Warning: Permanently added '[localhost]:23940' (ECDSA) to the list of known hosts. 2025/06/08 00:48:55 fuzzer started 2025/06/08 00:48:55 dialing manager at localhost:40003 syzkaller login: [ 109.241339] cgroup: Unknown subsys name 'net' [ 109.381585] cgroup: Unknown subsys name 'cpuset' [ 109.426055] cgroup: Unknown subsys name 'rlimit' 2025/06/08 00:49:18 syscalls: 210 2025/06/08 00:49:18 code coverage: enabled 2025/06/08 00:49:18 comparison tracing: enabled 2025/06/08 00:49:18 extra coverage: enabled 2025/06/08 00:49:18 setuid sandbox: enabled 2025/06/08 00:49:18 namespace sandbox: enabled 2025/06/08 00:49:18 Android sandbox: enabled 2025/06/08 00:49:18 fault injection: enabled 2025/06/08 00:49:18 leak checking: enabled 2025/06/08 00:49:18 net packet injection: enabled 2025/06/08 00:49:18 net device setup: enabled 2025/06/08 00:49:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 00:49:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 00:49:18 USB emulation: enabled 2025/06/08 00:49:18 hci packet injection: enabled 2025/06/08 00:49:18 wifi device emulation: enabled 2025/06/08 00:49:18 802.15.4 emulation: enabled 2025/06/08 00:49:18 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 00:49:20 starting 8 fuzzer processes 00:49:20 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xf89, 0x80) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x7, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x5f, 0x7, 0x1, 0x0, "4248b8b014fbbcb54911e5b3e0122192a436a6868695d91bcb16597c8d4a8f69b4b31d3bdd663c895bc5b2be462ec112fbf18f0ef2d55032f6e4d6443dac38ad11ff6d1b6f7e628627c38599e08f32b504ee43ad37e587f16675d9"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008014}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x56}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x104, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4000000}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x2000084}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8005) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000004c80)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004c40)={&(0x7f0000004b40)={0xfc, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad81}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0xe}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc001}, 0x20004000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000004cc0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000004d80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000004e40)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x1c, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4051) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000004f80)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004ec0)={0x48, r6, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x15540}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440}, 0x8800) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000005100)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000050c0)={&(0x7f0000005000)={0x88, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004055}, 0x1) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000005200)={&(0x7f0000005140), 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 00:49:20 executing program 1: arch_prctl$ARCH_GET_CPUID(0x1011) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/234, 0xea, 0x3, &(0x7f0000000140)={r0, r1+10000000}) prctl$PR_CAPBSET_DROP(0x18, 0x28) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00', 0x3d, "270417f525f6f399342ef48a5dc45502142558e4006ce47d37b4dc39952493e67483043857643b7ea3d153fd0dddafbdcf68e4e0a447180c422bb69914"}, &(0x7f0000000340)=0x61) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2000, @fd_index=0x6, 0x2, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x20, 0x4100) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20044086) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0xb, 0x6, 0x79912806589baa65, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8f}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4082) arch_prctl$ARCH_GET_CPUID(0x1011) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x2100, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040011}, 0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000007c0)={0x0, @l2={0x1f, 0x100, @any, 0x8}, @xdp={0x2c, 0x0, 0x0, 0x23}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)='syzkaller0\x00', 0x9, 0x4, 0x5}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffe}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffc0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0xe8, 0x7f, 0xff, 0x0, 0xfffffffffffffc01, 0x10, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8cb, 0x0, @perf_bp={&(0x7f00000009c0), 0x2}, 0x14220, 0x6, 0xa4c, 0x1, 0x1f, 0x80, 0x1f, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0xe, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000040) 00:49:20 executing program 2: sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '%.*\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x38ca8068f5eadae9}, 0x4000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0xc010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8c400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r6, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56191cd4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000700), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf8, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0xdc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffa}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xefa2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x78}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x42800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) 00:49:20 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x141001) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, 0x2, 0x1, 0x201, 0x0, 0x0, {0xbfcb8bd6816bfbfd, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x54e943697959f16f}}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7, 0x0]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0xfffff718, 0x8, 0xfffff970, 0x8001, 0x401, 0x80000001, 0x1]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000850) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2a8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000080}, 0x240040c1) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x101}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x77399a3c1c16adb7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40841) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x3, 0x3, 0x1106, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x40}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x154c}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9db4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x50c0}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) syz_genetlink_get_family_id$nbd(&(0x7f0000000900), r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder0\x00', 0x804, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x40) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r5, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x88c0}, 0x180) r6 = syz_open_dev$vcsu(&(0x7f0000000b00), 0x8, 0x523000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x94) 00:49:20 executing program 4: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x5, 0x6, 0x706, 0x0, 0x0, {0x9, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '^^:\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x7, 0x0, 0x0, 0x0, {0xd, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5084}, 0x20048840) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0xc04, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x8004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x14) accept4$inet6(r1, 0x0, &(0x7f0000000600), 0x80000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x10000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00'}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000007c0)) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000800)={'veth0_to_batadv\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000880), r4) syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0), r4) [ 133.805294] audit: type=1400 audit(1749343760.442:7): avc: denied { execmem } for pid=281 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:49:20 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x1, 0x6, 0x90}, @vsock={0x28, 0x0, 0xffffffff, @host}, @in={0x2, 0x4e24, @empty}, 0x81, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='erspan0\x00', 0x7fffffff, 0xa, 0xffff}) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x13, 0x101000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x200}, @NFULA_CFG_MODE={0xa, 0x2, {0x80000001, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x3ff, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x64}}, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1ce6aa2e3bd3599c}, 0x20000881) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x18100800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40045) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa0, 0x0, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8a24}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r2, 0x809, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x36}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x4080000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r5, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000885}, 0x4000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0xb8, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9e4d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4014}, 0x1004) recvmmsg(r3, &(0x7f0000002300)=[{{&(0x7f00000018c0)=@ethernet, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/75, 0x4b}], 0x3, &(0x7f0000001b40)=""/176, 0xb0}, 0x4}, {{&(0x7f0000001c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c80)=""/177, 0xb1}, {&(0x7f0000001d40)=""/203, 0xcb}, {&(0x7f0000001e40)=""/86, 0x56}, {&(0x7f0000001ec0)=""/10, 0xa}], 0x4, &(0x7f0000001f40)=""/248, 0xf8}, 0x9}, {{&(0x7f0000002040)=@caif=@dgm, 0x80, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/47, 0x2f}, {&(0x7f0000002100)=""/40, 0x28}, {&(0x7f0000002140)=""/176, 0xb0}, {&(0x7f0000002200)=""/17, 0x11}], 0x4, &(0x7f0000002280)=""/104, 0x68}, 0x200}], 0x3, 0x2021, &(0x7f00000023c0)) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x48, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x24045001) 00:49:20 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4805) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000010}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x208008}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x4020004) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x218, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x114, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79e7a9cf5f4ce5ca4dbdadf354eb9e45"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb4}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5e}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4257644fde6beb78d427e8b073df2a57"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x72}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x9c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "848e75a4c96995da88d74ecd27f6bbc373e2ab44adfb02a80ad8754e456e2769"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bfccb8ba69f0461e8c978a1350a45f3e495c6e1b002b3bcf722b2fb5f0728cb2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040014}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfb3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000050}, 0x48084) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x44}}, 0x24000000) syz_genetlink_get_family_id$nbd(&(0x7f0000000d40), r0) 00:49:20 executing program 7: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe01}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0xac}, 0x1, 0x0, 0x0, 0xb787b5f3cd52c9ea}, 0x44000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd340}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xef}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001800}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2900, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2cc, 0x7, 0xa, 0x202, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x83}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_EXPRESSIONS={0x180, 0x4, 0x0, 0x1, [{0xa8, 0x1, 0x0, 0x1, [@meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}, @rt={{0x7}, @void}, @flow_offload={{0x11}, @void}, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x3}]}}]}, {0xd4, 0x1, 0x0, 0x1, [@immediate={{0xe}, @void}, @byteorder={{0xe}, @void}, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x81}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5aff}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf0}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1f}]}}, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}]}}, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0xe54d079f95a0e48b}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x8}]}}, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}]}]}, @NFTA_RULE_USERDATA={0x89, 0x7, 0x1, 0x0, "58685b0f96328666cc72ada6de7d62db8ec7d2a49e370313c9f370cef472f3ee0be12705cc20df224f832de996814d3e36dea2bbf9d478ae5b7b123fc48d95d15e1574295576b9cb9e8bf83bfcc95ab97bc1df2afe4392d7e86b8a08bbeaca679e57ea9c42a002d463f30f9ed368abe5c4987895b53183c589aa8c1bd8eee240aa67623ef3"}, @NFTA_RULE_EXPRESSIONS={0x4}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x22e7225781fc5540}, 0x80) r1 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc048000}, 0x44) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, 'rt\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x4f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040c5}, 0x4000010) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, 0xb, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x200}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6tnl0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4}, 0x81) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xe800}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x44}}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000001280)={&(0x7f0000001180), 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040810) [ 135.240618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.243165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.246869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.251408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.274678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.295576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.297156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.305601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.309515] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.312314] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.315870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.315918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.319773] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.323902] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.325749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.328198] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.333950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.335826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.338631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.339967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.340397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.347300] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.348463] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.350723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.353335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.368574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.392348] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.398630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.400432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.408807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.419423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.423528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.437513] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.441206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.446699] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.459993] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.478721] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.506746] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.539612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.559821] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.428816] Bluetooth: hci4: command tx timeout [ 137.428834] Bluetooth: hci6: command tx timeout [ 137.492251] Bluetooth: hci2: command tx timeout [ 137.492278] Bluetooth: hci0: command tx timeout [ 137.492597] Bluetooth: hci1: command tx timeout [ 137.558400] Bluetooth: hci5: command tx timeout [ 137.558421] Bluetooth: hci3: command tx timeout [ 137.621358] Bluetooth: hci7: command tx timeout [ 139.476408] Bluetooth: hci4: command tx timeout [ 139.479388] Bluetooth: hci6: command tx timeout [ 139.540248] Bluetooth: hci1: command tx timeout [ 139.541032] Bluetooth: hci2: command tx timeout [ 139.542479] Bluetooth: hci0: command tx timeout [ 139.604299] Bluetooth: hci3: command tx timeout [ 139.605266] Bluetooth: hci5: command tx timeout [ 139.669186] Bluetooth: hci7: command tx timeout [ 141.524294] Bluetooth: hci6: command tx timeout [ 141.524415] Bluetooth: hci4: command tx timeout [ 141.589360] Bluetooth: hci0: command tx timeout [ 141.589415] Bluetooth: hci2: command tx timeout [ 141.590026] Bluetooth: hci1: command tx timeout [ 141.653187] Bluetooth: hci5: command tx timeout [ 141.653649] Bluetooth: hci3: command tx timeout [ 141.716387] Bluetooth: hci7: command tx timeout [ 143.572491] Bluetooth: hci6: command tx timeout [ 143.573002] Bluetooth: hci4: command tx timeout [ 143.636233] Bluetooth: hci2: command tx timeout [ 143.636736] Bluetooth: hci1: command tx timeout [ 143.637268] Bluetooth: hci0: command tx timeout [ 143.701588] Bluetooth: hci3: command tx timeout [ 143.702058] Bluetooth: hci5: command tx timeout [ 143.764391] Bluetooth: hci7: command tx timeout [ 197.875836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.881536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.884056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.890527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.894834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.950558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.960887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.963450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.973574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.989808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.088999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.092422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.096520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.099158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.101862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.119268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.122929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.126686] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.155662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.188344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.189932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.206698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.229241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.265673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.267644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.273643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.285400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.297555] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.300944] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.312565] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.315705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 198.333834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.368860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.389358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.395224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.413368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.418781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.424694] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.451318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.472736] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.959155] Bluetooth: hci0: command tx timeout [ 200.084239] Bluetooth: hci1: command tx timeout [ 200.277204] Bluetooth: hci2: command tx timeout [ 200.277578] Bluetooth: hci3: command tx timeout [ 200.341446] Bluetooth: hci4: command tx timeout [ 200.404850] Bluetooth: hci7: command tx timeout [ 200.598153] Bluetooth: hci5: command tx timeout [ 200.598180] Bluetooth: hci6: command tx timeout [ 202.004185] Bluetooth: hci0: command tx timeout [ 202.132463] Bluetooth: hci1: command tx timeout [ 202.324503] Bluetooth: hci3: command tx timeout [ 202.324729] Bluetooth: hci2: command tx timeout [ 202.389481] Bluetooth: hci4: command tx timeout [ 202.453244] Bluetooth: hci7: command tx timeout [ 202.645456] Bluetooth: hci6: command tx timeout [ 202.645768] Bluetooth: hci5: command tx timeout [ 204.054134] Bluetooth: hci0: command tx timeout [ 204.180430] Bluetooth: hci1: command tx timeout [ 204.372560] Bluetooth: hci2: command tx timeout [ 204.373541] Bluetooth: hci3: command tx timeout [ 204.437385] Bluetooth: hci4: command tx timeout [ 204.500519] Bluetooth: hci7: command tx timeout [ 204.692275] Bluetooth: hci5: command tx timeout [ 204.694271] Bluetooth: hci6: command tx timeout [ 206.100440] Bluetooth: hci0: command tx timeout [ 206.228236] Bluetooth: hci1: command tx timeout [ 206.420358] Bluetooth: hci3: command tx timeout [ 206.421000] Bluetooth: hci2: command tx timeout [ 206.485209] Bluetooth: hci4: command tx timeout [ 206.549470] Bluetooth: hci7: command tx timeout [ 206.741470] Bluetooth: hci6: command tx timeout [ 206.741711] Bluetooth: hci5: command tx timeout [ 260.204958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.213546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.217339] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.230690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.236367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.388784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.406338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.421376] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.424631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.427853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.431325] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.441731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.447454] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.450521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.454840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.501470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.521376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.525925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.548153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.562958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.619036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.654410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.658347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.675739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.694239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.791279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.823761] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.840632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.880411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.891386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.893701] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.915445] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.930673] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.938886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.946058] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.947932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.956794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.973988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.034608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.038966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.292348] Bluetooth: hci0: command tx timeout [ 262.548196] Bluetooth: hci2: command tx timeout [ 262.549299] Bluetooth: hci1: command tx timeout [ 262.677437] Bluetooth: hci3: command tx timeout [ 262.804198] Bluetooth: hci4: command tx timeout [ 263.125264] Bluetooth: hci6: command tx timeout [ 263.189202] Bluetooth: hci7: command tx timeout [ 263.189908] Bluetooth: hci5: command tx timeout [ 264.340531] Bluetooth: hci0: command tx timeout [ 264.596472] Bluetooth: hci1: command tx timeout [ 264.596922] Bluetooth: hci2: command tx timeout [ 264.724214] Bluetooth: hci3: command tx timeout [ 264.852249] Bluetooth: hci4: command tx timeout [ 265.174240] Bluetooth: hci6: command tx timeout [ 265.238202] Bluetooth: hci7: command tx timeout [ 265.238636] Bluetooth: hci5: command tx timeout [ 266.388160] Bluetooth: hci0: command tx timeout [ 266.644444] Bluetooth: hci2: command tx timeout [ 266.644890] Bluetooth: hci1: command tx timeout [ 266.772190] Bluetooth: hci3: command tx timeout [ 266.900544] Bluetooth: hci4: command tx timeout [ 267.220632] Bluetooth: hci6: command tx timeout [ 267.284183] Bluetooth: hci5: command tx timeout [ 267.284605] Bluetooth: hci7: command tx timeout [ 268.437155] Bluetooth: hci0: command tx timeout [ 268.692233] Bluetooth: hci1: command tx timeout [ 268.692665] Bluetooth: hci2: command tx timeout [ 268.820442] Bluetooth: hci3: command tx timeout [ 268.948188] Bluetooth: hci4: command tx timeout [ 269.270137] Bluetooth: hci6: command tx timeout [ 269.333409] Bluetooth: hci5: command tx timeout [ 269.333864] Bluetooth: hci7: command tx timeout [ 322.917355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.922430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.927426] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.934544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.941966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.002504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.005857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.008023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.019411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.023317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.073081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.078798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.083584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.101642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.105446] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.182340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.185939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.189208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.213218] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.222763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.408727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.428697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.443708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.453619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.455690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.464368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.485951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.487730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.491976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.534473] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.534519] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.540969] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.547964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.560595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.562973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.579509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.609353] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.617056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.624028] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.627860] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.012183] Bluetooth: hci0: command tx timeout [ 325.076453] Bluetooth: hci1: command tx timeout [ 325.141437] Bluetooth: hci2: command tx timeout [ 325.396219] Bluetooth: hci3: command tx timeout [ 325.716655] Bluetooth: hci5: command tx timeout [ 325.717288] Bluetooth: hci6: command tx timeout [ 325.780699] Bluetooth: hci4: command tx timeout [ 326.613191] Bluetooth: hci7: command tx timeout [ 327.061195] Bluetooth: hci0: command tx timeout [ 327.125805] Bluetooth: hci1: command tx timeout [ 327.190121] Bluetooth: hci2: command tx timeout [ 327.445206] Bluetooth: hci3: command tx timeout [ 327.764506] Bluetooth: hci5: command tx timeout [ 327.764984] Bluetooth: hci6: command tx timeout [ 327.829149] Bluetooth: hci4: command tx timeout [ 328.662315] Bluetooth: hci7: command tx timeout [ 329.108852] Bluetooth: hci0: command tx timeout [ 329.174149] Bluetooth: hci1: command tx timeout [ 329.236643] Bluetooth: hci2: command tx timeout [ 329.494496] Bluetooth: hci3: command tx timeout [ 329.813212] Bluetooth: hci5: command tx timeout [ 329.813724] Bluetooth: hci6: command tx timeout [ 329.877314] Bluetooth: hci4: command tx timeout [ 330.709343] Bluetooth: hci7: command tx timeout [ 331.156715] Bluetooth: hci0: command tx timeout [ 331.224400] Bluetooth: hci1: command tx timeout [ 331.284288] Bluetooth: hci2: command tx timeout [ 331.541503] Bluetooth: hci3: command tx timeout [ 331.860346] Bluetooth: hci5: command tx timeout [ 331.860837] Bluetooth: hci6: command tx timeout [ 331.925530] Bluetooth: hci4: command tx timeout [ 332.756421] Bluetooth: hci7: command tx timeout [ 385.197367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.208583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.212546] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.228379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.235923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.581951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.588809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.593509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.609797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.614584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.719821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.724262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.728736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.740619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.756259] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.773235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.778961] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.785594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.787728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.791599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.802773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.809898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.825813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.837744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.861677] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.869798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.897609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.900576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.903076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.907564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.910937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.916016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.923439] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.927279] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 385.932688] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.980644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.993698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.997469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.005699] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.011272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.284241] Bluetooth: hci0: command tx timeout [ 387.668657] Bluetooth: hci1: command tx timeout [ 387.924397] Bluetooth: hci2: command tx timeout [ 387.925429] Bluetooth: hci5: command tx timeout [ 387.988216] Bluetooth: hci3: command tx timeout [ 388.053430] Bluetooth: hci4: command tx timeout [ 388.181211] Bluetooth: hci6: command tx timeout [ 388.181316] Bluetooth: hci7: command tx timeout [ 389.332160] Bluetooth: hci0: command tx timeout [ 389.716168] Bluetooth: hci1: command tx timeout [ 389.972209] Bluetooth: hci5: command tx timeout [ 389.972248] Bluetooth: hci2: command tx timeout [ 390.036442] Bluetooth: hci3: command tx timeout [ 390.101217] Bluetooth: hci4: command tx timeout [ 390.228361] Bluetooth: hci7: command tx timeout [ 390.228857] Bluetooth: hci6: command tx timeout [ 391.380196] Bluetooth: hci0: command tx timeout [ 391.767164] Bluetooth: hci1: command tx timeout [ 392.020269] Bluetooth: hci2: command tx timeout [ 392.021178] Bluetooth: hci5: command tx timeout [ 392.084283] Bluetooth: hci3: command tx timeout [ 392.151165] Bluetooth: hci4: command tx timeout [ 392.276527] Bluetooth: hci7: command tx timeout [ 392.277032] Bluetooth: hci6: command tx timeout [ 393.428204] Bluetooth: hci0: command tx timeout [ 393.813192] Bluetooth: hci1: command tx timeout [ 394.068201] Bluetooth: hci5: command tx timeout [ 394.068705] Bluetooth: hci2: command tx timeout [ 394.133152] Bluetooth: hci3: command tx timeout [ 394.196492] Bluetooth: hci4: command tx timeout [ 394.325191] Bluetooth: hci6: command tx timeout [ 394.325690] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:54:23 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff8880340f9b80 RCX=ffff88803115f7f4 RDX=0000000000000000 RSI=ffffffff85c1cbc0 RDI=ffff8880340f9f7c RBP=ffff8880340f9b80 RSP=ffff88803115f800 R8 =0000000000000001 R9 =ffff88803115f8e0 R10=000000000003b6cd R11=000000000000a791 R12=ffff8880340f9b80 R13=ffff88803115f8e8 R14=ffff88803115fdd0 R15=ffff88803115f8a0 RIP=ffffffff815bafba RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbc3a9fa8e0 CR3=000000000cdb3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800da30140 RCX=ffff888026a6fb48 RDX=ffff8880343b9b80 RSI=ffffffff81ade92e RDI=ffff88800da301b0 RBP=ffff888026a6fb48 RSP=ffff888026a6fae8 R8 =0000000000000000 R9 =ffffed1001a16c00 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f2b98770000 R14=0000000000000000 R15=00007f2b98770000 RIP=ffffffff81ade92e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2b982a7540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b98770008 CR3=00000000305f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000