Warning: Permanently added '[localhost]:10858' (ECDSA) to the list of known hosts. 2025/01/25 05:09:06 fuzzer started 2025/01/25 05:09:07 dialing manager at localhost:40883 syzkaller login: [ 70.549627] cgroup: Unknown subsys name 'net' [ 70.648768] cgroup: Unknown subsys name 'cpuset' [ 70.684210] cgroup: Unknown subsys name 'rlimit' [ 76.215759] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 05:09:23 syscalls: 206 2025/01/25 05:09:23 code coverage: enabled 2025/01/25 05:09:23 comparison tracing: enabled 2025/01/25 05:09:23 extra coverage: enabled 2025/01/25 05:09:23 setuid sandbox: enabled 2025/01/25 05:09:23 namespace sandbox: enabled 2025/01/25 05:09:23 Android sandbox: enabled 2025/01/25 05:09:23 fault injection: enabled 2025/01/25 05:09:23 leak checking: enabled 2025/01/25 05:09:23 net packet injection: enabled 2025/01/25 05:09:23 net device setup: enabled 2025/01/25 05:09:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 05:09:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 05:09:23 USB emulation: enabled 2025/01/25 05:09:23 hci packet injection: enabled 2025/01/25 05:09:23 wifi device emulation: enabled 2025/01/25 05:09:23 802.15.4 emulation: enabled 2025/01/25 05:09:23 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 05:09:25 starting 8 fuzzer processes 05:09:25 executing program 0: getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x13, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x30}}, 0x800) r2 = syz_open_dev$mouse(&(0x7f0000000240), 0x8, 0x109200) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6889}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa759}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x8040010) mkdirat$cgroup(r1, &(0x7f0000000380)='syz1\x00', 0x1ff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3f2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000020) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x48004) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r2) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3e}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x98}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x154}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00), 0x80302, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf4, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5a9a}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x50, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x200000c1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffc00}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000049) socketpair(0x0, 0x80000, 0x9, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x54, r3, 0xa14, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xca57}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3c07}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8045}, 0x10) 05:09:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0xa04, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010}, 0x4) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x24}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4040}, 0x4008004) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000500)=0x2c, 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000540)={0x8001, "b55e53"}, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x601, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x4008800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000880)={&(0x7f0000000740), 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1638}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffc01}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x801) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x15c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2e}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48044}, 0x48080) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000b00)=0x4, 0x4) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x184, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x8}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb7ca}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdaea}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffbff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000dc0)=0x1, &(0x7f0000000e00)=0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4004005) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x5) 05:09:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002240)='cgroup.kill\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002340)={'syztnl0\x00', &(0x7f00000022c0)={'ip6gre0\x00', 0x0, 0x4, 0xf0, 0x0, 0x200, 0x22, @ipv4={'\x00', '\xff\xff', @local}, @private2, 0x700, 0x8, 0x0, 0x2}}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000002440)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x18d9323}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x801) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002480)={'team0\x00', 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000002940)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002900)={&(0x7f0000002500)={0x3c4, 0x2, 0x0, 0x101, 0x70bd2d, 0x25dfdbfb, {0x1}, [@typed={0xe6, 0x4c, 0x0, 0x0, @binary="286fdc591b494b4e8d89a5aafe2523fa20068771761885dc92613c6ba316129c5f107a00ec0e2e15f9454701e6231b6370dfc528dd60585a2a6ca21ec5fce5de0f1bb290069e14080fc149136d15ac74ec5c20698f122b1076420e6463a2c7e342adb9bcebd5b1705ba2cd3fcb22ddaff96ce42d5fa88b6be84aa1dca406af7bd77fd3c6ac76c46a2a5ed07f15b436bac27bcf08811f4206be2c4ca589a5ff88d35fc25f06af2b096ab01a3f1844ef932431177a90df5be08a28a803a425bd6872f2c4d569bf7fde7c56820ff90144b72c037f83ea2b02410325ac426342122b2f3b"}, @nested={0x2bf, 0x44, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0x9}, @generic="0a664e3a4784d57b3b7140d09d19e5a919c47936c852d78fc72ec67970715cde5c5f5f7235c6acecb4a27fcf5fbfad537098f8e9812c3d29ff139b85a80faf146cab06da7a6a23355a51d42187bfc5c1d42849c6732108632cd2e39db01517777eed50c58d1c5cf264b452162d4436a6effb3090bf5f0ceef4d42b0a4709e834290434834b7a682dd7764df9d3ee30154bfbc7241be9b6f97e80e152fd6be2cd047d08ed5bd620efc8adfe45295481f3de48efa87dc8c8aba5239aac02298b486d893ba907d76480b5a42bb209a55ed119d1d4e737", @typed={0x4c, 0x22, 0x0, 0x0, @binary="440fa079072a398c0ecec93a2542486eed777a2b0131ade723ef2b6b2fd2547805e4aedc3e11dc0390f71bb2a66f3f76cf69c511f26bdd0970443332f9940c951b00830d1dc78c56"}, @generic="a1615f314e9f5a851e82671af89d231697fe7e3692685c9d6be914f4774c2799bea894fa0a579fdbf37b6abd6c9cab60a7e94405a3e1bd6d56f1b6778d9bd63912978574c13ca5a13884c5f0bdb94357d206ff75317cce8d22e7391b2df16b244ca508ca5c61acd3c35743196bbed0d30e2466ad572bb9fdbf", @generic="f5bf131756b9619d717c6d0231660bbb62a8cb1b65368c02ab94537a390647f0d97725073b41da6d6809b062d069004608561054daa999a59b94add77fe64fe32d9ab8311a41c3141822994a31f8b85a7352df24cb1cceafd681da2d3b18983d2f44b01e6578a91d5f3ebb99f2672b38fabfd863d7b268933e2ed171495960f3542c343d4b39999b846e3920098f7bcaa44cb2f9a4d09cdee7dadfd329688953b3b6402fb1ea8bc9df8af0ef88f72b525cdba9fda325f7ce428e2d1a1665bb3a5a858154796c637ace", @generic="3485b72fe7fef7b49671f7f7aa88e89256db04944f7d6697c86bfee9f75dbaf88d3583bfc43ca07f91f7abe344c684e12d152c64a12a8391a8376e2d2179331d2a91ecdd7a0bd78b96440926"]}, @typed={0x8, 0x61, 0x0, 0x0, @u32=0x4}]}, 0x3c4}, 0x1, 0x0, 0x0, 0xc800}, 0x20040085) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x60, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc5}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) getpeername$packet(r0, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002b40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004fc0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005080)={'sit0\x00', &(0x7f0000005000)={'ip6gre0\x00', r2, 0x2f, 0x0, 0x1, 0x3ee, 0x0, @empty, @empty, 0x626, 0x7800, 0x2, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000050c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000055c0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005580)={&(0x7f0000005140)={0x414, 0x0, 0xba0d88e03a575650, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x2, 0x5, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r1}, {0x4}}, {{0x8, 0x1, r4}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r1}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x30}, 0x20000005) socketpair(0x26, 0x803, 0x400, &(0x7f0000005600)={0xffffffffffffffff}) getpeername(r8, &(0x7f0000005640)=@ethernet={0x0, @multicast}, &(0x7f00000056c0)=0x80) r9 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r9, &(0x7f0000005700)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5946) r10 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r10, &(0x7f0000005740)=@caif=@dgm, &(0x7f00000057c0)=0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r11, &(0x7f0000006240)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006200)={&(0x7f0000005ac0)={0x724, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x484e}}}]}}, {{0x8, 0x1, r5}, {0x178, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8000, 0x45, 0x3, 0x54f5}, {0x0, 0x71, 0x6, 0x6}, {0x800, 0x0, 0x2, 0x3}, {0x9, 0x30, 0x1, 0x33}, {0xcc, 0x0, 0x20, 0x756}, {0x800, 0x1, 0xf8, 0x11}, {0x2, 0xe3, 0x2, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1f8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffb97}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xff17, 0x20, 0x58, 0x8}, {0x7, 0xfb, 0x9a, 0x38000000}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r1}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x724}, 0x1, 0x0, 0x0, 0x24000004}, 0x24008404) [ 88.963442] audit: type=1400 audit(1737781765.806:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:09:25 executing program 3: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000080), &(0x7f00000000c0)={[0x1f]}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_ZONE={0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008041}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x0, 0x5, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0x5}, 0x1, 0x3f, 0x2, 0x3, 0xc, 'syz0\x00', "68c2d6efaa04a2d828eee089881a87921812c83713cdd72bf2d06af8caec2a47", "aad39b3729b918ba432cc50603f59f5f3c4f9d61a56563108779c96f131b6e8d", [{0x100, 0xbb, {0x0, 0xffff}}, {0x3, 0x12, {0x3, 0x5}}, {0x9, 0x9, {0x3, 0x9}}, {0x6, 0x618, {0x1, 0x3}}, {0x3, 0xbf0, {0x3, 0x5}}, {0x3, 0x9065, {0x2}}, {0x1ff, 0x1ff, {0x2, 0x10000}}, {0xc000, 0xb4, {0x3, 0x8000}}, {0x3ed7, 0x5, {0x0, 0x2bfd58ad}}, {0x8, 0x3ff, {0x0, 0x80000001}}, {0x9, 0x2, {0x2, 0x7}}, {0x0, 0x2, {0x1, 0x7}}, {0x6, 0x400, {0x3, 0x800}}, {0x7, 0x2, {0x0, 0xfffffff7}}, {0x6a50, 0x2, {0x2, 0x2}}, {0x0, 0xc8f9, {0x1, 0x3}}, {0xd9, 0x3a, {0x3, 0xabb9}}, {0xfff, 0x3, {0x0, 0x8}}, {0x2, 0x6, {0x0, 0x7}}, {0x7f, 0x4, {0x0, 0x8000}}, {0x7ff, 0x3, {0x0, 0x40}}, {0x80, 0x8000, {0xfd7b0ba402e8de19, 0xfff}}, {0x8, 0x6672, {0x1}}, {0x0, 0x8, {0x0, 0x63c}}, {0x9, 0x7, {0x1, 0x9}}, {0x7, 0x1, {0x0, 0xde}}, {0x8001, 0x200, {0x3}}, {0x2, 0x8, {0x3, 0x81}}, {0x1, 0x5, {0x6, 0x7fff}}, {0x4, 0xb08, {0xa7b0fb047de621dd, 0x101}}, {0x2, 0x3f, {0x2, 0x3ff}}, {0x7ff, 0x9, {0x1, 0x10000}}, {0x65fd, 0x6, {0x1, 0xfffffff9}}, {0x4, 0x2800, {0x3, 0x400}}, {0x639, 0x5, {0x1, 0x7}}, {0x2, 0x5, {0x3, 0x4}}, {0x8e46, 0x9, {0x3, 0x1}}, {0x6, 0x9b06, {0x1, 0x8424}}, {0x0, 0x5, {0x2, 0x7}}, {0x9, 0x74, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x1f}, 0x9, 0xff, 0x9, 0x6, 0x1, 'syz1\x00', "ca850c73efe61ee4484da4a315aa0f91cf071a0732619d711912b8093551d313", "4d96945aa158772872384d337d70f8465bfc9202a6f26d30ef8d2d829bb939bb", [{0x0, 0x2, {0x1, 0x4}}, {0x40, 0x6, {0x1, 0x6}}, {0x1000, 0x1000, {0x2, 0x9}}, {0x7, 0x8, {0x3, 0x81}}, {0x5, 0x2, {0x0, 0xff}}, {0xb58, 0x5, {0x1, 0x400}}, {0x37, 0x400, {0x3, 0xff}}, {0x5, 0x4, {0x0, 0xffffffe0}}, {0x7, 0x5, {0x1, 0x4}}, {0x9, 0x200, {0x2, 0x9}}, {0x5, 0xdb, {0x2, 0x80}}, {0x40, 0x81, {0x1, 0x401}}, {0x0, 0x401, {0x1, 0x2}}, {0x6, 0x101}, {0x6, 0x8, {0x2, 0x3}}, {0x0, 0x46, {0x3, 0x81}}, {0x3, 0xc8f8, {0x1, 0x3}}, {0x1, 0x7, {0x2, 0x1}}, {0x1000, 0x5, {0x2, 0x200}}, {0x3, 0x1, {0x3, 0x8000}}, {0x3ff, 0x2, {0x1, 0x5}}, {0x46c7, 0x1, {0x0, 0x200}}, {0x0, 0x5, {0x0, 0x7}}, {0x0, 0x100, {0x1, 0x801}}, {0xbd2, 0x101, {0x2, 0x9}}, {0x9, 0x1ff, {0x1, 0x66bf}}, {0x54a, 0x647d, {0x1, 0x800000}}, {0x8e1, 0x0, {0x1, 0x7}}, {0x3, 0x3, {0x0, 0x3ff}}, {0xfff, 0x6, {0x1, 0x100}}, {0x7, 0x5, {0x3, 0x7f}}, {0xe8, 0x7, {0x3, 0x1}}, {0x81, 0x7, {0x3, 0x4}}, {0x5, 0x1, {0x2, 0x7ff}}, {0xad, 0x401, {0x0, 0x80000000}}, {0x29a, 0x4, {0x0, 0xfff}}, {0x2, 0x6, {0x3, 0x101}}, {0xbcc, 0x2, {0x3, 0x9}}, {0x6}, {0x1, 0x3ff, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0xff}, 0xcc, 0x2, 0x1, 0x10, 0x25, 'syz1\x00', "a68812c35626b6e5b79026a18783c0fa7c22555779fe5b0dc692f47def11a403", "7ab2d757a69392276480e989b28e20bd0d3273a037a53562850bc8286765dcab", [{0xfffa, 0x5, {0x0, 0x7ff}}, {0x4624, 0x4, {0x1, 0x10000}}, {0x5, 0x17c, {0x1, 0x8}}, {0x7, 0xfbff, {0x0, 0x3f}}, {0xe2, 0xc0, {0x1, 0x3}}, {0x4, 0x6, {0x3, 0x3}}, {0xa9b6, 0x7, {0x0, 0x3ff}}, {0x4, 0x6, {0x2, 0xc0b}}, {0x4, 0xc9ad, {0x0, 0x5}}, {0x4, 0x8, {0x1}}, {0xffff, 0x8, {0x0, 0x2}}, {0x6, 0x8, {0x0, 0x4}}, {0x7, 0x9, {0x0, 0x20}}, {0x7, 0x80, {0x0, 0x400}}, {0x200, 0x5040, {0x0, 0x1f}}, {0x94, 0x1, {0x2, 0x101}}, {0xff, 0x9, {0x2, 0x80000001}}, {0x3, 0x9, {0x3, 0x1}}, {0x8, 0x804, {0x3, 0x2}}, {0x2, 0x6, {0x1, 0x100}}, {0x7, 0x6, {0x3, 0x6}}, {0xd919, 0x4, {0x3, 0x8}}, {0x7ff, 0x0, {0x2, 0xffff}}, {0x400, 0x8001, {0x3, 0xffff8001}}, {0x13, 0x6ba, {0x1}}, {0x0, 0xfe1e, {0x2, 0x5}}, {0x0, 0x7, {0x2, 0x9}}, {0x1, 0x7fff, {0x3, 0x10000}}, {0x1, 0x7ff, {0x1, 0x8}}, {0x44, 0xfeff, {0x2, 0x8}}, {0x9, 0x6, {0x1, 0xe6fa}}, {0x9, 0x200, {0x3, 0x7fff}}, {0xe13b, 0x4, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x5}}, {0x212, 0x1, {0x1, 0x7fffffff}}, {0x40, 0xa0, {0x1, 0x7}}, {0x0, 0x4, {0x3, 0xfffffffc}}, {0x8000, 0x4, {0x3, 0x5}}, {0x8, 0x0, {0x3, 0x3}}, {0x0, 0x2, {0x3}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000011c0)=0x1000, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x80, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10d}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000013c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000000}, 0x48000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xa8, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8da2}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x22}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001700)={'wg1\x00'}) socketpair(0x29, 0x3, 0xfaa1, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000002bc0)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x84, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair(0x21, 0x4, 0x101, &(0x7f0000002c00)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x58, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x58}}, 0xc444) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002d80), 0xc, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0xcc, 0x0, 0x504, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcba2}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040) 05:09:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x4, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0xfffffffb) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x7, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x400000000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) getpeername(r1, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000003c0)=0x80) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000400)=0x1) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000480)=0x6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7e83}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_io_uring_setup(0x1d06, &(0x7f0000000600)={0x0, 0xbce6, 0x22, 0x2, 0x8c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x208500, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 05:09:25 executing program 5: socketpair(0x2a, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x720, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r2, 0x4, 0x1, 0x8, 0x0, 0x40, @mcast1, @loopback, 0x7, 0x1, 0x7, 0x8}}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdb1e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd60}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0xc4e1, 0x80400) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000004c0)={0xffffffffffffffff, 0x1, 0x30000000}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000500)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb4d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8080) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000d40)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000063c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f000000a3c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f000000a380)={&(0x7f0000009940)={0xa1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r7}, {0x14c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x83a3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0xef, 0xae, 0x2}, {0x3, 0x1, 0xe3, 0x7}, {0x1, 0x3, 0xcb, 0x9}, {0x40, 0x9, 0x1, 0x1a0}, {0x6, 0x80, 0x93, 0x7ff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfffb, 0x3, 0x4, 0x100}, {0x101, 0x3, 0x7, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0x9, 0x40, 0x7fff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0xa1c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) 05:09:25 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x10400) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc}, 0x24000080) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x88000, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000010) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x180, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8d2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x8040}, 0x880) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x602fde6659fc59e4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000840), 0x7, 0x290302) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x5c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r4, 0x804, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4841}, 0x40085) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r1) getpeername$packet(r1, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) getpeername$packet(r0, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d00)=0x14) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x4c, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0xb0011217a525860d) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0x90, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8020010}, 0x20000844) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x8000) 05:09:26 executing program 7: sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xb1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x4040800) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_PROTOINFO={0x50, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x7}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x8}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xc1, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x4}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x4}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xc4, 0xe2}}]}}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000d0}, 0xc000) socketpair(0x11, 0x800, 0x400, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_netfilter(r0, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000440)={0x5a8, 0x8, 0x1, 0x3, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x2}, [@generic="2b9dfe2a0e0b07a25d761b0f0206f50882f5082b08de505d62a5083493b1be9a174398c6", @nested={0x1cc, 0x7, 0x0, 0x1, [@typed={0xa, 0x8e, 0x0, 0x0, @str='+!\xf8).\x00'}, @generic="7bc0ecba0d8905fff6e490bc5061379307bb9ae7e5e266051f7b54692e22a529751fe1db92be292e93bdcca6f921aa3fe894b6dac9929802060da746dd791fe08785bd15747c81bd5f65fa81ef92a05de9c5efda45004f41c3ce6205ea50b8fd", @generic="d911519e50b15de1a7f942e5ba651365a6e7deb4d24ca0c07c5fccdd6f274d7415add0fee2060256b337024943066744ef93c9f11ab52de0670f4a395f8b624e3b4b8b30dc0c7fb164380f102070c9f17dda771dd67100de8f2fd2a4f0280b81620ee6875ab779cc6798e1844faf1397edfa2f3983058a987c2bd735069abf53d977763aba6c551faeff3e179a9e51adc536366061c5283cdc28288be559cfd6965773e834ada2bb0fb7d1245b92f9f438095af8", @generic="a1f6dee2219cbc547860594d63f712fbf50bb4ac2443dd8663a792bd46922f6bb11865fda4972394a9556deeeaa03eb5a18bf90c4a4b9bd7076685d4f85c6d3f54932c1e38", @typed={0x4, 0x67}, @generic="080c99ca9e083d90b6c7f0119aea3b9f2c6374086ca11a313af9f58cffbc3038ade12d88f32d9bec5778d7ef1c348eb71678633a0183509e2c7d5d183e890800f75a8baba580bdae7e0e41a944c6409e66e9b967302ad9be5291d4b5f9aa43"]}, @generic="d12bf21b0bcfc8c93aaca9a4e21905178911e01491236b5265155bfd1aa7f7f2248933482c8625", @nested={0x47, 0x4b, 0x0, 0x1, [@generic="deda5366e109856dd4c0667ef0d60a19d61eb9d81a6415effc6412", @generic="0deaaa2b7294e036d49810268de57cd12224e8cde9cf315b5f7d8e45391610747e1e75736a93268f"]}, @generic="de99c58fe189396cc60c879114f08ad3ee41fefba5f464b23f8d4addf7dc88aec7a8e46aa92d08e88510483a9acbc2f831c60937afe99a50827ef27af6f60d0b72aec2781873146c8642ed4e225dae465393966d460a784d05fa7d915c78b27cc452b2a417cd161690d1bdda09ab2afb56de9e5577512764a9daa6454dc86e397ccb993ab15db12420f8b8f75afd70952ed382a652", @generic="d0a2f19937ab0a20cdb6f247", @nested={0x293, 0x3b, 0x0, 0x1, [@generic="a33a98803c96453eed7271c2a39b00be46837e4ab17f448fed8be77bba48c0366aa272b1b7a309872efb03e92c9d963ed3c08a168161782e9f8aad1086604751d2f0d12327e4836d820925b4c5a59adb39b05b479eff50ecf565b05754350d428054d446b2ae95ffbf01c09b6fe8547e33e2f4da8816016e9405aa3644407fc1c29df01f56514cc50b73f0cd571155279d78229cac8e3273172847e8e4e1ad4a27504e7224bd60075e4954d3f7550bb392e8299a654349fdfb0c78b40521e00dc5cdbd07d5dc077defd9c974d3493238e794664588eb119f49060ab956340f54ae0693303d5d6e5459a59924e2f09d311a2afb7d42294d9a88b96afc72ac", @generic="e36fa53c1ae6d3dfbebe22f34a5891ad2149d929815d85dd535c2a29d3c6da7c99145300aa29877199b7582ee219ec2985ae417981deb631d2dd1cee4426a71ee752ad81d3c68e8a9ca455077985d0851a1d5748f50805606a35a3de12ec3fcb548f359b05e15a71633970", @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @typed={0x8, 0x92, 0x0, 0x0, @fd}, @typed={0x8, 0x3c, 0x0, 0x0, @pid}, @typed={0xf, 0x5, 0x0, 0x0, @str='$\\,,^(#-.{\x00'}]}]}, 0x5a8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x801, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x200440c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xe4, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7c5}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x48}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x4041) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0x8000}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400c885}, 0x4005) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r6, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000013c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x2008c000) [ 90.461265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.468726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.471996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.474536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.481699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.486515] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.497224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.506855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.512425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.514123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.519517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.522719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.524161] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.527100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.536205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.540490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.548691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.554262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.569902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.570228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.571730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.576755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.577140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.581488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.583573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.589575] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.607470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.615703] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.617577] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.620799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.622627] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.624139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.627141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.628911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.631669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.642008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.642195] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.647557] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.648671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.655929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.662254] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.662690] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.665479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.673795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.675568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.719514] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.730565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.747705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.605934] Bluetooth: hci1: command tx timeout [ 92.605985] Bluetooth: hci0: command tx timeout [ 92.669543] Bluetooth: hci2: command tx timeout [ 92.670105] Bluetooth: hci5: command tx timeout [ 92.733506] Bluetooth: hci4: command tx timeout [ 92.733518] Bluetooth: hci6: command tx timeout [ 92.799402] Bluetooth: hci3: command tx timeout [ 92.799416] Bluetooth: hci7: command tx timeout [ 94.653410] Bluetooth: hci0: command tx timeout [ 94.654416] Bluetooth: hci1: command tx timeout [ 94.717417] Bluetooth: hci5: command tx timeout [ 94.717451] Bluetooth: hci2: command tx timeout [ 94.781441] Bluetooth: hci6: command tx timeout [ 94.781553] Bluetooth: hci4: command tx timeout [ 94.845954] Bluetooth: hci3: command tx timeout [ 94.845972] Bluetooth: hci7: command tx timeout [ 96.702450] Bluetooth: hci1: command tx timeout [ 96.702625] Bluetooth: hci0: command tx timeout [ 96.765598] Bluetooth: hci2: command tx timeout [ 96.766377] Bluetooth: hci5: command tx timeout [ 96.829457] Bluetooth: hci6: command tx timeout [ 96.830489] Bluetooth: hci4: command tx timeout [ 96.893728] Bluetooth: hci7: command tx timeout [ 96.894505] Bluetooth: hci3: command tx timeout [ 98.749525] Bluetooth: hci1: command tx timeout [ 98.749592] Bluetooth: hci0: command tx timeout [ 98.813447] Bluetooth: hci5: command tx timeout [ 98.813633] Bluetooth: hci2: command tx timeout [ 98.878444] Bluetooth: hci6: command tx timeout [ 98.879120] Bluetooth: hci4: command tx timeout [ 98.941564] Bluetooth: hci3: command tx timeout [ 98.941603] Bluetooth: hci7: command tx timeout [ 150.706739] syz-executor.1 (283) used greatest stack depth: 23296 bytes left [ 152.903380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.906518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.907745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.912217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.913948] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.915431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.037955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.039502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.041702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.044571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.048665] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.049773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.114847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.116609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.120022] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.120900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.135788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.140672] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.142363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.146794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.146818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.152928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.182528] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.184448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.322828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.333161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.337607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.345506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.366344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.382861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.426859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.442888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.461169] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.461410] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.480596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.481443] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.525760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.530810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.542020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.546936] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.552134] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.555598] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.557535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.562075] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.603862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.651752] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.702890] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.714657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.942514] Bluetooth: hci0: command tx timeout [ 155.070574] Bluetooth: hci1: command tx timeout [ 155.206087] Bluetooth: hci2: command tx timeout [ 155.262536] Bluetooth: hci3: command tx timeout [ 155.709560] Bluetooth: hci5: command tx timeout [ 155.709599] Bluetooth: hci4: command tx timeout [ 155.711640] Bluetooth: hci6: command tx timeout [ 155.837467] Bluetooth: hci7: command tx timeout [ 156.989384] Bluetooth: hci0: command tx timeout [ 157.117392] Bluetooth: hci1: command tx timeout [ 157.245490] Bluetooth: hci2: command tx timeout [ 157.309406] Bluetooth: hci3: command tx timeout [ 157.757372] Bluetooth: hci6: command tx timeout [ 157.759503] Bluetooth: hci4: command tx timeout [ 157.759564] Bluetooth: hci5: command tx timeout [ 157.885448] Bluetooth: hci7: command tx timeout [ 159.038425] Bluetooth: hci0: command tx timeout [ 159.165429] Bluetooth: hci1: command tx timeout [ 159.293600] Bluetooth: hci2: command tx timeout [ 159.358347] Bluetooth: hci3: command tx timeout [ 159.805471] Bluetooth: hci4: command tx timeout [ 159.806018] Bluetooth: hci6: command tx timeout [ 159.806577] Bluetooth: hci5: command tx timeout [ 159.933427] Bluetooth: hci7: command tx timeout [ 161.085634] Bluetooth: hci0: command tx timeout [ 161.214379] Bluetooth: hci1: command tx timeout [ 161.341594] Bluetooth: hci2: command tx timeout [ 161.405535] Bluetooth: hci3: command tx timeout [ 161.853448] Bluetooth: hci6: command tx timeout [ 161.854536] Bluetooth: hci5: command tx timeout [ 161.854592] Bluetooth: hci4: command tx timeout [ 161.983342] Bluetooth: hci7: command tx timeout [ 215.500981] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.504604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.507076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.515165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.525002] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.540821] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.641530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.645436] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.647661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.655823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.660609] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.662948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.705238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.707542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.711771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.721153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.725450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.727041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.802662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.821412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.840848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.894398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.930173] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.940624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.941873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.944003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.945792] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.952922] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.959183] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.961219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.962752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.963719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.966688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.970961] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.972853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.973884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.042969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.044678] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.058761] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.071763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.079702] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.082891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.085643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.087116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.092472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.132932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.150849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 216.153690] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.597503] Bluetooth: hci0: command tx timeout [ 217.729442] Bluetooth: hci1: command tx timeout [ 217.791423] Bluetooth: hci2: command tx timeout [ 218.045448] Bluetooth: hci6: command tx timeout [ 218.109607] Bluetooth: hci3: command tx timeout [ 218.110952] Bluetooth: hci5: command tx timeout [ 218.112558] Bluetooth: hci4: command tx timeout [ 218.237498] Bluetooth: hci7: command tx timeout [ 219.645409] Bluetooth: hci0: command tx timeout [ 219.773869] Bluetooth: hci1: command tx timeout [ 219.837397] Bluetooth: hci2: command tx timeout [ 220.093522] Bluetooth: hci6: command tx timeout [ 220.157954] Bluetooth: hci3: command tx timeout [ 220.158850] Bluetooth: hci4: command tx timeout [ 220.159766] Bluetooth: hci5: command tx timeout [ 220.285430] Bluetooth: hci7: command tx timeout [ 221.693517] Bluetooth: hci0: command tx timeout [ 221.821490] Bluetooth: hci1: command tx timeout [ 221.885704] Bluetooth: hci2: command tx timeout [ 222.141473] Bluetooth: hci6: command tx timeout [ 222.206373] Bluetooth: hci4: command tx timeout [ 222.207359] Bluetooth: hci5: command tx timeout [ 222.208202] Bluetooth: hci3: command tx timeout [ 222.334366] Bluetooth: hci7: command tx timeout [ 223.741462] Bluetooth: hci0: command tx timeout [ 223.869429] Bluetooth: hci1: command tx timeout [ 223.933516] Bluetooth: hci2: command tx timeout [ 224.189820] Bluetooth: hci6: command tx timeout [ 224.253518] Bluetooth: hci3: command tx timeout [ 224.254571] Bluetooth: hci4: command tx timeout [ 224.255574] Bluetooth: hci5: command tx timeout [ 224.381421] Bluetooth: hci7: command tx timeout [ 277.966745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.971031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.975188] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.981784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.985360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.987461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.088146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.094658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.096228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.103238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.106415] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.107835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.179396] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 278.184021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.191509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.193548] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.202740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.206871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.211886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.214863] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 278.216711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.221089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.230701] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 278.233816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.321151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.335937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.344661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.346055] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.348737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.356460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.374700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.376936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.378405] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.379709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.392497] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.393647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.452662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.458905] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.464115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.468829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.470527] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.473729] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.506498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.516751] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.529711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.536599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.581775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.585510] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.061774] Bluetooth: hci0: command tx timeout [ 280.125440] Bluetooth: hci1: command tx timeout [ 280.253803] Bluetooth: hci2: command tx timeout [ 280.317635] Bluetooth: hci3: command tx timeout [ 280.509484] Bluetooth: hci5: command tx timeout [ 280.509774] Bluetooth: hci6: command tx timeout [ 280.510893] Bluetooth: hci4: command tx timeout [ 280.637775] Bluetooth: hci7: command tx timeout [ 282.109631] Bluetooth: hci0: command tx timeout [ 282.173375] Bluetooth: hci1: command tx timeout [ 282.303303] Bluetooth: hci2: command tx timeout [ 282.365381] Bluetooth: hci3: command tx timeout [ 282.559361] Bluetooth: hci6: command tx timeout [ 282.559459] Bluetooth: hci4: command tx timeout [ 282.560055] Bluetooth: hci5: command tx timeout [ 282.685360] Bluetooth: hci7: command tx timeout [ 284.157413] Bluetooth: hci0: command tx timeout [ 284.221514] Bluetooth: hci1: command tx timeout [ 284.350588] Bluetooth: hci2: command tx timeout [ 284.414576] Bluetooth: hci3: command tx timeout [ 284.605481] Bluetooth: hci4: command tx timeout [ 284.605509] Bluetooth: hci6: command tx timeout [ 284.606491] Bluetooth: hci5: command tx timeout [ 284.734345] Bluetooth: hci7: command tx timeout [ 286.206373] Bluetooth: hci0: command tx timeout [ 286.270421] Bluetooth: hci1: command tx timeout [ 286.398467] Bluetooth: hci2: command tx timeout [ 286.462529] Bluetooth: hci3: command tx timeout [ 286.653347] Bluetooth: hci4: command tx timeout [ 286.653375] Bluetooth: hci5: command tx timeout [ 286.653839] Bluetooth: hci6: command tx timeout [ 286.781359] Bluetooth: hci7: command tx timeout [ 340.433537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.436506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.440778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.446163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.449855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.452815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.628729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.635528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.640221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.647853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.653150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.656097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.753613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.762001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.770830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.780919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.786604] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.788767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.884957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.892821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.901815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.924007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.943685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.947730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.949803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.953802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.956229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.959162] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.961221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.969629] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.973812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.978861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.987210] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.026629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.042803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 341.047585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.180675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.183837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.187138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.193961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.201618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.228545] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.240893] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 341.250473] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.255942] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.280967] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.301848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.314813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.525399] Bluetooth: hci0: command tx timeout [ 342.717467] Bluetooth: hci1: command tx timeout [ 342.845398] Bluetooth: hci2: command tx timeout [ 342.974327] Bluetooth: hci4: command tx timeout [ 343.037962] Bluetooth: hci3: command tx timeout [ 343.166409] Bluetooth: hci5: command tx timeout [ 343.358406] Bluetooth: hci6: command tx timeout [ 343.359217] Bluetooth: hci7: command tx timeout [ 344.573329] Bluetooth: hci0: command tx timeout [ 344.766381] Bluetooth: hci1: command tx timeout [ 344.894418] Bluetooth: hci2: command tx timeout [ 345.022347] Bluetooth: hci4: command tx timeout [ 345.086453] Bluetooth: hci3: command tx timeout [ 345.213366] Bluetooth: hci5: command tx timeout [ 345.405354] Bluetooth: hci7: command tx timeout [ 345.405849] Bluetooth: hci6: command tx timeout [ 346.622374] Bluetooth: hci0: command tx timeout [ 346.813483] Bluetooth: hci1: command tx timeout [ 346.941311] Bluetooth: hci2: command tx timeout [ 347.070324] Bluetooth: hci4: command tx timeout [ 347.135374] Bluetooth: hci3: command tx timeout [ 347.261377] Bluetooth: hci5: command tx timeout [ 347.453415] Bluetooth: hci7: command tx timeout [ 347.454767] Bluetooth: hci6: command tx timeout [ 348.670314] Bluetooth: hci0: command tx timeout [ 348.861406] Bluetooth: hci1: command tx timeout [ 348.989458] Bluetooth: hci2: command tx timeout [ 349.117385] Bluetooth: hci4: command tx timeout [ 349.181431] Bluetooth: hci3: command tx timeout [ 349.310342] Bluetooth: hci5: command tx timeout [ 349.502301] Bluetooth: hci7: command tx timeout [ 349.503208] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:14:35 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000d000b RCX=00000000000d000c RDX=ffff88800c67a4a0 RSI=ffffea0000319e80 RDI=0000000000089800 RBP=ffff8880345f7c20 RSP=ffff8880345f7b80 R8 =0000000000000001 R9 =00000000000d000b R10=ffffea0000319e00 R11=0000000000000001 R12=ffffea0000319e80 R13=ffff88800c67acb8 R14=0000000000000000 R15=ffff888008c4f780 RIP=ffffffff81a49dcf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe1d6ec6540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055959b8634c8 CR3=000000002a1d0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=000000000000018a RCX=ffffffff814f3e3e RDX=fffffbfff0fe15eb RSI=0000000000000008 RDI=ffffffff87f0af50 RBP=ffff888018728000 RSP=ffff888032eaf9a8 R8 =0000000000000000 R9 =fffffbfff0fe15ea R10=ffffffff87f0af57 R11=0000000000000000 R12=0000000000000002 R13=0000000000000004 R14=ffff888018728a50 R15=ffff888029b6fd20 RIP=ffffffff814f3e46 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5a6287000 CR3=0000000031846000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000