Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:8337' (ECDSA) to the list of known hosts. 2025/06/15 23:31:08 fuzzer started 2025/06/15 23:31:08 dialing manager at localhost:42061 syzkaller login: [ 94.578123] cgroup: Unknown subsys name 'net' [ 94.727840] cgroup: Unknown subsys name 'cpuset' [ 94.770092] cgroup: Unknown subsys name 'rlimit' 2025/06/15 23:31:26 syscalls: 203 2025/06/15 23:31:26 code coverage: enabled 2025/06/15 23:31:26 comparison tracing: enabled 2025/06/15 23:31:26 extra coverage: enabled 2025/06/15 23:31:26 setuid sandbox: enabled 2025/06/15 23:31:26 namespace sandbox: enabled 2025/06/15 23:31:26 Android sandbox: enabled 2025/06/15 23:31:26 fault injection: enabled 2025/06/15 23:31:26 leak checking: enabled 2025/06/15 23:31:26 net packet injection: enabled 2025/06/15 23:31:26 net device setup: enabled 2025/06/15 23:31:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/15 23:31:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/15 23:31:26 USB emulation: enabled 2025/06/15 23:31:26 hci packet injection: enabled 2025/06/15 23:31:26 wifi device emulation: enabled 2025/06/15 23:31:26 802.15.4 emulation: enabled 2025/06/15 23:31:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/15 23:31:28 starting 8 fuzzer processes 23:31:28 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}}, 0x801) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score\x00') ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x20, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x8000, 0x4bd89cc, 0x8}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x0, 0x10, 0x70bd27, 0xcc4a, {}, [@ETHTOOL_A_WOL_SOPASS={0x6c, 0x3, "6593a6d50d1a45a9e5fdc875a8fcfb799f32e47398a3af5f1760fd5b2ec1a1d98319b9e0804231f13c027213a953c19ac1d30633a75c11741e3a004b60c9f540b65aedfb6bc1c92b20610b4fbf5a83a3b20b01b365288a961f78a8aa468c293c42fbe45519389283"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008850}, 0x40004) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x8, 0xeb, 0x4, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x708, 0x700, 0x2, 0x66}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8ba572b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x440088e5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', r2, 0x2f, 0x0, 0x6, 0x8d, 0x2, @private1, @private1, 0x8000, 0x40, 0x6, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000700)={'ip_vti0\x00', r5, 0x80, 0x700, 0x8, 0x3, {{0x21, 0x4, 0x0, 0x1b, 0x84, 0x66, 0x0, 0x7, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x73, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x14, 0x1, [{0x5, 0xc, "75f2fe8c3c7ded648ccf"}, {0x2, 0x2}]}, @rr={0x7, 0x7, 0x39, [@rand_addr=0x64010100]}, @generic={0x88, 0xe, "696414667544f38acf13cd4f"}, @generic={0x7, 0x9, "344a8e3c8d6e4b"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0xb0, [@remote, @multicast2, @loopback, @broadcast, @multicast2, @multicast1, @broadcast, @remote]}]}}}}}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x3a}}}}, [@NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x1}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4a}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "1d7cca07f8c8"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x20}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'ip6gre0\x00', r6, 0x2d, 0x8, 0x6, 0x7ff, 0x24, @loopback, @local, 0x8, 0x8000, 0x7ff, 0x6}}) r7 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x8001, 0xa4841) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', r3, 0x29, 0x9, 0x0, 0x200, 0x6, @remote, @empty, 0x8, 0x20, 0x80000000, 0xfffeffff}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6gre0\x00', r8, 0x4, 0x3, 0x9, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x10, 0x7de1, 0x9}}) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x2, 0x2, 0x301, 0x0, 0x0, {0x4, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = syz_open_dev$vcsu(&(0x7f0000000cc0), 0x539e1e9e, 0x20041) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r10, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xeb2d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x22000001) 23:31:28 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x42}, 0x4000041) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000440), 0x3ff, 0x100) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r1 = accept4(r0, 0x0, &(0x7f00000005c0), 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x700, 0x7, 0x722c, 0x2, {{0x7, 0x4, 0x0, 0x35, 0x1c, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @loopback, {[@lsrr={0x83, 0x7, 0x83, [@broadcast]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000680), 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x400000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) getpeername$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x48, r4, 0x800, 0x4, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x11) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000c80)="3bf7b177cb5f10a934f8c7aa6b6510ed971c51b8ed09e241a7ead9b0", 0x1c}, {&(0x7f0000000cc0)="eb2dc6850c9209eddb674d01c2fee4b199f8fae870f31635d301c4de68e036df37fb8e92b4f2552efab7aa60a5a4d10cc224fe70aac908f124968931a9af1cb2fbc61866388e062b734e8aa4d2a8a3962e88e51bbe08710872fd39622aa1031c7d9f1aae7cf3be07d0853cd24b974fe5750361c61a0cd9947beccf4385dd0dde26b8f66f09041e0659377b57dcc7b4a5c047ffb08dfd105f30f5d4089458c0184ce4e422284e41b1a9bcf52fdc753fc5da0b66f5e3ba23", 0xb7}, {&(0x7f0000000d80)="6d936841c464e475506fa5a8c02f096988225b9d73002e28f43893f178333ad600a55dc9199738167afd738580c93490fabda93b88bcbef37442065331e6187ccb96ca65b005b88e61e69d87f58e6f9db66be42e3a5ee242b94671e08fc36337bc6c1fb3dcaa7d24f7948c89db72ae4fc0f3ec23c5361975b4b58e4d3275b0887de812939a564b22357642d23fad74bc69b5c1aa96603e738126d7460a4e2606e8ddb0b4d0d2d3a74fbd8846a8c8d495a5e1e589516e1692663ca83fc219", 0xbe}, {&(0x7f0000000e40)="cae64b1bc71ee79b769766b18a78cc2240fd8bd860ef020b14b5b3bdec66b15027355ffd28c1e8cd0024841dad248456f1b64c328364adf67b", 0x39}, {&(0x7f0000000e80)="2ea8242b84c4d612a4b11cd80af50cf0ee329f5a9959b66152c331d63428aa9f35a71145e788288ab74eb072ff4c35c5a855450017f41a89fb2e758decd4126dbb2a999e966361fbd3c818528e65c2f99750094689d07097701f06382475cc77cbfd558c834eb15b6addf7245937b485784f68021b7b225624950c1717df7e820a03abf1ec25857be27211", 0x8b}, {&(0x7f0000000f40)="ee5ddba9a84f285378a387ed6774ed644bb481545e951adb8962828e04f98eb9e033e6b67407abdb95666acbcd8fbfb09f7c7bca99740dc11b68886aa4241a2efd6ebcd0a760de6eb757deec1d574540a057d52002fecbef1a3dd427076944a3bbdf313af15523d0d9f52bb1a6048b09958c8faa5ee68192ba68b0237f5c736fae", 0x81}], 0x6, &(0x7f0000001080)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x23, [@local, @rand_addr=0x64010101]}, @cipso={0x86, 0x28, 0x0, [{0x1, 0x9, "6921ae3cce4bff"}, {0x0, 0x2}, {0x0, 0x11, "d6e01298b53b16c3167720c97a0ba3"}, {0x2, 0x6, "899ae356"}]}, @generic={0x88, 0xb, "6f76ddcd36fb813586"}, @timestamp_addr={0x44, 0x1c, 0x2e, 0x1, 0x3, [{@remote, 0x1}, {@private=0xa010101, 0x80000000}, {@remote}]}, @end, @cipso={0x86, 0x2a, 0x3, [{0x6, 0x12, "037e5c164f4e127559d9241f0bca7a48"}, {0x7, 0x12, "6e48a4961d73e1275fb73fe48ec2611c"}]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}], 0xe8}, 0x20060051) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/kexec_crash_size', 0x121040, 0x1a) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000012c0)={'syztnl0\x00', &(0x7f0000001240)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, @mcast1, @private2, 0x1, 0x8, 0x9, 0x40}}) 23:31:28 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0xc010) r2 = socket(0x29, 0x1, 0x81) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x40000c0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x3, 0x614303) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2e}, @void, @val={0xc, 0x99, {0xffffffff, 0x3}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480c5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x7, 0x1, 0x82, @loopback, @mcast1, 0x7, 0x7ba9, 0xffff8001, 0x3475}}) r6 = accept4(r0, &(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x80, 0x800) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000540)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000580), 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}, @ip_retopts={{0x108, 0x0, 0x7, {[@generic={0x89, 0x8, "af4b23c9bfcb"}, @timestamp_addr={0x44, 0x34, 0xd0, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x7fffffff}, {@empty, 0x80000000}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0xffffffff}, {@broadcast, 0x1f}, {@empty, 0x8}]}, @generic={0x82, 0x10, "cedd5fac550b4fa25b1eb57387ff"}, @rr={0x7, 0x1f, 0xc, [@broadcast, @remote, @remote, @local, @empty, @private=0xa010102, @loopback]}, @lsrr={0x83, 0x23, 0x6f, [@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x14}, @broadcast, @remote, @remote, @rand_addr=0x64010101]}, @rr={0x7, 0x2b, 0x4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @remote, @multicast1, @local, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xdc, 0x3, 0x5, [{@empty, 0x7}, {@private=0xa010102, 0x80}, {@dev={0xac, 0x14, 0x14, 0x9}, 0x7}, {@private=0xa010100}, {@multicast1}, {@empty, 0x2}, {@remote, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x1d8}, 0x4000001) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000980)) r8 = accept4(r2, &(0x7f00000009c0)=@nl, &(0x7f0000000a40)=0x80, 0x81000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r8, 0x89f7, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', r5, 0x29, 0x2, 0x5, 0x200, 0x12, @dev={0xfe, 0x80, '\x00', 0x26}, @loopback, 0x8, 0x7, 0x2, 0x6}}) r9 = socket$inet(0x2, 0x5, 0x207) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000b80)={0x0, @qipcrtr={0x2a, 0x3, 0x4001}, @l2={0x1f, 0x62c, @none, 0x5, 0x1}, @isdn={0x22, 0x81, 0x9, 0x3f, 0x1}, 0x96b, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b40)='erspan0\x00', 0x8, 0x100000001, 0xfff9}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xc5, 0x1}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x40011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40d3}]}, 0x44}}, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) [ 113.700588] audit: type=1400 audit(1750030288.361:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:31:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000)={0x8, "818a88"}, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) socketpair(0xc, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100)=0x4, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8d6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040080) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x37}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d, 0x67}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa14}]}, 0xc4}}, 0x20408c0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe66}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x73}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4e}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa1}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c1}, 0x4040010) write$cgroup_type(r1, &(0x7f0000000680), 0x9) r5 = accept(r0, &(0x7f00000006c0)=@in={0x2, 0x0, @local}, &(0x7f0000000740)=0x80) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x4080) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x140, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2036}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2cfb3fc26b4521e4}, @CTA_EXPECT_NAT={0xe4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast1}}}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000800}, 0x44004) r6 = syz_open_dev$mouse(&(0x7f0000000a80), 0x2, 0x8000) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, 0x0, 0x820, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x8004) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}}, 0x801) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d00), 0x200500, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x4040841) accept(r0, &(0x7f0000000e80)=@can, &(0x7f0000000f00)=0x80) 23:31:28 executing program 5: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) setgid(0xee00) r0 = getegid() setgid(r0) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) setgid(r1) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getegid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x0, 0x574, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x64, 0x0, 0x1f, 0x4, 0x0, @local, @multicast1, {[@end]}}}}}) setgid(r2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x4253c0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000300)) socketpair(0x2a, 0x6, 0x1, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x101, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44040) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, 0x0, 0x208, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 23:31:28 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_intel_dspcfg', 0x20080, 0xe3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x1d}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x240049d5) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x608}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffd61}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000400)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x1, 0x6244}, 0x8, 0x5, 0x0, 0x20, 0x10, 'syz1\x00', "a1e3050dbe39d79322c90c5f3289de00c5ecc8224dbfc8013e95c211dc1560d3", "8c1f9ab1ed5cc5a4fb71c8772ed3f7c67bee52394c42b51e137dfe582d4d2f11", [{0x100, 0x4, {0x5, 0x2}}, {0x8, 0x7fff, {0x2, 0x5}}, {0x9, 0x20, {0x0, 0xa0d}}, {0x8, 0x4, {0x0, 0xee}}, {0x8, 0x4, {0x3, 0x2}}, {0x0, 0x4, {0x0, 0x6}}, {0xffa0, 0x7, {0x2, 0x7}}, {0x20, 0x2, {0x1, 0x5}}, {0x4a88, 0x1, {0x1, 0x5}}, {0x4, 0x3, {0xc407af45629929be, 0x8000}}, {0xb1, 0x7, {0x3, 0xdb8}}, {0x1, 0x101, {0x3, 0xd408}}, {0x8000, 0x0, {0x1}}, {0x80, 0x3, {0x0, 0x1}}, {0x0, 0x7, {0x1, 0x3}}, {0x81, 0x5, {0x1}}, {0x4, 0x20, {0x2, 0x6}}, {0x101, 0xc, {0x1, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x4, 0x1, {0x3, 0x379}}, {0x0, 0x9, {0x3, 0x3}}, {0x1, 0x4, {0x3}}, {0x3, 0x6, {0x3, 0xa269}}, {0x0, 0x5, {0x2}}, {0x5, 0x5, {0x0, 0x7fff}}, {0x7fff, 0x5, {0x1, 0x1fad}}, {0x2, 0x5, {0x2, 0x6}}, {0xffff, 0x8, {0x2, 0x3}}, {0x8, 0x63, {0x3, 0x6}}, {0x1ff, 0x800, {0x3, 0x81}}, {0x8, 0x3f, {0x1, 0x33}}, {0x1000, 0x4b8a, {0x2, 0x80000001}}, {0x80, 0x7fff, {0x3, 0xfffffc01}}, {0x4, 0x8, {0x3, 0xffff}}, {0x8f, 0x8038, {0x0, 0x7}}, {0x3, 0xfff, {0x2, 0x91a}}, {0x0, 0x7fff, {0x1, 0x1}}, {0x20, 0x3f, {0x1, 0x6e6}}, {0x7ae, 0x7ff, {0x0, 0x2}}, {0x0, 0xff, {0x2, 0x53}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0xe1, 0x2, 0x1f, 0x3, 0x26, 'syz1\x00', "eeaa8257d85c6d07eb82489bd293b2fba00ae282a15a79a324146c6e4177d151", "383ce905f2e80f8a715de6bf8a36584a42b8f9dc7c263cf95f160a68df3c0cc7", [{0x100, 0x8001, {0x1, 0x3}}, {0x5388, 0x6, {0x3, 0x10000000}}, {0xfffe, 0x1, {0x2, 0xa75a}}, {0x1, 0xffff, {0x3, 0x2}}, {0x9, 0x1000, {0x0, 0x5}}, {0x8, 0x0, {0x1, 0x8}}, {0x7, 0x8, {0x1, 0x558}}, {0xf6d, 0x0, {0x1, 0x8001}}, {0x3, 0xffff, {0x1, 0x9}}, {0xffff, 0x2, {0x1, 0x3}}, {0x3f, 0x8001, {0x3, 0x7}}, {0x0, 0x0, {0x0, 0x10001}}, {0x800, 0x9, {0x2, 0x7}}, {0x9, 0x6, {0x2, 0x5}}, {0xfffd, 0x1, {0x2, 0x4}}, {0x1ff, 0x2, {0x2, 0x1}}, {0xfff9, 0x3, {0x1, 0x8}}, {0x7ff, 0x3, {0x0, 0x3}}, {0x20, 0x7, {0x1, 0x2}}, {0x0, 0x2, {0x3}}, {0x9, 0x200, {0x0, 0x9}}, {0xff81, 0x200, {0x1, 0x9}}, {0x6, 0x9, {0x3, 0x9}}, {0xbc, 0x20, {0x1, 0xd609}}, {0x6, 0x3670, {0x3, 0x5}}, {0x2, 0x4, {0x2, 0xf075}}, {0xf203, 0x9, {0x3, 0x5}}, {0x3771, 0x8, {0x2, 0x5}}, {0x6, 0x2, {0x3, 0x7fffffff}}, {0x1f, 0x8, {0x0, 0xfffffff9}}, {0x80, 0x7f, {0x1}}, {0x2, 0x7, {0x1, 0xfff}}, {0x80, 0x3ff, {0x2, 0x4c9d00b1}}, {0x8, 0x7, {0x0, 0x2}}, {0x8, 0x9, {0x0, 0x280}}, {0xfffa, 0x4000, {0x0, 0x401}}, {}, {0x3, 0xf6, {0x2, 0xe171}}, {0xffc1, 0x2, {0x0, 0x4}}, {0x40, 0x2, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x200}, 0x80, 0x0, 0x9, 0x1, 0x1, 'syz0\x00', "91a378e56061612d214d3f3397d5616dad054c9aae8be9dbd5c8b675d1ce1bca", "ec7ee692d96e2d6c3f9099b1c4d15eb1d9ae567c3ad5e1051d8ec5605089dd52", [{0x7, 0x5, {0x0, 0x6}}, {0x7ff, 0x8, {0x3, 0x1}}, {0xf36, 0x9, {0x3, 0x7}}, {0x4, 0x5, {0x0, 0x7}}, {0x200, 0xc2b, {0x0, 0x1ff}}, {0x43, 0x81, {0x2, 0x34}}, {0x1, 0x2, {0x3}}, {0x3f, 0x1, {0x1, 0x80}}, {0x3, 0x96, {0x0, 0x7f}}, {0xd58e, 0x1, {0x2, 0x6}}, {0xb13f, 0x0, {0x1, 0xfff}}, {0x9, 0x16, {0x3}}, {0x1, 0x3f, {0x0, 0x3}}, {0x8, 0xf63, {0x1, 0x2}}, {0x1ff, 0x25db, {0x1, 0x2}}, {0x3f, 0x5, {0x1, 0x714}}, {0x8eb8, 0x4, {0x1, 0x4}}, {0x7f, 0x6, {0x0, 0xffffffc5}}, {0x3, 0x2, {0x1, 0x20}}, {0x8, 0x7, {0x0, 0xd96}}, {0x4, 0x400, {0x1, 0x2}}, {0x4, 0x6, {0x1, 0x4}}, {0x6, 0x5, {0x1, 0x20}}, {0x3f, 0x7, {0x1, 0x13}}, {0x8, 0x5, {0x3, 0xfffffff8}}, {0xff, 0x7fff, {0x1, 0x400}}, {0x8, 0x6c2, {0xc05748b30b138d4, 0x9}}, {0x7fff, 0xc33, {0x2, 0x7f}}, {0x5, 0x0, {0x0, 0x9}}, {0x800, 0x5, {0x2, 0xe7}}, {0x3f, 0x7, {0x0, 0xcb}}, {0x81, 0x2, {0x3, 0xffffffff}}, {0x9, 0x9, {0x2, 0x6}}, {0x96, 0x1, {0x1, 0xb319}}, {0x3ff, 0x1000, {0x3, 0xffffffff}}, {0x7, 0x0, {0x1, 0x6}}, {0xb300, 0x3, {0x0, 0xa}}, {0x7, 0x1, {0x2}}, {0x7, 0x7, {0x0, 0x3}}, {0x7f, 0x9, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x8001}, 0x0, 0x0, 0x81, 0xa519, 0x1e, 'syz1\x00', "633ea87e36ce99d465f2d80af9f79ee43e16a7bff91c01826ab35e839e0f4c61", "c12c665406f5853e8326be94f0de04825f7f746e756370ff3bcc94afea96122f", [{0x101, 0x100, {0x0, 0x7}}, {0x5, 0x1000, {0x0, 0x401}}, {0x0, 0x7ff, {0x3, 0xffff}}, {0x8001, 0x51e, {0x3, 0xfffffff9}}, {0x1000, 0xe8f, {0x3, 0xffff20cb}}, {0x7, 0x9, {0x2}}, {0x3ff, 0x7ff, {0x3, 0x8}}, {0x1f, 0x6, {0x3, 0x4}}, {0xffe0, 0x1, {0x2, 0x9}}, {0xfff9, 0x1, {0x1, 0x6}}, {0x3f, 0xd94, {0x3, 0x7fff}}, {0xd939, 0x3ff, {0x0, 0x81}}, {0x81, 0x0, {0x3, 0x7}}, {0xfffe, 0x96, {0x2}}, {0xfe, 0x1ff, {0x3, 0x9}}, {0x5, 0x100, {0x0, 0x8001}}, {0x7, 0x8000, {0x1, 0x3}}, {0x0, 0x9, {0x1, 0x800}}, {0x2, 0x8000, {0x2, 0x7}}, {0x7ff, 0x1, {0x2, 0x401}}, {0x8, 0x0, {0x1, 0x1}}, {0x101, 0x4, {0x0, 0x20}}, {0x4, 0x2efe, {0x3, 0x7}}, {0x9, 0x1f, {0x2, 0x5}}, {0x0, 0x2, {0x3, 0x4}}, {0x8, 0x0, {0x3, 0xb3c}}, {0x7, 0x0, {0x0, 0x8}}, {0x5, 0x1000, {0x0, 0x8}}, {0x8000, 0xfff, {0x2, 0x6}}, {0x2c, 0x1000, {0x1, 0x8}}, {0x1000, 0xfc01, {0x2, 0x1000}}, {0x8, 0x0, {0x2, 0x9}}, {0x495, 0x1, {0x1, 0xa87d}}, {0x8001, 0x7, {0x7, 0xfffffda0}}, {0x6, 0x9, {0x2, 0x10001}}, {0x3ff, 0xc3, {0x3, 0xffff}}, {0x5, 0x9, {0x3, 0x101}}, {0xae66, 0x9, {0x1, 0x3f}}, {0x6, 0x2, {0x3, 0x23}}, {0x6, 0x101, {0x2, 0x45c}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x1f, 0x6, 0xfe01, 0x4, 0x10, 'syz0\x00', "7d08e43678a3f75f7cb2ed8abfb4301efe58ada3477fb21025f9a12e84cc2a1d", "259bb4343fb745bbb1d8fbaa86eb5ab622b5f266259cd1445d7e4f5e8ce66c13", [{0x81, 0x3, {0x0, 0x267}}, {0x401, 0x400, {0x0, 0xffffff2d}}, {0x3f, 0x9, {0x1, 0x8}}, {0x7, 0x8, {0x3, 0x4}}, {0x80, 0x20, {0x0, 0x1a4d}}, {0x1, 0x0, {0x7fc699296231b749, 0x6}}, {0x4, 0x6, {0x2, 0x5}}, {0x1, 0x81, {0x2, 0x800}}, {0x1ff, 0x1, {0x1, 0x7ff}}, {0xffff, 0x3, {0x1}}, {0x8001, 0x8b3, {0x3, 0x3}}, {0x5, 0x2, {0x3, 0x3}}, {0x3, 0xfff9, {0x0, 0x4}}, {0x3f, 0x1a58, {0x2, 0xf7}}, {0xea8d, 0x6, {0x3, 0xffffff20}}, {0xfff7, 0x0, {0x2, 0x2}}, {0xfc01, 0x8, {0x0, 0x7}}, {0xffff, 0x400, {0x3, 0x9}}, {0xfc00, 0x220, {0x3, 0xd5}}, {0xf47, 0x9, {0x1, 0x80000000}}, {0xff, 0x3, {0x0, 0x7}}, {0x80, 0x1f1f, {0x1, 0x3}}, {0x5, 0x0, {0x0, 0x3}}, {0x4, 0x1ff, {0x1, 0x4}}, {0x40, 0xe0d5, {0x0, 0x8}}, {0x6, 0x6, {0x2, 0xff}}, {0x7fff, 0x9}, {0x8, 0xfff, {0x2, 0xb72}}, {0x9, 0x4, {0x1, 0x4}}, {0x5b, 0x1, {0x1, 0x1}}, {0x0, 0x0, {0x2, 0x8}}, {0x7ff, 0x2, {0x3, 0xb4d1}}, {0x8000, 0x4ca, {0x2, 0x4}}, {0x200, 0x7ac3, {0x2, 0x1}}, {0x80, 0x0, {0x2, 0x7}}, {0x800, 0x81, {0x0, 0x9}}, {0x4, 0x467, {0x3, 0xfffeffff}}, {0x9, 0x6, {0x1, 0x4}}, {0x5, 0x0, {0x2, 0x40}}, {0x81, 0x2, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x5, 0x4, 0x1000, 0xff, 0x6, 'syz0\x00', "d75a791ed976318063b8173b5ef9a6b029a6786302f188f3624f9b2b1cc93565", "4ebaf3fa461962183f8fef0f139b57a20a8169e9c269191182096b17f4bc072e", [{0x6, 0x7a89}, {0xfff, 0x3c8, {0x3, 0x4}}, {0x9, 0xfff9, {0x3, 0x59a}}, {0x5, 0x6, {0x1}}, {0x1, 0x2, {0x3, 0xfffffff7}}, {0xfff, 0x0, {0x1, 0x9}}, {0x3d, 0x4, {0x1, 0x8}}, {0x81, 0x2, {0x3, 0x2}}, {0x6, 0x3, {0x2, 0x3ff}}, {0x3, 0x0, {0x2, 0x9}}, {0xff, 0x40, {0x3, 0x5da}}, {0x5, 0x401, {0x1, 0x3}}, {0x7ee, 0x1000, {0x3}}, {0x81, 0x3, {0x2, 0xfff}}, {0x3, 0x7, {0x2, 0x8}}, {0x38, 0x5789, {0x1, 0xfffffffc}}, {0xc0, 0x5, {0x0, 0x25}}, {0xad, 0x4, {0x2, 0x401}}, {0x3, 0x0, {0x1, 0x8}}, {0x7, 0x3, {0x0, 0x6}}, {0x1f, 0x8, {0x1, 0x80000001}}, {0x2, 0x8, {0x0, 0x7}}, {0x6, 0x3, {0x0, 0x4}}, {0xffff, 0x5, {0x1, 0x2}}, {0x101, 0x0, {0x3}}, {0x8, 0x2, {0x0, 0xfff}}, {0x5, 0x9d5, {0x0, 0x1}}, {0x81, 0x5, {0x2, 0x1}}, {0x2, 0x8, {0x2, 0x22a76046}}, {0x81, 0x0, {0x0, 0x7}}, {0xf801, 0x1, {0x0, 0xffffffe1}}, {0x1, 0x0, {0x1, 0x6}}, {0x1ff, 0x5, {0x3, 0xf048}}, {0x4, 0x9, {0x1, 0xffffff06}}, {0x100, 0x9, {0x2, 0x10001}}, {0x100, 0x20, {0x1, 0x1000}}, {0x100, 0xfffa, {0x2, 0x2}}, {0x6, 0x7, {0x2, 0x1004}}, {0x6, 0x7ff, {0x2, 0x7}}, {0x101, 0x4, {0x3, 0x200}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x15}, 0x80) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000012c0)={@dev={0xfe, 0x80, '\x00', 0x3b}}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x94, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8000}, @CTA_EXPECT_MASTER={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x94}}, 0x4c005) sendmsg$nl_netfilter(r0, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x6, 0xa, 0x201, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r3 = accept(r2, &(0x7f0000001580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001600)=0x80) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffffff92}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9406}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r4 = syz_open_dev$mouse(&(0x7f0000001780), 0x100, 0x2000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="70598de6f2f2"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x41) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001900), r0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'ip6gre0\x00', 0x0, 0x52, 0x2b, 0xff, 0x81, 0x58, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x40, 0x9, 0x70}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000001ac0), 0x744dd848, 0x90000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x58, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4000014) 23:31:28 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1}, [""]}, 0x14}}, 0x20048010) r1 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xe, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x2404c891) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x4080, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x77, 0x1, 0x7b, 0x2c, @loopback, @local, 0x20, 0x8, 0x200, 0x101}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000d00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000540)={0x744, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x10c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "0706329ed48d52df1e1cdf3d0a8570e385d17dbef2f153a54c0712"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8df}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "5028efe889d0184df1a4d2b8b5c9e15b9ee395da523c531d96ab776b8b3ea0542757f24b392c4f5653250ca1d4ed43202eeafbb1f1ad1b89514dbc5c76df44a05037b79f6eb350b8919018071cf0266f7be9e7f85cc120155acfc2cfefc39d5b0edcc38f6ae4ee9575a32dc043aef8423b368009f661d39bece2235d67725ab712ef45956aa8993ba28ff45a949884ece5175bf885e8305e908411db6998dfd1d47880933f041bb2540adfd077605ccfd434990710c52db04c8f85afe5eed220bef0bfe69363f2f34fd9"}]}, @ETHTOOL_A_WOL_MODES={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "a99bac03dc2386f1c32de1d82edc6641971a93092bfc5e55d05591ae2cfa130f15aad59fbf714dc3c257b790d0612801d5f34a94c9e6c57ad5e570977d0ace45d4b4772aeaf7495ad3a63db5868b688523500747f27e7143b3e30e4723082dd12fbf4ca0aab647db061bf94a78c67357c2f08d5eea0fc3017a4a35371991fb2149312f0d7cab32e0aebad5420296e64583b16358983cda2a5415a1cfd1ad982a67c3da52e161941550aed6889cc454ca267293fc4f13abd45597903a2f19eb51a806a13fbff4b5505a544a3090ad5cf2fdf5b5c6000c86d59a0a34c58d9899a0e74a2b2e4614747730fa4388"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "1e68c3a596aa607ed289e84da6e4523d41fa4946f7ee46ee69765b316e8fb1c752ced25ff19eff1064aac958d1818343c836b04df3b44d0e3ce4e9f8a94f91e74712a2fd86b8c98bae9eb19b0d2ad328e6bb7ba006fe508c727bcb0865a98565605a8db8d50442c072d5ff9ac85535e4f2c36734e93097d8bfd2e4719910112a81f6c43fcd49e907449a5d27011bcb3a9723d4e03461fbc20958b8d7dce92399a0480fcf03c819cba83df9c21ce7c47abd16ff5e8236815970dcc1844eb602e6b0c4e1b9ac8a8b19f5e7c8f1cf87"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xda}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd23a}]}, @ETHTOOL_A_WOL_SOPASS={0x20, 0x3, "037d8e7dc0ce5c0758236f72367a098014b4740fc9b2a4d72ee1ee93"}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x2c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1b4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',[/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffd70}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}&[)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x13}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+]*}+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffb8a5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '-].*@\xe3%,}*.{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xa0%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')++&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')-*#$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#,{\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "f77e4f9cd78a7fb8942b2f2ef5345ce240f6f412f01b5d070258ce7b4a907c7207f969133ffffe18bf5b4c78120e475f14d0c28d33eeff10d7ff3a087b487a35b8745a4aeba5ef2a326a1ba65caae5902836a5a07b211384221d35d80be66483d868466f066a2550d013d0e195199cfb0084928adc3f68969314baa5557aa163f06259f6f2b7ea546de1ac5759c1d48da0ccdfd078a15e7687a84d6a1bf61af87c4293e41209"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']*\xce*%]!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}, @ETHTOOL_A_WOL_MODES={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "d455845762c4a856f953b65937215afb85b6dd505c3819f50e9a6e49ab941e7ef0b788522df5532da04d71d4989d3f23ccef504e6234b67d2b11abad81513d31e95b51ce1a30636641e8276089dc42526d8a981fcdfaaea8794441fc1d0c99ad074495137ff65f5e0f4d2a3ff6985a93c3d3fc34aa63baeb5aa26c6e25dbc3c1b07bd7318f5484ca0d4bfefb47d51423c8eb7f0b0fab86c563509b05b8ed709f0e1a94042149aa262aa355657cbc2e1adf4080ea937fc87da48cdb7ae3c09dd76cdd53c6a7d546ae7ba0a30ad1"}]}]}, 0x744}, 0x1, 0x0, 0x0, 0x20044040}, 0x20000000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x805) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'ip6_vti0\x00', r4, 0x2f, 0x5, 0x9, 0x8000, 0x3, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8, 0x9, 0x101}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000fc0)={&(0x7f0000000e40), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x1c}}, 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001000), 0x480003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'sit0\x00', r4, 0x29, 0x80, 0x6e, 0x4, 0x67, @remote, @remote, 0x16, 0x20, 0x1ff, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'syztnl1\x00', r7, 0x4, 0x1, 0x8, 0x0, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x7, 0xffffffe0}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/bus/serio', 0x2000, 0x90) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xa0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe0}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x11) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8002) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001600)={'syztnl0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x4, 0x20, 0x10, @mcast1, @empty, 0x7, 0x1, 0x7f, 0x8}}) 23:31:28 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop0', 0x280341, 0x2c) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x5, 0x10040000, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x10, 0x7800, 0x3, 0xdc74}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x2f, 0x3f, 0x6, 0x20, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x80, 0xffffffff, 0x5}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x440, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x4, 0x7f, 0x1, 0x9, 0x32, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x10, 0x8, 0x8d2, 0x7d}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r4, 0x29, 0xa0, 0x2, 0xfff, 0xa, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x0, 0xfffffffa}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', r2, 0x29, 0x7f, 0x2, 0xffffff0f, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x8000, 0x7800, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', r6, 0x4, 0xff, 0x40, 0xd70a, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x800, 0x8}}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4) r7 = accept(r0, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000780)) socket$inet6(0xa, 0x6, 0x1f) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x214a02}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x693c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) socketpair(0x18, 0xa, 0x9, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xac, 0x0, 0x2, 0xa00, 0x0, 0x0, {0xe, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x400}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket(0x11, 0x6, 0x0) [ 115.203344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.206088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.208962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.212702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.217632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.225600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.227605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.235039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.237057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.238865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.246585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.252315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.256445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.258145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.260558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.262655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.264383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.268649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.272713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.273267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.277500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.278204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.297567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.316945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.319644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.329255] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.336505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 115.342175] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 115.345238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 115.351642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 115.356254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.362593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.371335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.383459] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.414312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.431658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.436299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.449637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.450312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.454416] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.367302] Bluetooth: hci0: command tx timeout [ 117.367311] Bluetooth: hci2: command tx timeout [ 117.367645] Bluetooth: hci3: command tx timeout [ 117.430997] Bluetooth: hci1: command tx timeout [ 117.431095] Bluetooth: hci7: command tx timeout [ 117.494930] Bluetooth: hci4: command tx timeout [ 117.495061] Bluetooth: hci6: command tx timeout [ 117.558898] Bluetooth: hci5: command tx timeout [ 119.416800] Bluetooth: hci0: command tx timeout [ 119.416830] Bluetooth: hci2: command tx timeout [ 119.417303] Bluetooth: hci3: command tx timeout [ 119.478864] Bluetooth: hci7: command tx timeout [ 119.480189] Bluetooth: hci1: command tx timeout [ 119.543391] Bluetooth: hci6: command tx timeout [ 119.545975] Bluetooth: hci4: command tx timeout [ 119.608350] Bluetooth: hci5: command tx timeout [ 121.463193] Bluetooth: hci3: command tx timeout [ 121.464841] Bluetooth: hci2: command tx timeout [ 121.465265] Bluetooth: hci0: command tx timeout [ 121.527998] Bluetooth: hci1: command tx timeout [ 121.528470] Bluetooth: hci7: command tx timeout [ 121.591053] Bluetooth: hci4: command tx timeout [ 121.591553] Bluetooth: hci6: command tx timeout [ 121.654874] Bluetooth: hci5: command tx timeout [ 123.510897] Bluetooth: hci0: command tx timeout [ 123.511403] Bluetooth: hci2: command tx timeout [ 123.512316] Bluetooth: hci3: command tx timeout [ 123.574840] Bluetooth: hci7: command tx timeout [ 123.575326] Bluetooth: hci1: command tx timeout [ 123.639065] Bluetooth: hci6: command tx timeout [ 123.639556] Bluetooth: hci4: command tx timeout [ 123.702873] Bluetooth: hci5: command tx timeout [ 178.310828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.314130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.316264] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.319514] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.322544] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.323258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.337054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.346141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.350447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.368706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.374541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.376939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.381692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.400919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.408587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.461471] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.470629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.475216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.479943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.480325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.482282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.484166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.488307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.492088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.496175] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.498483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.501927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.514307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.516569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.517943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.520332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.525027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.528720] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.530408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.532258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.533888] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.536704] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.539230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 178.595057] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.599323] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.407060] Bluetooth: hci0: command tx timeout [ 180.471011] Bluetooth: hci2: command tx timeout [ 180.471077] Bluetooth: hci1: command tx timeout [ 180.599858] Bluetooth: hci6: command tx timeout [ 180.599954] Bluetooth: hci5: command tx timeout [ 180.600707] Bluetooth: hci3: command tx timeout [ 180.663831] Bluetooth: hci7: command tx timeout [ 180.664371] Bluetooth: hci4: command tx timeout [ 182.455073] Bluetooth: hci0: command tx timeout [ 182.518950] Bluetooth: hci1: command tx timeout [ 182.520820] Bluetooth: hci2: command tx timeout [ 182.646864] Bluetooth: hci3: command tx timeout [ 182.649048] Bluetooth: hci5: command tx timeout [ 182.649464] Bluetooth: hci6: command tx timeout [ 182.710878] Bluetooth: hci4: command tx timeout [ 182.710909] Bluetooth: hci7: command tx timeout [ 184.502827] Bluetooth: hci0: command tx timeout [ 184.567051] Bluetooth: hci2: command tx timeout [ 184.567216] Bluetooth: hci1: command tx timeout [ 184.694989] Bluetooth: hci6: command tx timeout [ 184.695079] Bluetooth: hci5: command tx timeout [ 184.695526] Bluetooth: hci3: command tx timeout [ 184.759078] Bluetooth: hci4: command tx timeout [ 184.760086] Bluetooth: hci7: command tx timeout [ 186.550952] Bluetooth: hci0: command tx timeout [ 186.614973] Bluetooth: hci2: command tx timeout [ 186.614997] Bluetooth: hci1: command tx timeout [ 186.742890] Bluetooth: hci5: command tx timeout [ 186.743069] Bluetooth: hci3: command tx timeout [ 186.743372] Bluetooth: hci6: command tx timeout [ 186.806866] Bluetooth: hci7: command tx timeout [ 186.807351] Bluetooth: hci4: command tx timeout [ 240.721720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.728166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.732499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.740564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.746214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.869744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.892973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.895573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.902413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.910355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.932174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.936844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.939523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.956684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.970217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.010188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.041064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.052450] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.091594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.097398] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.103446] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.105415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.127164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.153300] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.169599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.178359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.184377] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.189402] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.222710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.222725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.230483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.252587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.260355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.263014] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.276702] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.323504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.344893] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.348332] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.381352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.398053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.807157] Bluetooth: hci0: command tx timeout [ 242.999579] Bluetooth: hci1: command tx timeout [ 243.001100] Bluetooth: hci2: command tx timeout [ 243.255826] Bluetooth: hci3: command tx timeout [ 243.383842] Bluetooth: hci4: command tx timeout [ 243.384849] Bluetooth: hci7: command tx timeout [ 243.384961] Bluetooth: hci5: command tx timeout [ 243.511279] Bluetooth: hci6: command tx timeout [ 244.856116] Bluetooth: hci0: command tx timeout [ 245.046888] Bluetooth: hci1: command tx timeout [ 245.047365] Bluetooth: hci2: command tx timeout [ 245.302964] Bluetooth: hci3: command tx timeout [ 245.431101] Bluetooth: hci4: command tx timeout [ 245.431131] Bluetooth: hci5: command tx timeout [ 245.431176] Bluetooth: hci7: command tx timeout [ 245.560808] Bluetooth: hci6: command tx timeout [ 246.902849] Bluetooth: hci0: command tx timeout [ 247.094881] Bluetooth: hci2: command tx timeout [ 247.095692] Bluetooth: hci1: command tx timeout [ 247.350873] Bluetooth: hci3: command tx timeout [ 247.479024] Bluetooth: hci7: command tx timeout [ 247.479837] Bluetooth: hci5: command tx timeout [ 247.480595] Bluetooth: hci4: command tx timeout [ 247.606927] Bluetooth: hci6: command tx timeout [ 248.951994] Bluetooth: hci0: command tx timeout [ 249.142841] Bluetooth: hci1: command tx timeout [ 249.143306] Bluetooth: hci2: command tx timeout [ 249.399837] Bluetooth: hci3: command tx timeout [ 249.526963] Bluetooth: hci5: command tx timeout [ 249.527979] Bluetooth: hci4: command tx timeout [ 249.528394] Bluetooth: hci7: command tx timeout [ 249.656714] Bluetooth: hci6: command tx timeout [ 303.571452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.580479] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.583484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.596487] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.604289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.747168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.750226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.752562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.762264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.767344] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.959595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.972095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.973965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.981888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.984186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.988707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.992230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.001134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.009188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.010602] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.022254] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.027115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.048269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.070860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.082895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.083380] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.094158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.097293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.136558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.156546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.181082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.185380] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.192107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.209303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.209475] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.217961] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.225925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.228906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.283330] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.304893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.656927] Bluetooth: hci0: command tx timeout [ 305.847873] Bluetooth: hci1: command tx timeout [ 306.102870] Bluetooth: hci2: command tx timeout [ 306.166873] Bluetooth: hci6: command tx timeout [ 306.295017] Bluetooth: hci3: command tx timeout [ 306.359834] Bluetooth: hci7: command tx timeout [ 306.359863] Bluetooth: hci4: command tx timeout [ 306.423149] Bluetooth: hci5: command tx timeout [ 307.702864] Bluetooth: hci0: command tx timeout [ 307.897786] Bluetooth: hci1: command tx timeout [ 308.151027] Bluetooth: hci2: command tx timeout [ 308.216807] Bluetooth: hci6: command tx timeout [ 308.343816] Bluetooth: hci3: command tx timeout [ 308.407472] Bluetooth: hci4: command tx timeout [ 308.408842] Bluetooth: hci7: command tx timeout [ 308.471058] Bluetooth: hci5: command tx timeout [ 309.751570] Bluetooth: hci0: command tx timeout [ 309.942827] Bluetooth: hci1: command tx timeout [ 310.199089] Bluetooth: hci2: command tx timeout [ 310.265022] Bluetooth: hci6: command tx timeout [ 310.390841] Bluetooth: hci3: command tx timeout [ 310.454856] Bluetooth: hci4: command tx timeout [ 310.454951] Bluetooth: hci7: command tx timeout [ 310.520834] Bluetooth: hci5: command tx timeout [ 311.798947] Bluetooth: hci0: command tx timeout [ 311.990977] Bluetooth: hci1: command tx timeout [ 312.247011] Bluetooth: hci2: command tx timeout [ 312.310935] Bluetooth: hci6: command tx timeout [ 312.439115] Bluetooth: hci3: command tx timeout [ 312.503213] Bluetooth: hci4: command tx timeout [ 312.503294] Bluetooth: hci7: command tx timeout [ 312.568520] Bluetooth: hci5: command tx timeout [ 366.354098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.362542] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.364998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.382652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.395452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.605974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.609604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.614156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.625608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.631056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.755716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.760646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.765511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.769282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.776366] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.779646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.784519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.792347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.797696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.802610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.835935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.862388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.884997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.929317] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.932300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.955304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.989306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.992982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.000061] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.001522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.003590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.009945] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.012402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.014361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.049469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.055718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.071039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.079333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.114131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.162433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.438857] Bluetooth: hci0: command tx timeout [ 368.696184] Bluetooth: hci1: command tx timeout [ 368.888012] Bluetooth: hci2: command tx timeout [ 368.888188] Bluetooth: hci3: command tx timeout [ 369.142862] Bluetooth: hci7: command tx timeout [ 369.206925] Bluetooth: hci6: command tx timeout [ 369.206950] Bluetooth: hci4: command tx timeout [ 369.270946] Bluetooth: hci5: command tx timeout [ 370.486983] Bluetooth: hci0: command tx timeout [ 370.743972] Bluetooth: hci1: command tx timeout [ 370.935069] Bluetooth: hci2: command tx timeout [ 370.935114] Bluetooth: hci3: command tx timeout [ 371.191061] Bluetooth: hci7: command tx timeout [ 371.256061] Bluetooth: hci6: command tx timeout [ 371.256537] Bluetooth: hci4: command tx timeout [ 371.321778] Bluetooth: hci5: command tx timeout [ 372.534813] Bluetooth: hci0: command tx timeout [ 372.791092] Bluetooth: hci1: command tx timeout [ 372.983027] Bluetooth: hci3: command tx timeout [ 372.983501] Bluetooth: hci2: command tx timeout [ 373.238823] Bluetooth: hci7: command tx timeout [ 373.302864] Bluetooth: hci4: command tx timeout [ 373.302997] Bluetooth: hci6: command tx timeout [ 373.367840] Bluetooth: hci5: command tx timeout [ 374.583812] Bluetooth: hci0: command tx timeout [ 374.839841] Bluetooth: hci1: command tx timeout [ 375.030830] Bluetooth: hci2: command tx timeout [ 375.031287] Bluetooth: hci3: command tx timeout [ 375.286840] Bluetooth: hci7: command tx timeout [ 375.350816] Bluetooth: hci4: command tx timeout [ 375.351295] Bluetooth: hci6: command tx timeout [ 375.414965] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 23:36:37 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=000000000000005b RCX=ffff88800974fde8 RDX=ffff888016c50000 RSI=00007f1efc760000 RDI=ffff888028418a40 RBP=ffff888031455f18 RSP=ffff88800974fab8 R8 =0000000000000000 R9 =fffff94000367720 R10=0000000033edf007 R11=0000000000000001 R12=0000000033edf007 R13=1ffff110012e9f5b R14=dffffc0000000000 R15=00007f1efc760000 RIP=ffffffff81a118e4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1efc526540 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1efc760000 CR3=0000000031ce7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=00000000ffffffff RCX=ffffffff81bb2db4 RDX=ffff888016a25280 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800911f1a0 RSP=ffff88802fbafc98 R8 =0000000000000001 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000001 R12=ffff88800911f258 R13=0000000000000001 R14=0000000000008000 R15=ffff88800bd257d0 RIP=ffffffff81738d30 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562ce98e8121 CR3=000000002745a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000