_recursive\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x6010000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = syz_genetlink_get_family_id$team(&(0x7f00000011c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001340)={'syztnl0\x00', &(0x7f0000001280)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x3, 0x1, {{0x26, 0x4, 0x3, 0x3f, 0x98, 0x68, 0x0, 0x3f, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0xe0, [@broadcast, @multicast2, @private=0xa010102, @loopback, @multicast1, @broadcast, @multicast2]}, @rr={0x7, 0x23, 0xba, [@broadcast, @broadcast, @private=0x125e, @rand_addr=0x64010100, @multicast2, @local, @broadcast, @broadcast]}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x7, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x90}, {@multicast2, 0x7}, {@empty, 0xfffffff7}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0x3c, 0x1, 0xe, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001400)={'tunl0\x00', &(0x7f0000001380)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x3, 0x3, {{0x13, 0x4, 0x0, 0x20, 0x4c, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x44, 0x9, "504f617cfb71b9"}, @end, @noop, @lsrr={0x83, 0xb, 0x68, [@local, @local]}, @rr={0x7, 0x17, 0xa9, [@rand_addr=0x64010101, @private=0xa010102, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x20, 0x5, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xa1, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xceb8}, {@broadcast, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x40e1}]}, @lsrr={0x83, 0xb, 0xef, [@remote, @local]}, @ra={0x94, 0x4}, @generic={0x88, 0xb, "e36dcb9ddcd39db950"}, @ssrr={0x89, 0x1f, 0xf7, [@local, @remote, @broadcast, @loopback, @local, @loopback, @loopback]}, @timestamp_addr={0x44, 0x1c, 0xe8, 0x1, 0x3, [{@local, 0x4}, {@rand_addr=0x64010102, 0x7f}, {@loopback, 0x2400}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000002080)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002040)={&(0x7f0000001540)={0xad0, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x903c}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x19}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52d6}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1ff, 0x0, 0xbc, 0x400}, {0x7, 0x8, 0x81, 0x5}, {0x4, 0x8, 0x6, 0x8}, {0x8, 0x6, 0x6d, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xad0}}, 0x4004084) 17:34:06 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delpolicy={0x6c, 0x14, 0x400, 0x70bd29, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@mcast1, 0x4e21, 0x800, 0x4e20, 0x0, 0xa, 0x80, 0x20, 0xc, 0x0, 0xffffffffffffffff}, 0x6e6bba, 0x1}, [@encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e21, @in=@multicast1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9a2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x72}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf4, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3e2b8de9}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x325a414a}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4107eb26}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x355cd2d1}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c0c4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4000010) socketpair(0x10, 0x1, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) r4 = socket(0x23, 0x6, 0x20) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x44e2b5276bc23a5f, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8000000) r5 = syz_open_dev$vcsa(&(0x7f0000000880), 0x5, 0x14000) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000c80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x330, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x99}, @NFQA_PAYLOAD={0xa8, 0xa, "a342881900c1d6ee8026d87b4158bb3bbe50fcb5ca7c6de5e6dd2a5a1aaa45afe0f9958e3fee6483e013813b5437c6728ef2b0227604aeee04beffa94925550271e04486a3f9be6d9662b48f64648dcfa4150ccb86bb47e30ea9955506509b6f426f95617237b3697c84bcf998a74ee02cb415e1a51d55a01f43cab6d4edf6261e982cdc53461dffb77d21cbb33aa36a54f0b4ff69018f9f8116a6d16d181477d70373e1"}, @NFQA_VLAN={0x54, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff00}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_EXP={0x6c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6, 0x10000}}, @NFQA_CT={0xe0, 0xb, 0x0, 0x1, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf1}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xcf13}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xd0}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_PAYLOAD={0xa1, 0xa, "cf07a1e3020bf4f7d54cfaa6bc1a34a10ff11291d3bed333eabcd83a53c833e1e73e59adc4b1583919e677d201afff38f1dad5d8d9170a50d1862ec43e37f75e73d923a5b88fc27bed3a72f7894ba1abe266eeba0b567654f84f947e5fb379ee5514913a9582b5b2b0f46d88419b3872e91a40e7368968f7304eaf9880eefdd3568946d7cc961702dd6099077fe55d6ea3fce122af0c6627904df826b8"}]}, 0x330}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x904302}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x3c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x75b4}}, @NFQA_CT={0x14, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x114, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8194}]}, 0x114}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) perf_event_open$cgroup(&(0x7f0000000fc0)={0x5, 0x80, 0x40, 0x7, 0x3f, 0x1f, 0x0, 0x5, 0x52280, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x7, 0x80000000}, 0x20, 0x4, 0x7, 0x9, 0x1000, 0x6b7552be, 0x4f4, 0x0, 0x3, 0x0, 0x9}, r0, 0xffffffffffffffff, r0, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 17:34:06 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x3, 0x10000, 0x2, 0x6}, 0x10) r0 = socket(0x1f, 0xa, 0xfffffaea) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0xd4, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x305040, 0x104) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x202000, 0x2, 0x13}, 0x18) symlinkat(&(0x7f0000000200)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000300)={@id={0x2, 0x0, @c}}) renameat2(r2, &(0x7f0000000340)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x1) socketpair(0x2c, 0x80000, 0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7d, r1}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000440)={0x0, 0x9, 0x7ff, 0x6}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000480)={@desc={0x1, 0x0, @auto="d548378e2d891215"}}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000004c0)={0x488, "801922"}, 0x6) statx(r2, &(0x7f00000006c0)='./file0\x00', 0x800, 0x8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f0000000ec0)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f0000000e40)=[{&(0x7f0000000540)={0x144, 0x26, 0x8, 0x70bd2d, 0x5, "", [@typed={0xc, 0x12, 0x0, 0x0, @u64=0x1}, @nested={0x118, 0x3d, 0x0, 0x1, [@generic="5c6507d9c6f9dcf1f2b853cd09e07a1633eff0b3b8c913434b468fdf2c1b08636a591731338930b8bf33769aca47ce965443b1175999d52374b89ef2e0d1cdebc3ae54fdd076287f1f48336e6cc9774be048bff2bd976d52d83678982bb3ea0c879786d209f53f5a04443e875113ad1573f5c9b1d7890695142052e62f8e21fee1359c6882347b56752dac4f7b60a8268172f726f9882cf66cc31ab780d2cf4faa39ffb5a26805a35001e47bd82a951af76b0c0302ef728db3546267737ebbfbcc3338ffb379b636dca658292996c59899d779d795b3e4634842e9568f05e2ad2e79a7dc46693432ad88b7e6bcfa801f", @generic="ca7ef17c75a69ffdf6561e32fe7061c8cca622ecea8fddeaf2bd8b2e8a225a86e47f9a78"]}, @typed={0xc, 0x32, 0x0, 0x0, @u64=0x7}, @typed={0x4, 0x74}]}, 0x144}, {&(0x7f0000000800)={0x270, 0x3e, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@generic="8ee2a7c03321cce8d81a7c53b661d2e46238f66428b624f03b322cb7a731d553830ba90f9c73d2c67207a26b40968edd80de20820c4c52c44a62337ad4e8f424898d85", @generic="678f4c1350493bca1b37e2c22d88e1e0c60544efb34f14bc8d6b7ed86fae84b64b9a7999ce4d2a278deaf816d08745bf4380edf9d24982cf556f3cc19d9d10199765009b95d138907978831917f80bf2a85b3e1496a8df", @generic="04983756f35aff79cffe0a9e76658ab5abffb542c6412818d6ed0b05ebe85c0af1e51d061e7f561706b8558559d9ae659ca36744572c3e008613e7b2725c411f37625d6af64f220512e07534ac5ead8eca22c778c963dc31bc55b1229d8f9c71d2beac5d33df37657b941ba9d64267762408f9dab024d485b1eb5dc79945", @typed={0x4, 0x16}, @generic="51a1fd534e8a2c5f472a1724de886eaf4dc9e3306149223b73e252c2075760ee00d865f3b4492526ba66287fb36346ebccceb52067b2d0fa8349b8945344df7e2beee3a34e682223802ee36d7c0dbd791914b2bce227c5b5685048762f1fd1cfe4e71f0f084091ee2c9201955348f94a5368c2310aa74ac444b7e6a9c3806ba89ab32ec2005e0168418cbdf3d9ccfd3366fb8275fe41dc928d23e7", @generic="86a0b67eb7dd9857ebcaeb1c9ec8432f3d6a", @typed={0xc, 0x3b, 0x0, 0x0, @str='/+\\@$!@\x00'}, @nested={0x88, 0x4a, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @u32=0x3}, @generic="39a8604a40a59982715f6ecfffecd64592d0cef622e8840eddaf304db6971b5d65f0ac246c7b0393ab6264cf2ab01ba242d0e3014bf291d0ed2f4be54395c10c87c09c2240a30d1c895297c57fe131f76b44", @generic='\';', @typed={0x14, 0x79, 0x0, 0x0, @str='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0x64, 0x0, 0x0, @uid=r6}]}]}, 0x270}, {&(0x7f0000000a80)={0x344, 0x1a, 0x4, 0x70bd29, 0x25dfdbfb, "", [@generic="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", @generic="359726ac4dd5d7d38232305d63971206eb85196152a8773b0506bf44a8662fb01d8b50e60de81a3950e24a7fd0765f64fd2a2bbf20a54e5c9365ffe4b5e6bae03c9494465b703be33329bed2e4ffa6fa9bb68cf341dbb8d608045f91e53088fb13a3a3bd933523b1995db403bbe7af55cc6f2db3f0dac08feaf890b5ea76", @nested={0x1b5, 0x1e, 0x0, 0x1, [@generic="37d5a5c50946313652d41686a0fcc03a54ca90a91b91a686f3a720dc06d09850840561d5be054abfb9defbf0d63f02c0d934e98a7e84060fef26e88a73b2d194b9f708c09d664a7dd476db28d4776d0fd76b4441442ce1dc615528ef4818f57757288299410942cb32aa751991c5ae01d565bc51629b285a84453794f88d80dad77b4ab6b7c9dba61e794addb82a8032d6c30cd3da2f9fab29fbe72e0332a1f77ee309e7a1761beb951e1c894417187d692b8265de1037ff34b9e2a4a1691470985240266e66e9b6a06b3bfe5c23892c71", @typed={0x26, 0x6e, 0x0, 0x0, @binary="83966b2d8a7bbb194b8acf941406c85761dd6b48ea6c2a041f7c98f4cd9cf9354e3a"}, @generic="ee20f735d4c0e687fbba18e2ec3e3cf5d4da12a18ccc6c9f1f3d82cf367cfc0f20c47904ae4bb2ff8f8575caaddb", @generic="94e62157d50f687b133a733de918aacca0ee802d8dc70bd147e95f6bc7468a3ad2c4e0e470deee7d7ae85b4d47de759d8a7af07accfc8bb899b025939a17b9ecdedb9cb945d184ce9b07c88efaf39533060f4bae6355859763975b3f5548cdfee9abc0b15a1f7664846c2b6991479c9376ede7b790f1685efaa89982abdfbb3c6a818b6fc5453b705bc4"]}]}, 0x344}, {&(0x7f0000000e00)={0x20, 0x40, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x27, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x72, 0x0, 0x0, @ipv4=@loopback}]}, 0x20}], 0x4, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x80}, 0x20004000) fchownat(r2, &(0x7f0000000f00)='./file0\x00', 0xee01, r7, 0x1000) execveat(0xffffffffffffffff, &(0x7f0000001400)='./file0\x00', &(0x7f00000015c0)=[&(0x7f0000001440)='S]#.e)\':$--\x00', &(0x7f0000001480)='/\x00', &(0x7f00000014c0)='\x00', &(0x7f0000001500)='team0\x00', &(0x7f0000001540)='.pending_reads\x00', &(0x7f0000001580)='\x00'], &(0x7f00000016c0)=[&(0x7f0000001600)='\x1c-gT\xb6\xcc}\xaa\xcbY\x98u\xd7\xfa\xf9\xbb', &(0x7f0000001640)=':\x00', &(0x7f0000001680)='%%[\x00'], 0x400) [ 87.968830] audit: type=1400 audit(1737826446.352:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:34:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0xa2000, 0x8) mmap$usbmon(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x3000000, 0x10010, r1, 0xff) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1f}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffac74}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004041}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000440)={0x1, 0x2, 0xffff0001, 0x1, 0x1}, 0x14) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000480)=0x10000, &(0x7f00000004c0)=0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000500)=0x7fff, &(0x7f0000000540)=0x2) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000680)) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x6, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x42041) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c000) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048040}, 0x4000001) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000b40)={0xfffffffc, 0x2, 0x3f, 0x1ff}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd0, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x50, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, 0x0, 0x9, 0xbe68df88364f32b7, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 17:34:06 executing program 4: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7) r0 = shmat(0xffffffffffffffff, &(0x7f0000fd5000/0x3000)=nil, 0x5000) shmget(0x0, 0x1000, 0x54000000, &(0x7f00004b5000/0x1000)=nil) mprotect(&(0x7f0000f36000/0x1000)=nil, 0x1000, 0x1000008) semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x3, 0x800}, {0x2, 0x0, 0x1800}, {0x4, 0xfff7, 0x64fa221966f5ef5b}, {0x0, 0x1, 0x800}, {0x2, 0x1, 0x7d1b0c6bbfeca210}, {0x2, 0x2c18, 0x1000}, {0x3, 0x7}, {0x4, 0x40, 0x1000}, {0x4, 0x7, 0x1800}], 0x9) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x10, 0xffffffffffffffff, 0x401) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x9, 0x1000}, {0x3, 0x100}, {0x2, 0x8001, 0x1000}, {0x2, 0x400}, {0x3, 0x33e, 0x800}, {0x0, 0x6, 0x1800}], 0x6, &(0x7f0000000080)={0x77359400}) shmget(0x2, 0xd000, 0x200, &(0x7f0000b1b000/0xd000)=nil) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/86) shmdt(r0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) semop(0x0, &(0x7f0000000140)=[{0x3, 0x3f}, {0x1, 0x7, 0x1000}, {0x3, 0x4, 0x800}, {0x3, 0xf4}, {0x0, 0x1, 0x1800}, {0x1, 0x3, 0x800}, {0x2, 0xff, 0x1800}, {0x0, 0x4, 0x800}, {0x3, 0xe1fe, 0x1800}, {0x1, 0x200, 0x1800}], 0xa) semtimedop(0xffffffffffffffff, &(0x7f0000000180)=[{0x1, 0xfc, 0x1000}, {0x942073cfa775821f, 0x1}, {0x3, 0x5}, {0x4, 0x9bf, 0x1000}, {0x2, 0x7ff, 0x1000}, {0x1, 0x5, 0x800}, {0x3, 0x8, 0x1000}, {0x6, 0x7ff, 0x3000}, {0x0, 0x7, 0x1000}, {0x2, 0x0, 0x1000}], 0xa, &(0x7f00000001c0)={0x77359400}) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7fff, 0x440043) mmap$usbmon(&(0x7f0000e03000/0x3000)=nil, 0x3000, 0x8, 0x80010, r1, 0x0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x400, 0x40) r3 = mmap$binder(&(0x7f0000713000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5a) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x90, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}, @request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r3}, @release, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x2, 0x30}, @fda={0x66646185, 0x7, 0x1, 0x14}, @fda={0x66646185, 0x6, 0x0, 0x1}}, &(0x7f0000000300)={0x0, 0x20, 0x40}}, 0x40}, @acquire_done={0x40106309, 0x1}, @register_looper], 0x73, 0x0, &(0x7f0000000400)="60c3eb094f3d0f9b8f031549f7f46ae2164fc2cd450e2ebf1c60dbf51c381082c26fb5613d6a0e5ad6981b97037e49138af2efb294ddb89458f6c7ffca10aaf97355216c933719b97b87f336972cab897979394764e7fb3feae4ba3647c3023314c225e998bce271d5b87dcb6f8946c41af9c7"}) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000004c0)=""/4) 17:34:06 executing program 6: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x8014}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x700, 0x0, 0x0, {0x5, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x24000001) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x1, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8844}, 0xc080) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4) socketpair(0xf, 0x80000, 0x200, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000080) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) r4 = syz_open_dev$vcsa(&(0x7f00000009c0), 0x6, 0x30100) syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000a00)=0x1, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x2, 0x8, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x627e}]}, 0x30}}, 0x4048851) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000b40)=0x401, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x881) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_PAYLOAD={0x2f, 0xa, "d1ad2dec9c3bf9b811f812aba303bdf423540ff1a7f5a03bc4376326d0f31ec44890924c29736183122f20"}]}, 0x44}}, 0x4000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x3, 0x6, 0x900, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40885}, 0x20000880) 17:34:06 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x81, &(0x7f0000000040)=0x4) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x676c, 0x2) socketpair(0x1, 0x800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) socketpair(0x26, 0x3, 0x7f, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000001c0)=0x29b4, &(0x7f0000000200)=0x2) socketpair(0x5, 0x803, 0xfffffeff, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x52}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x7, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x42890}, 0x4000) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000006c0)=0x5, 0x4) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000010) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000840), 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000024}, 0x80) [ 89.569142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.574939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.578392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.586726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.591580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.595618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.693545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.702195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.710279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.719767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.723065] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.724988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.737183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.746152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.758755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.768417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.778888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.781886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.824872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.829233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.836843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.840724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.847156] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.849930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.865639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.876922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.880550] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.881191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.887732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.893539] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.897900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.912178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.923009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.932788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.933554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.939750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.942504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.955085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.960059] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.962813] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.964943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.966918] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.970947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.976902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.993466] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.997519] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.999612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.001443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.653789] Bluetooth: hci0: command tx timeout [ 91.781441] Bluetooth: hci1: command tx timeout [ 91.973507] Bluetooth: hci5: command tx timeout [ 91.975227] Bluetooth: hci2: command tx timeout [ 91.976713] Bluetooth: hci3: command tx timeout [ 92.036815] Bluetooth: hci4: command tx timeout [ 92.100533] Bluetooth: hci7: command tx timeout [ 92.102046] Bluetooth: hci6: command tx timeout [ 93.700576] Bluetooth: hci0: command tx timeout [ 93.828375] Bluetooth: hci1: command tx timeout [ 94.020755] Bluetooth: hci5: command tx timeout [ 94.021959] Bluetooth: hci2: command tx timeout [ 94.023064] Bluetooth: hci3: command tx timeout [ 94.085144] Bluetooth: hci4: command tx timeout [ 94.148488] Bluetooth: hci6: command tx timeout [ 94.149580] Bluetooth: hci7: command tx timeout [ 95.749425] Bluetooth: hci0: command tx timeout [ 95.876433] Bluetooth: hci1: command tx timeout [ 96.068589] Bluetooth: hci2: command tx timeout [ 96.070503] Bluetooth: hci3: command tx timeout [ 96.071050] Bluetooth: hci5: command tx timeout [ 96.133535] Bluetooth: hci4: command tx timeout [ 96.197448] Bluetooth: hci6: command tx timeout [ 96.198023] Bluetooth: hci7: command tx timeout [ 97.796392] Bluetooth: hci0: command tx timeout [ 97.925346] Bluetooth: hci1: command tx timeout [ 98.117384] Bluetooth: hci2: command tx timeout [ 98.117841] Bluetooth: hci5: command tx timeout [ 98.118260] Bluetooth: hci3: command tx timeout [ 98.180391] Bluetooth: hci4: command tx timeout [ 98.245409] Bluetooth: hci6: command tx timeout [ 98.245830] Bluetooth: hci7: command tx timeout [ 151.896831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.902215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.907232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.914624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.921717] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.929862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.963130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.971678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.977343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.981076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.992204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.998060] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.002580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.009520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.033844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.035053] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.038510] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.042615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.042843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.050438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.050589] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.051409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.054634] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.056522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.058248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.058675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.059783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.063188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.066866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.074963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.076745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.083819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.088193] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.093077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.094399] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.098469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.100516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 152.103750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.105467] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.108735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.111778] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.113730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.115868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.117787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.119241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.158444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.159884] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.175061] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.988452] Bluetooth: hci0: command tx timeout [ 154.182039] Bluetooth: hci3: command tx timeout [ 154.182062] Bluetooth: hci1: command tx timeout [ 154.182444] Bluetooth: hci2: command tx timeout [ 154.244505] Bluetooth: hci7: command tx timeout [ 154.245094] Bluetooth: hci4: command tx timeout [ 154.246067] Bluetooth: hci5: command tx timeout [ 154.310328] Bluetooth: hci6: command tx timeout [ 156.036585] Bluetooth: hci0: command tx timeout [ 156.228479] Bluetooth: hci3: command tx timeout [ 156.229809] Bluetooth: hci2: command tx timeout [ 156.231375] Bluetooth: hci1: command tx timeout [ 156.293402] Bluetooth: hci7: command tx timeout [ 156.294002] Bluetooth: hci5: command tx timeout [ 156.294051] Bluetooth: hci4: command tx timeout [ 156.357397] Bluetooth: hci6: command tx timeout [ 158.085336] Bluetooth: hci0: command tx timeout [ 158.276406] Bluetooth: hci2: command tx timeout [ 158.276545] Bluetooth: hci1: command tx timeout [ 158.277391] Bluetooth: hci3: command tx timeout [ 158.340479] Bluetooth: hci4: command tx timeout [ 158.340970] Bluetooth: hci7: command tx timeout [ 158.341507] Bluetooth: hci5: command tx timeout [ 158.404403] Bluetooth: hci6: command tx timeout [ 160.133422] Bluetooth: hci0: command tx timeout [ 160.324430] Bluetooth: hci2: command tx timeout [ 160.324995] Bluetooth: hci1: command tx timeout [ 160.325830] Bluetooth: hci3: command tx timeout [ 160.389460] Bluetooth: hci5: command tx timeout [ 160.389990] Bluetooth: hci7: command tx timeout [ 160.390062] Bluetooth: hci4: command tx timeout [ 160.454625] Bluetooth: hci6: command tx timeout [ 214.031197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.039528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.041909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.047842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.051783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.053983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.158672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.162026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.163958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.171582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.176391] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.178170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.232953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.239440] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.241365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.245205] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.249143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.251195] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.299371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.306146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.322180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.324757] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.327484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.333410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.338990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.341216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.347604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.355877] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.358099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.364941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.369522] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.376844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.378697] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.380170] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.382372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.393112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.397106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.397932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.399570] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.401756] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.403551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.438118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.453724] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.458707] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.468125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.479316] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.486600] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.491426] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.068552] Bluetooth: hci0: command tx timeout [ 216.261411] Bluetooth: hci1: command tx timeout [ 216.324765] Bluetooth: hci2: command tx timeout [ 216.453291] Bluetooth: hci5: command tx timeout [ 216.516853] Bluetooth: hci3: command tx timeout [ 216.518617] Bluetooth: hci4: command tx timeout [ 216.581386] Bluetooth: hci6: command tx timeout [ 216.645338] Bluetooth: hci7: command tx timeout [ 218.117461] Bluetooth: hci0: command tx timeout [ 218.308431] Bluetooth: hci1: command tx timeout [ 218.373314] Bluetooth: hci2: command tx timeout [ 218.501468] Bluetooth: hci5: command tx timeout [ 218.567601] Bluetooth: hci3: command tx timeout [ 218.568099] Bluetooth: hci4: command tx timeout [ 218.630284] Bluetooth: hci6: command tx timeout [ 218.693502] Bluetooth: hci7: command tx timeout [ 220.164671] Bluetooth: hci0: command tx timeout [ 220.357349] Bluetooth: hci1: command tx timeout [ 220.421366] Bluetooth: hci2: command tx timeout [ 220.549419] Bluetooth: hci5: command tx timeout [ 220.613346] Bluetooth: hci4: command tx timeout [ 220.613813] Bluetooth: hci3: command tx timeout [ 220.677340] Bluetooth: hci6: command tx timeout [ 220.741504] Bluetooth: hci7: command tx timeout [ 222.212323] Bluetooth: hci0: command tx timeout [ 222.404342] Bluetooth: hci1: command tx timeout [ 222.469353] Bluetooth: hci2: command tx timeout [ 222.598298] Bluetooth: hci5: command tx timeout [ 222.661359] Bluetooth: hci4: command tx timeout [ 222.661867] Bluetooth: hci3: command tx timeout [ 222.725327] Bluetooth: hci6: command tx timeout [ 222.789334] Bluetooth: hci7: command tx timeout [ 275.986899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.995617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.997583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.005125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.010633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.012335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.182464] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.184347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.188648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.191668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.192971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.194464] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.197599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.199534] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.203628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.216938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.240513] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.244670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.308924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.319521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.328979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.344785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.361194] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.363874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.367658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.369697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.383735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.385054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.387839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.391642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.403547] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.410684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.410908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.412549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.425955] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.428887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.430498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.433907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.436660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.444007] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.446107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.448674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.459417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.463193] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.471657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.496719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.524699] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.526853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.086431] Bluetooth: hci0: command tx timeout [ 278.340463] Bluetooth: hci2: command tx timeout [ 278.340514] Bluetooth: hci1: command tx timeout [ 278.468498] Bluetooth: hci3: command tx timeout [ 278.534107] Bluetooth: hci5: command tx timeout [ 278.598034] Bluetooth: hci4: command tx timeout [ 278.598176] Bluetooth: hci6: command tx timeout [ 278.661324] Bluetooth: hci7: command tx timeout [ 280.132375] Bluetooth: hci0: command tx timeout [ 280.389718] Bluetooth: hci2: command tx timeout [ 280.390827] Bluetooth: hci1: command tx timeout [ 280.517365] Bluetooth: hci3: command tx timeout [ 280.580621] Bluetooth: hci5: command tx timeout [ 280.644483] Bluetooth: hci6: command tx timeout [ 280.644530] Bluetooth: hci4: command tx timeout [ 280.708480] Bluetooth: hci7: command tx timeout [ 282.180376] Bluetooth: hci0: command tx timeout [ 282.436314] Bluetooth: hci2: command tx timeout [ 282.436790] Bluetooth: hci1: command tx timeout [ 282.565288] Bluetooth: hci3: command tx timeout [ 282.628379] Bluetooth: hci5: command tx timeout [ 282.692382] Bluetooth: hci4: command tx timeout [ 282.692820] Bluetooth: hci6: command tx timeout [ 282.756372] Bluetooth: hci7: command tx timeout [ 284.228453] Bluetooth: hci0: command tx timeout [ 284.485021] Bluetooth: hci1: command tx timeout [ 284.485061] Bluetooth: hci2: command tx timeout [ 284.612377] Bluetooth: hci3: command tx timeout [ 284.676392] Bluetooth: hci5: command tx timeout [ 284.740576] Bluetooth: hci6: command tx timeout [ 284.741503] Bluetooth: hci4: command tx timeout [ 284.805412] Bluetooth: hci7: command tx timeout [ 337.875591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.879618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.881702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.887683] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.891136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.893345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.064902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.069179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.080079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.086605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.090879] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.093182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.133948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.140447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.143909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.154089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.157880] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.162700] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.173147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.212644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.226361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.237347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.240323] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.247076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.262499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.264614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.270790] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.270948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.275683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.277980] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.281611] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.281690] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.283731] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.291676] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.295202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.300829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.302756] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.305158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.307035] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.309891] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.315511] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.317791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.321828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.360059] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.362167] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.375859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.380843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.383181] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.972470] Bluetooth: hci0: command tx timeout [ 340.164354] Bluetooth: hci1: command tx timeout [ 340.228349] Bluetooth: hci3: command tx timeout [ 340.420455] Bluetooth: hci2: command tx timeout [ 340.420530] Bluetooth: hci5: command tx timeout [ 340.421892] Bluetooth: hci7: command tx timeout [ 340.484432] Bluetooth: hci4: command tx timeout [ 340.485617] Bluetooth: hci6: command tx timeout [ 342.021568] Bluetooth: hci0: command tx timeout [ 342.213292] Bluetooth: hci1: command tx timeout [ 342.277366] Bluetooth: hci3: command tx timeout [ 342.469577] Bluetooth: hci5: command tx timeout [ 342.470772] Bluetooth: hci2: command tx timeout [ 342.472401] Bluetooth: hci7: command tx timeout [ 342.533341] Bluetooth: hci4: command tx timeout [ 342.534341] Bluetooth: hci6: command tx timeout [ 344.068308] Bluetooth: hci0: command tx timeout [ 344.260542] Bluetooth: hci1: command tx timeout [ 344.324315] Bluetooth: hci3: command tx timeout [ 344.516300] Bluetooth: hci2: command tx timeout [ 344.518315] Bluetooth: hci7: command tx timeout [ 344.518770] Bluetooth: hci5: command tx timeout [ 344.580330] Bluetooth: hci6: command tx timeout [ 344.580768] Bluetooth: hci4: command tx timeout [ 346.116381] Bluetooth: hci0: command tx timeout [ 346.308644] Bluetooth: hci1: command tx timeout [ 346.372566] Bluetooth: hci3: command tx timeout [ 346.564630] Bluetooth: hci5: command tx timeout [ 346.565658] Bluetooth: hci7: command tx timeout [ 346.565705] Bluetooth: hci2: command tx timeout [ 346.628437] Bluetooth: hci4: command tx timeout [ 346.629412] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:39:16 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802de97f58 RCX=ffffffff81729eba RDX=ffff888029b1d340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88802de97d90 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff88802de97e28 R13=ffff888029b1d340 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81719ca6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6d39a638c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005608b8df0380 CR3=0000000033bb8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffff00 XMM02=00000000000002e10000000000000030 XMM03=000055983da8c7b000646d6574737973 XMM04=00000000000000000000000000000000 XMM05=0000000600000002000055983daaebe0 XMM06=000055983da852600000000100000005 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000004 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88801599a260 RDI=ffff88802407c248 RBP=ffff88801599a260 RSP=ffff888031bb7ac8 R8 =00000000ffffffff R9 =fffff9400003afc0 R10=0000000000000001 R11=0000000000000000 R12=ffff88802407b780 R13=ffff88802407c1d0 R14=00000000ffffffff R15=ffff88802407c248 RIP=ffffffff84a8deb5 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6d39a638c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559819b44840 CR3=0000000030488000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ffff000000ff0000 XMM02=00000000000000000000000000000100 XMM03=0000000000000000000055983dac0030 XMM04=00000000000000000000000000000000 XMM05=000055983daf2fa0000055983daf2f80 XMM06=000055983daf2fc0ffffffff00000002 XMM07=00000000000000000000000000000000 XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000