Warning: Permanently added '[localhost]:52719' (ECDSA) to the list of known hosts.
2025/01/04 04:20:15 fuzzer started
2025/01/04 04:20:15 dialing manager at localhost:34561
syzkaller login: [   71.884076] cgroup: Unknown subsys name 'net'
[   71.995003] cgroup: Unknown subsys name 'cpuset'
[   72.041144] cgroup: Unknown subsys name 'rlimit'
2025/01/04 04:20:34 syscalls: 204
2025/01/04 04:20:34 code coverage: enabled
2025/01/04 04:20:34 comparison tracing: enabled
2025/01/04 04:20:34 extra coverage: enabled
2025/01/04 04:20:34 setuid sandbox: enabled
2025/01/04 04:20:34 namespace sandbox: enabled
2025/01/04 04:20:34 Android sandbox: enabled
2025/01/04 04:20:34 fault injection: enabled
2025/01/04 04:20:34 leak checking: enabled
2025/01/04 04:20:34 net packet injection: enabled
2025/01/04 04:20:34 net device setup: enabled
2025/01/04 04:20:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/04 04:20:34 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/04 04:20:34 USB emulation: enabled
2025/01/04 04:20:34 hci packet injection: enabled
2025/01/04 04:20:34 wifi device emulation: enabled
2025/01/04 04:20:34 802.15.4 emulation: enabled
2025/01/04 04:20:34 fetching corpus: 0, signal 0/0 (executing program)
2025/01/04 04:20:36 starting 8 fuzzer processes
04:20:36 executing program 1:
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000000))
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000040))
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x20280)
ioctl$BLKROGET(r0, 0x125e, &(0x7f00000000c0))
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000100)=0x7)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10001015})
r1 = memfd_secret(0x0)
ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x5, 0x8, 0x0, [{0xfffffffffffffffd, 0x20, 0x5, 0x1, 0x1, 0x6, 0xd1}, {0x0, 0x4, 0x3a, 0x1, 0x3, 0xfe, 0x2}, {0x9, 0x5f3c, 0x5, 0x3, 0x5, 0x9, 0x3}, {0x7ff, 0x7f, 0x8, 0x4a, 0x6, 0x7, 0x1}, {0x3ff, 0x1, 0x8, 0x29, 0x3, 0x3f, 0x5}, {0x2, 0x1, 0x8, 0x0, 0x5, 0x1}, {0xc0000000000, 0xfffffffffffffff9, 0x5, 0x40, 0xfb, 0x2, 0x7}, {0x1b8, 0x5, 0x7, 0x80, 0x7, 0x2, 0x8}]})
r2 = syz_open_dev$loop(&(0x7f00000003c0), 0xb30f, 0xe0080)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000400)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000440)={0x0, 0x6, r3})
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000480))
r4 = memfd_secret(0x0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000004c0))
ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000500))
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000640)={0x100, 0x0, 0x7, 0x6f})
r5 = syz_open_dev$loop(&(0x7f0000000680), 0x20, 0x202000)
ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f00000006c0)={0x1, 0x7fff})

04:20:36 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x80)
r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x5, 0x3, 0x2, 0x0, 0x0, 0x212, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x550, 0x4, @perf_config_ext={0x9, 0x8000}, 0x4, 0x9, 0x2890000, 0x4, 0x10fb, 0x101, 0x400, 0x0, 0x7f, 0x0, 0x1}, 0x0, 0x10, r0, 0x8)
r2 = accept4(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80, 0x0)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000200)=""/219, &(0x7f0000000300)=0xdb)
r3 = socket(0x0, 0x6, 0x7fffffff)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x40, 0x1, 0x3ff}})
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r3)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x90, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffff269}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x34}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x90}}, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r5, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e42ed3ec92d7ebd4ae6395f1502149ba"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2e}, @NL80211_ATTR_PMKID={0x14, 0x55, "e68c4e6a13f6844bcf034aa8a9df8a80"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, 0x2, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xd6d6}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}]}, 0x3c}}, 0x40000)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000880)=""/188, &(0x7f0000000940)=0xbc)
accept4(r0, 0x0, &(0x7f0000000980), 0x800)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000009c0)={"6e22e19050b89076f8cbc1db03cbe4ca", 0x0, <r6=>0x0, {0x162, 0x3}, {0x9, 0x20}, 0xc554, [0x3, 0x4, 0x81, 0xffffffffffff529f, 0x72, 0x16da, 0x1ff, 0x100000000, 0xaa, 0x14f0, 0x2, 0x7, 0x80000001, 0xffff, 0x0, 0x3]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000ac0)={"a23c96b6142f84a6ab583b41f866c747", r6, 0x0, {0x410cd900, 0x6}, {0x6, 0x8}, 0x261400, [0xffffffff, 0xffffffffffffffff, 0x9, 0xe4ad, 0x2ae4, 0x9, 0x1, 0x401, 0xff, 0x7fff, 0x9, 0x100000000, 0xfffffffffffffff7, 0x1, 0x3f, 0x31c]})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xb4, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040800}, 0x880)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000e40)="22b06a8841bf320da6aaa212608dfaf4d8768524094ee6f8ebebef68440e2af60fe44cc1ae94f783578300a3c8f00247e77920c52cb0ce9553f178b4a247f8b9bd6d34edf9576715a61537e7e275f88a51337e379419a38627dcd2bdcf051ddf69e83cb1307477b2818afb1f71bf3ec5caf03484e54d959ef61c6ec0f0014807e2aa29474805948d9ecc75ec334fb1fcfa733b26760272a65803b83184d37c1ccbd9c2ad37e26c6248686c2364b3900a4472006033d7716b070ee2f72d3f8766c617c6440b734f52ed1214b1431f67a10f9b702d7792fde8b3", 0xd9)

04:20:36 executing program 2:
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0x4)
ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040))
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/216, 0xd8}, {&(0x7f0000000200)=""/212, 0xd4}, {&(0x7f0000000300)=""/3, 0x3}], 0x3}, 0x1}, {{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/61, 0x3d}], 0x1, &(0x7f0000000480)=""/37, 0x25}, 0x7}], 0x2, 0x121, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540), 0x4)
r2 = memfd_secret(0x0)
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000580)=0xfffffffffffffffb)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4)
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000600))
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000640))
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x8c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44010}, 0x20048854)
r3 = memfd_secret(0x0)
ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000800))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0)
ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000880))
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000a80))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, r5, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

04:20:36 executing program 5:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x80000)
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040))
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080))
r1 = memfd_secret(0x80000)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000000c0)=0x40000000)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100))
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140))
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000180)=0xbdb)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000001c0)=0x3)
socketpair(0x9, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x200, 0x9, 0x4, 0x4, 0x3}, 0x14)
ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000280)=0x5)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000002c0))
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000300))
r3 = syz_io_uring_setup(0x3949, &(0x7f0000000340)={0x0, 0x2c36, 0x20, 0x2, 0x322}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0)
io_uring_setup(0x25d4, &(0x7f0000000440)={0x0, 0xf5cd, 0x0, 0x1, 0x197, 0x0, r3})
r6 = syz_open_dev$vcsu(&(0x7f00000004c0), 0xaf1d, 0x20c43)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000500), 0x4)
r7 = syz_open_dev$loop(&(0x7f0000000540), 0x46f, 0x8000)
syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd=r7, 0x1ff, &(0x7f0000000580)="c66bf3ee516afc06f38182b4d774e253d5fee18180891c5d575f4cee803491ba1e7dcd07be891cb534399be41ad9a04e3018a304cd2a2f14027e0e60c7bec3a4e4da9e03c4bbc831b65373f5653dce12bd7c841a6833f6377e3d46daa5dd0e", 0x5f}, 0x2)

04:20:36 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6bdeec22}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x404c040}, 0x200400c0)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x1, 0x9, 0x500, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40020}, 0x40000)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x383}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x600000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6229}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xf0}, 0x20000000)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000480)={0x2})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000004c0))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000500)=<r1=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"931cecdf0a823d7524fa09b126bf6060", <r2=>0x0, r1, {0x7, 0x4}, {0x80000000, 0x10001}, 0x8, [0x8, 0x2d, 0x0, 0xffff, 0xffffffff, 0x9, 0x9, 0x3ff, 0x3, 0x522, 0x9, 0x200, 0x1, 0x84, 0x8, 0xd4]})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000640)=r2)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x965596c09e216a2c)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x101000, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x8000)
ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000940))
modify_ldt$write2(0x11, &(0x7f0000000980)={0x1, 0x20001000, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xab}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r3)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x98, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd8db}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62b6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44048}, 0x20000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000c80))
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000cc0))

[   91.134819] audit: type=1400 audit(1735964436.209:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:20:36 executing program 7:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
r1 = memfd_secret(0x0)
r2 = socket(0x6, 0x80000, 0x444)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340))
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, 0x0, 0x112, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x5}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048850}, 0x800)
pipe2$9p(&(0x7f00000004c0)={<r3=>0xffffffffffffffff}, 0x4800)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x181140, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000540)={r4, r5, 0x9ce6})
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000580)=0x1, 0x4)
r7 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x7fff, 0x600)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000700)={0x2000})
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000740)=""/230)
ioctl$EVIOCGNAME(r7, 0x80404506, &(0x7f0000000840)=""/135)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000980)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/55, 0x37, 0x0, &(0x7f0000000940)}, &(0x7f00000009c0)=0x40)
ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000a00)={0x50ce, 0x7})
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, 0x4, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x20000004)

04:20:36 executing program 4:
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000))
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfff, 0x8000)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000140))
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfff, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3f66eb4ae2631758, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x13}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000780)=@l2, &(0x7f0000000800)=0x80, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x138, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbe9}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4e}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x92da14e8578a4849}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9d0}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x8010)
r5 = syz_open_dev$vcsu(&(0x7f0000004c40), 0x6, 0x4000)
sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000004dc0)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004d80)={&(0x7f0000004cc0)={0x88, r1, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20dd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000880}, 0x80)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000004f40)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004f00)={&(0x7f0000004e40)={0x88, r3, 0x212, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x10}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x2c, 0xac, "c205be6c7ddc821eee93e3c53a0a36ab8fa7a77c803d50d05d6135628366ecd087652a73cfd8a51a"}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x731}}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x5}}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4040085)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004fc0), r5)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000005140)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005100)={&(0x7f0000005000)={0xd0, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xd0}}, 0x4004074)
syz_genetlink_get_family_id$l2tp(&(0x7f0000005180), r2)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005200), r2)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000005380)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005340)={&(0x7f0000005240)={0xcc, r7, 0xc02, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x42}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcc7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x726c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xcc}}, 0x20000040)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005480)={&(0x7f0000005400)={0x44, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20044841)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000009bc0)={&(0x7f0000009940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000009b80)={&(0x7f0000009980)={0x1ec, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x7da68d6b21962fdb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x57}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x0)

04:20:36 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "d30d715b5eede9d35c1569dfaf2e10ce"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}]}, 0x54}}, 0x4048000)
r1 = socket(0x1e, 0x3, 0x7)
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3e53666e55db0414d0ab3d6b42"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0xc091)
sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0xe76c1cb94fd50d94)
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r0, 0x221, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xed9e, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005140), r1)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000005340)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005300)={&(0x7f0000005180)={0x158, r3, 0x302, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x294}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x24004010}, 0x4040)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000005480)={&(0x7f0000005380), 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x50, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf947}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]]}, 0x50}}, 0x8000000)
r4 = memfd_secret(0x80000)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, &(0x7f00000054c0))
sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000005880)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005840)={&(0x7f0000005540)={0x2d0, r0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x7b}}}}, [@NL80211_ATTR_TESTDATA={0x10, 0x45, "3c9b8389296cc0f4d6ffa9b3"}, @NL80211_ATTR_TESTDATA={0x11, 0x45, "a410de572f5657e558d83adb39"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "adc9009f06a8d36010cce79d71844604748c9eeff21c60e2e988d61cc2bef83ae1e89cff5980f30e5f0c407e914222b953f0fa713f501c7c8b3c62963581882d2d3f4bbcdb3d4ff304fe66399771b9cf5bdd6c2054aec89db4ff7ac9aa8b9c7a004dacc4632ea1763938e6087552c42b484fa8769e1455480b28dd350b600cc549ecbc90f79628d08c7f1c5dc8c062f62704b6e9734f413c5fbbe134b163759899c3f1d4b916faeeb33db8417413fe44e65f27bc661f2bd66fa6abd6be9b0c53e101db3263b376a1cd42207643cb6c06d88718397d2a0e111a28738f7b293a060f3bdfe3ebc5081354b1ea9da0f0faa8"}, @NL80211_ATTR_TESTDATA={0xc5, 0x45, "5dec316e607c198109724af0202e3e90915e57bdba85f78c4bf67118dee54a01fe6662c0b236232348a00b4ac7f4db713f79dec5e342623032b264ed4cfb809027a45450e82c262f0ea2b3ed06bb0f3de60dceb002f097399f40fefb849431a6934809efa45469976296f8d759e72c3dfe66f837029acad41f544231dcfb9cec1039a83496684fb265edc1707f857f3da0b34cf1ceb824872ad8a02dbe0adfb2b20e51ab5cef050e16f8fbcfd34a54a88828fc7b0c64ff5a51a75baba56a26a0e5"}, @NL80211_ATTR_TESTDATA={0xc7, 0x45, "81005330fa1c8091272dad4040109db5ea107bbc84f429ea6383a19ea75e486957f7d32642c26a3b5e688e194b6bd3394cd186b9bbb25345353b1052062de6e2e09fd537a7a8f9112d01532f00f03c7a7a7842cda48a11a32f1102e67b1af919f262d3bde8768280ea88493fea8297da028ec27d5d041e048c0f3bacea017ec5eb5a9f7258c34ca534dbc3b9d45ff5d0360e65d10a45eb14e878c146b73ed111ba294c09fe9a8b3c0507a314f08c16d8af9cd72297c64b038c20e7eecf53c459c30f01"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x8000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000005980)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r1, &(0x7f00000058c0)=0x80, &(0x7f0000005900)=@in, 0x0, 0x80800, 0x1, {0x0, r6}}, 0x1)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005a00), r2)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000005b80)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005b40)={&(0x7f0000005a40)={0xdc, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf5c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x400}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1a65}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000005c40)={'ip6_vti0\x00', &(0x7f0000005bc0)={'syztnl1\x00', 0x0, 0x2f, 0x7e, 0xa, 0x5b, 0x4b, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x80, 0x1, 0x8, 0xd}})

[   92.451695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.452939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.454997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.457738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.460624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.462596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.519079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.525225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.530592] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.531962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.534125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.535708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.540624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.549448] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.551127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.552610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.558862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.560933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.587057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.595017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.598560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.611624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.616436] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.617503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.653543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.658436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.668890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.676644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.678620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.686002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.698671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.701952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.706877] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.708745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.735200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.758689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.758696] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.761613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.770020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.772017] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.773168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.775895] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.776568] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.784144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.786003] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.810441] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.841553] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.842562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.484774] Bluetooth: hci0: command tx timeout
[   94.611630] Bluetooth: hci1: command tx timeout
[   94.611700] Bluetooth: hci2: command tx timeout
[   94.676441] Bluetooth: hci3: command tx timeout
[   94.804370] Bluetooth: hci7: command tx timeout
[   94.805459] Bluetooth: hci5: command tx timeout
[   94.867509] Bluetooth: hci4: command tx timeout
[   94.932511] Bluetooth: hci6: command tx timeout
[   96.534436] Bluetooth: hci0: command tx timeout
[   96.659875] Bluetooth: hci2: command tx timeout
[   96.660933] Bluetooth: hci1: command tx timeout
[   96.723937] Bluetooth: hci3: command tx timeout
[   96.851607] Bluetooth: hci5: command tx timeout
[   96.852861] Bluetooth: hci7: command tx timeout
[   96.915748] Bluetooth: hci4: command tx timeout
[   96.979468] Bluetooth: hci6: command tx timeout
[   98.579465] Bluetooth: hci0: command tx timeout
[   98.707511] Bluetooth: hci1: command tx timeout
[   98.708477] Bluetooth: hci2: command tx timeout
[   98.771551] Bluetooth: hci3: command tx timeout
[   98.899477] Bluetooth: hci5: command tx timeout
[   98.900591] Bluetooth: hci7: command tx timeout
[   98.963470] Bluetooth: hci4: command tx timeout
[   99.027441] Bluetooth: hci6: command tx timeout
[  100.627482] Bluetooth: hci0: command tx timeout
[  100.755605] Bluetooth: hci1: command tx timeout
[  100.756632] Bluetooth: hci2: command tx timeout
[  100.819500] Bluetooth: hci3: command tx timeout
[  100.948479] Bluetooth: hci5: command tx timeout
[  100.949428] Bluetooth: hci7: command tx timeout
[  101.011841] Bluetooth: hci4: command tx timeout
[  101.075982] Bluetooth: hci6: command tx timeout
[  155.423074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.426289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.428846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.434390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.439806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  155.442542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.610435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  155.613956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  155.618781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  155.623071] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  155.630294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  155.632143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.683681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.692660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.694890] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.700634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.704766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.707746] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.709646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.727787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.732530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.734682] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.739894] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.743217] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.748219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.750242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.752635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.754139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.754996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.762538] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.764584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  155.769511] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.771774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.776026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.783884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.795732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.796832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.805542] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.807633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.810631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.812229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  155.816865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.860715] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.863600] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.866417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.878746] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.882468] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  155.884369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  157.459429] Bluetooth: hci0: command tx timeout
[  157.715642] Bluetooth: hci1: command tx timeout
[  157.780350] Bluetooth: hci4: command tx timeout
[  157.843384] Bluetooth: hci3: command tx timeout
[  157.907445] Bluetooth: hci6: command tx timeout
[  157.908118] Bluetooth: hci5: command tx timeout
[  157.973147] Bluetooth: hci7: command tx timeout
[  157.973909] Bluetooth: hci2: command tx timeout
[  159.508592] Bluetooth: hci0: command tx timeout
[  159.764432] Bluetooth: hci1: command tx timeout
[  159.829344] Bluetooth: hci4: command tx timeout
[  159.891589] Bluetooth: hci3: command tx timeout
[  159.957452] Bluetooth: hci5: command tx timeout
[  159.957892] Bluetooth: hci6: command tx timeout
[  160.020427] Bluetooth: hci2: command tx timeout
[  160.020869] Bluetooth: hci7: command tx timeout
[  161.556401] Bluetooth: hci0: command tx timeout
[  161.812438] Bluetooth: hci1: command tx timeout
[  161.876407] Bluetooth: hci4: command tx timeout
[  161.939378] Bluetooth: hci3: command tx timeout
[  162.004456] Bluetooth: hci6: command tx timeout
[  162.004882] Bluetooth: hci5: command tx timeout
[  162.068762] Bluetooth: hci7: command tx timeout
[  162.069208] Bluetooth: hci2: command tx timeout
[  163.603518] Bluetooth: hci0: command tx timeout
[  163.860785] Bluetooth: hci1: command tx timeout
[  163.926520] Bluetooth: hci4: command tx timeout
[  163.987379] Bluetooth: hci3: command tx timeout
[  164.051435] Bluetooth: hci5: command tx timeout
[  164.051992] Bluetooth: hci6: command tx timeout
[  164.116689] Bluetooth: hci2: command tx timeout
[  164.117122] Bluetooth: hci7: command tx timeout
[  217.952121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.957598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.960101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.961555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.966708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.968649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.972232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.974369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.976082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.982000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.985143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.987554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  218.142048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.145678] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.146824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.148808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.150404] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  218.151667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.222930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  218.232222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  218.234722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  218.252796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  218.256642] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  218.263777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  218.293515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  218.302449] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  218.305655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  218.326638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  218.340762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.358691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.362048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  218.364486] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  218.365565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  218.366109] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  218.369262] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  218.369705] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  218.373497] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  218.374739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.375895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  218.427046] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.436578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  218.444954] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  218.452647] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  218.454538] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.499477] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  218.536727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  218.541273] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  218.548649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  220.051427] Bluetooth: hci1: command tx timeout
[  220.052075] Bluetooth: hci0: command tx timeout
[  220.180655] Bluetooth: hci2: command tx timeout
[  220.307495] Bluetooth: hci3: command tx timeout
[  220.435454] Bluetooth: hci6: command tx timeout
[  220.501484] Bluetooth: hci4: command tx timeout
[  220.563419] Bluetooth: hci5: command tx timeout
[  220.691492] Bluetooth: hci7: command tx timeout
[  222.099460] Bluetooth: hci1: command tx timeout
[  222.099956] Bluetooth: hci0: command tx timeout
[  222.227991] Bluetooth: hci2: command tx timeout
[  222.357365] Bluetooth: hci3: command tx timeout
[  222.483418] Bluetooth: hci6: command tx timeout
[  222.547398] Bluetooth: hci4: command tx timeout
[  222.612323] Bluetooth: hci5: command tx timeout
[  222.739420] Bluetooth: hci7: command tx timeout
[  224.147566] Bluetooth: hci0: command tx timeout
[  224.148060] Bluetooth: hci1: command tx timeout
[  224.275872] Bluetooth: hci2: command tx timeout
[  224.403396] Bluetooth: hci3: command tx timeout
[  224.532215] Bluetooth: hci6: command tx timeout
[  224.595358] Bluetooth: hci4: command tx timeout
[  224.659463] Bluetooth: hci5: command tx timeout
[  224.787552] Bluetooth: hci7: command tx timeout
[  226.195395] Bluetooth: hci0: command tx timeout
[  226.195876] Bluetooth: hci1: command tx timeout
[  226.323360] Bluetooth: hci2: command tx timeout
[  226.451432] Bluetooth: hci3: command tx timeout
[  226.579419] Bluetooth: hci6: command tx timeout
[  226.643367] Bluetooth: hci4: command tx timeout
[  226.708327] Bluetooth: hci5: command tx timeout
[  226.835377] Bluetooth: hci7: command tx timeout
[  280.102661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  280.111971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  280.114785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  280.121690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  280.127911] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  280.130900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  280.419944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  280.426067] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  280.435534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  280.446738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  280.451226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  280.453551] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  280.568907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.570913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  280.577173] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.577206] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  280.581518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.588244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  280.593072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  280.595474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  280.607653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  280.614472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  280.615946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.625502] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  280.627384] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  280.635134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.640411] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  280.651170] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.651250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.658655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  280.664794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.668016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  280.674632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.677688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.689203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.691066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.695487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.701858] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  280.706574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.722192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.746517] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  280.748240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.897675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.939819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.953652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.985476] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  281.011488] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  281.026886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  282.195738] Bluetooth: hci0: command tx timeout
[  282.515419] Bluetooth: hci1: command tx timeout
[  282.708007] Bluetooth: hci4: command tx timeout
[  282.709491] Bluetooth: hci2: command tx timeout
[  282.836802] Bluetooth: hci3: command tx timeout
[  283.219763] Bluetooth: hci7: command tx timeout
[  283.283538] Bluetooth: hci6: command tx timeout
[  283.284668] Bluetooth: hci5: command tx timeout
[  284.244441] Bluetooth: hci0: command tx timeout
[  284.563549] Bluetooth: hci1: command tx timeout
[  284.755487] Bluetooth: hci2: command tx timeout
[  284.756932] Bluetooth: hci4: command tx timeout
[  284.884224] Bluetooth: hci3: command tx timeout
[  285.267543] Bluetooth: hci7: command tx timeout
[  285.332516] Bluetooth: hci6: command tx timeout
[  285.333211] Bluetooth: hci5: command tx timeout
[  286.291443] Bluetooth: hci0: command tx timeout
[  286.611444] Bluetooth: hci1: command tx timeout
[  286.803414] Bluetooth: hci4: command tx timeout
[  286.803904] Bluetooth: hci2: command tx timeout
[  286.931407] Bluetooth: hci3: command tx timeout
[  287.315390] Bluetooth: hci7: command tx timeout
[  287.379360] Bluetooth: hci5: command tx timeout
[  287.379821] Bluetooth: hci6: command tx timeout
[  288.339349] Bluetooth: hci0: command tx timeout
[  288.660314] Bluetooth: hci1: command tx timeout
[  288.853425] Bluetooth: hci4: command tx timeout
[  288.853927] Bluetooth: hci2: command tx timeout
[  288.979394] Bluetooth: hci3: command tx timeout
[  289.363505] Bluetooth: hci7: command tx timeout
[  289.427453] Bluetooth: hci5: command tx timeout
[  289.427941] Bluetooth: hci6: command tx timeout
[  337.768792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.769912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.895854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.896580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.092159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.092935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.353192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.354039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.657744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.658446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.944695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.946004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.738453] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.740427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.744229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.761841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.767176] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  341.769924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.919527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.921200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.922769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.927788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.929695] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.930991] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.066930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.070468] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.071600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.073776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.075720] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  342.077482] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.078659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.081966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.082548] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.089629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.090503] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.103584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.106693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.108744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.111475] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.112836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.116474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.128874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.138056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.139592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.172597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.195705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.196976] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.198192] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.199622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.219685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.257529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.272685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.285034] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.328111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.386722] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.398100] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.407670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.410656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.417021] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.418126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  343.827399] Bluetooth: hci0: command tx timeout
[  343.957306] Bluetooth: hci1: command tx timeout
[  344.148899] Bluetooth: hci3: command tx timeout
[  344.211378] Bluetooth: hci4: command tx timeout
[  344.211611] Bluetooth: hci2: command tx timeout
[  344.531526] Bluetooth: hci7: command tx timeout
[  344.659480] Bluetooth: hci5: command tx timeout
[  344.659505] Bluetooth: hci6: command tx timeout
[  345.876484] Bluetooth: hci0: command tx timeout
[  346.003333] Bluetooth: hci1: command tx timeout
[  346.196429] Bluetooth: hci3: command tx timeout
[  346.259427] Bluetooth: hci2: command tx timeout
[  346.259868] Bluetooth: hci4: command tx timeout
[  346.579363] Bluetooth: hci7: command tx timeout
[  346.707383] Bluetooth: hci6: command tx timeout
[  346.707405] Bluetooth: hci5: command tx timeout
[  347.924344] Bluetooth: hci0: command tx timeout
[  348.051311] Bluetooth: hci1: command tx timeout
[  348.244544] Bluetooth: hci3: command tx timeout
[  348.308349] Bluetooth: hci4: command tx timeout
[  348.308791] Bluetooth: hci2: command tx timeout
[  348.627398] Bluetooth: hci7: command tx timeout
[  348.755376] Bluetooth: hci5: command tx timeout
[  348.755838] Bluetooth: hci6: command tx timeout
[  349.972438] Bluetooth: hci0: command tx timeout
[  350.099472] Bluetooth: hci1: command tx timeout
[  350.292523] Bluetooth: hci3: command tx timeout
[  350.355434] Bluetooth: hci2: command tx timeout
[  350.355596] Bluetooth: hci4: command tx timeout
[  350.676468] Bluetooth: hci7: command tx timeout
[  350.803379] Bluetooth: hci6: command tx timeout
[  350.803523] Bluetooth: hci5: command tx timeout
[  397.321661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.322330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  397.613910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  397.614601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50

VM DIAGNOSIS:
04:25:44  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff8880189d9340 RCX=ffffffff84a10888 RDX=ffff888023b43780
RSI=ffffffff84a108bc RDI=0000000000000005 RBP=ffff8880189d94e0 RSP=ffff88802e3df9b0
R8 =0000000000000000 R9 =ffff888023b441c0 R10=0000000000000300 R11=0000000000000000
R12=0000000000000003 R13=ffff88803455a000 R14=dffffc0000000000 R15=ffff88802e3dfc78
RIP=ffffffff84a108bc RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffded540a20 CR3=000000000b7ba000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000008fdb RCX=ffffffff83dcf5f0 RDX=ffff888009738000
RSI=0000000000008fdb RDI=0000000000000004 RBP=0000000000000001 RSP=ffff888009747b70
R8 =0000000000000000 R9 =ffff888009738a40 R10=0000000000010000 R11=0000000000000000
R12=dffffc0000000000 R13=0000000000000000 R14=0000000000010000 R15=0000000000000000
RIP=ffffffff8171c950 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f92c0d07000 CR3=000000000d6c6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000