Warning: Permanently added '[localhost]:22221' (ECDSA) to the list of known hosts. 2025/05/01 05:47:39 fuzzer started 2025/05/01 05:47:40 dialing manager at localhost:43767 syzkaller login: [ 94.206714] cgroup: Unknown subsys name 'net' [ 94.345531] cgroup: Unknown subsys name 'cpuset' [ 94.390983] cgroup: Unknown subsys name 'rlimit' 2025/05/01 05:47:57 syscalls: 201 2025/05/01 05:47:57 code coverage: enabled 2025/05/01 05:47:57 comparison tracing: enabled 2025/05/01 05:47:57 extra coverage: enabled 2025/05/01 05:47:57 setuid sandbox: enabled 2025/05/01 05:47:57 namespace sandbox: enabled 2025/05/01 05:47:57 Android sandbox: enabled 2025/05/01 05:47:57 fault injection: enabled 2025/05/01 05:47:57 leak checking: enabled 2025/05/01 05:47:57 net packet injection: enabled 2025/05/01 05:47:57 net device setup: enabled 2025/05/01 05:47:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/01 05:47:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/01 05:47:57 USB emulation: enabled 2025/05/01 05:47:57 hci packet injection: enabled 2025/05/01 05:47:57 wifi device emulation: enabled 2025/05/01 05:47:57 802.15.4 emulation: enabled 2025/05/01 05:47:57 fetching corpus: 0, signal 0/0 (executing program) 2025/05/01 05:47:59 starting 8 fuzzer processes 05:47:59 executing program 0: sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48058}, 0x2000000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, ["", "", "", "", ""]}, 0x14}}, 0x801) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000300)=0x9) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffcb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xec}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000055) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000005c0)) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000014}, 0x4000000) socketpair(0x1f, 0x1, 0x3, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) write$cgroup_pressure(r3, &(0x7f0000000880)={'full', 0x20, 0x0, 0x20, 0x50f5}, 0x2f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a80)=0x14) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000b80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000bc0)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0xffffffffffffff80, 0x2, 0xccd, 0x9}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000cc0)={'filter\x00', 0x0, 0x0, 0x0, [0x3ff, 0x8, 0x8, 0x101, 0x6, 0x10]}, &(0x7f0000000d40)=0x78) 05:47:59 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x2, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xb0a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000841) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x19e2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4050}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3e29}]}, 0x24}}, 0x4088050) r1 = accept$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x200c0845) openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000005c0)={0x0, 0x1, r1, 0x7fffffff}) r3 = socket(0x2a, 0x3, 0x81) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044080) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r5, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x70}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000080) write$nbd(0xffffffffffffffff, &(0x7f0000000a40)={0x67446698, 0x0, 0x4, 0x3, 0x3, "1b"}, 0x11) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r8, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4044894) 05:47:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0xe, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x40000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="8d5287b00a3c4ce3369ac9dc47a3ae8f348f9ed8b00f875b200f708351e61753500becf6124d5335e67c1b62876793b0ca7e3f96d92356f18a5d4fe14689b8678a1cdac612a3c5eb4472166a6bfd68fc44d3198af74eafcba6ec40a68a684cc998d3af3c5f750cf88a73ccee1361481845754015b69003dcd1cb6d4acb43b1b3b2e82f67a6c41172600ebb3e2b", 0x8d, 0x4008004, 0x0, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x2040840}, 0x4010) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x76a208287aab724b}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10000}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffa1, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x5f3, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044010}, 0x10) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xff}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1884}, 0x4000041) syz_genetlink_get_family_id$net_dm(&(0x7f0000000980), r0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x50) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x5, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 05:47:59 executing program 3: r0 = geteuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x2, r0, 0xffffffffffffffff, 0xee01, 0x0, 0x5, 0x1}, 0x9, 0x9, 0x9, 0x80000001, 0x0, 0x0, 0x5}) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000080)=""/4096) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000001080)=""/66) shmctl$SHM_LOCK(0x0, 0xb) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001100)='io.pressure\x00', 0x2, 0x0) r1 = socket(0x21, 0x4, 0x9) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) geteuid() semtimedop(0xffffffffffffffff, &(0x7f0000001280)=[{0x4, 0xfffd}, {0x2, 0x7, 0x1800}], 0x2, &(0x7f00000012c0)={0x0, 0x989680}) socketpair(0x2a, 0x0, 0x7, &(0x7f0000001300)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000001340)={{0x2e, @broadcast, 0x4e24, 0x2, 'fo\x00', 0x1c, 0xde, 0x32}, {@private=0xa010102, 0x4e20, 0x1, 0x5, 0x7, 0x8}}, 0x44) r3 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f00000013c0)=""/107) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/binder-control\x00', 0x800, 0x0) r4 = geteuid() r5 = geteuid() getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001540)={0x0, 0x0}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000015c0)={{0x0, r4, 0xffffffffffffffff, r5, r6, 0x4d, 0x9}, 0x401, 0x8, 0x1, 0x100000001, 0xffffffffffffffff, r7, 0x5660}) [ 113.360174] audit: type=1400 audit(1746078479.692:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:47:59 executing program 4: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x81}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x28}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wlan0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x81}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2}, 0x4040000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x124, 0xa, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xed216eb05dd83ffe}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfd}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf0000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2c48}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff}]}, 0x124}, 0x1, 0x0, 0x0, 0x82}, 0x8081) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x1, 0x10000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4002845) sendto$inet(r0, &(0x7f0000000680)="d0e121b3f11bf584f66d2b9db72c933d8573e8cdd53cdbe1ed02ebe218", 0x1d, 0x40000, 0x0, 0x0) sendto$inet(r0, &(0x7f00000006c0)="caeff06bcf4c00be028eb24f96bc15ab9254229f8143cc6632b613083f547b030956743908b4c669d078c0236094fb3d11d93f7f3fea5924118be9a4acfba05c52af70a4339c791d68a041db902bb0c64290c83188ee359b530b933a70c150094e7cf0fff580b5aa0c6f965f8855796cb1f4bd99cec7cc721283eaea8c67d78bcb27636e835892ff532917968d58338dd014521834429c353ddd9674a3fb66d0930869", 0xa3, 0x40, &(0x7f0000000780)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x48}, 0x1, 0x0, 0x0, 0x180}, 0x41) r3 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r3, &(0x7f0000000a40)=[{&(0x7f0000000900)="8ff8063f6085071ed4316e3bf66a79a0c32955e7a0b07fc592121810bd7712f23b47cb6633fa257cde49c22aedfe04faf2303a6920ffcb88d8f72527f07d10e271fea40a08f54f49a757098198009144bba907990a4593d155acf9ef187395d8c1c92740dee9392c581f9921e059e3f5bc363798822b8662a6", 0x79}, {&(0x7f0000000980)="d4f0852b3123c888788bce8cb15429d8ce23759b5f4ec6394c5168ea41ec22da1ddaef9fd577d06f6c684ec9a928", 0x2e}, {&(0x7f00000009c0)="cb49c036beb318051d78f863727d557f5e1725b86af26bbf0ebb2ce1fba9f281f17c0a5bca84e87dbc027f52b7609b6b01d064e67fac3b98fff183f434698189", 0x40}, {&(0x7f0000000a00)="92009c07c814d8", 0x7}], 0x4, 0x15, 0x0) r4 = fork() perf_event_open(&(0x7f0000000a80)={0x3, 0x80, 0x9, 0x7f, 0xe, 0xfd, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01, 0x2, @perf_config_ext={0x0, 0xee6b}, 0x42022, 0x9, 0x6, 0x3, 0xfa76, 0x4, 0x0, 0x0, 0x10000}, r4, 0xb, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000b00)={0x4, 0x80, 0xff, 0x8, 0x0, 0x1f, 0x0, 0x9, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xc13, 0xfffffffffffffffc}, 0x4048, 0x100, 0x3f7, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet(r0, &(0x7f0000000b80)={0x2, 0x1, @loopback}, 0x10) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x8, 0x0, 0x1, 0x6, 0x0, 0x2, 0x100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000bc0), 0x9}, 0x4, 0x8001, 0x1, 0x7, 0x0, 0x1, 0x2, 0x0, 0x4, 0x0, 0x53}, r4, 0x9, 0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c80), r2) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000d80)={&(0x7f0000000cc0), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40024}, 0x1) 05:47:59 executing program 5: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x2, 0x2d00d1a4, 0x20, 0xfffffffffffffffd, 0x7, 0x7, 0x2, 0x1}, &(0x7f0000000040)={0x3ff, 0x7, 0x79c6, 0xffffffff, 0x1, 0x3f, 0x8, 0x6}, &(0x7f0000000080)={0xd39, 0x8, 0x100000000, 0x1, 0x0, 0x4001db47, 0x0, 0x3}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x7]}, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000004}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5041}, 0x4090) mq_timedsend(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8ede, &(0x7f0000000340)={0x77359400}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x4040080) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000004c0)=""/112, 0x70, 0x10001, &(0x7f0000000580)={r3, r4+10000000}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}}, 0x20000084) semtimedop(0xffffffffffffffff, &(0x7f00000006c0)=[{0x4, 0x5, 0x800}], 0x1, &(0x7f0000000700)={0x77359400}) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(r5, &(0x7f0000000740)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000780)="00b44d59574ef645f9c197e1de3006ceaec6a0652462ac1021173fdff9d80b23915264a8064eee1d02ee7d2eecb3c0", 0x2f, 0x5658, 0x0) mq_timedsend(r5, &(0x7f00000007c0)="d9e8e07890b417e2a545700d365e4263a7d49a018e83950a8e03d3a2dc39d67d880847077c4063c6bdbf391165014f478244e9064db1377d9776aec81f37024241ec80967323970c414e096731a35f389410dc03e5ee1a", 0x57, 0x4, &(0x7f0000000840)) clock_getres(0x6, &(0x7f0000000880)) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r6, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000a00)={0x3b, @multicast2, 0x4e24, 0x2, 'lc\x00', 0x13, 0x3f, 0x2f}, 0x2c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00'}) 05:47:59 executing program 6: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x20040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400}]}, 0x20}}, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x8000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x20}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}]}, 0x58}}, 0x80) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1f}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x80) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x84, 0x9, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x480d}, 0x80) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b39}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x11c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff001}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x8c}}, 0x5) openat$cgroup_devices(r2, &(0x7f0000000c40)='devices.deny\x00', 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x90, 0x3, 0x7, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFACCT_QUOTA={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f3}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x85}, 0x4) 05:47:59 executing program 7: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1881}, 0x40080) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000040) write$cgroup_devices(r1, &(0x7f0000000680)={'a', ' *:* ', 'r\x00'}, 0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, 0x2, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x724688bb}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2980}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x4}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff9}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x20040080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x27c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x74}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_LABELS_MASK={0x18, 0x17, [0xf6, 0xc3, 0x3, 0x9, 0x0]}, @CTA_NAT_SRC={0x4c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0xfffffffd, 0x7fffffff, 0x7, 0x1, 0xfff, 0x6]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xfff8}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x0]}, @CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}]}, @CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x3c}}, 0x4041) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x6, 0x1, 0x100, 0x0, 0x0, {0x2}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0d5}, 0x10000040) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xdc, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_USERDATA={0xb2, 0xd, 0x1, 0x0, "32d8dae55adeb0a00038b3aad925cf589a4cef86afd7e9a40b83c6cb50380b0bc7af35cbe3b28fe471081d740bd8b7e2ed6912aa1ccb63c65370f8441ee0d62fa0a32534e66d7d399e4363c48b50bdd452fe1d2890f812a19b8e3c99a85868ca0f73c357a2afdb1d38ebad1ed0acf019385e0fd4e4a7f785003532212a854bda0073d6a5d31f5cb9b9662b913f0e9aeb9152dd093e9af0e313e8d6e1e9ce5b482e8259e652e52dfd21d8e0b7b292"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000014c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001140)={0x31c, 0xd, 0x4, 0x201, 0x70bd27, 0x25dfdbfd, {0xc, 0x0, 0xa}, [@nested={0x9e, 0x2c, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="817ea9999c7c7ff85c32d4cade795548a497ddd400bec569710948687ec41559df1e98d988fd3c8e1c8c8d60cd9ae35a7a6ef531f5b3037a96b44d94648a87a8c3da7db89ce1d4a1ea75cb231f2e58070f7cd925fd70b4afea741d54fde5539c85ea0c72c9811c0db3142245495558e3ccb2ffc51a3e6bee1ff67a9bf3735aa5829db022a6887c58f8d970ad7f3a78877f7a"]}, @typed={0x103, 0x59, 0x0, 0x0, @binary="45bb8ccb06e42c3f4ffa3853a38040f298ef614b4f16ddfb750e5505891e782b9ad2fccb70dad7b967d6ae5662d05704261d8f8ec5b085566bc81db650ac041c2b69d3e49c53b819323a310f2ad57f2cb6184b51679a1e617943b557e1f45b988fb629728e4820584d8e6b20238b77656f41274780f176a6f4841de53d2eb8c85bdf60214a1853913ebba27628f133caeb3562fba98c66f7dba1abf6bdf53d1090a54670c2011fb2ac6e8f32ee433a28a8fc8d2891c2b12c3c366552d2f717fc139343a576367cc0769aa9e838af74380e8e07807ea239fefb1c26cd6115b81f373dab44e4fa159a8fc31baf8160f19344c60074adf64651aaf7f6993e774c"}, @nested={0x6b, 0x51, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @generic="5720585c7dd1e92cb089922d5cf1e6916ca5bd5d3c5bb74aa2fee8a9ef807ee049a4a718018438afe40a86e33d843d"]}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=0xee01}, @typed={0x50, 0x8c, 0x0, 0x0, @binary="10b9b33325a018ef53a3041aa62d0b50689c75c9f4ba0bd6bca6529529a511bb0d5f110043cc2840bb94f06743643b9fedcabf0228ad4d095456a6678f7ebb30558a897cf467456f338e2c6f"}, @nested={0x76, 0x23, 0x0, 0x1, [@generic="c17e9d56829830c7751a16c8967f5c97fb33b5acfbef416917214e4d99119a2044a4322cb8c188599af35363912e4478f2933bc1e1c481ae7684d86f324efdcf9523a41587d66d9cbb6733f20e8540b6b9acdc60a37e655b9591e73c22351fbecacf506fc36ea61a90b02051291e", @typed={0x4, 0x54}]}, @nested={0x28, 0x61, 0x0, 0x1, [@typed={0xc, 0x33, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xff}, @typed={0x4, 0xe}, @typed={0x8, 0x21, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x4, 0x89}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x44014}, 0x40004) [ 114.775548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.781112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.783758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.795127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.802892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.805683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.810651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.823610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.861885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.862910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.867900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.871456] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.885859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.896115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.900424] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.957381] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.972741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.978812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.982477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 114.984226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.987698] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.990041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.995948] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.003704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.008071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.010685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.015184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.019045] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.027607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.029989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.043435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.053537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.063545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.067604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.067937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.086777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.105251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.133361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.140594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.144845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.903030] Bluetooth: hci1: command tx timeout [ 116.965506] Bluetooth: hci0: command tx timeout [ 116.966852] Bluetooth: hci2: command tx timeout [ 117.157554] Bluetooth: hci6: command tx timeout [ 117.221403] Bluetooth: hci3: command tx timeout [ 117.286841] Bluetooth: hci7: command tx timeout [ 117.286960] Bluetooth: hci4: command tx timeout [ 117.288194] Bluetooth: hci5: command tx timeout [ 118.951399] Bluetooth: hci1: command tx timeout [ 119.013643] Bluetooth: hci0: command tx timeout [ 119.014535] Bluetooth: hci2: command tx timeout [ 119.205883] Bluetooth: hci6: command tx timeout [ 119.271905] Bluetooth: hci3: command tx timeout [ 119.334103] Bluetooth: hci4: command tx timeout [ 119.334905] Bluetooth: hci5: command tx timeout [ 119.334982] Bluetooth: hci7: command tx timeout [ 120.997785] Bluetooth: hci1: command tx timeout [ 121.061437] Bluetooth: hci0: command tx timeout [ 121.062356] Bluetooth: hci2: command tx timeout [ 121.254325] Bluetooth: hci6: command tx timeout [ 121.317410] Bluetooth: hci3: command tx timeout [ 121.381475] Bluetooth: hci4: command tx timeout [ 121.383002] Bluetooth: hci5: command tx timeout [ 121.383100] Bluetooth: hci7: command tx timeout [ 123.046455] Bluetooth: hci1: command tx timeout [ 123.109468] Bluetooth: hci0: command tx timeout [ 123.110607] Bluetooth: hci2: command tx timeout [ 123.302411] Bluetooth: hci6: command tx timeout [ 123.367697] Bluetooth: hci3: command tx timeout [ 123.429386] Bluetooth: hci7: command tx timeout [ 123.430445] Bluetooth: hci5: command tx timeout [ 123.430603] Bluetooth: hci4: command tx timeout [ 177.079092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.083075] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.087116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.095227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.100821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.295124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.297752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.299862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.306447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.309894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.332978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.345549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.349093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.369420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.374861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.486870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.488690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.493817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.499570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.501246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.502652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.518726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.542664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.548119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.551936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.576838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.578999] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.592844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.620789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 177.648951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.653493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 177.659993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 177.661810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.684802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 177.686468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.702656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.704200] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.729750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.789651] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.792844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 179.175699] Bluetooth: hci0: command tx timeout [ 179.367357] Bluetooth: hci1: command tx timeout [ 179.429596] Bluetooth: hci2: command tx timeout [ 179.621397] Bluetooth: hci3: command tx timeout [ 179.687433] Bluetooth: hci4: command tx timeout [ 179.749497] Bluetooth: hci5: command tx timeout [ 179.813368] Bluetooth: hci6: command tx timeout [ 179.942320] Bluetooth: hci7: command tx timeout [ 181.221587] Bluetooth: hci0: command tx timeout [ 181.416361] Bluetooth: hci1: command tx timeout [ 181.478406] Bluetooth: hci2: command tx timeout [ 181.670446] Bluetooth: hci3: command tx timeout [ 181.733550] Bluetooth: hci4: command tx timeout [ 181.798402] Bluetooth: hci5: command tx timeout [ 181.862477] Bluetooth: hci6: command tx timeout [ 181.990335] Bluetooth: hci7: command tx timeout [ 183.270748] Bluetooth: hci0: command tx timeout [ 183.462370] Bluetooth: hci1: command tx timeout [ 183.525594] Bluetooth: hci2: command tx timeout [ 183.718389] Bluetooth: hci3: command tx timeout [ 183.781476] Bluetooth: hci4: command tx timeout [ 183.846586] Bluetooth: hci5: command tx timeout [ 183.909389] Bluetooth: hci6: command tx timeout [ 184.037642] Bluetooth: hci7: command tx timeout [ 185.318519] Bluetooth: hci0: command tx timeout [ 185.510355] Bluetooth: hci1: command tx timeout [ 185.574673] Bluetooth: hci2: command tx timeout [ 185.766415] Bluetooth: hci3: command tx timeout [ 185.829348] Bluetooth: hci4: command tx timeout [ 185.894496] Bluetooth: hci5: command tx timeout [ 185.959036] Bluetooth: hci6: command tx timeout [ 186.086381] Bluetooth: hci7: command tx timeout [ 239.930947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.935923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.939174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.947205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.954142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.062631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.072142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.077928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.097969] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.108006] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.138779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.147032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.167795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.174758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.182780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.203506] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.213911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.251193] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.284740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 240.290939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 240.299609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.306997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.309710] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.311129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.313612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 240.316084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.324575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 240.342669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 240.362560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.368539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.370508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.370530] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.375812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.382154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.389880] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.399718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.402712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.461845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.505916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 240.550101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.023033] Bluetooth: hci0: command tx timeout [ 242.213476] Bluetooth: hci1: command tx timeout [ 242.277658] Bluetooth: hci2: command tx timeout [ 242.407052] Bluetooth: hci3: command tx timeout [ 242.470347] Bluetooth: hci5: command tx timeout [ 242.533545] Bluetooth: hci7: command tx timeout [ 242.534731] Bluetooth: hci4: command tx timeout [ 242.597980] Bluetooth: hci6: command tx timeout [ 244.069813] Bluetooth: hci0: command tx timeout [ 244.261816] Bluetooth: hci1: command tx timeout [ 244.325431] Bluetooth: hci2: command tx timeout [ 244.453509] Bluetooth: hci3: command tx timeout [ 244.517483] Bluetooth: hci5: command tx timeout [ 244.582380] Bluetooth: hci4: command tx timeout [ 244.583249] Bluetooth: hci7: command tx timeout [ 244.646017] Bluetooth: hci6: command tx timeout [ 246.118566] Bluetooth: hci0: command tx timeout [ 246.309372] Bluetooth: hci1: command tx timeout [ 246.374354] Bluetooth: hci2: command tx timeout [ 246.502428] Bluetooth: hci3: command tx timeout [ 246.565721] Bluetooth: hci5: command tx timeout [ 246.630752] Bluetooth: hci4: command tx timeout [ 246.631218] Bluetooth: hci7: command tx timeout [ 246.693349] Bluetooth: hci6: command tx timeout [ 248.167993] Bluetooth: hci0: command tx timeout [ 248.357381] Bluetooth: hci1: command tx timeout [ 248.422477] Bluetooth: hci2: command tx timeout [ 248.549643] Bluetooth: hci3: command tx timeout [ 248.613370] Bluetooth: hci5: command tx timeout [ 248.679755] Bluetooth: hci7: command tx timeout [ 248.680207] Bluetooth: hci4: command tx timeout [ 248.741527] Bluetooth: hci6: command tx timeout [ 302.260881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.263115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.268868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.275130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.278114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.445865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.448704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.450936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.457467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.460575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.524485] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.530876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.548888] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.556275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.571256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.574037] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.578183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.581585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.587825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.593188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.599835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.600912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.602894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.607061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.608051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.611585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.617103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.633146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.635975] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.653952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.688865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.710202] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.713626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.737425] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.747696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.756185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.773952] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.775972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.779845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.790433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.358430] Bluetooth: hci0: command tx timeout [ 304.487152] Bluetooth: hci1: command tx timeout [ 304.678486] Bluetooth: hci3: command tx timeout [ 304.741500] Bluetooth: hci2: command tx timeout [ 304.741523] Bluetooth: hci5: command tx timeout [ 304.869809] Bluetooth: hci6: command tx timeout [ 304.869891] Bluetooth: hci7: command tx timeout [ 304.871065] Bluetooth: hci4: command tx timeout [ 306.406098] Bluetooth: hci0: command tx timeout [ 306.533410] Bluetooth: hci1: command tx timeout [ 306.725357] Bluetooth: hci3: command tx timeout [ 306.789434] Bluetooth: hci5: command tx timeout [ 306.790110] Bluetooth: hci2: command tx timeout [ 306.917942] Bluetooth: hci4: command tx timeout [ 306.918453] Bluetooth: hci7: command tx timeout [ 306.918880] Bluetooth: hci6: command tx timeout [ 308.454318] Bluetooth: hci0: command tx timeout [ 308.581481] Bluetooth: hci1: command tx timeout [ 308.773349] Bluetooth: hci3: command tx timeout [ 308.838594] Bluetooth: hci5: command tx timeout [ 308.839054] Bluetooth: hci2: command tx timeout [ 308.965605] Bluetooth: hci6: command tx timeout [ 308.966081] Bluetooth: hci7: command tx timeout [ 308.966782] Bluetooth: hci4: command tx timeout [ 310.501920] Bluetooth: hci0: command tx timeout [ 310.630344] Bluetooth: hci1: command tx timeout [ 310.821359] Bluetooth: hci3: command tx timeout [ 310.885375] Bluetooth: hci5: command tx timeout [ 310.885792] Bluetooth: hci2: command tx timeout [ 311.013554] Bluetooth: hci4: command tx timeout [ 311.016569] Bluetooth: hci6: command tx timeout [ 311.016975] Bluetooth: hci7: command tx timeout [ 364.807216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.816218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.820791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.822933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.828886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.833881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.837107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.839846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.853504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.856810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.984012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.989945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.993756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.002388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.010689] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.067261] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.087054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.091710] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.099809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.120966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.123526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.133743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.146261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.175987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.188644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.214203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.221206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.225798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.233594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.237735] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.254100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 365.264833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 365.271780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 365.316878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 365.321896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 365.326843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 365.330049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 365.342633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.391542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 365.404087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 366.885689] Bluetooth: hci0: command tx timeout [ 366.949366] Bluetooth: hci1: command tx timeout [ 367.077375] Bluetooth: hci2: command tx timeout [ 367.206593] Bluetooth: hci3: command tx timeout [ 367.334493] Bluetooth: hci4: command tx timeout [ 367.397552] Bluetooth: hci5: command tx timeout [ 367.461394] Bluetooth: hci7: command tx timeout [ 367.461422] Bluetooth: hci6: command tx timeout [ 368.933353] Bluetooth: hci0: command tx timeout [ 368.999308] Bluetooth: hci1: command tx timeout [ 369.125653] Bluetooth: hci2: command tx timeout [ 369.255343] Bluetooth: hci3: command tx timeout [ 369.381345] Bluetooth: hci4: command tx timeout [ 369.445362] Bluetooth: hci5: command tx timeout [ 369.509375] Bluetooth: hci7: command tx timeout [ 369.510709] Bluetooth: hci6: command tx timeout [ 370.981527] Bluetooth: hci0: command tx timeout [ 371.046362] Bluetooth: hci1: command tx timeout [ 371.173420] Bluetooth: hci2: command tx timeout [ 371.302514] Bluetooth: hci3: command tx timeout [ 371.429421] Bluetooth: hci4: command tx timeout [ 371.494509] Bluetooth: hci5: command tx timeout [ 371.557592] Bluetooth: hci6: command tx timeout [ 371.557810] Bluetooth: hci7: command tx timeout [ 373.029509] Bluetooth: hci0: command tx timeout [ 373.094761] Bluetooth: hci1: command tx timeout [ 373.223418] Bluetooth: hci2: command tx timeout [ 373.349696] Bluetooth: hci3: command tx timeout [ 373.477530] Bluetooth: hci4: command tx timeout [ 373.542472] Bluetooth: hci5: command tx timeout [ 373.605419] Bluetooth: hci6: command tx timeout [ 373.605951] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 05:53:08 Registers: info registers vcpu 0 RAX=ffffffff81b150dd RBX=ffffffff81600e30 RCX=ffff888016aef71c RDX=1ffff11002d5df04 RSI=ffffffff81b150dd RDI=ffffffff81b150dd RBP=ffff888016aef860 RSP=ffff888016aef7c8 R8 =0000000000000001 R9 =ffff888016aef808 R10=000000000003b145 R11=0000000000025954 R12=ffff888016aef890 R13=0000000000000000 R14=ffff888015451bc0 R15=0000000000092cc0 RIP=ffffffff812d7142 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5647000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9ce77bf580 CR3=00000000354be000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87a2b440 RDX=0000000000000008 RSI=ffff888030f18b20 RDI=ffff888030f18000 RBP=ffff888030f18000 RSP=ffff888025ebf930 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000000 R12=0000000000000009 R13=0000000000000005 R14=ffff888030f18b20 R15=ffff888030f18a58 RIP=ffffffff81515ada RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fab71273540 00000000 00000000 GS =0000 ffff8880e5747000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fab71558f00 CR3=000000000dba9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000