Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:61723' (ECDSA) to the list of known hosts. 2025/06/19 00:37:02 fuzzer started 2025/06/19 00:37:03 dialing manager at localhost:36157 syzkaller login: [ 95.750564] cgroup: Unknown subsys name 'net' [ 95.890500] cgroup: Unknown subsys name 'cpuset' [ 95.929330] cgroup: Unknown subsys name 'rlimit' 2025/06/19 00:37:18 syscalls: 204 2025/06/19 00:37:18 code coverage: enabled 2025/06/19 00:37:18 comparison tracing: enabled 2025/06/19 00:37:18 extra coverage: enabled 2025/06/19 00:37:18 setuid sandbox: enabled 2025/06/19 00:37:18 namespace sandbox: enabled 2025/06/19 00:37:18 Android sandbox: enabled 2025/06/19 00:37:18 fault injection: enabled 2025/06/19 00:37:18 leak checking: enabled 2025/06/19 00:37:18 net packet injection: enabled 2025/06/19 00:37:18 net device setup: enabled 2025/06/19 00:37:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/19 00:37:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/19 00:37:18 USB emulation: enabled 2025/06/19 00:37:18 hci packet injection: enabled 2025/06/19 00:37:18 wifi device emulation: enabled 2025/06/19 00:37:18 802.15.4 emulation: enabled 2025/06/19 00:37:18 fetching corpus: 0, signal 0/0 (executing program) 2025/06/19 00:37:19 starting 8 fuzzer processes 00:37:19 executing program 1: setfsgid(0xee00) r0 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4048081) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000005, 0x40010, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@x25, 0x0, 0x80800}, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) getresgid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getresgid(&(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) getresgid(&(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) setgroups(0x8, &(0x7f0000000800)=[0x0, 0x0, r3, r5, 0xee00, r6, r8, r9]) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) setgroups(0x9, &(0x7f0000000b00)=[r11, r12, r10, r13, r4, r7, 0xee00, r8, r5]) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000b40)={0x80, 0x20, 0xc7d, 0x20, 0x7fff}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x4, 0x38, 0xff, 0x3, 0x30, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x1, 0x20, 0x7, 0x10001}}) 00:37:19 executing program 0: r0 = socket(0x6, 0x1, 0x80) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @xdp={0x2c, 0x2, 0x0, 0x29}, @xdp={0x2c, 0xf, 0x0, 0x2e}, @in={0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='gretap0\x00', 0x9, 0x20, 0x26}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3f}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1c9}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b6f149f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5349de6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x107f3bd7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41056bdd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb2a74c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3957}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d6d7e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48e286d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf066ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb5d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x227601d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fb7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x299c4bf3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x618a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb20a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee43}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x759f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24124d40}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e15a53}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39a30574}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x878c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d37f73c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77a6e5e3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e8f8be}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20004040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r2, 0x2f, 0x16, 0x0, 0x59f4, 0x4a, @local, @mcast2, 0x8000, 0x8000, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'sit0\x00', r1, 0x29, 0x9, 0xa1, 0x7fffffff, 0x0, @empty, @loopback, 0x80, 0x40, 0x1000, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000b00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)={0x444, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffb903}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc0}}}]}}, {{0x8, 0x1, r4}, {0x204, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x990b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x8004}, 0x4814) r6 = syz_io_uring_setup(0x6202, &(0x7f0000000b40)={0x0, 0x622c, 0x2, 0x2, 0x239}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000bc0), &(0x7f0000000c00)) io_uring_register$IORING_REGISTER_PROBE(r6, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r7, &(0x7f00000010c0)={&(0x7f0000000cc0)=@xdp, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)=""/94, 0x5e}, {&(0x7f0000000dc0)=""/82, 0x52}, {&(0x7f0000000e40)=""/230, 0xe6}, {&(0x7f0000000f40)=""/33, 0x21}], 0x4, &(0x7f0000000fc0)=""/231, 0xe7}, 0x10121) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/cgroups\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x200}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7cf4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20881}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000001380), r8) r9 = syz_io_uring_setup(0x799c, &(0x7f00000013c0)={0x0, 0x8dcf, 0x0, 0x2, 0x2b, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001440), &(0x7f0000001480)) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f00000014c0)=r8, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000004, 0x13, r8, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) [ 111.840280] audit: type=1400 audit(1750293439.526:7): avc: denied { execmem } for pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:37:19 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x60}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4008080) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x44}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4095) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x800d, 0xe04e, 0xfff7, 0x400, 0x7fffffff, 0x2080300, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40404}, 0x4004) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008040}, 0x80000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x60000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd21696bc3ccac6a8}, 0x8000810) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4885}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'sit0\x00', r1, 0x7f263b102b786401, 0x92, 0x77, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xec7, 0xffffff80}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1f0, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79610cf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xadeeb19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x689b9c39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x325a96a2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34499a65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a423221}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3966956d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f0e0ee0}]}, {0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x350a836d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa71b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa53f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4330}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x404a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12b2e92}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a6e9baf}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa451}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x234fcd68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c7c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8ee2af}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe29a}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ddc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeb332c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c56fbd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9fa5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf70c999}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ce8aed6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af2415a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99e9}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x640cb5f1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee62}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1000}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9873}]}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7b8b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004091) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, r0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4005}, 0x4015) 00:37:19 executing program 3: r0 = socket(0x21, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x15, 0x6, 0x5, 0x9, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x20, 0x2, 0x10000}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r1, @local, @broadcast}, 0xc) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000100)="535900cb771fbd67023c9f97919d75c91bd1d11c0a9347416ba5d1bc1c9622420122ba10248b32f3ae2c175d29d2dc837bf4de49d05cca1e0589b43f79e301961f2ddb908f333c3a5eb695e47d490aa3") io_uring_enter(0xffffffffffffffff, 0x2334, 0xbc8a, 0x1, &(0x7f0000000180)={[0x6]}, 0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r1, 0x2f, 0x20, 0x3, 0x3, 0x46, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x20, 0xeea}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x4e, 0x8d, 0x41, @loopback, @loopback, 0x8000, 0x8, 0x2, 0xfe}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000880)={'ip6tnl0\x00', &(0x7f0000000800)={'syztnl1\x00', r5, 0x29, 0x1, 0xe7, 0x8, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x7, 0x7, 0x5f0}}) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1b4, 0x15, 0x200, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "f23a11082a3a8cd7229c6fc78fde9b4894d3cd33df8c5ebbf72d9705d500475abe038ab22701f0"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "0c4bf3877b11997b40a4a45434112ba52ca6143b27b177e1540d9d5b8577236e450c3aefeedd06dc62960f817035b54d379acdaa18cc240f90a035bfb18664ed98aa6997dee2e853b03cbb64ddb6c3c65e0914ec6a838bf5b53340a4a4f840fa742d535d8103065fc9fcad9d5e64773a7baa1b5208271ff31e39"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, '6'}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "24c0bfb4f5d7ed49ba98a88c515fdb7a432399d13071f1e83f3b48cc1d1339775d2b7903bde7f45bc3f2227c119ef7744c270ba1acdae7001cda0641603476c5ab378f805cc74977b9c0840249005667a62b96cc26157be83702630def6fb6f578eb440c7174c5401d3c1e593190b0ebc644436a58b6305940aef34ddb36ff37409bc3d6682418163a6a9ce1225cb698d717dc026a2b1091a68a9d73eded1ba68558d8e8126cfcdbe0f645c620cd741ac2571f369b45ce6f0373c073690aa4ccb1b781aab08a294de224514523568638662b5e7a88cd1380f5deb0e00fad22081545ec442f6d2c"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40}, 0x5) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r6 = socket$inet(0x2, 0x0, 0x8b1d) recvfrom(r6, &(0x7f0000000b40)=""/147, 0x93, 0x120, &(0x7f0000000c00)=@phonet={0x23, 0x3f, 0x6, 0x20}, 0x80) pselect6(0x40, &(0x7f0000000c80)={0x6ed0d36d, 0x2, 0x9, 0x5, 0x1, 0x2ed00000000000, 0x8, 0x10001}, &(0x7f0000000cc0)={0x3f, 0x100, 0x80000000, 0x0, 0x7fff, 0x3, 0x23686214, 0xffff}, &(0x7f0000000d00)={0x3, 0x3f, 0xd55, 0x400, 0x6, 0xadd, 0xa3, 0x8}, &(0x7f0000000d40)={0x77359400}, &(0x7f0000000dc0)={&(0x7f0000000d80)={[0x5]}, 0x8}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000e00), 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000e40)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x33}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 00:37:19 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x3, 0x3, 0x48, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, 0x7800, 0x10, 0x1, 0x515f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44001}, 0x4000001) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40001) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x100080, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = inotify_add_watch(r5, &(0x7f00000008c0)='./file0\x00', 0x42) inotify_rm_watch(r5, r6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r5) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x198, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0xc6, 0x3, "467c0c7597a89579aac0314ff84d25a5bfa7a7a84010a8cdeb8d6e7d989c89793e8fc74e2a2511d35404198ed7091c998741f4e4bab741a085a8b3becbda85d9f4a9f3cb94d70f184825031ccca02ac13670a6e5920b7558bef1438a00f31082281b1c695f77b9ccd22392311f516e881ed0b20df1c48fa3fb19e93b95d44b3c9ad3451e72cd0f9c69057c29532d0b6ace64393e7b36468454d2cc3d0abcc9442503e30de67d9ba034476a6a9ab29de50dd741312ee9eecafe41d186fd5b8445a2af"}, @ETHTOOL_A_WOL_SOPASS={0xbb, 0x3, "47d7feee82dd36f0a90aac4af92282c6abdec006dba9df6b8a04e8e70b12e979422aa2c5ef05681ba6686af9bee7ff67ca28000e4f7c903d13166413d511b44c46066b070b01b68b0bea8b0e0c7f413337fb55f454b8c2d9e1b845498940f37b08ac510de41ba902389865f801c3f67bd28e67e95d31a959319dc1848098156010356dbe49a537d4c0a68a06e37d648ac700126bba340f96fe96ac8ba48adff1fcf27d40cccdc63dfd514fc9a2407b3a36ba5ee3989f3d"}]}, 0x198}, 0x1, 0x0, 0x0, 0x523fede728f66891}, 0x80) 00:37:19 executing program 5: r0 = socket(0x5, 0x1, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x0, 0x5, 0x60, @empty, @local, 0x40, 0x80b0, 0x3d26, 0x80}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x144, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10000810}, 0x20040040) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x4, 0x1, 0x0, 0x8124, 0x0, 0x1}, 0x25a6) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x105002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x42000, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000004, 0x10, r3, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd, 0x7f, &(0x7f0000000440)="49873bca584ce055bba0f96188ae7a47d7f14636bb842999536ebbbcc1ed492c70e567374a0850821f043b0bd278fa8837ebc4153f3f7834b3db9076c5c5cf0c2456e769affd5a94b782b867b1879273b89f2df56bdc02c7e5fe1f2114f6ea35da9dd62348a9bf4ab977000db90bb33c78bc441cd0e64207c31f251958d9c98fc49454dc81e1742be3a2f2b3ac8a", 0x8e, 0x9, 0x1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', r1, 0x2f, 0x7f, 0x3, 0x8, 0x24, @loopback, @remote, 0x7800, 0x80, 0x2e1, 0x1ff}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="df863e1fbdbe"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000740)={@mcast2, 0x11, r1}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000780)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x11) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x24) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="49bdbc5801cb"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_io_uring_complete(r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) 00:37:19 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x384, 0x13, 0x200, 0x70bd29, 0x25dfdbfc, {0xb, 0x1, 0x3, 0x81, {0x4e23, 0x4e22, [0x7fffffff, 0x0, 0x7, 0x400], [0x7fff, 0x3, 0x8000, 0x1], 0x0, [0x4, 0x3]}, 0x1, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "12c39d3c1a79e8a66e45061aa9ec629c149d93dec041e044df21dca95921d260aa770b49381867989de1a4d02a733e59a7d87c9ceb3178d3bd12ece5f0b2a461531948bd9e3e41d1721bf8a52f15d5feb4e1b5c40d760fe63239cfb80ed3cef64b732635397fdac24a0d36de4b93a18c9690afee9a04a61fc5788909e117e6e233ac01ecfb0f55f5177b43bb032aea208cb8b110a7bb07315fff"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "92412db919047c70acb9684070274c4e33169436053cec3d8d04d4ed75e9b3d7ff0053c8cb725837065882a2e45a4571dd930670cbcb17c6928137095e8c61f25dec0f08f501b6951a816d506dd35f8f09fd8adf155abf819b3329e8af66848110c192c808cf42953a1b14051408de486c59c23fd61fb3d9968f3fc50f09b6637cf96e9a65229ea1ea2f2ca13c35bb9e635dbd6c698803c0561d641b88ce9953eaa3887850c6c11829761a0011dd8ac4c0bf4283cfc965b5e789c6e8db6e970ff99260a625d78bf15484100d653a40eae920ea6357b84b7f00a7968c44e415bb6d62c9d9ef751c5d4f34a8821d8b8dd289"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "004a605b5ac71055a325e6206f895447ca8505178aba81ce1a2e7e8d8bcfc3211cebb4df855d7430f7187d95b10cd6d3cb3520a9ceccc3251231a799780397346c6ead8c4057007aa0d76d4e1eeccf4e1b1c5e69776fee71dcd3e129f3cfe5b6c2ca8f18b316c719b4f5bdadef00db090f361d37c591a1216ad5947726fad67fa6ba129e087c6bbd42c631e117cc"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "6cde1459b9024eb60bf8151e2c890624f92ee9a3ad9759cd3774559dd7229c9295229f157e90aa85f646f14cbd15548c3fe2e0789c885efb5cfdb870d3faeea46fd43e0aabad8d7121e8051b6b13302e6a2f379bea61f46a237bbf51e960a477c100833ebc93eafeb50b6748da6f3b1a9835c1ece0ebd2e273b989fa001c42068a6f9c"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "e5993b7a0355be265d8977198e55b4c70ba9856b2a22932a19ff01c788c86b2fb5b3f59844bf298ae6b2a658be32"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "e8b2688f6b41200759887df6daf400ae1bc5573b0be1df031d019a43f84c55637b33d089da62164ccb8af3b22bec1897140a0aadae4479206b285d4299530e85fe3db48262c2dd9bd6cda2"}]}, 0x384}, 0x1, 0x0, 0x0, 0x4040041}, 0x8080) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000005c0)={0x44, "8541fca720254023728dc6888786d92a59a047c128e4f54a9ed27bb19207633ab4b3798ba287a51c28d74487a7069a3fd26b9fead5fe481f61d3ac7f7fa706c5c0ff8f99"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x4891, {{0x1a, 0x4, 0x0, 0x33, 0x68, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x24, 0x3, 0x3, [{@remote, 0x3ff}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010100, 0xff}, {@multicast2, 0x9}, {@loopback, 0x1}, {@multicast1, 0x7}, {@remote, 0x9}]}, @generic={0x89, 0x10, "5be29ea41767d2e512a940c88b95"}, @end, @end]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000780)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)=@updsa={0x53c, 0x1a, 0x200, 0x70bd28, 0x25dfdbfb, {{@in=@multicast1, @in=@local, 0x4e24, 0x100, 0x4e22, 0x1000, 0x2, 0x80, 0x80, 0x82, r2, r3}, {@in=@private=0xa010102, 0x4d4, 0x3c}, @in6=@loopback, {0x8, 0x6, 0x8, 0xfffffffffffffff9, 0x2de14242, 0x10000, 0x236f488d, 0x3}, {0xc95, 0x7, 0x9, 0x8}, {0x81, 0xffffffff, 0x81}, 0x70bd27, 0x3504, 0xa, 0x4, 0x4, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd27, 0x70bd28, 0x70bd28, 0x3, [0x80000001, 0x1, 0x200, 0x3f3b]}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffffe1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0xa, 0x81, 0x4}}, @sa={0xe4, 0x6, {{@in6=@empty, @in=@local, 0x4e21, 0x2, 0x4e20, 0x38, 0xa, 0x20, 0x0, 0x3a, 0x0, r4}, {@in=@empty, 0x4d6, 0x33}, @in6=@rand_addr=' \x01\x00', {0x5, 0x9a, 0x4f0eeee7, 0x6, 0x6, 0xae1, 0xfff, 0x9}, {0x400000, 0x40, 0xffffffffffffff7f, 0x80000001}, {0x8000, 0x5, 0x5}, 0x70bd2b, 0x3504, 0x2, 0x1, 0x80, 0x8b}}, @algo_auth={0xe6, 0x1, {{'sha224\x00'}, 0x4f0, "a9ffa74701774ffeaf9a73489908edaa23b9bb529bf9430d6527d2d2a8ebd03a579aa0cab7824e0dd7a400e1be769cb4850fd4b3d71d6009e8dcf2f68917e523ea28bb1516113537a63c1b16aba0cf6860b39ee0d2afa3af34351593ed5f159e53e54b8da09309edbde1aace28b7609949307d65b94b07d727dad5db21ea929dbc8f29ab7bf277dd6bd0ac45b6cc36d54e765a0d40ce2cc8d5c955d0f1b8"}}, @tmpl={0xc4, 0x5, [{{@in6=@private0, 0x4d4, 0xff}, 0x2, @in6=@mcast2, 0x3501, 0x1, 0x0, 0xd3, 0x0, 0x3, 0x5}, {{@in6=@empty, 0x4d3, 0x32}, 0xa, @in=@multicast2, 0x3502, 0x1, 0x2, 0xff, 0x0, 0x7, 0x3}, {{@in=@broadcast, 0x4d4, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x4, 0x0, 0x7f, 0x3, 0x2, 0x8}]}, @tmpl={0x144, 0x5, [{{@in=@empty, 0x4d6}, 0x2, @in=@multicast1, 0x3505, 0x2, 0x3, 0xff, 0x93, 0x80000000, 0xffffffff}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x2, 0x1, 0x20, 0x5, 0x2, 0x83}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d2, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x3, 0x3, 0x70, 0x7f, 0x1, 0x62ec}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x6c}, 0x1c, @in=@empty, 0x3506, 0x4, 0x2, 0x6, 0x7, 0x4, 0x8000}, {{@in6=@mcast2, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x3504, 0x4, 0x1, 0x1, 0x2a, 0xffffffff, 0x3}]}, @coaddr={0x14, 0xe, @in6=@private2}]}, 0x53c}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1882) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000f80)={'ip6_vti0\x00', &(0x7f0000000f00)={'syztnl2\x00', r2, 0x0, 0x3, 0x5, 0x5, 0x13, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x8, 0x101, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'syztnl2\x00', r2, 0x2f, 0x9, 0x5, 0x2, 0x20, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1, 0x80, 0xffff, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000001080)={0x544, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x3b0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "6b38755240ed92daf3b52ecf1ed777409d63ea38fdaba53e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "275a96aba026698bd325a49ba6962f1070a4d0afb6c35d8413b91f10cc55b8615a4bb9b2e26f814c01da1027f0da45590146febe9d98a3a645c25fd51f0a21b9efec6957c6889577218116c252be2423cc320a757fd8a53804f39d0b98da147354370876fd0d90bb700b7f09b33da601357bb0f3bad55033c53e4ba33ab0ce4055b6765e8dcc4d9cc62208876d599f53b107253d40ace0c0651be6a247e530e66da98e1cd67a397eb26f1350511415e16cc8705888436af7ed7f90c3919361a46c65f3b0e29142a6d6deb4aa7d91cfaa"}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(!,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&\xa1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8422}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sha224\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.+,/@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf65}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfac}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sha224\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^*%(]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "a9234ad32446f14b8df850f547d2a822ea74d6a276700a48f35124b1f1dbf83216b3e80f05c5e26ff7df005cd7aa89ef6f197184de7412287ba1e54681a75da10f77c3d0ce4f8977713de24d256a1b6b6dd507c15351eeb5cefec98f21fd2606f4bf78371b3c825d63c2b1bc890f13a8ea3dd111d8a76d805b3d0ea1610cd41cd26bcd1a2bd7cbc3eedda005cd88799f646c4e8f2bd2a1974ea912affd08ea918ab9642a3bdde4f6930de97c1f128d6335846c98c8e54fc4464f67a8d0324ecc8144889c59548e259ec2c944c7ef0ec44aa2"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&[\xa0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x200008d4}, 0x81) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000001680)) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001700), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001800)={'tunl0\x00', &(0x7f0000001780)={'erspan0\x00', r2, 0x700, 0x1, 0x9, 0x6, {{0xd, 0x4, 0x0, 0x14, 0x34, 0x68, 0x0, 0xc4, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x33}, {[@lsrr={0x83, 0x1f, 0xf4, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @multicast1, @empty, @rand_addr=0x64010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001900)={'syztnl0\x00', &(0x7f0000001880)={'ip6tnl0\x00', r5, 0x4, 0x4, 0x8, 0x5, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7807, 0x8000, 0x3, 0x6e7}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001940)={0x434, r7, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2c4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r6}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9fba}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xefd7}}, {0x8, 0x6, r11}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24008001}, 0x4040094) 00:37:19 executing program 7: r0 = syz_io_uring_complete(0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000000)=""/47) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000040)={0xb, "0156114eeebbd59b2afcefbae9e10e3ba8a12fcdf581bee56fa2ba9841135ee41b20276833c899965d566070242f093b7bcbfbfbaa8395d6f1b2ac0651535fb9"}) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000000c0)) r1 = socket(0x9f87599d891ecc38, 0x6, 0xfffffffa) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getae={0xac, 0x1f, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@local, 0x4d2, 0xa, 0x32}, @in=@private=0xa010100, 0x3}, [@replay_thresh={0x8, 0xb, 0xfffffff9}, @sec_ctx={0x11, 0x8, {0xd, 0x8, 0x0, 0x0, 0x5, "1e5e840da2"}}, @algo_auth_trunc={0x50, 0x14, {{'rmd320-generic\x00'}, 0x20, 0x80, "8d5e96c5"}}]}, 0xac}, 0x1, 0x0, 0x0, 0x200000e0}, 0x48880) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100ca01}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000740)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x84, 0x15, 0x10, 0x70bd26, 0x25dfdbfc, {0x2a, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x57, 0x1, "6638f6c21557168f0cac3eebab5effc76528c789a7c9c5232aefe19a368b4b612423f4270574ef3d12ff4c3b98ac544c67b8b5104f50b383c2094ce884ffae1a715f828b56493c0cd5712594aeb2d1716e60e7"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "a9cb7a77e6b293c722cbe0e7a865a684bf"}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = syz_io_uring_complete(0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x18000}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x180010, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000c80)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000d80)={'syztnl1\x00', &(0x7f0000000d00)={'syztnl0\x00', r2, 0x29, 0x80, 0x6, 0x2, 0x8, @private0, @private0, 0x8, 0x20, 0x4, 0x80000001}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x80) [ 113.258016] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.259500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.265906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.272915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.277562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.320541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.327699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.329155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.336000] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.337943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.450040] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.457581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.458887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.464013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.464753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.472338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.473932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.494456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.495115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.508093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.546277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.552840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.559401] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.568998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.575844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.579304] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.589881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.594263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.598906] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.600535] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.610150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.612340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.628328] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.651320] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.658837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.663578] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.680070] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.695066] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.699073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.733982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.350228] Bluetooth: hci0: command tx timeout [ 115.414709] Bluetooth: hci1: command tx timeout [ 115.541708] Bluetooth: hci2: command tx timeout [ 115.606983] Bluetooth: hci3: command tx timeout [ 115.671671] Bluetooth: hci5: command tx timeout [ 115.734791] Bluetooth: hci4: command tx timeout [ 115.798751] Bluetooth: hci7: command tx timeout [ 115.799319] Bluetooth: hci6: command tx timeout [ 117.399029] Bluetooth: hci0: command tx timeout [ 117.464633] Bluetooth: hci1: command tx timeout [ 117.590512] Bluetooth: hci2: command tx timeout [ 117.655778] Bluetooth: hci3: command tx timeout [ 117.717763] Bluetooth: hci5: command tx timeout [ 117.782717] Bluetooth: hci4: command tx timeout [ 117.845759] Bluetooth: hci7: command tx timeout [ 117.846188] Bluetooth: hci6: command tx timeout [ 119.445681] Bluetooth: hci0: command tx timeout [ 119.510882] Bluetooth: hci1: command tx timeout [ 119.639653] Bluetooth: hci2: command tx timeout [ 119.701949] Bluetooth: hci3: command tx timeout [ 119.766793] Bluetooth: hci5: command tx timeout [ 119.832750] Bluetooth: hci4: command tx timeout [ 119.893933] Bluetooth: hci7: command tx timeout [ 119.894401] Bluetooth: hci6: command tx timeout [ 121.494883] Bluetooth: hci0: command tx timeout [ 121.558758] Bluetooth: hci1: command tx timeout [ 121.686949] Bluetooth: hci2: command tx timeout [ 121.751021] Bluetooth: hci3: command tx timeout [ 121.814711] Bluetooth: hci5: command tx timeout [ 121.878895] Bluetooth: hci4: command tx timeout [ 121.942700] Bluetooth: hci6: command tx timeout [ 121.943173] Bluetooth: hci7: command tx timeout [ 175.844306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.845985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.847919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.854150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.856392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.970475] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 175.976205] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.977164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 175.979224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 175.987374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.989545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.992474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 175.996169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 175.997108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.001412] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.003347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.005166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.006367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.009270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.011105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.019714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.029163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.034787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.072474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.081906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.103794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.110914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.131773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.182978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.189527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.242265] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.255024] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.255416] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.283825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.310030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.311282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.362130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.383092] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.392810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.392804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.941695] Bluetooth: hci0: command tx timeout [ 178.070171] Bluetooth: hci1: command tx timeout [ 178.133762] Bluetooth: hci4: command tx timeout [ 178.133916] Bluetooth: hci3: command tx timeout [ 178.134470] Bluetooth: hci2: command tx timeout [ 178.325711] Bluetooth: hci5: command tx timeout [ 178.517870] Bluetooth: hci6: command tx timeout [ 178.517978] Bluetooth: hci7: command tx timeout [ 179.990978] Bluetooth: hci0: command tx timeout [ 180.118021] Bluetooth: hci1: command tx timeout [ 180.181734] Bluetooth: hci3: command tx timeout [ 180.181945] Bluetooth: hci4: command tx timeout [ 180.183399] Bluetooth: hci2: command tx timeout [ 180.374012] Bluetooth: hci5: command tx timeout [ 180.565851] Bluetooth: hci6: command tx timeout [ 180.565958] Bluetooth: hci7: command tx timeout [ 182.038244] Bluetooth: hci0: command tx timeout [ 182.166645] Bluetooth: hci1: command tx timeout [ 182.229709] Bluetooth: hci2: command tx timeout [ 182.229818] Bluetooth: hci3: command tx timeout [ 182.230994] Bluetooth: hci4: command tx timeout [ 182.423447] Bluetooth: hci5: command tx timeout [ 182.613759] Bluetooth: hci7: command tx timeout [ 182.616995] Bluetooth: hci6: command tx timeout [ 184.086652] Bluetooth: hci0: command tx timeout [ 184.215635] Bluetooth: hci1: command tx timeout [ 184.279028] Bluetooth: hci3: command tx timeout [ 184.279501] Bluetooth: hci4: command tx timeout [ 184.280489] Bluetooth: hci2: command tx timeout [ 184.470907] Bluetooth: hci5: command tx timeout [ 184.663079] Bluetooth: hci6: command tx timeout [ 184.663328] Bluetooth: hci7: command tx timeout [ 238.127776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.129465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.129927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.139546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.142506] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.154168] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.159034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.165971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.176484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.181948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.252372] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.256522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.265874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.267331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.270095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.275532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.281522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.284481] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.289278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.292283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.341063] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.346922] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.349532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.360073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.365294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.390486] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.398189] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.446505] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.456927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.459257] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.470363] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.473806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.483648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.487277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.497254] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.511094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.515672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.518288] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.520955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.522261] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.214241] Bluetooth: hci1: command tx timeout [ 240.277693] Bluetooth: hci0: command tx timeout [ 240.341807] Bluetooth: hci2: command tx timeout [ 240.342711] Bluetooth: hci3: command tx timeout [ 240.470675] Bluetooth: hci4: command tx timeout [ 240.597792] Bluetooth: hci6: command tx timeout [ 240.598547] Bluetooth: hci5: command tx timeout [ 240.599393] Bluetooth: hci7: command tx timeout [ 242.262045] Bluetooth: hci1: command tx timeout [ 242.326914] Bluetooth: hci0: command tx timeout [ 242.389990] Bluetooth: hci3: command tx timeout [ 242.390412] Bluetooth: hci2: command tx timeout [ 242.518338] Bluetooth: hci4: command tx timeout [ 242.645740] Bluetooth: hci7: command tx timeout [ 242.646174] Bluetooth: hci5: command tx timeout [ 242.646577] Bluetooth: hci6: command tx timeout [ 244.309955] Bluetooth: hci1: command tx timeout [ 244.374831] Bluetooth: hci0: command tx timeout [ 244.438092] Bluetooth: hci3: command tx timeout [ 244.438578] Bluetooth: hci2: command tx timeout [ 244.566733] Bluetooth: hci4: command tx timeout [ 244.693744] Bluetooth: hci7: command tx timeout [ 244.694238] Bluetooth: hci6: command tx timeout [ 244.694751] Bluetooth: hci5: command tx timeout [ 246.358147] Bluetooth: hci1: command tx timeout [ 246.422905] Bluetooth: hci0: command tx timeout [ 246.486935] Bluetooth: hci3: command tx timeout [ 246.487439] Bluetooth: hci2: command tx timeout [ 246.613766] Bluetooth: hci4: command tx timeout [ 246.742718] Bluetooth: hci7: command tx timeout [ 246.743219] Bluetooth: hci5: command tx timeout [ 246.743841] Bluetooth: hci6: command tx timeout [ 300.592695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.597001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.605731] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.619237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.625963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.668375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.676016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.680478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.690802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.694577] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.789201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.791864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.794969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.801430] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.806022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.917163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.926206] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.935693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.939181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.942848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.946376] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.953001] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.972152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.975514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.997247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.000216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.068500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.084415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.119219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.137655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.258937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.293907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.322832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.329202] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.341294] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.344575] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.364006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.374170] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.440188] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.475120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.679674] Bluetooth: hci0: command tx timeout [ 302.741796] Bluetooth: hci1: command tx timeout [ 302.933726] Bluetooth: hci3: command tx timeout [ 303.061885] Bluetooth: hci4: command tx timeout [ 303.255660] Bluetooth: hci5: command tx timeout [ 303.255880] Bluetooth: hci2: command tx timeout [ 303.510046] Bluetooth: hci6: command tx timeout [ 303.637944] Bluetooth: hci7: command tx timeout [ 304.727658] Bluetooth: hci0: command tx timeout [ 304.789694] Bluetooth: hci1: command tx timeout [ 304.982897] Bluetooth: hci3: command tx timeout [ 305.111636] Bluetooth: hci4: command tx timeout [ 305.301884] Bluetooth: hci5: command tx timeout [ 305.304752] Bluetooth: hci2: command tx timeout [ 305.557744] Bluetooth: hci6: command tx timeout [ 305.685677] Bluetooth: hci7: command tx timeout [ 306.773695] Bluetooth: hci0: command tx timeout [ 306.837690] Bluetooth: hci1: command tx timeout [ 307.030032] Bluetooth: hci3: command tx timeout [ 307.157670] Bluetooth: hci4: command tx timeout [ 307.350074] Bluetooth: hci2: command tx timeout [ 307.350324] Bluetooth: hci5: command tx timeout [ 307.605693] Bluetooth: hci6: command tx timeout [ 307.733920] Bluetooth: hci7: command tx timeout [ 308.821855] Bluetooth: hci0: command tx timeout [ 308.885681] Bluetooth: hci1: command tx timeout [ 309.077843] Bluetooth: hci3: command tx timeout [ 309.206678] Bluetooth: hci4: command tx timeout [ 309.397677] Bluetooth: hci5: command tx timeout [ 309.398808] Bluetooth: hci2: command tx timeout [ 309.653687] Bluetooth: hci6: command tx timeout [ 309.782667] Bluetooth: hci7: command tx timeout [ 362.733502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.737113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.740971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.751428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.759517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.992743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.000030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.008255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.017254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.019341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.022952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.038028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.041299] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.053149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.070032] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.074493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.078160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.081462] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.088574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.119122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.129231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.156823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.167083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.178554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.201707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.208543] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.213734] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.217817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 363.223387] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 363.228092] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.288431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 363.294364] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 363.304123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.313035] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.331249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.431430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.443093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.446039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.452296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.457441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.824682] Bluetooth: hci0: command tx timeout [ 365.077791] Bluetooth: hci1: command tx timeout [ 365.142686] Bluetooth: hci2: command tx timeout [ 365.206934] Bluetooth: hci4: command tx timeout [ 365.334076] Bluetooth: hci7: command tx timeout [ 365.398045] Bluetooth: hci6: command tx timeout [ 365.527670] Bluetooth: hci5: command tx timeout [ 365.589692] Bluetooth: hci3: command tx timeout [ 366.869665] Bluetooth: hci0: command tx timeout [ 367.126040] Bluetooth: hci1: command tx timeout [ 367.190129] Bluetooth: hci2: command tx timeout [ 367.254627] Bluetooth: hci4: command tx timeout [ 367.381820] Bluetooth: hci7: command tx timeout [ 367.445746] Bluetooth: hci6: command tx timeout [ 367.575000] Bluetooth: hci5: command tx timeout [ 367.638652] Bluetooth: hci3: command tx timeout [ 368.917924] Bluetooth: hci0: command tx timeout [ 369.173671] Bluetooth: hci1: command tx timeout [ 369.237674] Bluetooth: hci2: command tx timeout [ 369.301679] Bluetooth: hci4: command tx timeout [ 369.429696] Bluetooth: hci7: command tx timeout [ 369.493857] Bluetooth: hci6: command tx timeout [ 369.621808] Bluetooth: hci5: command tx timeout [ 369.685825] Bluetooth: hci3: command tx timeout [ 370.966729] Bluetooth: hci0: command tx timeout [ 371.222245] Bluetooth: hci1: command tx timeout [ 371.285669] Bluetooth: hci2: command tx timeout [ 371.349769] Bluetooth: hci4: command tx timeout [ 371.477856] Bluetooth: hci7: command tx timeout [ 371.542590] Bluetooth: hci6: command tx timeout [ 371.669968] Bluetooth: hci5: command tx timeout [ 371.734661] Bluetooth: hci3: command tx timeout VM DIAGNOSIS: 00:42:21 Registers: info registers vcpu 0 RAX=ffffffff81aecec4 RBX=ffffffff816049e0 RCX=ffff88802f16733c RDX=1ffff11005e2ce88 RSI=ffffffff81aecec4 RDI=ffff88802f1674b0 RBP=ffff88802f167480 RSP=ffff88802f1673e0 R8 =ffffffff86867cde R9 =ffff88802f167428 R10=000000000003b53d R11=00000000000248fc R12=ffff88802f1674b0 R13=0000000000000000 R14=ffff888015681b80 R15=0000000000092cc0 RIP=ffffffff84b4e640 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7fb49656f4 CR3=0000000035e09000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7fb497447000007f7fb4973f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88800a927290 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=00000000000c43df R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88800a927378 RIP=ffffffff8151b001 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd6d4c92540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd6d4e7d620 CR3=000000002af6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000