Warning: Permanently added '[localhost]:28564' (ECDSA) to the list of known hosts. 2025/06/05 04:52:08 fuzzer started 2025/06/05 04:52:08 dialing manager at localhost:42669 syzkaller login: [ 98.176457] cgroup: Unknown subsys name 'net' [ 98.332758] cgroup: Unknown subsys name 'cpuset' [ 98.372386] cgroup: Unknown subsys name 'rlimit' 2025/06/05 04:52:25 syscalls: 200 2025/06/05 04:52:25 code coverage: enabled 2025/06/05 04:52:25 comparison tracing: enabled 2025/06/05 04:52:25 extra coverage: enabled 2025/06/05 04:52:25 setuid sandbox: enabled 2025/06/05 04:52:25 namespace sandbox: enabled 2025/06/05 04:52:25 Android sandbox: enabled 2025/06/05 04:52:25 fault injection: enabled 2025/06/05 04:52:25 leak checking: enabled 2025/06/05 04:52:25 net packet injection: enabled 2025/06/05 04:52:25 net device setup: enabled 2025/06/05 04:52:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/05 04:52:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/05 04:52:25 USB emulation: enabled 2025/06/05 04:52:25 hci packet injection: enabled 2025/06/05 04:52:25 wifi device emulation: enabled 2025/06/05 04:52:25 802.15.4 emulation: enabled 2025/06/05 04:52:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/05 04:52:26 starting 8 fuzzer processes 04:52:26 executing program 0: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{0x2, 0xdc}, {0x3, 0x62}, {0x4}, {0x6, 0x8}, {0x8e7e, 0xffff}, {0x4, 0x7ff}, {0x5, 0x1}, {0x8001, 0xed39}, {0x9, 0x7f}]}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x3ff}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003100)={'ip6_vti0\x00', &(0x7f0000003080)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x0, 0x1, 0x40, @private0, @loopback, 0x80, 0x40, 0x9a47, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000031c0)={'gre0\x00', &(0x7f0000003140)={'syztnl1\x00', r2, 0x700, 0x7800, 0x100, 0x80000000, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x64, 0x0, 0x20, 0x29, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x17, 0x98, [@multicast2, @empty, @multicast1, @multicast1, @remote]}, @noop, @timestamp_addr={0x44, 0xc, 0x99, 0x1, 0x3, [{@rand_addr=0x64010102, 0x1}]}, @noop, @rr={0x7, 0x17, 0xcd, [@broadcast, @multicast2, @multicast2, @multicast2, @multicast1]}]}}}}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003240), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000003340)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x58, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4897}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003600)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000036c0)={'ip6_vti0\x00', &(0x7f0000003640)={'ip6tnl0\x00', r3, 0x2f, 0x8, 0x8, 0x26, 0x41, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x7800, 0x7800, 0x5, 0x7fffffff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003780)={'erspan0\x00', &(0x7f0000003700)={'syztnl2\x00', r3, 0x8000, 0x7, 0xbd, 0x5200000, {{0x16, 0x4, 0x3, 0x29, 0x58, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010102, {[@lsrr={0x83, 0x7, 0xb2, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x1f, 0x92, [@dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @private=0xa010100, @multicast2, @private=0xa010102, @loopback]}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0xe, "4a7a260a470de0884c6399b4"}, {0x1, 0x3, 'f'}, {0x0, 0x5, "ff3201"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000003840)={'syztnl1\x00', &(0x7f00000037c0)={'syztnl1\x00', r3, 0x4, 0x84, 0x8, 0x1, 0x53, @loopback, @private2, 0x7800, 0x700, 0x6, 0xb1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000039c0)={'ip_vti0\x00', &(0x7f0000003940)={'syztnl0\x00', r2, 0x700, 0x8000, 0x41435085, 0xfffffff9, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x3f, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x2c, 0x1b, 0x3, 0x0, [{@multicast2, 0x3}, {@local, 0x1}, {@local, 0x1}, {@loopback, 0x7}, {@remote, 0x67b}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004280)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004240)={&(0x7f0000003a00)={0x82c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x270, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe7fe}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0x5, 0x0, 0x7fffffff}, {0x69a, 0x4, 0x1, 0x1ff}, {0x6e9e, 0x1f, 0x7}, {0x1, 0x1, 0x3}, {0x6, 0x0, 0x5, 0x4}, {0x7, 0x8, 0xd4, 0x4}, {0x401, 0x1, 0x5, 0x7fffffff}, {0xbe, 0x3, 0x1, 0xf5}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x80, 0x2, 0x240000}, {0x8, 0x6, 0x4, 0x81}, {0x9, 0x1, 0x0, 0x9f}, {0x3, 0x40, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1c8, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x1, 0xff, 0xfff}, {0x0, 0x4, 0x5, 0x7}, {0x8000, 0x5, 0x8}, {0x3, 0x40, 0x9, 0xebf}]}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x200, 0xff, 0xfe, 0x9}, {0x533, 0x3f, 0x8, 0xfffffff8}]}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x190, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x65d}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x7f, 0xff, 0x8000}, {0xffff, 0x83, 0x80, 0xcf6}, {0x0, 0xff, 0x7, 0x8}, {0x3, 0x40, 0x45, 0x7f}, {0x1ff, 0x81, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}]}}]}, 0x82c}, 0x1, 0x0, 0x0, 0x4004040}, 0x44) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000004340)={'ip6_vti0\x00', &(0x7f00000042c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x33, 0x8, 0x1, @private0, @local, 0x700, 0x80, 0x20, 0x2}}) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000004380), 0xa0880, 0x0) ioctl$TUNSETVNETBE(r11, 0x400454de, &(0x7f00000043c0)) r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000004400), 0x101002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000004880)={'syztnl1\x00', &(0x7f00000047c0)={'ip_vti0\x00', 0x0, 0x700, 0x579a5ebab8bd4f19, 0x7, 0x4, {{0x27, 0x4, 0x2, 0x2, 0x9c, 0x66, 0x0, 0xde, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp={0x44, 0x8, 0xda, 0x0, 0xb, [0x1]}, @timestamp={0x44, 0x14, 0x7d, 0x0, 0x8, [0xffffffe0, 0x3, 0x7fffffff, 0xffffffff]}, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x4, [{@private=0xa010101, 0xccc}, {@remote, 0x101}, {@multicast2, 0x7c4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x14, 0x4b, 0x0, 0x9, [0x2, 0x8001, 0x7, 0x730e]}, @ssrr={0x89, 0xf, 0xc2, [@local, @local, @loopback]}, @timestamp_addr={0x44, 0xc, 0xe2, 0x1, 0x2, [{@multicast1, 0x5}]}, @lsrr={0x83, 0x17, 0xe, [@broadcast, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}}) 04:52:26 executing program 1: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x1e, 0x2, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000080), 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/127, 0x7f}, {&(0x7f0000000280)=""/79, 0x4f}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/94, 0x5e}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/125, 0x7d}], 0x9}, 0x1}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/63, 0x3f}, {&(0x7f0000001780)=""/187, 0xbb}, {&(0x7f0000001840)=""/80, 0x50}, {&(0x7f00000018c0)=""/59, 0x3b}, {&(0x7f0000001900)=""/70, 0x46}], 0x6, &(0x7f0000001a00)=""/5, 0x5}, 0x5}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001a40)=""/55, 0x37}], 0x1}, 0xfff}, {{&(0x7f0000001ac0)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @netrom, @bcast, @default, @null, @remote, @default]}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/32, 0x20}, {&(0x7f0000001bc0)=""/155, 0x9b}, {&(0x7f0000001c80)=""/49, 0x31}, {&(0x7f0000001cc0)=""/92, 0x5c}, {&(0x7f0000001d40)=""/239, 0xef}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/61, 0x3d}], 0x8, &(0x7f0000002f00)=""/141, 0x8d}, 0x1}, {{&(0x7f0000002fc0)=@hci, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003040)=""/43, 0x2b}, {&(0x7f0000003080)=""/155, 0x9b}, {&(0x7f0000003140)=""/137, 0x89}, {&(0x7f0000003200)=""/178, 0xb2}, {&(0x7f00000032c0)=""/69, 0x45}, {&(0x7f0000003340)=""/100, 0x64}], 0x6, &(0x7f0000003440)=""/32, 0x20}, 0x9}, {{&(0x7f0000003480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/203, 0xcb}], 0x1, &(0x7f0000003640)=""/97, 0x61}, 0x7}, {{&(0x7f00000036c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003740)=""/199, 0xc7}], 0x1, &(0x7f0000003880)=""/35, 0x23}, 0x6}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f00000038c0)=""/166, 0xa6}, {&(0x7f0000003980)=""/103, 0x67}, {&(0x7f0000003a00)=""/212, 0xd4}, {&(0x7f0000003b00)=""/86, 0x56}, {&(0x7f0000003b80)=""/172, 0xac}], 0x5, &(0x7f0000003cc0)=""/212, 0xd4}, 0x3}], 0x8, 0x40, 0x0) wait4(0xffffffffffffffff, &(0x7f0000003fc0), 0x4, 0x0) socketpair(0x9, 0xa, 0x5, &(0x7f0000004000)) waitid(0x1, 0x0, &(0x7f0000004040), 0x80000000, &(0x7f00000040c0)) waitid(0x1, 0x0, 0x0, 0x8, &(0x7f0000004180)) waitid(0x2, 0xffffffffffffffff, &(0x7f0000004240), 0x80000000, &(0x7f00000042c0)) recvmsg(r0, &(0x7f00000046c0)={&(0x7f0000004380)=@ax25={{0x3, @null}, [@default, @netrom, @default, @bcast, @null, @default, @bcast, @default]}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004400)=""/117, 0x75}, {&(0x7f0000004480)=""/16, 0x10}, {&(0x7f00000044c0)=""/232, 0xe8}], 0x3, &(0x7f0000004600)=""/167, 0xa7}, 0x2022) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41091}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004840), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000004900)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000048c0)={&(0x7f0000004880)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x11) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000004940), 0x400000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000004980)=0x800) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000049c0), 0x20a080, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000004b00)={&(0x7f0000004a00), 0xc, &(0x7f0000004ac0)={&(0x7f0000004a40)={0x80, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x5a94a733c818fb60, 0x53e}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xd9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x99}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40008015}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000004b40), 0x40001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000004b80)={'vlan0\x00'}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) write$tun(r4, &(0x7f0000004bc0)={@void, @val={0x3, 0x3, 0x0, 0x9, 0x6, 0x6}, @llc={@snap={0x0, 0xaa, '\'', "9796af", 0x88f8, "a5217c07f6e0607dc29d537ff8ed983eba12238ceec7f664fc92609f9ed810d4cbcf"}}}, 0x34) 04:52:26 executing program 2: ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x1, 0x5, [@empty, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="1d93cf334a03"]}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee01) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@remote, @local]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r1, &(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001480)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001500)={'gretap0\x00', 0x0, 0x40, 0x10, 0x6, 0x2, {{0x32, 0x4, 0x3, 0x3, 0xc8, 0x66, 0x0, 0x80, 0x0, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x5, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x2}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x8000}]}, @rr={0x7, 0x27, 0x65, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010100, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x1b, 0x45, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0x7c, 0x3, 0x0, [{@rand_addr=0x64010101, 0x8000}, {@multicast2, 0x2}]}, @generic={0x86, 0x2}, @noop, @timestamp_prespec={0x44, 0x14, 0x2e, 0x3, 0xa, [{@private=0xa010101, 0x2}, {@rand_addr=0x64010101, 0x1ff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000016c0)={'ip6_vti0\x00', &(0x7f0000001640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x49, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x10, 0x2, 0x9}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001c80)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001700)={0x52c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x271f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xaa9f}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x20, 0x7, 0x8001}, {0x1, 0x8, 0x81, 0x40}, {0x3, 0x1, 0x80, 0x8}, {0x1000, 0x7f, 0xf7, 0xff}, {0xffff, 0x2, 0x5}, {0xa43, 0x2f, 0x9, 0x9}, {0x5, 0x6, 0x6, 0x4}, {0xfffb, 0x4, 0xdc, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbd3f}}, {0x8}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000001cc0)=0x1) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001d40), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001e00)={&(0x7f0000001d00), 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004991}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001ec0)={'ip6gre0\x00', &(0x7f0000001e40)={'ip6tnl0\x00', 0x0, 0x29, 0x6f, 0x3, 0x7fff, 0x29, @empty, @private1, 0x8, 0x40, 0xffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'ip6_vti0\x00', r4, 0x2f, 0xff, 0x7, 0x80000001, 0xc, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x1, 0x2, 0x200}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0), 0x600a01, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) 04:52:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000f40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair(0x5, 0x4, 0x1, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x80000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001580)='ns/mnt\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000001600)={0x4, 0x0, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r3, r4]}, 0xa) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001680)={0xec, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x87f1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfaaa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xec}, 0x1, 0x0, 0x0, 0x2000000}, 0x24000041) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x54, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x54}}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x24000840) syz_genetlink_get_family_id$mptcp(&(0x7f0000001ac0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1e0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x154, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "3f2311d6536830ba6f3a19f636a5cc27aa9130c8c69274162ddbaa89109f5ca8b41b0fdf7011e0258902b2e38d11195c075c3b8edb8a138460a16a073c5e4e90d50716695a702f4f72bd379e6e5fd99e958556379d0339f2a6adeb9a6f6a1c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xad, 0x5, "75e44f2f6f50c3668794751650946ec85fceeacc59cf5dec183ecad8442b6582c5fb8c6b58b5025deef27630dea03172fbeba16dbf4b31c413d90894496da47a165650d8b2753727d0f49c590755b1620086079c30b9ad2826c87367827a019dc0ea196229991a0927b459ded8f0056e288acf8ea0c1ebb5c67ab753e21b1d810079e1fedb9b521219eda38e9346bba68db533454350e45ebdd6a1bdc84a3eb0f7fdf2a75b0068406c"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1000}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000885}, 0x40810) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001f00), 0x410040, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x4090) r8 = syz_open_dev$usbmon(&(0x7f0000002040), 0x8, 0x228883) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000020c0)={0x8, 0x0, &(0x7f0000002080)}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 116.223773] audit: type=1400 audit(1749099146.971:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) clock_gettime(0x5, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x214, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x110, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x401}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x8, {{0xb, 0x4, 0x1, 0x7, 0x2c, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xb6, 0x0, 0x0, [0x3, 0x2, 0x5, 0x2780000, 0xfffffffb]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4010001}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x21c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7e9f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x24040880}, 0x4) socketpair(0x8, 0x6, 0x9, &(0x7f0000003dc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000003ec0)={'syztnl1\x00', &(0x7f0000003e40)={'syztnl0\x00', r1, 0x2b, 0x1, 0x8, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x80, 0x8000, 0xed5c, 0x2}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000004040)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004000)={&(0x7f0000003f00)={0xc8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x40014) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004140)={&(0x7f00000040c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041000}, 0x841) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000004240)={'sit0\x00', &(0x7f00000041c0)={'syztnl2\x00', r4, 0x2f, 0x1, 0x1, 0xab, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40, 0x8000, 0x8, 0xffffffff}}) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000004380)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x10088000}, 0xc, &(0x7f0000004340)={&(0x7f00000042c0)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x442662b4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x51) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000004500)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004400)={0x88, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9e}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x88}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x30, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x30}, 0x1, 0x0, 0x0, 0xc050}, 0x20000804) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000004680), 0xc0000, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000004640), r6) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000004780)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004740)={&(0x7f0000004700)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 04:52:27 executing program 5: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x7051fae52fe227ff, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x801) socketpair(0x2c, 0x1, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80880}, 0x4000091) socketpair(0xb, 0x80000, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x1b4, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "ce1eea9f3b392c1392394e6fdaddff1574e1372bcf1df0186468195c9574100047bb31658cd304d11489af3aaf4c0b2d57c8410984b58b2ffdc189887a8033cf430249cd6895b6600f1559c34a8aa03364b5f933e4c6dcbd8f98ee67f900574e2cc7737d8694a81bb2cc36ac7614383fd1eb700bcae464819015c15e502180cffc8bd9baf522435931dc36bfb89b598d7b1b3c0b896c01ea64f936dfe4404e56cc8402fdcf327a6cec6c1c2705ca5e04d4f12060c594784953c1b3e859"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "6bd05dd082e3eebecc9fd4cfcc39f7db2329bae36e4c1de219c6f1185b1e86279f6cb39f01208656cfe7cf7af73f31d995026818c6c7cd79d8003ff8908a268165236a65ac336b142992948905cceea64310da2d91e82f7746b212158276d808906db66b734f2dac5f5c56cb927b9d3d5c62ae66df456e005782b1fd9ee117eaa63cf00fcd005ed0fbdab77ec54a17a8afda23bf883c9a64b9fec5054be6be2a96231999f12cfe6f6ddea947a3d143c8dcc2b449aa07192ae01ec69e606764"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x41}, 0x20000410) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000880)='ns/cgroup\x00') r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x194, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x7c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048011) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x60}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000d0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044001}, 0x24000850) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, 0x3, 0x3, 0x401, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0xc0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000001000), 0x4180, 0x0) write$cgroup_devices(r9, &(0x7f0000001040)={'a', ' *:* ', 'rw\x00'}, 0x9) 04:52:27 executing program 6: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000007480)={&(0x7f0000007380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000007440)={&(0x7f00000073c0)={0x68, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x9}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ea0}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40048000}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000007580)={&(0x7f00000074c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007540)={&(0x7f0000007500)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400485c}, 0x40010) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000007680)={&(0x7f00000075c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000007640)={&(0x7f0000007600)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x90000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x8000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f000000ccc0), 0x400080, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f000000cf00)={&(0x7f000000cd00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f000000cec0)={&(0x7f000000cd40)={0x168, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x5}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5d3f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f000000d080)={&(0x7f000000cf40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000d040)={&(0x7f000000cf80)={0x90, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54ffe97f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x4010) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f000000d180)={'ip_vti0\x00', &(0x7f000000d100)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x101, 0x8, {{0x11, 0x4, 0x0, 0x12, 0x44, 0x66, 0x0, 0xff, 0x2f, 0x0, @private=0xa010102, @empty, {[@generic={0x94, 0x7, "91dab0ccab"}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xbb, 0x3, 0x8, [{@remote}, {@multicast2, 0x61f}, {@loopback, 0x800}]}, @rr={0x7, 0x7, 0x4a, [@multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f000000d240)={'ip6tnl0\x00', &(0x7f000000d1c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x2, 0x1000, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f000000d300)={'sit0\x00', &(0x7f000000d280)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x4, 0x4492, 0x20, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x80, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f000000d580)={'gretap0\x00', &(0x7f000000d4c0)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x7fff, 0x837, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x64, 0x0, 0x6c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x8a, 0xc, "f8103dfe69f1cc81eae7"}, @lsrr={0x83, 0x7, 0xa, [@loopback]}, @end, @noop, @lsrr={0x83, 0x7, 0x4e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xaf, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb96}, {@private=0xa010100, 0xd475}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x8}, {@multicast1, 0xa247}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @cipso={0x86, 0x36, 0x2, [{0x7, 0xa, "d09054647c2d52d9"}, {0x5, 0xa, "141cd09451d6691e"}, {0x7, 0x10, "1a16844f05dce6a1c3be0b0c8a9d"}, {0x1, 0x8, "102ac36a6429"}, {0x0, 0x4, "14ba"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f000000d680)={'ip_vti0\x00', &(0x7f000000d5c0)={'gre0\x00', 0x0, 0x40, 0x1, 0xfffff057, 0xfffffff8, {{0x21, 0x4, 0x0, 0x34, 0x84, 0x65, 0x0, 0x58, 0x29, 0x0, @loopback, @loopback, {[@generic={0x88, 0x9, "98dff91665f605"}, @rr={0x7, 0x7, 0x69, [@multicast2]}, @rr={0x7, 0xb, 0x62, [@local, @remote]}, @timestamp_addr={0x44, 0x54, 0xa5, 0x1, 0x2, [{@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x10000}, {@private=0xa010100, 0x8000}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x59}, {@loopback, 0x8}, {@rand_addr=0x64010101, 0x8001}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000dec0)={&(0x7f000000d0c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000de80)={&(0x7f000000d6c0)={0x7b0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3, 0xbb, 0x7f, 0x3b61}, {0x5, 0x9, 0x9, 0x18}, {0x80, 0x6, 0x7, 0x4}, {0x9, 0x81, 0x8, 0xf3a}, {0x7, 0x3, 0x1f, 0x2}, {0x7257, 0xdf, 0x9c, 0x9}, {0x6cf, 0x7, 0xda, 0x6}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r3}, {0x258, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x78}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x1000, 0x2, 0x80, 0x5}, {0x8, 0x2, 0x0, 0x3}, {0x9, 0x2, 0x5, 0x101}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf896}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x7b0}, 0x1, 0x0, 0x0, 0x8008001}, 0x20000094) r7 = syz_genetlink_get_family_id$fou(&(0x7f000000df40), r1) sendmsg$FOU_CMD_ADD(r0, &(0x7f000000e040)={&(0x7f000000df00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000000e000)={&(0x7f000000df80)={0x64, r7, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x8081) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f000000e180)={&(0x7f000000e080)={0x10, 0x0, 0x0, 0x2800800}, 0xc, &(0x7f000000e140)={&(0x7f000000e0c0)={0x4c, 0x2, 0x6, 0x200, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xe) syz_genetlink_get_family_id$mptcp(&(0x7f000000e1c0), r8) 04:52:27 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000001}, 0x20000000) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3f, 0x1d}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x58}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x66}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x68}}, 0x44010) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x141203, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x814) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000840), 0x569000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x86}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x982be5688795c3f3, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x54, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x75b}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x996}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x20044080) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000e00)={0x1, 0x7, [@local, @random="baa99c607189", @multicast, @multicast, @random="3eba6f26bdfd", @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r7, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) [ 117.573873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.580475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.582871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.587416] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.590060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.593377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.595937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.598107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.608239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.611164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.687788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.694758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.701171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.713056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.725210] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.779303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.786116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.789024] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.820572] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.827138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.830090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.834312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.842904] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.873481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.886985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.986476] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.004502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.010308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.010410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.022203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.067582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.069873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.085400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.086378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.098927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.154308] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.171194] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.204172] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.234644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.241349] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.717772] Bluetooth: hci0: command tx timeout [ 119.719012] Bluetooth: hci1: command tx timeout [ 119.782982] Bluetooth: hci2: command tx timeout [ 119.908751] Bluetooth: hci3: command tx timeout [ 119.973097] Bluetooth: hci4: command tx timeout [ 120.165195] Bluetooth: hci6: command tx timeout [ 120.166521] Bluetooth: hci5: command tx timeout [ 120.293558] Bluetooth: hci7: command tx timeout [ 121.765284] Bluetooth: hci0: command tx timeout [ 121.765819] Bluetooth: hci1: command tx timeout [ 121.828698] Bluetooth: hci2: command tx timeout [ 121.957017] Bluetooth: hci3: command tx timeout [ 122.021988] Bluetooth: hci4: command tx timeout [ 122.213896] Bluetooth: hci5: command tx timeout [ 122.215046] Bluetooth: hci6: command tx timeout [ 122.340835] Bluetooth: hci7: command tx timeout [ 123.812890] Bluetooth: hci1: command tx timeout [ 123.813758] Bluetooth: hci0: command tx timeout [ 123.876712] Bluetooth: hci2: command tx timeout [ 124.005106] Bluetooth: hci3: command tx timeout [ 124.068765] Bluetooth: hci4: command tx timeout [ 124.260778] Bluetooth: hci6: command tx timeout [ 124.261402] Bluetooth: hci5: command tx timeout [ 124.390641] Bluetooth: hci7: command tx timeout [ 125.860778] Bluetooth: hci1: command tx timeout [ 125.861257] Bluetooth: hci0: command tx timeout [ 125.926075] Bluetooth: hci2: command tx timeout [ 126.052683] Bluetooth: hci3: command tx timeout [ 126.116946] Bluetooth: hci4: command tx timeout [ 126.308837] Bluetooth: hci5: command tx timeout [ 126.309320] Bluetooth: hci6: command tx timeout [ 126.436986] Bluetooth: hci7: command tx timeout [ 180.216195] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.219962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.221479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.224465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.227773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.277418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.282044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.286953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.294171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.298269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.361913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.377200] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.380962] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.392745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.410875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.437291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.439445] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.440511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.449446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.452398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.461073] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.470349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.473302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.473400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.486982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.488145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.488349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.499743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.501398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.504357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.511908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.531912] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.554775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.559002] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.603290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.607525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.611706] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.621927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.624578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.626202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.309761] Bluetooth: hci0: command tx timeout [ 182.374676] Bluetooth: hci1: command tx timeout [ 182.500799] Bluetooth: hci2: command tx timeout [ 182.564873] Bluetooth: hci5: command tx timeout [ 182.628726] Bluetooth: hci4: command tx timeout [ 182.629843] Bluetooth: hci3: command tx timeout [ 182.692806] Bluetooth: hci6: command tx timeout [ 182.756833] Bluetooth: hci7: command tx timeout [ 184.357654] Bluetooth: hci0: command tx timeout [ 184.421009] Bluetooth: hci1: command tx timeout [ 184.550210] Bluetooth: hci2: command tx timeout [ 184.612911] Bluetooth: hci5: command tx timeout [ 184.676746] Bluetooth: hci3: command tx timeout [ 184.677285] Bluetooth: hci4: command tx timeout [ 184.741276] Bluetooth: hci6: command tx timeout [ 184.804805] Bluetooth: hci7: command tx timeout [ 186.405037] Bluetooth: hci0: command tx timeout [ 186.468665] Bluetooth: hci1: command tx timeout [ 186.598694] Bluetooth: hci2: command tx timeout [ 186.660928] Bluetooth: hci5: command tx timeout [ 186.724710] Bluetooth: hci4: command tx timeout [ 186.725185] Bluetooth: hci3: command tx timeout [ 186.788922] Bluetooth: hci6: command tx timeout [ 186.852704] Bluetooth: hci7: command tx timeout [ 188.452670] Bluetooth: hci0: command tx timeout [ 188.516702] Bluetooth: hci1: command tx timeout [ 188.644898] Bluetooth: hci2: command tx timeout [ 188.709633] Bluetooth: hci5: command tx timeout [ 188.773755] Bluetooth: hci3: command tx timeout [ 188.774236] Bluetooth: hci4: command tx timeout [ 188.837159] Bluetooth: hci6: command tx timeout [ 188.902002] Bluetooth: hci7: command tx timeout [ 243.000075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 243.004124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 243.005311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.008901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.010737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.017674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.023260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.029265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.046371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.065184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.129858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.137195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.141545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.157256] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.165896] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.167299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.176245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.182250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.183509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.191461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.292305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.308382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.314489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.322851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.327841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.332327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.342065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.343631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.345005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.349444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.351664] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.354879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.361616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.376833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.402480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.478515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.496375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.531790] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.554110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.562027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.028696] Bluetooth: hci0: command tx timeout [ 245.093704] Bluetooth: hci1: command tx timeout [ 245.221669] Bluetooth: hci3: command tx timeout [ 245.284689] Bluetooth: hci2: command tx timeout [ 245.412714] Bluetooth: hci5: command tx timeout [ 245.412761] Bluetooth: hci4: command tx timeout [ 245.542024] Bluetooth: hci6: command tx timeout [ 245.668760] Bluetooth: hci7: command tx timeout [ 247.077165] Bluetooth: hci0: command tx timeout [ 247.142309] Bluetooth: hci1: command tx timeout [ 247.268741] Bluetooth: hci3: command tx timeout [ 247.333030] Bluetooth: hci2: command tx timeout [ 247.461692] Bluetooth: hci5: command tx timeout [ 247.462339] Bluetooth: hci4: command tx timeout [ 247.588706] Bluetooth: hci6: command tx timeout [ 247.716681] Bluetooth: hci7: command tx timeout [ 249.125752] Bluetooth: hci0: command tx timeout [ 249.190636] Bluetooth: hci1: command tx timeout [ 249.317017] Bluetooth: hci3: command tx timeout [ 249.380909] Bluetooth: hci2: command tx timeout [ 249.509053] Bluetooth: hci4: command tx timeout [ 249.509879] Bluetooth: hci5: command tx timeout [ 249.638792] Bluetooth: hci6: command tx timeout [ 249.765829] Bluetooth: hci7: command tx timeout [ 251.173797] Bluetooth: hci0: command tx timeout [ 251.238678] Bluetooth: hci1: command tx timeout [ 251.364751] Bluetooth: hci3: command tx timeout [ 251.428705] Bluetooth: hci2: command tx timeout [ 251.559647] Bluetooth: hci5: command tx timeout [ 251.560152] Bluetooth: hci4: command tx timeout [ 251.684984] Bluetooth: hci6: command tx timeout [ 251.812772] Bluetooth: hci7: command tx timeout [ 305.465929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.469061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.478131] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.484205] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.501213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.845141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.853503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.857413] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.865071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.869962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.990573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.993993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.996434] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.001819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.005937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.073015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.080291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.115262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.143066] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.151799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.154448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.161122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.165415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.172198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.180065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.185067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.217223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.231405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.280089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.324351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.360526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 306.365326] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.367469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.374144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.396888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.407549] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.422882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.531407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.617045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.658489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.557718] Bluetooth: hci0: command tx timeout [ 307.941897] Bluetooth: hci1: command tx timeout [ 308.068733] Bluetooth: hci2: command tx timeout [ 308.260940] Bluetooth: hci4: command tx timeout [ 308.389913] Bluetooth: hci5: command tx timeout [ 308.389948] Bluetooth: hci3: command tx timeout [ 308.517285] Bluetooth: hci6: command tx timeout [ 308.772720] Bluetooth: hci7: command tx timeout [ 309.604776] Bluetooth: hci0: command tx timeout [ 309.988967] Bluetooth: hci1: command tx timeout [ 310.119640] Bluetooth: hci2: command tx timeout [ 310.310780] Bluetooth: hci4: command tx timeout [ 310.436677] Bluetooth: hci3: command tx timeout [ 310.436743] Bluetooth: hci5: command tx timeout [ 310.565237] Bluetooth: hci6: command tx timeout [ 310.820753] Bluetooth: hci7: command tx timeout [ 311.653158] Bluetooth: hci0: command tx timeout [ 312.036685] Bluetooth: hci1: command tx timeout [ 312.164774] Bluetooth: hci2: command tx timeout [ 312.356669] Bluetooth: hci4: command tx timeout [ 312.485073] Bluetooth: hci3: command tx timeout [ 312.485111] Bluetooth: hci5: command tx timeout [ 312.615706] Bluetooth: hci6: command tx timeout [ 312.869715] Bluetooth: hci7: command tx timeout [ 313.701848] Bluetooth: hci0: command tx timeout [ 314.084989] Bluetooth: hci1: command tx timeout [ 314.212810] Bluetooth: hci2: command tx timeout [ 314.407097] Bluetooth: hci4: command tx timeout [ 314.532787] Bluetooth: hci3: command tx timeout [ 314.533003] Bluetooth: hci5: command tx timeout [ 314.661183] Bluetooth: hci6: command tx timeout [ 314.919636] Bluetooth: hci7: command tx timeout [ 368.383104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.385934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.388505] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.402552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.410076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.572041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 368.576122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 368.579327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 368.587395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 368.602037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.618627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.621299] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.623510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.631277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.638860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.720207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.725196] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.732069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.764274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.766046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.776943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.787510] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.799061] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.808455] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.823755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.830080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.833863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.842705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.849202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.852158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.854535] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.888091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.891198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.928264] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.931881] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.937039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.942409] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.955254] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.958359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.045099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.468672] Bluetooth: hci0: command tx timeout [ 370.660703] Bluetooth: hci1: command tx timeout [ 370.726646] Bluetooth: hci2: command tx timeout [ 370.916925] Bluetooth: hci4: command tx timeout [ 370.980756] Bluetooth: hci5: command tx timeout [ 370.981364] Bluetooth: hci3: command tx timeout [ 371.108842] Bluetooth: hci7: command tx timeout [ 371.172754] Bluetooth: hci6: command tx timeout [ 372.517680] Bluetooth: hci0: command tx timeout [ 372.710731] Bluetooth: hci1: command tx timeout [ 372.773841] Bluetooth: hci2: command tx timeout [ 372.965918] Bluetooth: hci4: command tx timeout [ 373.030857] Bluetooth: hci3: command tx timeout [ 373.031307] Bluetooth: hci5: command tx timeout [ 373.158611] Bluetooth: hci7: command tx timeout [ 373.222832] Bluetooth: hci6: command tx timeout [ 374.565707] Bluetooth: hci0: command tx timeout [ 374.757893] Bluetooth: hci1: command tx timeout [ 374.822633] Bluetooth: hci2: command tx timeout [ 375.014332] Bluetooth: hci4: command tx timeout [ 375.077778] Bluetooth: hci3: command tx timeout [ 375.078231] Bluetooth: hci5: command tx timeout [ 375.205909] Bluetooth: hci7: command tx timeout [ 375.268666] Bluetooth: hci6: command tx timeout [ 376.613027] Bluetooth: hci0: command tx timeout [ 376.805811] Bluetooth: hci1: command tx timeout [ 376.868645] Bluetooth: hci2: command tx timeout [ 377.061645] Bluetooth: hci4: command tx timeout [ 377.124800] Bluetooth: hci5: command tx timeout [ 377.125244] Bluetooth: hci3: command tx timeout [ 377.253640] Bluetooth: hci7: command tx timeout [ 377.317975] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 04:57:36 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=dbd733d7683c873f RDX=ffffffff81b0bf29 RSI=0000000026a724ad RDI=00000000fa11040a RBP=ffffea0000d2ca80 RSP=ffff88802a077b28 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000011 R14=ffff88807ffdc640 R15=0000000000000000 RIP=ffffffff815ab8e0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8823917540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8823dd2000 CR3=000000000d980000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888030598000 RBX=ffffffff81604840 RCX=ffff88802ede7a90 RDX=0000000000000070 RSI=0000000000000000 RDI=ffff88802ede79f8 RBP=ffff888030598000 RSP=ffff88802ede79c0 R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88802ede7a20 R14=ffff888030598000 R15=ffff88802ede79f8 RIP=ffffffff813562c2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6eb0e14310 CR3=0000000030c08000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000