Warning: Permanently added '[localhost]:55330' (ECDSA) to the list of known hosts. 2024/10/21 03:51:03 fuzzer started 2024/10/21 03:51:04 dialing manager at localhost:45639 syzkaller login: [ 66.166454] cgroup: Unknown subsys name 'net' [ 66.283733] cgroup: Unknown subsys name 'cpuset' [ 66.308169] cgroup: Unknown subsys name 'rlimit' 2024/10/21 03:51:21 syscalls: 200 2024/10/21 03:51:21 code coverage: enabled 2024/10/21 03:51:21 comparison tracing: enabled 2024/10/21 03:51:21 extra coverage: enabled 2024/10/21 03:51:21 setuid sandbox: enabled 2024/10/21 03:51:21 namespace sandbox: enabled 2024/10/21 03:51:21 Android sandbox: enabled 2024/10/21 03:51:21 fault injection: enabled 2024/10/21 03:51:21 leak checking: enabled 2024/10/21 03:51:21 net packet injection: enabled 2024/10/21 03:51:21 net device setup: enabled 2024/10/21 03:51:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 03:51:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 03:51:21 USB emulation: enabled 2024/10/21 03:51:21 hci packet injection: enabled 2024/10/21 03:51:21 wifi device emulation: enabled 2024/10/21 03:51:21 802.15.4 emulation: enabled 2024/10/21 03:51:21 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 03:51:23 starting 8 fuzzer processes 03:51:23 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) setns(0xffffffffffffffff, 0x10000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000280), 0x8400, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000002c0)={'bond0\x00', {0x2, 0x0, @initdev}}) r2 = socket(0x23, 0x6, 0x40) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3a}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20044044) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000bc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000580)={0x5f0, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_EXPRESSIONS={0x59c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@lookup={{0xb}, @void}]}, {0x388, 0x1, 0x0, 0x1, [@match={{0xa}, @val={0x264, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1000}, @NFTA_MATCH_NAME={0xd, 0x1, '/dev/sr0\x00'}, @NFTA_MATCH_INFO={0xa7, 0x3, "1f12047b9436904eb2f47bc8c8f4876b0a9d1bdf7369e38bb222968aa230c87dff02edf48897f89f67b584dcf37e4042f3c9f890259a6a5042a364ba694cde74b3f41e09fa32f9be284509d610e8e4be416789833002a3ad02af40da367b86ba4563a34387277de633c2b0604c5a3ca0c37dd84f83acc128a616f2c20db55d4604daa15aa963b54d0c8cb53d76e2ea3617ba8635949f0c852327f14a200b799dc32d1f"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_MATCH_INFO={0x102, 0x3, "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"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MATCH_NAME={0xa, 0x1, '%\\!%$\x00'}, @NFTA_MATCH_INFO={0x6e, 0x3, "af69f6c23797f50e1fa7bbb89d093f679334de90690f536f77296407d2f6dd623404c6193a8ce0037868f04fb8bf33f6572dbff3f265e9f7a3dd64d3ad2efafe86e0aa2b6a96107ef7a4ad961a39ea43f70fa029dd1bc651fd5822c46689ae5f8a72ff08e4afd49668db"}, @NFTA_MATCH_NAME={0xd, 0x1, '/dev/sr0\x00'}]}}, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}, @fwd={{0x8}, @void}, @dup_ipv6={{0x8}, @void}, @quota={{0xa}, @void}, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}, @limit={{0xa}, @void}, @rt={{0x7}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @log={{0x8}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'bond0\x00'}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xbac6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x94c0}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x63e}]}}, @synproxy={{0xd}, @val={0x4}}]}, {0x5c, 0x1, 0x0, 0x1, [@meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}]}, {0x1a4, 0x1, 0x0, 0x1, [@tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8}]}}, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}]}}, @log={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x24}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xd2}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8000}]}}, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}]}}, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffff0000}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7f}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfff9}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_TOTAL={0x6}]}}, @dup={{0x8}, @val={0x4}}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x81}, 0x40400c4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r3) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xc8, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24041000}, 0x4000001) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r3) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x20000001) setns(r1, 0x4000000) syz_genetlink_get_family_id$team(&(0x7f0000000f40), r1) 03:51:23 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x7, 0x5c, 0x1a3, {{0x10, 0x4, 0x0, 0x3, 0x40, 0x66, 0x0, 0x3f, 0x2f, 0x0, @empty, @loopback, {[@cipso={0x86, 0x2b, 0x0, [{0x2, 0x2}, {0x6, 0x11, "10485455f50726fb0701e62bbd0342"}, {0x7, 0x12, "6d5b385c06b4299730ef5410fabd140a"}]}]}}}}}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x6d, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x31}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1d}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', r0, 0x8000, 0x7f57, 0x10001, 0x2, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x68, 0x0, 0xfe, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', r0, 0x8000, 0x20, 0x1, 0x58aa, {{0x7, 0x4, 0x1, 0x1c, 0x1c, 0x68, 0x0, 0xf3, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}, {[@ra={0x94, 0x4}, @noop, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000480)={0x784, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r0}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x40, 0x1, 0x9}, {0x81, 0x2, 0x7f, 0x1f}, {0x5, 0x6d, 0x80, 0x101}, {0xfff, 0x4, 0x8, 0x1}, {0xea5e, 0x80, 0x4, 0x4413}, {0x4, 0x2, 0x3, 0x6}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x4, 0x1, 0x2}]}}}]}}, {{0x8, 0x1, r0}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x100, 0x0, 0x7, 0x2}, {0x40, 0x45, 0x40, 0x7fff}, {0x1, 0x20, 0xff, 0x80000000}, {0xee, 0x0, 0x20, 0x8a1}, {0xfff7, 0x40, 0x6, 0x5}, {0x1, 0x0, 0x9, 0x1}, {0x0, 0xc8, 0x30, 0x8}, {0x2, 0x0, 0x1}]}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r0}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x79d}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) socketpair(0x1a, 0xa, 0xfffffffb, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0xabd5e40d0498b752, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xcf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000e40)={0x1f, 0xfffa, @any, 0x401}, 0xe) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000e80)={0x0, 'veth1_to_hsr\x00', {0x3}, 0xff81}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x94, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xcfa}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004001}, 0x2cbff009dfa91bca) 03:51:23 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, 0x0, 0x6, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_OPER_CLASS={0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x84}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000004) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'lo\x00', &(0x7f0000000280)=@ethtool_dump={0x0, 0xaaf5, 0x80000000}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1f8, r2, 0x1, 0x1, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x949}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8d5}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x16, 0x3, "55cea1a6ae7c424b719b2c404467492d224e"}, @TIPC_NLA_NODE_ID={0x19, 0x3, "b3588dbb3f39e81d317be9dc37f459f6c179c89604"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f2b036bd9c93beef9f6e53a5a855cc285a93d0b4a0fe01e2c5d5532e63961241"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0d0c7788ef47a516680a1b952644f87fa3bda27c3e07f32be4adb5522f30b5a21b99"}}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8c0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42563cc7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5b, 0x3, "245082143af8cf46b67f092e844be8dfd7d0b232836d8679d7497df3029c84f3fb232a9d63c3ce8dfab67cb9a11fad8696e08984ddc9d27b0c1befd8c33f48f6d9ba5e46211aa4f402c4ed057ebca509eb8f9be2fe86d5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20040081}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x1, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xc26}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xde4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) bind$bt_l2cap(r0, &(0x7f0000000740)={0x1f, 0xff00, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x108, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x664d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xf9ac8bed676729a6}, 0x44000) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1180}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x8801) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xbda}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5e}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004000c}, 0x4c805) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x2040) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x214, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @empty, 0xffffffc0}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1f, @loopback, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @remote, 0xc1e}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc83}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff36}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfb2}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040054) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), 0xffffffffffffffff) [ 84.233994] audit: type=1400 audit(1729482683.096:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:51:23 executing program 3: msgctl$IPC_RMID(0x0, 0x0) r0 = msgget(0x0, 0x3) msgctl$IPC_RMID(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = msgget(0x3, 0x200) msgctl$IPC_RMID(r3, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "dc9b23655f847bc81da7c822d4120d60164d7b736e7569"}}]}, @TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x4}, 0x81, 0x0, 0x7, 0x100, 0x2, 'syz1\x00', "6042003e4f484cac9f21ca84a6c5c7d74f015486048e6af6b430a029043de565", "499174be043aca22b638afe343e1c2c99f384f147d7e657e5a414d151eaed5a0", [{0x3, 0x9, {0x3, 0xfffffffe}}, {0x8000, 0x3f, {0x2, 0x5}}, {0x5, 0xd89, {0x1, 0x25}}, {0x20, 0x7, {0x1, 0x3}}, {0x0, 0x9, {0x2, 0x3f}}, {0x4, 0x6, {0x3, 0x4}}, {0x0, 0x200, {0x2, 0xffffffff}}, {0x2, 0xff45}, {0x7ff, 0xff01, {0x0, 0x10001}}, {0x7, 0xfff, {0x1, 0x8}}, {0x8, 0x2, {0x3, 0x6941}}, {0x401, 0x5, {0x2, 0x6}}, {0x800, 0x7f30, {0x0, 0x1}}, {0x7, 0x78ff, {0x3, 0x3ff}}, {0x2, 0x7, {0x2, 0x6}}, {0xea, 0x3ff, {0x0, 0x8}}, {0x1ff, 0x75d, {0x1, 0x81d}}, {0x1f, 0x5}, {0x5, 0x7b, {0x3, 0x5}}, {0xfb, 0x0, {0x2, 0x2}}, {0x1, 0x3f, {0x0, 0xf8f}}, {0x127, 0x7, {0x1, 0x6}}, {0x1ff, 0xfe1, {0x2, 0x3}}, {0x3, 0x101, {0x0, 0x8}}, {0x84e, 0x7e, {0x2, 0x9}}, {0x4, 0x6, {0x1, 0x122000}}, {0x3a, 0x6, {0x0, 0x7}}, {0x9, 0x20, {0x2, 0x2}}, {0x3, 0xd77, {0x2, 0x80000000}}, {0x6, 0x5, {0x1, 0x9dbd}}, {0x3, 0x7, {0x0, 0x1}}, {0xff, 0x4, {0x0, 0x690}}, {0xf800, 0xe3}, {0x100, 0x3ff, {0x2, 0xfff}}, {0x0, 0x4, {0x1, 0x47af}}, {0xa51c, 0x9, {0x2, 0xedc}}, {0xffff, 0xc00, {0x3, 0x81}}, {0x2, 0xc8, {0x2, 0x8}}, {0xa000, 0xe03, {0x1, 0x4}}, {0xb7e, 0x7ff, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x3, 0x80000000}, 0x6, 0x1, 0xfffa, 0xfff7, 0x1b, 'syz0\x00', "a5f8efd78d34919c3cdfca357f03017bcefb075ba4c49da063a2bf7453ba5369", "071158ea9cdd41245b5c63bf6d1abb1613a9b1d102b11030da992ca4ed5b5b9c", [{0x3, 0x3, {0x1, 0x2}}, {0x20, 0x5, {0x0, 0x7fff}}, {0xfffa, 0x6, {0x3, 0x1}}, {0x2, 0x3, {0x1, 0xffffffff}}, {0x9, 0x8000, {0x3, 0x200}}, {0x7, 0xfffa, {0x2, 0x4}}, {0x5c, 0x1, {0x1, 0x9}}, {0x19d5, 0x3, {0x3, 0x7fffffff}}, {0x1000, 0x1f, {0x2, 0x4}}, {0x0, 0x81, {0x3, 0x6}}, {0x0, 0xffff, {0x3}}, {0x5, 0x0, {0x0, 0x100}}, {0x7, 0x7fff, {0x1, 0x4}}, {0x2c68, 0x8, {0x3, 0x40f4}}, {0x9, 0x32, {0x3, 0x5}}, {0x0, 0x9, {0x0, 0x3}}, {0xacd, 0x9, {0x1, 0xffff}}, {0x6, 0x5446, {0x3, 0x81}}, {0x6, 0x5, {0x2, 0x1}}, {0x1ff, 0x0, {0x0, 0x1ff}}, {0x40, 0x1000, {0x2, 0xcf6}}, {0xfff, 0x0, {0x1, 0x6}}, {0x7, 0x9665, {0x2, 0x6}}, {0x83ff, 0x1, {0x2, 0x4}}, {0xff, 0x80, {0x2, 0x40}}, {0x4, 0xff, {0x2, 0x8}}, {0x1, 0x5, {0x3, 0x1}}, {0x0, 0x3, {0x0, 0x8}}, {0x7f, 0x5, {0x2, 0xb}}, {0x5, 0xbe0, {0x1, 0x10000}}, {0xac4e, 0x5b, {0x2, 0x4c}}, {0x81, 0x4, {0x1}}, {0x5, 0x81, {0x1, 0x1}}, {0x4, 0x81, {0x0, 0x5}}, {0xff, 0x1, {0x0, 0x80000000}}, {0x6, 0x8857, {0x2, 0x80}}, {0x2, 0x101, {0x2, 0x20}}, {0x8, 0x6, {0x0, 0x6}}, {0x1, 0x7, {0x2, 0x4}}, {0x511, 0xf14d, {0x3, 0x1000}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) msgget(0x0, 0x24e) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, &(0x7f0000000840)={0xb}) r4 = msgget(0x0, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0) r5 = socket(0x25, 0xa, 0x2a) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xc0, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xa}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x78, r7, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9a, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1b}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x40800) msgsnd(r4, &(0x7f0000000f00)={0x1, "8199499945045b0b319a3b9def92adf4b3f2fd652f63968f21bd2436c152dcea4df162b7cede9260e3109b90b9f548c4f87bf6d5c300a2c150cea0ad4ae7f8557f3524a3f6c656ec95b7230dc1da910b81c9ae0ea909f8f94c3899ddb8577e616404241ef74672f1c355e4c0b12a8aa143720a1aa22f283ec0688fa09241a780b1a93143af215c23ad7bae78f5cb"}, 0x96, 0x0) 03:51:23 executing program 4: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd2f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, &(0x7f0000000280)=@generic, &(0x7f0000000300)=0x80, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x17, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2002}, 0x4080080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7062}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3e0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x184, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0xf0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x36}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x40010}, 0x4080) inotify_init1(0x80000) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x880) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000b40)={0x0, 0x800}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000b80), 0x8000, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x300000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff2a9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x63f9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x40) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x128, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x34}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x52}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ca0}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcc40}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x48814) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r2) r3 = socket(0x22, 0x5, 0xffff) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x7c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100), r3) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x144, r4, 0x420, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xef, 0x3, "6149ab32f785c5ac0d8475da2f3d3c2e3845da5c50b371a8a2a4d839668ec63853cfa914f50cc647ec21cca3bf0f5fc6cf6f1b920b02912cc2b912f25e373e7ac605574fefb91b26293d1ec344b8c1e586f102f3b9fd3469bdfab2f58d9a910741b0671823dc5617730c92229dffbc67ec9b7ade8ec7052c79461f908f27059d0237639cca35a5f6d5a7315679fe89455965781f3a51ba0cb260b7d04cf44e2319ea034f1a4a03887ae02f2edb2b4a81d635ebaad546c21dfcda4577f61b0b4990251699cc1029f70d510b49538fe14063ce2ef53248b80c1978132c53bd884907a6198e8b22501d4ee888"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001340)={'wg2\x00'}) 03:51:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x4000084) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0x1) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x30}}, 0x0) r2 = socket(0x1e, 0x800, 0x3) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x104, 0x1, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x104}}, 0x20000004) r3 = accept4(r2, 0x0, &(0x7f0000000700), 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r2) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x114, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x45, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xca4f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000041}, 0x801) socketpair(0x23, 0xa, 0x800, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x4, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r6 = socket(0x22, 0x6, 0x6) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @chandef_params, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3f}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x30) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x8004000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x58, 0x3, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x24000011) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000212}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xc8, r4, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd3c45a1a2f931675}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc1}, 0x4000880) 03:51:23 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000140)) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x84000}, 0x80) r3 = socket(0x21, 0x4, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc8, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc8}}, 0x20000004) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x37}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4006094) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r4) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x84, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4a004}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x84, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000080}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), 0xffffffffffffffff) 03:51:23 executing program 7: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x234, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfb}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f2f50b867597b0d491781c4da02b32d3c05c5d65742b00205d9e698af13e2f"}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6f825dd8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1fb4677d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7e196085}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbdb1a02c}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x29e2}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc614}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40}, 0x800) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x859}, 0x4004005) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1ff}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008041}, 0x40811) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r2, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x4004001) socketpair(0x28, 0x2, 0x98f8, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x40) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r4) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), r3) r7 = gettid() r8 = getpgrp(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c00)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x80, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000050) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd4, 0x52}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}]}, 0x30}}, 0x20008000) [ 85.632200] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.636860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.638786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.642388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.644355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.650964] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.652232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.652385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.655890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.662986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.665931] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.668049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.768524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.768977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.773078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.773201] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.785873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.787149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.801595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.808137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.815726] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.819279] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.820203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.823542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.824931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.826443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.826676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.829505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.831335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.833059] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.834869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.836268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.838260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.838374] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.843791] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.860014] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.870912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.871008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.873956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.880048] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.895262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.945196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.946773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.949819] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.950931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.954071] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.955324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.962596] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.715430] Bluetooth: hci1: command tx timeout [ 87.715438] Bluetooth: hci0: command tx timeout [ 87.907736] Bluetooth: hci6: command tx timeout [ 87.908533] Bluetooth: hci5: command tx timeout [ 87.909447] Bluetooth: hci2: command tx timeout [ 87.971026] Bluetooth: hci4: command tx timeout [ 87.972051] Bluetooth: hci3: command tx timeout [ 88.035758] Bluetooth: hci7: command tx timeout [ 89.762716] Bluetooth: hci0: command tx timeout [ 89.764007] Bluetooth: hci1: command tx timeout [ 89.954911] Bluetooth: hci2: command tx timeout [ 89.954963] Bluetooth: hci5: command tx timeout [ 89.955390] Bluetooth: hci6: command tx timeout [ 90.019710] Bluetooth: hci3: command tx timeout [ 90.020181] Bluetooth: hci4: command tx timeout [ 90.083430] Bluetooth: hci7: command tx timeout [ 91.810820] Bluetooth: hci1: command tx timeout [ 91.811370] Bluetooth: hci0: command tx timeout [ 92.002743] Bluetooth: hci2: command tx timeout [ 92.003224] Bluetooth: hci6: command tx timeout [ 92.004045] Bluetooth: hci5: command tx timeout [ 92.066743] Bluetooth: hci4: command tx timeout [ 92.067227] Bluetooth: hci3: command tx timeout [ 92.130866] Bluetooth: hci7: command tx timeout [ 93.858858] Bluetooth: hci0: command tx timeout [ 93.859387] Bluetooth: hci1: command tx timeout [ 94.050746] Bluetooth: hci5: command tx timeout [ 94.051248] Bluetooth: hci6: command tx timeout [ 94.051906] Bluetooth: hci2: command tx timeout [ 94.114864] Bluetooth: hci3: command tx timeout [ 94.115337] Bluetooth: hci4: command tx timeout [ 94.179679] Bluetooth: hci7: command tx timeout [ 148.333977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.335752] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.343888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.346905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.358012] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.359505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.466116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.468583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.472330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.473555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.482881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.484047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.484722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.486655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.495338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.495347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.497067] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.506987] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.509261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.512027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.513582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.516018] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.517378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.518861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.631150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.634329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.636841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.640830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.642567] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.648659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.659205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.665589] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.666473] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.677741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.686091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.742643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.745754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.747125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.748120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.770976] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.782468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.783681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.790881] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.793834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.807884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.829838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.847443] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.867712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.434738] Bluetooth: hci0: command tx timeout [ 150.563800] Bluetooth: hci2: command tx timeout [ 150.564869] Bluetooth: hci1: command tx timeout [ 150.566253] Bluetooth: hci3: command tx timeout [ 150.755739] Bluetooth: hci7: command tx timeout [ 150.756555] Bluetooth: hci4: command tx timeout [ 150.882949] Bluetooth: hci5: command tx timeout [ 150.947870] Bluetooth: hci6: command tx timeout [ 152.483985] Bluetooth: hci0: command tx timeout [ 152.611736] Bluetooth: hci1: command tx timeout [ 152.612247] Bluetooth: hci3: command tx timeout [ 152.612977] Bluetooth: hci2: command tx timeout [ 152.804763] Bluetooth: hci4: command tx timeout [ 152.805294] Bluetooth: hci7: command tx timeout [ 152.931694] Bluetooth: hci5: command tx timeout [ 152.995707] Bluetooth: hci6: command tx timeout [ 154.531673] Bluetooth: hci0: command tx timeout [ 154.658852] Bluetooth: hci2: command tx timeout [ 154.659366] Bluetooth: hci3: command tx timeout [ 154.660087] Bluetooth: hci1: command tx timeout [ 154.851702] Bluetooth: hci4: command tx timeout [ 154.852228] Bluetooth: hci7: command tx timeout [ 154.978686] Bluetooth: hci5: command tx timeout [ 155.042729] Bluetooth: hci6: command tx timeout [ 156.579705] Bluetooth: hci0: command tx timeout [ 156.706744] Bluetooth: hci1: command tx timeout [ 156.707267] Bluetooth: hci3: command tx timeout [ 156.707775] Bluetooth: hci2: command tx timeout [ 156.899808] Bluetooth: hci7: command tx timeout [ 156.900330] Bluetooth: hci4: command tx timeout [ 157.027749] Bluetooth: hci5: command tx timeout [ 157.090686] Bluetooth: hci6: command tx timeout [ 210.483002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.484878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.486221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.488505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.492382] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.493535] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.608313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.613842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.616019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.619483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.621562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.623558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.795015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.798836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.799998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.802363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.804053] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.805294] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.875957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.886833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.889843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.909398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.914468] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.917698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.939155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.961543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.990270] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.991430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.996974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.000903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.003207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.004229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.008324] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.008497] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.037808] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.103862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.112522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 211.117726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 211.121818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 211.132131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.145190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.183200] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 211.202097] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.211261] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 211.248956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 211.249965] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.253231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 211.256152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.515712] Bluetooth: hci0: command tx timeout [ 212.706726] Bluetooth: hci1: command tx timeout [ 212.834956] Bluetooth: hci2: command tx timeout [ 212.962980] Bluetooth: hci3: command tx timeout [ 213.090835] Bluetooth: hci4: command tx timeout [ 213.218854] Bluetooth: hci5: command tx timeout [ 213.346762] Bluetooth: hci6: command tx timeout [ 213.346946] Bluetooth: hci7: command tx timeout [ 214.563677] Bluetooth: hci0: command tx timeout [ 214.755668] Bluetooth: hci1: command tx timeout [ 214.883680] Bluetooth: hci2: command tx timeout [ 215.010800] Bluetooth: hci3: command tx timeout [ 215.138743] Bluetooth: hci4: command tx timeout [ 215.266737] Bluetooth: hci5: command tx timeout [ 215.394781] Bluetooth: hci6: command tx timeout [ 215.395035] Bluetooth: hci7: command tx timeout [ 216.610754] Bluetooth: hci0: command tx timeout [ 216.803737] Bluetooth: hci1: command tx timeout [ 216.930758] Bluetooth: hci2: command tx timeout [ 217.060721] Bluetooth: hci3: command tx timeout [ 217.209698] Bluetooth: hci4: command tx timeout [ 217.314721] Bluetooth: hci5: command tx timeout [ 217.443718] Bluetooth: hci7: command tx timeout [ 217.443788] Bluetooth: hci6: command tx timeout [ 218.661654] Bluetooth: hci0: command tx timeout [ 218.851012] Bluetooth: hci1: command tx timeout [ 218.978858] Bluetooth: hci2: command tx timeout [ 219.107742] Bluetooth: hci3: command tx timeout [ 219.234700] Bluetooth: hci4: command tx timeout [ 219.362841] Bluetooth: hci5: command tx timeout [ 219.490775] Bluetooth: hci6: command tx timeout [ 219.491688] Bluetooth: hci7: command tx timeout [ 272.888458] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.890061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.891257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.894033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.895994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.897122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.943134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.961875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.963807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.966812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.972438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.974870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.089823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 273.097679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 273.103684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 273.128776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.142437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.144236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.167138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.168501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.171812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.176730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.204761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.205935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.236120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.244028] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.255026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.257409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.259447] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.262832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.267319] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.274830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.277646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.289279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.294917] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.296125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 273.299427] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.301897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 273.303038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 273.341807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 273.346938] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 273.349155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.389522] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 273.430438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 273.438007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 273.461221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 273.488521] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 273.504874] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.919837] Bluetooth: hci0: command tx timeout [ 275.043828] Bluetooth: hci1: command tx timeout [ 275.237402] Bluetooth: hci3: command tx timeout [ 275.237673] Bluetooth: hci2: command tx timeout [ 275.367666] Bluetooth: hci4: command tx timeout [ 275.368517] Bluetooth: hci5: command tx timeout [ 275.634219] Bluetooth: hci6: command tx timeout [ 276.002876] Bluetooth: hci7: command tx timeout [ 276.962707] Bluetooth: hci0: command tx timeout [ 277.091756] Bluetooth: hci1: command tx timeout [ 277.282856] Bluetooth: hci3: command tx timeout [ 277.282862] Bluetooth: hci2: command tx timeout [ 277.411662] Bluetooth: hci5: command tx timeout [ 277.412192] Bluetooth: hci4: command tx timeout [ 277.667792] Bluetooth: hci6: command tx timeout [ 278.051612] Bluetooth: hci7: command tx timeout [ 279.010697] Bluetooth: hci0: command tx timeout [ 279.138767] Bluetooth: hci1: command tx timeout [ 279.332786] Bluetooth: hci3: command tx timeout [ 279.332857] Bluetooth: hci2: command tx timeout [ 279.458961] Bluetooth: hci4: command tx timeout [ 279.459155] Bluetooth: hci5: command tx timeout [ 279.714672] Bluetooth: hci6: command tx timeout [ 280.098758] Bluetooth: hci7: command tx timeout [ 281.063678] Bluetooth: hci0: command tx timeout [ 281.186780] Bluetooth: hci1: command tx timeout [ 281.378684] Bluetooth: hci2: command tx timeout [ 281.379286] Bluetooth: hci3: command tx timeout [ 281.506701] Bluetooth: hci4: command tx timeout [ 281.507263] Bluetooth: hci5: command tx timeout [ 281.766627] Bluetooth: hci6: command tx timeout [ 282.147732] Bluetooth: hci7: command tx timeout [ 335.156463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.159083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.161950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.169831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.173417] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 335.181287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.287901] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.289315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.291634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.292766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.293647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.296096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.297061] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.303701] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.304973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.307333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.318812] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 335.331279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.424816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.449094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 335.457432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.459901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 335.472316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.484199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 335.490346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 335.499140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.502786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.506121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.507331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 335.509803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 335.517837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.521322] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 335.539776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.541237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 335.545359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.571688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.575819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 335.578148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 335.580824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 335.580886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 335.583765] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 335.586255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 335.604609] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 335.605768] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.635307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.649274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.702088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.707861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.251368] Bluetooth: hci0: command tx timeout [ 337.315710] Bluetooth: hci1: command tx timeout [ 337.442739] Bluetooth: hci2: command tx timeout [ 337.635041] Bluetooth: hci3: command tx timeout [ 337.636811] Bluetooth: hci7: command tx timeout [ 337.637426] Bluetooth: hci6: command tx timeout [ 337.698708] Bluetooth: hci4: command tx timeout [ 337.827064] Bluetooth: hci5: command tx timeout [ 339.298693] Bluetooth: hci0: command tx timeout [ 339.363652] Bluetooth: hci1: command tx timeout [ 339.491703] Bluetooth: hci2: command tx timeout [ 339.683694] Bluetooth: hci3: command tx timeout [ 339.684224] Bluetooth: hci6: command tx timeout [ 339.684861] Bluetooth: hci7: command tx timeout [ 339.747621] Bluetooth: hci4: command tx timeout [ 339.875610] Bluetooth: hci5: command tx timeout [ 341.346856] Bluetooth: hci0: command tx timeout [ 341.410628] Bluetooth: hci1: command tx timeout [ 341.539728] Bluetooth: hci2: command tx timeout [ 341.730851] Bluetooth: hci3: command tx timeout [ 341.731411] Bluetooth: hci6: command tx timeout [ 341.732148] Bluetooth: hci7: command tx timeout [ 341.795684] Bluetooth: hci4: command tx timeout [ 341.932702] Bluetooth: hci5: command tx timeout [ 343.398594] Bluetooth: hci0: command tx timeout [ 343.459830] Bluetooth: hci1: command tx timeout [ 343.589668] Bluetooth: hci2: command tx timeout [ 343.784706] Bluetooth: hci7: command tx timeout [ 343.784743] Bluetooth: hci3: command tx timeout [ 343.786671] Bluetooth: hci6: command tx timeout [ 343.844760] Bluetooth: hci4: command tx timeout [ 343.970739] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 03:56:33 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000020000 RCX=0000000000000000 RDX=1ffff11002c92165 RSI=0000000000000004 RDI=ffff888016490b2c RBP=ffff888016490000 RSP=ffff88802e9f78d8 R8 =0000000000000001 R9 =0000000000020000 R10=0000000000000019 R11=0000000000000001 R12=ffff888016490b08 R13=ffffffff85c14f00 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff812facfa RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe0e8c68540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005587242129a0 CR3=0000000033bb6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00007fa950a0d000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c14e40 RDI=ffff888026662550 RBP=0000000000000004 RSP=ffff88802bd1f898 R8 =0000000000000000 R9 =ffff8880266625b8 R10=00007fa950a0d000 R11=ffff888013243ba8 R12=ffff88803381f508 R13=0000000000000000 R14=00007fa950a0d000 R15=ffff88802bd1fce0 RIP=ffffffff84830dc4 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6861fe0000 CR3=00000000266d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000