Warning: Permanently added '[localhost]:23936' (ECDSA) to the list of known hosts.
2025/05/23 05:27:01 fuzzer started
2025/05/23 05:27:01 dialing manager at localhost:41873
syzkaller login: [   94.186138] cgroup: Unknown subsys name 'net'
[   94.353253] cgroup: Unknown subsys name 'cpuset'
[   94.401715] cgroup: Unknown subsys name 'rlimit'
2025/05/23 05:27:17 syscalls: 200
2025/05/23 05:27:17 code coverage: enabled
2025/05/23 05:27:17 comparison tracing: enabled
2025/05/23 05:27:17 extra coverage: enabled
2025/05/23 05:27:17 setuid sandbox: enabled
2025/05/23 05:27:17 namespace sandbox: enabled
2025/05/23 05:27:17 Android sandbox: enabled
2025/05/23 05:27:17 fault injection: enabled
2025/05/23 05:27:17 leak checking: enabled
2025/05/23 05:27:17 net packet injection: enabled
2025/05/23 05:27:17 net device setup: enabled
2025/05/23 05:27:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/23 05:27:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/23 05:27:17 USB emulation: enabled
2025/05/23 05:27:17 hci packet injection: enabled
2025/05/23 05:27:17 wifi device emulation: enabled
2025/05/23 05:27:17 802.15.4 emulation: enabled
2025/05/23 05:27:17 fetching corpus: 0, signal 0/0 (executing program)
2025/05/23 05:27:18 starting 8 fuzzer processes
05:27:18 executing program 0:
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x89e04715}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf692}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000000000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x800)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004004}, 0x1)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x23}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x64}}, 0x805)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xe, 0x6, 0x73520e6640831999, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x404c011)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x1, 0x1, 0x804, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_ID={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_TIMEOUT={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000844}, 0x8001)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0xe, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x94}, 0x20000800)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20a0}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, 0x1, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4da}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000}, 0x20044080)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x150000}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5f74}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, 0xe, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x48010)
r1 = memfd_create(&(0x7f0000000d40)='\x00', 0x4)
r2 = pidfd_getfd(r0, r1, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000d80)={0x8, 0x1f, 0x0, 0x7ff}, 0x10)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000dc0)=0xc898, &(0x7f0000000e00)=0x2)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000804)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000001280)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)={0x2b0, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7f}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffff714}, @CTA_EXPECT_NAT={0x1d0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x7}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x101}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x7c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40)

05:27:18 executing program 1:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0x7f, "550e7df92d2c7608e82d8bce8814fcc34705975cc374334c3abbb05bd838a9b1342f5b9c8565e9e5187eb7e889b271dd9c3a2f0bce9caf3314a0fafe367873f5"})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0xc3, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x9, 0x7, 0x0, 0x3ff}, 0x10)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@private2}, &(0x7f0000000140)=0x14)
getpeername$netlink(r0, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000200)=0x944, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)={0x16, 0x1a, '\x00', [@jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x58, {0x3, 0x14, 0x1, 0x1, [0x2, 0x3ff, 0x0, 0x0, 0xfff, 0x10001, 0x7, 0x2, 0xfffffffffffffffa, 0x5]}}, @generic={0x0, 0x6c, "6ecc4130c84e2badfceb0e84b03839f72421faf485f072b74f9aeaa459746c24da1fed7d45081ce46f460dce88175746898e5402498d8346bc901330c1df43e70a531628e927405483599917c2083f005ca10848e036c3096c1cccbd6f19fbbbbc37b168ab5a4be8569021a4"}]}, 0xe0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x1)
write$bt_hci(r1, &(0x7f0000000480)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0x6, 0xff, "9694279f7f7a5b13277b91056c470658"}}}, 0x20)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x144, 0x1, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CT={0x130, 0xb, 0x0, 0x1, [@CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x7fffffff, 0x2, 0x6, 0x20, 0x4, 0xffffffff, 0x5]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xe24}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa37}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x34}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b83}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xca}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf65}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb2}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x65c0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x4)
r3 = socket$inet6(0xa, 0x6, 0x1)
accept$inet6(r3, &(0x7f0000000800)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000840)=0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$netlink(r4, &(0x7f0000000880), &(0x7f00000008c0)=0xc)
sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd4}, 0x4004003)

05:27:18 executing program 2:
process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="54631378b00b421b35c9ef571e6e689e15e7789ffd048a1e7931b8457325e965800a41564d8baaf3f343fa829591d1159455a4", 0x33}], 0x1, 0x13, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x240082, 0x0)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
process_madvise(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="070eb5c8b97646", 0x7}, {&(0x7f0000000200)="b4ad998f592b2b7a3991910feae3aabbc17102906a4566fb15bc7416c83b0e8e8a99123ddcde6497e98b59b10f2f5586f86e453ad1f5d5dc044914f6ad99fc832625c16da34c691600a427d4efc7ef319d5423de8d9074cdc008306a242ed552cf7c73804c6e3437e915d9cf77fda5e90a2fc13fec", 0x75}], 0x2, 0x0, 0x0)
r4 = pidfd_getfd(r1, r2, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x402, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000300)=0x17, 0x4)
memfd_create(&(0x7f0000000340)='\x00', 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000)
io_uring_enter(r1, 0x3793, 0xe35f, 0x1, &(0x7f0000000480)={[0x3339414f]}, 0x8)
io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0)
pidfd_send_signal(r4, 0x1b, &(0x7f00000004c0)={0x22, 0xffff0001, 0xe4}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x0, {{0xa, 0x4e21, 0x8368, @dev={0xfe, 0x80, '\x00', 0x15}, 0x34}}, 0x0, 0x6, [{{0xa, 0x4e24, 0xff, @dev, 0x4f}}, {{0xa, 0x4e20, 0x5, @mcast1, 0x4}}, {{0xa, 0x4e22, 0xfb2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {{0xa, 0x4e24, 0x7, @remote, 0x74b}}, {{0xa, 0x4e20, 0x4, @mcast2, 0x8000}}, {{0xa, 0x4e24, 0x2, @remote, 0x1}}]}, 0x390)
r6 = shmget(0x1, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$IPC_STAT(r6, 0x2, &(0x7f0000000900)=""/4096)

[  111.109844] audit: type=1400 audit(1747978038.863:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:27:18 executing program 4:
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x4c5, &(0x7f0000000040)=0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc840}, 0x40000)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)={0x9, 0x7, 0x2}, 0x9)
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x158, 0x1, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, @NFQA_EXP={0xfc, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, @NFQA_CT={0x2c, 0xb, 0x0, 0x1, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}]}, 0x158}}, 0x4880)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x40)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xce489f947188003c}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe4, 0x3, 0x7, 0xb4997ba4195ec3cb, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbe9f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x437d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe031}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2200400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SYNPROXY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x88)
r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000a40)=0x1c)
pipe2$9p(&(0x7f0000000a80), 0x80000)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000ac0)=""/135)
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000)
getpeername$inet6(r4, &(0x7f0000000c80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000cc0)=0x1c)
sendto$inet6(r4, &(0x7f0000000d00)="64c3aed91736ae1684b0b6fe2d63e9124a03d47eee9de5faf5993bf3ea4e49830205ecc979", 0x25, 0x4000000, &(0x7f0000000d40)={0xa, 0x4e23, 0x6, @remote, 0x27}, 0x1c)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x1)

05:27:18 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x801)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0xc80, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000200)=0x85f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4048000)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000380), 0x250100, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffa}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xfffffffa, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x10400, 0x0)
ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000580))
r7 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f00000005c0)=0x3, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000700)={'wpan1\x00'})
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc4}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x5c}}, 0x0)

05:27:18 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x30000880)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4010)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x1, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x44801)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, 0x2, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4040800)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1a36}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x40)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x9810}, 0x20040015)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000a80), 0x2100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200c040}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

05:27:18 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc8802, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7b}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_REPLY={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x8}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x7b}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x31}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000800}, 0x10)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
write$P9_RAUTH(r1, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x4, 0x2, 0x8}}, 0x14)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0xc4)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1420}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0xd, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044884}, 0x8d4)
r2 = pidfd_getfd(r1, r1, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000480)={@dev}, &(0x7f00000004c0)=0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0xd, 0x6, 0x204, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8050)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000600)=0x9, &(0x7f0000000640)=0x2)
r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, 0x1, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x26}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4a3df2d}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x560a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004020}, 0x4000)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40418001}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8051)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xfc, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xffffffff, 0x7]}, @CTA_TUPLE_MASTER={0x2c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ID={0x8}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x5, 0x5, 0x8, 0x3, 0x2]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008840}, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000b00)={0xe3b5}, 0x4)
io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0)
getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000b40)=""/99, &(0x7f0000000bc0)=0x63)
write$hidraw(r2, &(0x7f0000000c00)="55d8cf8370e395c2817c523b7d6a565018b2e6e7362b370239a095c6d59606e744497f194428c7865b58006c5411a5688eed8c6d4961566a152e83c36a090f4302192236aba2593c61a32bcf4e13fd879d4818a9424fb6b5f4545460d750470e00f5e81076d242e00e0aff76ee4f8cc6e83f70c13b0e6c370680c7154b138c794b852c52b0272a9fb2d95b16dfee", 0x8e)
syz_open_dev$loop(&(0x7f0000000cc0), 0xfffffffffffff801, 0x101240)

05:27:19 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x1, 0x8, 0x401, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb885}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x40048811}, 0x8000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, 0x3, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5a}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x2400c095}, 0x40014)
r0 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x99, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4c041}, 0x20000000)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000580)={0x4, 0x4, 0xfffffeff, 0xe9369c75}, 0x10)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x291d}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffff7fffffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x13}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x81}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_hsr\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xd0}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80000001}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x24004000)
r1 = eventfd(0x40)
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000840)=0xf1e, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r4 = pidfd_getfd(r2, r2, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe8, 0x1, 0x2, 0x1, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}]}, 0xe8}}, 0x4000020)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x14c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_EXP={0x1c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, @NFQA_CT={0x34, 0xb, 0x0, 0x1, [@CTA_TIMEOUT={0x8}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x8, 0xfffffffc, 0x6, 0xffffff1d, 0x703, 0x10001, 0x6, 0x80000000, 0x20a0]}]}, @NFQA_EXP={0xdc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x80000001}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x90}, 0x5)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x840)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000001500)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001000)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x10001}, 0x3f, 0x0, 0x55, 0x101, 0x28, 'syz1\x00', "c28e9c4fd4841d569aecbf1969c5f6ade090a2a02c040e32d6059c487bf1cfda", "92e6f368c6f4e39fed900e1bec0a6f184dfe44dd8114fb860abe534170d0a158", [{0xf77, 0x8, {0x2, 0x5}}, {0x53, 0x9, {0x0, 0x3e}}, {0x7fff, 0x2, {0x3, 0x56bf}}, {0x401, 0x6, {0x3, 0x8}}, {0x4, 0xcdf, {0x1, 0x70}}, {0x8000, 0x7, {0x67b0a75d6bb33ec, 0x4}}, {0x4, 0x3ff, {0x1, 0x1}}, {0x1ff, 0xd1, {0x0, 0x9}}, {0x81, 0xffff, {0x0, 0x2}}, {0x3, 0x3, {0x0, 0x3}}, {0x80}, {0xfff9, 0xa8f, {0x0, 0x8}}, {0x5, 0x3, {0x2, 0x3ff}}, {0x69, 0x400, {0x2, 0x5}}, {0x9, 0x80, {0x2, 0x8}}, {0x231, 0x6, {0x2, 0x80000000}}, {0x3f, 0x5, {0x1, 0x1}}, {0xfffe, 0x2, {0x1, 0xfffffffb}}, {0x800, 0x6, {0x1, 0xffffffff}}, {0x2, 0xfffb, {0x0, 0xfffffc01}}, {0xd40, 0x1, {0x3, 0x7}}, {0x9, 0xe8b, {0x3, 0x4}}, {0x0, 0x2, {0x1, 0x1}}, {0x80, 0xf578, {0x3, 0x2d81}}, {0x2, 0x0, {0x1}}, {0x5, 0x9, {0x1, 0x7}}, {0x7, 0x9, {0x2, 0x487}}, {0x2, 0xfffb, {0x3, 0xc8}}, {0x22, 0x3, {0x1, 0x8}}, {0x7fff, 0x3f, {0x3, 0x5}}, {0x7, 0x401, {0x3, 0x1}}, {0x0, 0x6, {0x3, 0x3}}, {0x40, 0x8000, {0x2}}, {0x0, 0xd1, {0x2, 0x7}}, {0x6, 0x800, {0x3, 0x2}}, {0x7a5a, 0x2edb, {0x3, 0x4}}, {0x8, 0x4, {0x2, 0x8}}, {0x8, 0x9}, {0x9, 0xffc1, {0x0, 0x1}}, {0xb61d, 0x1, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x6a}, 0x5, 0x1, 0x5, 0x1f, 0x16, 'syz0\x00', "c76e3aa63b871c3adf534a3cb2cf1a09428785c8556e0f21f1e0e5f83cf7c947", "b776255af44738be131558ef743b9ed3b85271cf90e713125d6491a3ccf374c8", [{0x2, 0x3, {0x2, 0xd4}}, {0x81, 0xfd7c, {0x2, 0x5}}, {0x3ff, 0x0, {0x0, 0x81}}, {0x400, 0x0, {0x0, 0x1}}, {0x1, 0x1, {0x0, 0x7}}, {0x0, 0x1, {0x0, 0x7}}, {0x2, 0x4, {0x1, 0xff}}, {0x3, 0x6e4, {0x0, 0x5}}, {0x0, 0x8001, {0x1, 0x8}}, {0xfff, 0x2, {0x2, 0x3}}, {0x2, 0x1000, {0x0, 0x5}}, {0x1, 0xf77a, {0x1, 0x20}}, {0x6, 0x7, {0x1, 0x3}}, {0x1, 0x15f, {0x0, 0x5}}, {0x100, 0x3, {0x2, 0x6}}, {0xb661, 0x8, {0x2, 0x7}}, {0x9, 0x3, {0x1, 0x3}}, {0x0, 0x7fff, {0x2, 0xa5}}, {0x7, 0x122, {0x1, 0x2}}, {0x80, 0x741, {0x1, 0xfff}}, {0x3, 0x1, {0x2, 0x800}}, {0x7f, 0x7f, {0x3, 0x1}}, {0x7, 0x7, {0x0, 0x1180}}, {0x1ff, 0x9a6, {0x2, 0x3}}, {0x1f, 0x5d, {0x1, 0x2}}, {0xe1a6, 0x8001, {0x0, 0x3}}, {0x3, 0x5, {0x2, 0xfff}}, {0xfff, 0x6, {0x3}}, {0x2, 0x1c9, {0xa95cc75338075ce8}}, {0x3, 0x1, {0x0, 0x80000001}}, {0x1, 0x7, {0x1, 0x401}}, {0x800, 0x5, {0x0, 0x2}}, {0x5, 0x3, {0x2, 0x2}}, {0xe26, 0x1, {0x3, 0xe8}}, {0xffff, 0x0, {0x0, 0x8}}, {0x8, 0x7, {0x3, 0x3}}, {0x3ff, 0x7, {0x3, 0x7}}, {0x800, 0x9, {0x3, 0x7}}, {0x0, 0x1, {0x1, 0x2ce}}, {0x9, 0x2, {0x3, 0x9}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x804}, 0x8)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000001a80)=@nat={'nat\x00', 0x19, 0x4, 0x4e0, [0x20001580, 0x0, 0x0, 0x200017e4, 0x20001814], 0x0, &(0x7f0000001540), &(0x7f0000001580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x5, 0x60, 'vlan1\x00', 'vcan0\x00', 'syz_tun\x00', 'batadv_slave_1\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0xa6, 0xde, 0x116, [@realm={{'realm\x00', 0x0, 0x10}, {{0x9, 0x14f, 0x4}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x3, 0x2, 0x6000, 'bridge_slave_1\x00', 'bond_slave_1\x00', 'tunl0\x00', 'ip6gre0\x00', @multicast, [0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, [0xff, 0x0, 0xff], 0xae, 0xe6, 0x11e, [@time={{'time\x00', 0x0, 0x18}, {{0x1f, 0x7, 0x107d, 0x6f47, 0x382, 0x35, 0x2}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@multicast, 0x10}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x3, 0x20, 0x201, 'veth1_to_team\x00', 'lo\x00', 'tunl0\x00', 'dummy0\x00', @empty, [0xff, 0x0, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xae, 0x116, 0x14e, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0xee01, 0xee00, 0x0, 0x2, 0x2}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}, @snat={'snat\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}}, {0x9, 0x40, 0x6006, 'veth1_macvtap\x00', 'macvlan1\x00', 'team0\x00', 'geneve0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}]}, 0x558)

[  112.623672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.627660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.630114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.632207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.642992] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.645717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.649033] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.651312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.671557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.699459] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.700724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.707280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.713024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.714646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.728481] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.735363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.738504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.749020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.765115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.766751] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.768605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.772025] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.773881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.776177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.777274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.782612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.782662] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.787488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.798495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.804813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.806875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.808245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.810071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.818114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.822247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.824064] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.825636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.833964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.838981] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.847803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.701984] Bluetooth: hci0: command tx timeout
[  114.829509] Bluetooth: hci1: command tx timeout
[  114.892460] Bluetooth: hci5: command tx timeout
[  114.893021] Bluetooth: hci6: command tx timeout
[  114.893649] Bluetooth: hci3: command tx timeout
[  114.956589] Bluetooth: hci2: command tx timeout
[  114.957130] Bluetooth: hci7: command tx timeout
[  114.957800] Bluetooth: hci4: command tx timeout
[  116.748427] Bluetooth: hci0: command tx timeout
[  116.876597] Bluetooth: hci1: command tx timeout
[  116.940735] Bluetooth: hci3: command tx timeout
[  116.941237] Bluetooth: hci6: command tx timeout
[  116.941572] Bluetooth: hci5: command tx timeout
[  117.006882] Bluetooth: hci7: command tx timeout
[  117.006920] Bluetooth: hci4: command tx timeout
[  117.007968] Bluetooth: hci2: command tx timeout
[  118.797412] Bluetooth: hci0: command tx timeout
[  118.924402] Bluetooth: hci1: command tx timeout
[  118.988451] Bluetooth: hci3: command tx timeout
[  118.988547] Bluetooth: hci6: command tx timeout
[  118.989424] Bluetooth: hci5: command tx timeout
[  119.052443] Bluetooth: hci4: command tx timeout
[  119.052617] Bluetooth: hci7: command tx timeout
[  119.053398] Bluetooth: hci2: command tx timeout
[  120.844673] Bluetooth: hci0: command tx timeout
[  120.973614] Bluetooth: hci1: command tx timeout
[  121.036855] Bluetooth: hci6: command tx timeout
[  121.037383] Bluetooth: hci5: command tx timeout
[  121.037720] Bluetooth: hci3: command tx timeout
[  121.100391] Bluetooth: hci7: command tx timeout
[  121.102382] Bluetooth: hci2: command tx timeout
[  121.102410] Bluetooth: hci4: command tx timeout
[  172.441273] syz-executor.0 (285) used greatest stack depth: 25088 bytes left
[  172.623851] syz-executor.5 (288) used greatest stack depth: 24800 bytes left
[  175.132014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.133054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.135005] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.135429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.140826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.143859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.155205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.158668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.164549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.167936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.201764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.208778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.212194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.217236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.234833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.269635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.274519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.277633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.288087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.294190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.419811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.427813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.431375] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.436811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.456107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.460783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.469838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.474019] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.474806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.484633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.493913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.500538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.508654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.512232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.522037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.525844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.531698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.549594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.630670] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.643129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.228466] Bluetooth: hci0: command tx timeout
[  177.292654] Bluetooth: hci1: command tx timeout
[  177.356430] Bluetooth: hci2: command tx timeout
[  177.356460] Bluetooth: hci3: command tx timeout
[  177.612575] Bluetooth: hci5: command tx timeout
[  177.612588] Bluetooth: hci4: command tx timeout
[  177.676424] Bluetooth: hci7: command tx timeout
[  177.741424] Bluetooth: hci6: command tx timeout
[  179.277416] Bluetooth: hci0: command tx timeout
[  179.341411] Bluetooth: hci1: command tx timeout
[  179.404388] Bluetooth: hci3: command tx timeout
[  179.405548] Bluetooth: hci2: command tx timeout
[  179.660722] Bluetooth: hci4: command tx timeout
[  179.661679] Bluetooth: hci5: command tx timeout
[  179.726351] Bluetooth: hci7: command tx timeout
[  179.788481] Bluetooth: hci6: command tx timeout
[  181.324505] Bluetooth: hci0: command tx timeout
[  181.388383] Bluetooth: hci1: command tx timeout
[  181.452609] Bluetooth: hci2: command tx timeout
[  181.452641] Bluetooth: hci3: command tx timeout
[  181.708403] Bluetooth: hci5: command tx timeout
[  181.708440] Bluetooth: hci4: command tx timeout
[  181.773206] Bluetooth: hci7: command tx timeout
[  181.836406] Bluetooth: hci6: command tx timeout
[  183.372423] Bluetooth: hci0: command tx timeout
[  183.436419] Bluetooth: hci1: command tx timeout
[  183.500391] Bluetooth: hci2: command tx timeout
[  183.501393] Bluetooth: hci3: command tx timeout
[  183.756481] Bluetooth: hci5: command tx timeout
[  183.756958] Bluetooth: hci4: command tx timeout
[  183.820688] Bluetooth: hci7: command tx timeout
[  183.886349] Bluetooth: hci6: command tx timeout
[  237.293142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.297286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.301637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.310171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.319679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.470975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.474840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.476679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.482280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.484440] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.549452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.555568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.558926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.566108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.571513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.596901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.601405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.605527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.612051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.618739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.722408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.743001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.761850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.778054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.783218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.785180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.796740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.812741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.841817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.851906] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.855262] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.857370] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.862236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.865240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.903097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.147193] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.152367] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.156797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.164803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.169013] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.373794] Bluetooth: hci0: command tx timeout
[  239.504403] Bluetooth: hci1: command tx timeout
[  239.628526] Bluetooth: hci2: command tx timeout
[  239.693428] Bluetooth: hci3: command tx timeout
[  239.885622] Bluetooth: hci4: command tx timeout
[  239.949595] Bluetooth: hci5: command tx timeout
[  239.949638] Bluetooth: hci6: command tx timeout
[  240.269595] Bluetooth: hci7: command tx timeout
[  241.422393] Bluetooth: hci0: command tx timeout
[  241.551598] Bluetooth: hci1: command tx timeout
[  241.676412] Bluetooth: hci2: command tx timeout
[  241.743383] Bluetooth: hci3: command tx timeout
[  241.933482] Bluetooth: hci4: command tx timeout
[  241.996618] Bluetooth: hci6: command tx timeout
[  241.997562] Bluetooth: hci5: command tx timeout
[  242.316463] Bluetooth: hci7: command tx timeout
[  243.468551] Bluetooth: hci0: command tx timeout
[  243.596606] Bluetooth: hci1: command tx timeout
[  243.724555] Bluetooth: hci2: command tx timeout
[  243.788537] Bluetooth: hci3: command tx timeout
[  243.980397] Bluetooth: hci4: command tx timeout
[  244.044439] Bluetooth: hci5: command tx timeout
[  244.044895] Bluetooth: hci6: command tx timeout
[  244.364408] Bluetooth: hci7: command tx timeout
[  245.518486] Bluetooth: hci0: command tx timeout
[  245.645705] Bluetooth: hci1: command tx timeout
[  245.772612] Bluetooth: hci2: command tx timeout
[  245.836495] Bluetooth: hci3: command tx timeout
[  246.028602] Bluetooth: hci4: command tx timeout
[  246.092678] Bluetooth: hci6: command tx timeout
[  246.094360] Bluetooth: hci5: command tx timeout
[  246.412635] Bluetooth: hci7: command tx timeout
[  299.736190] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.739762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.742227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.746231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.749363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.927966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.931792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.936946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.941404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.942764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.944237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.948138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.958010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.969830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.975983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.996349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.008534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.013502] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.035275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.045523] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.133012] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.138185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.139559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.145877] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.147609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.157646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.164723] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.169601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.170775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.181563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.186665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.192935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.206165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.208204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.245513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.246546] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.251295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.253489] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.261989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.267090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.836395] Bluetooth: hci0: command tx timeout
[  301.964399] Bluetooth: hci1: command tx timeout
[  302.029424] Bluetooth: hci2: command tx timeout
[  302.092419] Bluetooth: hci3: command tx timeout
[  302.221466] Bluetooth: hci4: command tx timeout
[  302.285481] Bluetooth: hci7: command tx timeout
[  302.348492] Bluetooth: hci5: command tx timeout
[  302.413413] Bluetooth: hci6: command tx timeout
[  303.884448] Bluetooth: hci0: command tx timeout
[  304.012668] Bluetooth: hci1: command tx timeout
[  304.076534] Bluetooth: hci2: command tx timeout
[  304.140748] Bluetooth: hci3: command tx timeout
[  304.268498] Bluetooth: hci4: command tx timeout
[  304.333433] Bluetooth: hci7: command tx timeout
[  304.396567] Bluetooth: hci5: command tx timeout
[  304.462353] Bluetooth: hci6: command tx timeout
[  305.932497] Bluetooth: hci0: command tx timeout
[  306.061607] Bluetooth: hci1: command tx timeout
[  306.124396] Bluetooth: hci2: command tx timeout
[  306.188450] Bluetooth: hci3: command tx timeout
[  306.317364] Bluetooth: hci4: command tx timeout
[  306.380642] Bluetooth: hci7: command tx timeout
[  306.444654] Bluetooth: hci5: command tx timeout
[  306.508396] Bluetooth: hci6: command tx timeout
[  307.981362] Bluetooth: hci0: command tx timeout
[  308.108660] Bluetooth: hci1: command tx timeout
[  308.173864] Bluetooth: hci2: command tx timeout
[  308.236554] Bluetooth: hci3: command tx timeout
[  308.366377] Bluetooth: hci4: command tx timeout
[  308.428791] Bluetooth: hci7: command tx timeout
[  308.492792] Bluetooth: hci5: command tx timeout
[  308.556734] Bluetooth: hci6: command tx timeout
[  362.461278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.466590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.469673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.477721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.482025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.526940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.531248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.534450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.540187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.552186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.602740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.607603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.623128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.630881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.644053] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.704628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.705252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.708581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.712843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.721578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.722968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.728189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.733249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.736207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.738953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.746102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.749781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.752903] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.773976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.806851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.863740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.873827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.882930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.890867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.915044] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.918528] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.944795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.948168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.960444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.968561] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.556413] Bluetooth: hci0: command tx timeout
[  364.620579] Bluetooth: hci1: command tx timeout
[  364.749519] Bluetooth: hci3: command tx timeout
[  364.813501] Bluetooth: hci5: command tx timeout
[  364.877406] Bluetooth: hci4: command tx timeout
[  364.877991] Bluetooth: hci2: command tx timeout
[  365.069707] Bluetooth: hci6: command tx timeout
[  365.069745] Bluetooth: hci7: command tx timeout
[  366.604706] Bluetooth: hci0: command tx timeout
[  366.669411] Bluetooth: hci1: command tx timeout
[  366.796824] Bluetooth: hci3: command tx timeout
[  366.860402] Bluetooth: hci5: command tx timeout
[  366.924809] Bluetooth: hci2: command tx timeout
[  366.925770] Bluetooth: hci4: command tx timeout
[  367.116453] Bluetooth: hci7: command tx timeout
[  367.116718] Bluetooth: hci6: command tx timeout
[  368.652653] Bluetooth: hci0: command tx timeout
[  368.717010] Bluetooth: hci1: command tx timeout
[  368.844393] Bluetooth: hci3: command tx timeout
[  368.908500] Bluetooth: hci5: command tx timeout
[  368.972604] Bluetooth: hci4: command tx timeout
[  368.972934] Bluetooth: hci2: command tx timeout
[  369.164798] Bluetooth: hci6: command tx timeout
[  369.164831] Bluetooth: hci7: command tx timeout
[  370.700382] Bluetooth: hci0: command tx timeout
[  370.765829] Bluetooth: hci1: command tx timeout
[  370.893351] Bluetooth: hci3: command tx timeout
[  370.957373] Bluetooth: hci5: command tx timeout
[  371.020703] Bluetooth: hci4: command tx timeout
[  371.020744] Bluetooth: hci2: command tx timeout
[  371.212692] Bluetooth: hci7: command tx timeout
[  371.213148] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
05:32:19  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8186eeb1 RDX=ffff88801aadd280
RSI=ffffffff8186ecdc RDI=0000000000000001 RBP=ffff88806ce311a0 RSP=ffff88806ce08d38
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffff88806ce379b8 R15=ffff88806ce36f18
RIP=ffffffff8186ece6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5634000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b88420008 CR3=0000000025c04000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000766e65
XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88803554061c RBX=ffff8880317afe08 RCX=dffffc0000000000 RDX=ffff888035030000
RSI=ffffffff84a8ea14 RDI=ffff8880317afe08 RBP=dffffc0000000000 RSP=ffff8880317afc70
R8 =0000000000000001 R9 =0000000000000000 R10=00000000fffffffe R11=0000000000000001
R12=00000000fffffffe R13=0000000000000000 R14=ffff8880317afe45 R15=0000000000000002
RIP=ffffffff84a8ea19 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5734000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2b90f69438 CR3=000000002c295000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000