Warning: Permanently added '[localhost]:48390' (ECDSA) to the list of known hosts. 2025/04/30 01:04:34 fuzzer started 2025/04/30 01:04:35 dialing manager at localhost:46073 syzkaller login: [ 99.708804] cgroup: Unknown subsys name 'net' [ 99.837486] cgroup: Unknown subsys name 'cpuset' [ 99.872799] cgroup: Unknown subsys name 'rlimit' 2025/04/30 01:04:52 syscalls: 202 2025/04/30 01:04:52 code coverage: enabled 2025/04/30 01:04:52 comparison tracing: enabled 2025/04/30 01:04:52 extra coverage: enabled 2025/04/30 01:04:52 setuid sandbox: enabled 2025/04/30 01:04:52 namespace sandbox: enabled 2025/04/30 01:04:52 Android sandbox: enabled 2025/04/30 01:04:52 fault injection: enabled 2025/04/30 01:04:52 leak checking: enabled 2025/04/30 01:04:52 net packet injection: enabled 2025/04/30 01:04:52 net device setup: enabled 2025/04/30 01:04:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/30 01:04:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/30 01:04:52 USB emulation: enabled 2025/04/30 01:04:52 hci packet injection: enabled 2025/04/30 01:04:52 wifi device emulation: enabled 2025/04/30 01:04:52 802.15.4 emulation: enabled 2025/04/30 01:04:52 fetching corpus: 0, signal 0/0 (executing program) 2025/04/30 01:04:54 starting 8 fuzzer processes 01:04:54 executing program 0: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x22000001}, 0x24040004) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x80000000}]}]}, 0x70}}, 0x2000000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x141081, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x20008050) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc844}, 0x4014) socketpair(0x29, 0x4, 0x4, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x11) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000740)={0x16, 0x3a, &(0x7f0000000700)="ed18b80dd227c2e290d9dceccc22352691e6affc2292786b7c947a4d49faffa8197d93554554ac993a4fe595de4e1fb3f0ba6cae24e3a3520363"}) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x18840}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x628b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xec}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004891}, 0x40080) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x90, 0x0, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x3ff}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb2}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0xc0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000c40)={0x0, 0x2, {0x2, 0x2, 0x0, 0x0, 0x7ff}, 0x10000}) socketpair(0x0, 0x4, 0xad, &(0x7f0000000cc0)) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x3, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000040) 01:04:54 executing program 1: setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x3, 0x4e24, 0xa33, 0xa, 0x100, 0x20, 0x2c, 0x0, 0xee01}, {0x1, 0x4, 0xc000, 0x3, 0xffffffff00000000, 0x4, 0xc0, 0x1}, {0x7fff, 0x7fff, 0x1, 0x3f2}, 0x9, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in=@loopback, 0x3502, 0x62daeb81115afd3f, 0x1, 0x20, 0x400, 0x6, 0x10001}}, 0xe8) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x7, {{0xa, 0x4e22, 0xffffffe0, @mcast2, 0x20}}}, 0x88) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000200)={0x1d, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x2, 'dh\x00', 0xa, 0x4, 0x64}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x20000010) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x2a, 0xa, 0x2, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10040}, 0x8080) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000580)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x8, 0x1, '-)]\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1f}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xf8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair(0x1e, 0x4, 0x401, &(0x7f0000000800)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x6400008}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008084}, 0x40001) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000940), 0x2400, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1256530e}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000bc0)={{0x87, @multicast1, 0x4e23, 0x4, 'none\x00', 0xb0e0da83897d348d, 0x9, 0x71}, {@empty, 0x4e23, 0x2000, 0x7fff, 0x3, 0x3}}, 0x44) 01:04:54 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10402, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", "", ""]}, 0x14}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x322c28}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000002c0)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x688}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xe3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24005021) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0xa, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe8f}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040084) accept4$inet6(r3, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000600)={0xffffffff7fffffff, 0x3}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048800) r4 = syz_open_dev$usbmon(&(0x7f0000000740), 0x5, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000800)={&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000007c0)=""/19, 0x13}) r5 = socket(0x21, 0x3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x820800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xdd25156f277167d5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040804}, 0x400004c) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x5) 01:04:54 executing program 3: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x40040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc}, 0x8010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe4c8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40480d0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x5, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2440a040}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6d}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008}, 0x4004800) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x200, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x3, 0x7, 0x401, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x5) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x21000040}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404c825}, 0x20040104) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x4, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) [ 118.697989] audit: type=1400 audit(1745975094.412:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:04:54 executing program 4: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x74}}, 0x11) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x70}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xff}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x7a}]}, 0x30}, 0x1, 0x0, 0x0, 0x10080}, 0x800) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x1, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4892001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x244, 0x1, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_EXP={0x12c, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x70b3}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_CT={0xf8, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9f0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xce}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9ed}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x19af}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xaece}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x2}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000980), 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1a8, 0x1, 0x9, 0x801, 0x0, 0x0, {0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3ff}}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xc0, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x240400d1}, 0x4045) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2052}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x108, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3c}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_EXP={0xe0, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf14}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0xb4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000808}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0xc0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xf4, 0x0, 0x1, 0x903, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x3, 0x4, 0x5, 0x8]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe719}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffff325}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3d}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x4, 0x7, 0x2, 0x40, 0x0, 0x1]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000001140)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x422403, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0xa4f56b2907f674fb) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x98}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c040011}, 0x20008000) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000013c0), 0x140, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000001400)=0x100, 0x4) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001440)={0x81, 0xfffffff8}) 01:04:54 executing program 5: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = fork() setpgid(r0, 0xffffffffffffffff) r1 = mq_open(&(0x7f0000000000)='y]\x00', 0x2, 0x100, &(0x7f0000000040)={0x2, 0xcfe5, 0x760e5748, 0x10}) mq_notify(r1, &(0x7f0000000080)={0x0, 0x29, 0x0, @tid=r0}) r2 = mq_open(&(0x7f00000000c0)='\x00', 0x1, 0x28, &(0x7f0000000100)={0x9, 0x2, 0x6, 0x7}) mq_timedreceive(r2, &(0x7f0000000140)=""/58, 0x3a, 0x3, &(0x7f0000000180)={0x0, 0x3938700}) mq_open(&(0x7f00000001c0)='\x00', 0x800, 0x150, &(0x7f0000000200)={0x3ff, 0x9f, 0xffffffff, 0x9}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa, 0x13, 0xc, "9ec434dba6b668e238cb40b04d396aed564ba29037927b2b3553647cc0ca95f6a3c7cb298f638888c4283dac97c27e4af5224ba85df60157cbb744eb2ceed143", "6b056447415121954e85781bbfc40f6d21f00e983fca12a1c8adc2bef41dce11666fc1715581e312735778bef52175cf760c786d85fbbd3594fd5b9bcf6461f5", "80450a0a8555222ab54c5d9be7cd4653503d9e3f30e99634e5586e617073ff88", [0xe00, 0xffff]}) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000440)) r3 = syz_open_dev$evdev(&(0x7f0000000480), 0x1f, 0x400000) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x3, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe68}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x4000) sched_rr_get_interval(r0, &(0x7f00000005c0)) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x138, 0x7, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@socket={{0xb}, @void}, @fwd={{0x8}, @void}, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc881df36061d9938}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}]}, {0x10, 0x1, 0x0, 0x1, [@bitwise={{0xc}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@connlimit={{0xe}, @void}, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xff7d}]}}, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}, @rt={{0x7}, @void}]}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x138}}, 0x4004890) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x800, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x80) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 01:04:54 executing program 6: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/58) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0xd, 0x7f, 0x40}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000001c0)={0x7, 0x0, 0x4, 0x8, 0xff, 0x6}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000240)={0x4, 0x18, &(0x7f0000000200)="4f2ebfc9d62fd4f98d02b40459d78da7a214521a10f68030"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xde}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x99}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc800) r1 = socket(0x9, 0x8000a, 0x8001) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000003c0)={0x84, @loopback, 0x4e21, 0x1, 'lblc\x00', 0x26, 0x1, 0x7b}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0xe, 0x6, 0x5, 0x0, 0x0, {0xf, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000001840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f0000000540)={0x1290, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x127c, 0x3, 0x0, 0x1, [{0x1278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0xc4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "95eff3f5a720e8e05ccb53aba9fd8d6f8372f213d9d250c4a26c14330916191ee2a23904065fa76c64c0cf9cba9f1e09ad50df85c2899754f5a87b9541af54f511492bd55f5e967b1d40699ed282f697ecabf47614731ecb8505d89a94645a50d57565c9ac7d928a6429f5a9281ed0ee50876d85d2892081090f0b6f7044e958840ff32fe7dc21d4e6a99728d3809e3e6036a8c7f394b74b26db279680980ab12cb1a3900f65bbe3395e8e0ec343d348593fbab058c8396353879e18"}]}, @NFTA_SET_ELEM_USERDATA={0x27, 0x6, 0x1, 0x0, "8b022716ff763b7840f009660148c3aea2d2c3919d39c8d29593e2c96e451b293f131a"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1170, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "2a7c12fec5d47c14aaf09e113524b11be31e60ac2562d81838babced3ba437b2d051c7183d306bdd26ac0f1f8ab881b2440230fa026f56ee6ca0b36cfac41da04b0b0bb5c0c7dd439dc45a557723cd6e8710ee3713359cd140dda803e1af406252234fba9aba0eef8a076d065d9287fc08f41b35026509520b13b32b97983becf206781519f8496bed432a4eaaf5236a37967c9c881ba14180ccc75bf991ee11c94d64c436468d4fdddfb45f465435abb2e07ecc508550f4c60c63bb677ade20b7467931f678d0fd2ef69a9cbd"}, @NFTA_DATA_VALUE={0x25, 0x1, "4f161668fef4d70cfb06cbe0acd3bb668246c14da019949b7968ca739274a2bbdf"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x48084}, 0x9890) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880), 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4000) socketpair(0x1d, 0x80803, 0x0, &(0x7f0000001980)={0xffffffffffffffff}) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, 0xd, 0x6, 0x885, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x901}, 0x40000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x60, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001c40), 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000001c80)={0x7, 0x600, 0x1, 'queue0\x00', 0x3db481ce}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x14, 0x3, 0x2, 0x58ba6ea4184c4db3, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", ""]}, 0x14}}, 0x0) 01:04:54 executing program 7: sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48890) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8d4}, 0x4800) socketpair(0x2b, 0x4, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x80) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x9000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x104, 0x1, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x20}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x896b}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000880)={&(0x7f00000007c0), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040018}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x3, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1f}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x811}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x2c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000b00)={{0x7, 0xe4}, {0x1, 0x2}, 0xdca3, 0x2, 0x80}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, 0x1, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x4}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x44}}, 0xc844) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x9, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1a}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x20008000) r5 = socket(0x6, 0x2, 0x6d) sendmsg$nl_netfilter(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x4, 0xb, 0x201, 0x70bd2c, 0x25dfdbff, {0x1, 0x0, 0x5}, [@typed={0xc, 0x73, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1c4) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x98, 0x2, 0x2, 0x1, 0x0, 0x0, {0x6}, [@CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24004010) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000001080)={0x7, 0x3, 0x1, 'queue0\x00', 0x25e}) [ 120.195024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.196180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.197534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.199519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.203140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.204042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.206017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.207271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.209413] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.211598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.212457] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.214379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.219060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.219864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.237190] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.238160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.242410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.246888] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.247036] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.250004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.261571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.263091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.269948] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.271091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.274488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.275648] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.299225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.301109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.309032] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.310005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.314443] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.315477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 120.316573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.319999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.322925] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.324309] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 120.326088] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.330893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 120.352019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 120.354178] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.263157] Bluetooth: hci0: command tx timeout [ 122.327843] Bluetooth: hci2: command tx timeout [ 122.328093] Bluetooth: hci1: command tx timeout [ 122.328899] Bluetooth: hci3: command tx timeout [ 122.392842] Bluetooth: hci4: command tx timeout [ 122.393127] Bluetooth: hci7: command tx timeout [ 122.393847] Bluetooth: hci6: command tx timeout [ 122.394700] Bluetooth: hci5: command tx timeout [ 124.311095] Bluetooth: hci0: command tx timeout [ 124.375009] Bluetooth: hci1: command tx timeout [ 124.375467] Bluetooth: hci3: command tx timeout [ 124.375541] Bluetooth: hci2: command tx timeout [ 124.439021] Bluetooth: hci5: command tx timeout [ 124.440802] Bluetooth: hci6: command tx timeout [ 124.440880] Bluetooth: hci7: command tx timeout [ 124.441247] Bluetooth: hci4: command tx timeout [ 126.360025] Bluetooth: hci0: command tx timeout [ 126.423979] Bluetooth: hci1: command tx timeout [ 126.424009] Bluetooth: hci2: command tx timeout [ 126.424062] Bluetooth: hci3: command tx timeout [ 126.486898] Bluetooth: hci7: command tx timeout [ 126.487551] Bluetooth: hci4: command tx timeout [ 126.488339] Bluetooth: hci6: command tx timeout [ 126.489014] Bluetooth: hci5: command tx timeout [ 128.407149] Bluetooth: hci0: command tx timeout [ 128.473251] Bluetooth: hci1: command tx timeout [ 128.474950] Bluetooth: hci3: command tx timeout [ 128.475886] Bluetooth: hci2: command tx timeout [ 128.535041] Bluetooth: hci4: command tx timeout [ 128.536073] Bluetooth: hci7: command tx timeout [ 128.536954] Bluetooth: hci6: command tx timeout [ 128.537815] Bluetooth: hci5: command tx timeout [ 182.885057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.888146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.889572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.899691] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.904694] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.955838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.959568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.963872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.969900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.973883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.012981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.016625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.020118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.025480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.029437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.082422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.086236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.090656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.100295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.102188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.104949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.112644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.127027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.144795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.155619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.175633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.200260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.219048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 183.228365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.246356] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 183.291661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.300400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.314009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 183.314131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.341009] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.373247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 183.383220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.397437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.399602] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.460463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.982846] Bluetooth: hci0: command tx timeout [ 185.049686] Bluetooth: hci1: command tx timeout [ 185.110836] Bluetooth: hci2: command tx timeout [ 185.239069] Bluetooth: hci3: command tx timeout [ 185.239331] Bluetooth: hci4: command tx timeout [ 185.558851] Bluetooth: hci5: command tx timeout [ 185.558867] Bluetooth: hci6: command tx timeout [ 185.622788] Bluetooth: hci7: command tx timeout [ 187.030836] Bluetooth: hci0: command tx timeout [ 187.095878] Bluetooth: hci1: command tx timeout [ 187.159785] Bluetooth: hci2: command tx timeout [ 187.287054] Bluetooth: hci4: command tx timeout [ 187.287078] Bluetooth: hci3: command tx timeout [ 187.607150] Bluetooth: hci6: command tx timeout [ 187.607647] Bluetooth: hci5: command tx timeout [ 187.672981] Bluetooth: hci7: command tx timeout [ 189.079533] Bluetooth: hci0: command tx timeout [ 189.142793] Bluetooth: hci1: command tx timeout [ 189.206832] Bluetooth: hci2: command tx timeout [ 189.334844] Bluetooth: hci4: command tx timeout [ 189.334867] Bluetooth: hci3: command tx timeout [ 189.656108] Bluetooth: hci5: command tx timeout [ 189.657287] Bluetooth: hci6: command tx timeout [ 189.718800] Bluetooth: hci7: command tx timeout [ 191.127075] Bluetooth: hci0: command tx timeout [ 191.190899] Bluetooth: hci1: command tx timeout [ 191.257023] Bluetooth: hci2: command tx timeout [ 191.382841] Bluetooth: hci4: command tx timeout [ 191.383838] Bluetooth: hci3: command tx timeout [ 191.704009] Bluetooth: hci6: command tx timeout [ 191.704075] Bluetooth: hci5: command tx timeout [ 191.766971] Bluetooth: hci7: command tx timeout [ 245.357170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.364394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.368580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.381936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.387629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.436368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.439626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.443242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.449364] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.453628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.633682] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.649312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.659215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.684634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.687423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.693502] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.693694] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.698507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.705535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.711494] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.794906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.800454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.801454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.804656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.812522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.816784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.825342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.831680] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.846887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.880266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.899325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.918113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.932521] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.933822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.962536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.966247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.989596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.993469] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.029471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.043883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 247.446988] Bluetooth: hci0: command tx timeout [ 247.511387] Bluetooth: hci1: command tx timeout [ 247.766809] Bluetooth: hci3: command tx timeout [ 247.769781] Bluetooth: hci2: command tx timeout [ 247.895863] Bluetooth: hci4: command tx timeout [ 248.150900] Bluetooth: hci7: command tx timeout [ 248.150948] Bluetooth: hci6: command tx timeout [ 248.534819] Bluetooth: hci5: command tx timeout [ 249.496950] Bluetooth: hci0: command tx timeout [ 249.559086] Bluetooth: hci1: command tx timeout [ 249.815042] Bluetooth: hci2: command tx timeout [ 249.815550] Bluetooth: hci3: command tx timeout [ 249.942893] Bluetooth: hci4: command tx timeout [ 250.199942] Bluetooth: hci6: command tx timeout [ 250.200452] Bluetooth: hci7: command tx timeout [ 250.582835] Bluetooth: hci5: command tx timeout [ 251.542891] Bluetooth: hci0: command tx timeout [ 251.608039] Bluetooth: hci1: command tx timeout [ 251.862848] Bluetooth: hci3: command tx timeout [ 251.864038] Bluetooth: hci2: command tx timeout [ 251.991103] Bluetooth: hci4: command tx timeout [ 252.247083] Bluetooth: hci7: command tx timeout [ 252.247784] Bluetooth: hci6: command tx timeout [ 252.630799] Bluetooth: hci5: command tx timeout [ 253.592854] Bluetooth: hci0: command tx timeout [ 253.655021] Bluetooth: hci1: command tx timeout [ 253.910856] Bluetooth: hci2: command tx timeout [ 253.911338] Bluetooth: hci3: command tx timeout [ 254.040037] Bluetooth: hci4: command tx timeout [ 254.294931] Bluetooth: hci7: command tx timeout [ 254.295408] Bluetooth: hci6: command tx timeout [ 254.679903] Bluetooth: hci5: command tx timeout [ 308.136186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.139447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.145064] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.153237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.160502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.201433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.205091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.206429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.211427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.214110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.217835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.223354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.225281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.230641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.233346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.338938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.364989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.367654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.374650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.378610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.487379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.496179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.521325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.531516] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.537146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.540625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.554273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.560232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.571108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.601821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.625306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.627346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.643186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.653167] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.684263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.708211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.711315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.713135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.838344] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.843483] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 310.231084] Bluetooth: hci0: command tx timeout [ 310.295125] Bluetooth: hci1: command tx timeout [ 310.296320] Bluetooth: hci2: command tx timeout [ 310.422920] Bluetooth: hci3: command tx timeout [ 310.678884] Bluetooth: hci4: command tx timeout [ 310.807842] Bluetooth: hci6: command tx timeout [ 310.808874] Bluetooth: hci5: command tx timeout [ 310.934976] Bluetooth: hci7: command tx timeout [ 312.279123] Bluetooth: hci0: command tx timeout [ 312.343379] Bluetooth: hci1: command tx timeout [ 312.343403] Bluetooth: hci2: command tx timeout [ 312.471846] Bluetooth: hci3: command tx timeout [ 312.727094] Bluetooth: hci4: command tx timeout [ 312.855308] Bluetooth: hci6: command tx timeout [ 312.856867] Bluetooth: hci5: command tx timeout [ 312.983038] Bluetooth: hci7: command tx timeout [ 314.327350] Bluetooth: hci0: command tx timeout [ 314.390862] Bluetooth: hci1: command tx timeout [ 314.392197] Bluetooth: hci2: command tx timeout [ 314.519784] Bluetooth: hci3: command tx timeout [ 314.776773] Bluetooth: hci4: command tx timeout [ 314.902990] Bluetooth: hci5: command tx timeout [ 314.904229] Bluetooth: hci6: command tx timeout [ 315.031923] Bluetooth: hci7: command tx timeout [ 316.375102] Bluetooth: hci0: command tx timeout [ 316.439058] Bluetooth: hci1: command tx timeout [ 316.440886] Bluetooth: hci2: command tx timeout [ 316.566830] Bluetooth: hci3: command tx timeout [ 316.822850] Bluetooth: hci4: command tx timeout [ 316.952803] Bluetooth: hci6: command tx timeout [ 316.954783] Bluetooth: hci5: command tx timeout [ 317.079134] Bluetooth: hci7: command tx timeout [ 370.472185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.477230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.482574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.490421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.493918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.599372] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.602823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.607421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.618086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.622268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.687607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.692321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.704065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.712266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.719495] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.761831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.780684] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.785252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.811249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.824215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.874297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.878969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.883763] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 370.889430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.895529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.912019] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.932663] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.936248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.948203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.953326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.963374] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 370.963795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.967551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.990999] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.004216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.008256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.013248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.061292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 371.081004] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.091161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.566822] Bluetooth: hci0: command tx timeout [ 372.694797] Bluetooth: hci1: command tx timeout [ 372.822802] Bluetooth: hci2: command tx timeout [ 372.886787] Bluetooth: hci3: command tx timeout [ 373.078798] Bluetooth: hci4: command tx timeout [ 373.206885] Bluetooth: hci5: command tx timeout [ 373.207485] Bluetooth: hci6: command tx timeout [ 373.270811] Bluetooth: hci7: command tx timeout [ 374.615049] Bluetooth: hci0: command tx timeout [ 374.744065] Bluetooth: hci1: command tx timeout [ 374.870826] Bluetooth: hci2: command tx timeout [ 374.934954] Bluetooth: hci3: command tx timeout [ 375.128258] Bluetooth: hci4: command tx timeout [ 375.256056] Bluetooth: hci5: command tx timeout [ 375.256849] Bluetooth: hci6: command tx timeout [ 375.318912] Bluetooth: hci7: command tx timeout [ 376.664587] Bluetooth: hci0: command tx timeout [ 376.793017] Bluetooth: hci1: command tx timeout [ 376.919851] Bluetooth: hci2: command tx timeout [ 376.984397] Bluetooth: hci3: command tx timeout [ 377.177241] Bluetooth: hci4: command tx timeout [ 377.304309] Bluetooth: hci6: command tx timeout [ 377.305797] Bluetooth: hci5: command tx timeout [ 377.366993] Bluetooth: hci7: command tx timeout [ 378.710889] Bluetooth: hci0: command tx timeout [ 378.838995] Bluetooth: hci1: command tx timeout [ 378.967116] Bluetooth: hci2: command tx timeout [ 379.030922] Bluetooth: hci3: command tx timeout [ 379.223106] Bluetooth: hci4: command tx timeout [ 379.350810] Bluetooth: hci6: command tx timeout [ 379.352777] Bluetooth: hci5: command tx timeout [ 379.416052] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 01:10:04 Registers: info registers vcpu 0 RAX=000000000000024c RBX=00007fc102092b18 RCX=00007fc10201d738 RDX=0000000000000002 RSI=0000000000000002 RDI=00007fc10204da4a RBP=00007ffdcfc8c0f0 RSP=00007ffdcfc8bff0 R8 =0000000000000000 R9 =00007fc102033998 R10=00007fc1020c7840 R11=00007fc102330510 R12=0000000000000007 R13=0000024c00000007 R14=00007fc102033998 R15=00007fc102330510 RIP=00007fc10234a73a RFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc101e26540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc1022ff000 CR3=0000000031312000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000004200746163 XMM04=725f646c756f68735f6b636f735f4f49 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81a8590c RDX=1ffff11005ad0f4e RSI=0000000000000014 RDI=000000000000001f RBP=ffffea00008edbc0 RSP=ffff88802d6878e8 R8 =0000000000000000 R9 =fffff9400011db78 R10=0000000000000000 R11=ffff88806cf3c300 R12=0000000000000071 R13=0000000000000014 R14=0000000000000013 R15=00000000000000c2 RIP=ffffffff8172ebf8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5748000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559606d36008 CR3=000000002cbeb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000