Warning: Permanently added '[localhost]:21704' (ECDSA) to the list of known hosts.
2025/01/05 04:36:55 fuzzer started
2025/01/05 04:36:55 dialing manager at localhost:34561
syzkaller login: [   70.831775] cgroup: Unknown subsys name 'net'
[   70.919051] cgroup: Unknown subsys name 'cpuset'
[   70.964880] cgroup: Unknown subsys name 'rlimit'
2025/01/05 04:37:14 syscalls: 207
2025/01/05 04:37:14 code coverage: enabled
2025/01/05 04:37:14 comparison tracing: enabled
2025/01/05 04:37:14 extra coverage: enabled
2025/01/05 04:37:14 setuid sandbox: enabled
2025/01/05 04:37:14 namespace sandbox: enabled
2025/01/05 04:37:14 Android sandbox: enabled
2025/01/05 04:37:14 fault injection: enabled
2025/01/05 04:37:14 leak checking: enabled
2025/01/05 04:37:14 net packet injection: enabled
2025/01/05 04:37:14 net device setup: enabled
2025/01/05 04:37:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/05 04:37:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/05 04:37:14 USB emulation: enabled
2025/01/05 04:37:14 hci packet injection: enabled
2025/01/05 04:37:14 wifi device emulation: enabled
2025/01/05 04:37:14 802.15.4 emulation: enabled
2025/01/05 04:37:14 fetching corpus: 0, signal 0/0 (executing program)
2025/01/05 04:37:16 starting 8 fuzzer processes
04:37:16 executing program 0:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x3})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x304d00, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48d}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x50)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4c08b2a1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x2400c000)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, 0x0, 0x200, 0x70bd25, 0xfff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8b6fccce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x890)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008884}, 0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='clear_refs\x00')
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r3)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x801b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
r5 = accept4(r2, &(0x7f0000000840)=@sco={0x1f, @none}, &(0x7f00000008c0)=0x80, 0x80400)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x8, 0x6, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x1, 0x1ff, 0x9}})
socketpair(0x28, 0x3, 0x5, &(0x7f00000009c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a5fe2cf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xe008800)
write$rfkill(r2, &(0x7f0000000b40)={0xe4e, 0x4, 0x2, 0x0, 0x1}, 0x8)
openat$cgroup_int(r2, &(0x7f0000000b80)='cgroup.max.descendants\x00', 0x2, 0x0)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
inotify_add_watch(r3, &(0x7f0000000bc0)='./file0\x00', 0x2000008)

04:37:16 executing program 1:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x48000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000240)={0x8, ""/8})
sendmsg$SOCK_DESTROY(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x15, 0x20, 0x70bd28, 0x25dfdbfb, {0x8, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x18, 0x1, "838cc85233c7b96a98e1facbffdcab05995c31a1"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "a9ddce5fa8b9f93d752b6e86ef47afd009fb6e3fe86172a41dba8cf691218fba902f5ee4de6de479f1afc3861e8da3eec6815d7c2b548c6954823ead46605dcd4fe447a1d437904086e7cc631415e2fb1ecd0b3ef0138434e7960cb7595db39ff696144e2936bb2390b00220fe44c451"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "b9d730d075c1446d639ba26647f00fd75e73586e9167a6409fb18f862edd"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000)
socketpair(0x25, 0x2, 0x40, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000480))
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000004c0)='./file0\x00', 0x0)
sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c06}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a75}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9284}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x2000000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/17, 0x11, 0x1, &(0x7f0000000680)=""/54, 0x36}, &(0x7f0000000700)=0x40)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23e2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040084}, 0x20004000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a40), 0x200280, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00'})
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20044010)

04:37:16 executing program 2:
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
r0 = eventfd2(0x10000, 0x80001)
read$eventfd(r0, &(0x7f0000000040), 0x8)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24008004)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x47}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x40000)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x81)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000003c0), 0x4)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40020)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff6ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2404c880}, 0x800)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xdc, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac23}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x400c840)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x20000004)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'macvlan1\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x40800)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000052}, 0x0)
r5 = accept4(0xffffffffffffffff, &(0x7f0000000bc0)=@qipcrtr, &(0x7f0000000c40)=0x80, 0x80000)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x14c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xa}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf50}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r5)

04:37:16 executing program 3:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r1=>0x0, @multicast2}, &(0x7f0000000100)=0xc)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2057}]}, 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x48010)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x59bd07897efc906c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x806)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x42001000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x60}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd5dd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x54}}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/icmp6\x00')
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00'})
socketpair(0x15, 0x800, 0x30, &(0x7f0000000880)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000b80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1c4, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6d9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdea}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x215b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9d6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40080}, 0x20)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r5)
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xac, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4c840}, 0x4000000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r5)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc841)

[   90.749876] audit: type=1400 audit(1736051836.951:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:37:16 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040))
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0)
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000140)=0x1)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000180)={0xe0, ""/224})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd, 0x10010, r0, 0x8000000)
r3 = syz_io_uring_setup(0x6613, &(0x7f00000002c0)={0x0, 0x8afa, 0x20, 0x0, 0x2e5, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)=<r4=>0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r4, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r5, 0x0, &(0x7f00000003c0)="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", 0xfc, 0x44000, 0x0, {0x0, r6}}, 0xb7da)
syz_io_uring_setup(0x93, &(0x7f0000000500)={0x0, 0x807d, 0x8, 0x1, 0x3a8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000580)=<r7=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r7, r4, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r3, 0x178, 0x0, 0x800, 0x0, 0x1}, 0x80)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffb, 0x1f, 0x6, @buffer={0x0, 0xed, &(0x7f0000000640)=""/237}, &(0x7f0000000740)="375f6d52af04c119ec6466c8e95ce112fcacf9fd1cd1256576b8b4d5ae814a", &(0x7f0000000780)=""/67, 0x3, 0x24, 0x0, &(0x7f0000000800)})
r8 = epoll_create1(0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x27, 0xa, 0xfd, &(0x7f00000008c0)={<r10=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000009c0)={0x40, 0x0, &(0x7f0000000980)=[r8, r9, r10, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r3]}, 0x9)

04:37:16 executing program 5:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x40000)
syz_open_dev$sg(&(0x7f00000001c0), 0x3, 0x8000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000200))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240))
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x240000c3)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x16a7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6175}]}, @TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fe17de6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r7)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000680)={0x4})
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f00000006c0))
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)
write$tun(r1, &(0x7f0000000700)={@void, @void, @ipv6=@tipc_packet={0xa, 0x6, "ab19c6", 0x134, 0x6, 0x0, @private2, @mcast1, {[@hopopts={0x3a, 0x1d, '\x00', [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0x8000, [0x7, 0x7ff, 0x1, 0x10000, 0x80, 0x6]}}, @pad1, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x2, 0x80, "019ac310171ee27ded644c65d1df89b59d529214b0bcf0bea849cee98f0fb3b960b7303a14d2dc2d5f27df7d0b020f408531a0ed026680f178d8ec6f113f7cfd5f3a589625d87216c29fee2934081885dd179bece2c2154d56fde25d2354d5f395d5b680643e8f0af7b45a0dd476a200b4f5cf971975fa0fc86e281b85697a92"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @fragment={0x2f, 0x0, 0x6, 0x1, 0x0, 0x1, 0x67}, @hopopts={0x2f}], @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4, 0x2, 0xaa, 0x3, 0x0, 0x4e20, 0x4e24}, 0x2, 0x4}, 0x4, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0x15c)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x44014)

04:37:17 executing program 6:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x101}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x200}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x70}}, 0x20000000)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1000, 0x3f, 0x80000000, 0xda}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4c015}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x480a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d7}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000c050}, 0x60004800)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='auxv\x00')
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r6, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x880)
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, r1, 0x210, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x96}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3c}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x128, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x138, r1, 0x34, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x52}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x58}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d40)='net\x00')
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r2)
sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x54, r9, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2400}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000048}, 0x54)

04:37:17 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x60e902, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x6f, 0x1, 0x8, 0x0, 0x100, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000100)}, 0x4, 0x53, 0x8, 0x3, 0x44a5ca12, 0x445, 0xaa, 0x0, 0xfff80000, 0x0, 0xff}, 0xffffffffffffffff, 0xb, r1, 0x1)
inotify_init1(0x80800)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat\x00')
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000240)=r3, 0x1)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x12001, 0x0)
write$rfkill(r5, &(0x7f0000000300)={0x1, 0x8, 0x0, 0x1, 0x1}, 0x8)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004)
read$rfkill(r3, &(0x7f0000000480), 0x8)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x210000, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0)

[   92.110394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.113837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.116056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.119121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.122817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.123844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.126922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.129690] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.130930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.132393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.133950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.136413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.141090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.162781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.164305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.168020] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.174239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.181773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.182350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.184868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.185016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.187374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.188213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.189608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.193805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.195159] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.198784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.206953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.210911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.214452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.230168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.230953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.239728] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.243501] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.248219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.249081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.254457] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.264110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.269092] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.277943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.294894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.296057] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.303977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.306157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.309448] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.310870] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   92.323006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.371850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.201218] Bluetooth: hci0: command tx timeout
[   94.201923] Bluetooth: hci1: command tx timeout
[   94.264629] Bluetooth: hci2: command tx timeout
[   94.265674] Bluetooth: hci4: command tx timeout
[   94.328774] Bluetooth: hci7: command tx timeout
[   94.329341] Bluetooth: hci3: command tx timeout
[   94.393603] Bluetooth: hci5: command tx timeout
[   94.456674] Bluetooth: hci6: command tx timeout
[   96.249732] Bluetooth: hci1: command tx timeout
[   96.250706] Bluetooth: hci0: command tx timeout
[   96.314712] Bluetooth: hci2: command tx timeout
[   96.314733] Bluetooth: hci4: command tx timeout
[   96.377055] Bluetooth: hci7: command tx timeout
[   96.377071] Bluetooth: hci3: command tx timeout
[   96.440872] Bluetooth: hci5: command tx timeout
[   96.505203] Bluetooth: hci6: command tx timeout
[   98.296723] Bluetooth: hci0: command tx timeout
[   98.297634] Bluetooth: hci1: command tx timeout
[   98.361633] Bluetooth: hci2: command tx timeout
[   98.361661] Bluetooth: hci4: command tx timeout
[   98.425461] Bluetooth: hci3: command tx timeout
[   98.425772] Bluetooth: hci7: command tx timeout
[   98.489640] Bluetooth: hci5: command tx timeout
[   98.553868] Bluetooth: hci6: command tx timeout
[  100.346791] Bluetooth: hci1: command tx timeout
[  100.347280] Bluetooth: hci0: command tx timeout
[  100.408759] Bluetooth: hci4: command tx timeout
[  100.409653] Bluetooth: hci2: command tx timeout
[  100.474673] Bluetooth: hci3: command tx timeout
[  100.474706] Bluetooth: hci7: command tx timeout
[  100.537869] Bluetooth: hci5: command tx timeout
[  100.601780] Bluetooth: hci6: command tx timeout
[  152.293851] syz-executor.4 (282) used greatest stack depth: 24288 bytes left
[  154.821183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.824109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.826358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.831225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.836857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.842838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.944782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.948358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.950827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.956738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.959445] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.965880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.311654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.313865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.315833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.453203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.458105] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.460976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.462919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.468766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.470704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.475527] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.481682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.483619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.485467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.487329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.491154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.498351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.499912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.503045] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.504916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.650366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.741101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.745375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  156.145913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  156.150807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  156.167075] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  156.168617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  156.172151] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  156.215565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  156.217991] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  156.219593] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  156.224288] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  156.227600] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  156.229720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.291077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  156.311133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.432953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  156.921636] Bluetooth: hci0: command tx timeout
[  157.050636] Bluetooth: hci1: command tx timeout
[  157.560632] Bluetooth: hci6: command tx timeout
[  158.200720] Bluetooth: hci5: command tx timeout
[  158.201639] Bluetooth: hci4: command tx timeout
[  158.264676] Bluetooth: hci7: command tx timeout
[  158.776865] Bluetooth: hci2: command tx timeout
[  158.777770] Bluetooth: hci3: command tx timeout
[  158.968688] Bluetooth: hci0: command tx timeout
[  159.097028] Bluetooth: hci1: command tx timeout
[  159.608629] Bluetooth: hci6: command tx timeout
[  160.250293] Bluetooth: hci4: command tx timeout
[  160.251259] Bluetooth: hci5: command tx timeout
[  160.312798] Bluetooth: hci7: command tx timeout
[  160.824778] Bluetooth: hci3: command tx timeout
[  160.825400] Bluetooth: hci2: command tx timeout
[  161.017088] Bluetooth: hci0: command tx timeout
[  161.144621] Bluetooth: hci1: command tx timeout
[  161.656662] Bluetooth: hci6: command tx timeout
[  162.297654] Bluetooth: hci4: command tx timeout
[  162.298146] Bluetooth: hci5: command tx timeout
[  162.360723] Bluetooth: hci7: command tx timeout
[  162.872750] Bluetooth: hci3: command tx timeout
[  162.873368] Bluetooth: hci2: command tx timeout
[  163.065613] Bluetooth: hci0: command tx timeout
[  163.192607] Bluetooth: hci1: command tx timeout
[  163.704665] Bluetooth: hci6: command tx timeout
[  164.345594] Bluetooth: hci4: command tx timeout
[  164.346071] Bluetooth: hci5: command tx timeout
[  164.408772] Bluetooth: hci7: command tx timeout
[  164.920629] Bluetooth: hci2: command tx timeout
[  164.921122] Bluetooth: hci3: command tx timeout
[  217.340974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.349159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.358044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.433368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.437704] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.439681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.781849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.785047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.793764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.802249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.809181] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.817005] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.514698] Bluetooth: hci0: command tx timeout
[  219.896681] Bluetooth: hci1: command tx timeout
[  220.415492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.420236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  220.421324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.422768] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.429876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  220.430899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.431611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  220.432398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.433465] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.434398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.436495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.437638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.439953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.442070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  220.449110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  220.449748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.450307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  220.452012] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  220.460397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.460637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.461639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.463735] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  220.466051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.467397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  220.468412] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  220.469932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.470727] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  220.472929] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.473950] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.474895] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.476032] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  220.480857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.481662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.482400] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  220.482445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.486908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  221.561622] Bluetooth: hci0: command tx timeout
[  221.945143] Bluetooth: hci1: command tx timeout
[  222.521764] Bluetooth: hci3: command tx timeout
[  222.523270] Bluetooth: hci2: command tx timeout
[  222.524763] Bluetooth: hci4: command tx timeout
[  222.525727] Bluetooth: hci5: command tx timeout
[  222.584952] Bluetooth: hci7: command tx timeout
[  222.586215] Bluetooth: hci6: command tx timeout
[  223.608621] Bluetooth: hci0: command tx timeout
[  223.992679] Bluetooth: hci1: command tx timeout
[  224.568801] Bluetooth: hci5: command tx timeout
[  224.569300] Bluetooth: hci2: command tx timeout
[  224.569801] Bluetooth: hci3: command tx timeout
[  224.570220] Bluetooth: hci4: command tx timeout
[  224.632962] Bluetooth: hci6: command tx timeout
[  224.633393] Bluetooth: hci7: command tx timeout
[  225.656611] Bluetooth: hci0: command tx timeout
[  226.041929] Bluetooth: hci1: command tx timeout
[  226.619563] Bluetooth: hci4: command tx timeout
[  226.620053] Bluetooth: hci5: command tx timeout
[  226.620480] Bluetooth: hci3: command tx timeout
[  226.621165] Bluetooth: hci2: command tx timeout
[  226.682376] Bluetooth: hci7: command tx timeout
[  226.682946] Bluetooth: hci6: command tx timeout
[  228.664732] Bluetooth: hci2: command tx timeout
[  228.665246] Bluetooth: hci3: command tx timeout
[  228.665989] Bluetooth: hci5: command tx timeout
[  228.666428] Bluetooth: hci4: command tx timeout
[  228.728738] Bluetooth: hci7: command tx timeout
[  228.729180] Bluetooth: hci6: command tx timeout
[  276.091863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.092962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.369183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.372105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.375296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.384374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.392860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  279.395952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.514970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  279.517954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  279.530163] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.532277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  279.537713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  279.542102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.544110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  279.549907] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  279.561692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.571843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.586861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.587474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.590980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.601920] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  279.605798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.615612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  279.618898] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  279.631674] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  279.635830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  279.638954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  279.640913] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  279.644255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  279.651937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  279.659745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  279.666367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  279.670253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  279.673154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  279.683983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  279.687949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  279.706968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  279.716131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  279.716245] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  279.720959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  279.722888] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  279.733912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  279.736373] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  279.745250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  279.766720] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  279.769139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  279.776228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  279.777914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  279.790973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  281.464654] Bluetooth: hci0: command tx timeout
[  281.656660] Bluetooth: hci1: command tx timeout
[  281.656801] Bluetooth: hci2: command tx timeout
[  281.720648] Bluetooth: hci3: command tx timeout
[  281.787546] Bluetooth: hci6: command tx timeout
[  281.848835] Bluetooth: hci7: command tx timeout
[  281.912651] Bluetooth: hci5: command tx timeout
[  281.912737] Bluetooth: hci4: command tx timeout
[  283.513584] Bluetooth: hci0: command tx timeout
[  283.704612] Bluetooth: hci1: command tx timeout
[  283.705639] Bluetooth: hci2: command tx timeout
[  283.768590] Bluetooth: hci3: command tx timeout
[  283.832728] Bluetooth: hci6: command tx timeout
[  283.897794] Bluetooth: hci7: command tx timeout
[  283.960569] Bluetooth: hci4: command tx timeout
[  283.960693] Bluetooth: hci5: command tx timeout
[  285.561663] Bluetooth: hci0: command tx timeout
[  285.753629] Bluetooth: hci2: command tx timeout
[  285.754428] Bluetooth: hci1: command tx timeout
[  285.817584] Bluetooth: hci3: command tx timeout
[  285.881609] Bluetooth: hci6: command tx timeout
[  285.945591] Bluetooth: hci7: command tx timeout
[  286.008686] Bluetooth: hci5: command tx timeout
[  286.009605] Bluetooth: hci4: command tx timeout
[  287.608632] Bluetooth: hci0: command tx timeout
[  287.800921] Bluetooth: hci1: command tx timeout
[  287.801484] Bluetooth: hci2: command tx timeout
[  287.865610] Bluetooth: hci3: command tx timeout
[  287.929733] Bluetooth: hci6: command tx timeout
[  287.994596] Bluetooth: hci7: command tx timeout
[  288.057677] Bluetooth: hci4: command tx timeout
[  288.057694] Bluetooth: hci5: command tx timeout
[  341.574059] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.576842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.585189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.593074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.607301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  341.612626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.722745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.736172] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.739103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.746949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.749805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.752187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.849028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.867906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.870419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.877904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.886050] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  341.890822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  341.896599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  341.908706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  341.921145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  341.928095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  341.938920] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  341.944973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  341.948836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  341.952781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  341.959853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  341.960273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  341.964887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  341.965893] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  341.968288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  341.970200] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  341.997312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.026450] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.047030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.051834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.053711] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.067903] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.072282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.075077] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.082081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.084055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.092803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  342.112931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.143952] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.178950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.187244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.200948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  343.673659] Bluetooth: hci0: command tx timeout
[  343.801585] Bluetooth: hci1: command tx timeout
[  343.994155] Bluetooth: hci2: command tx timeout
[  344.121542] Bluetooth: hci5: command tx timeout
[  344.122247] Bluetooth: hci3: command tx timeout
[  344.184876] Bluetooth: hci4: command tx timeout
[  344.248659] Bluetooth: hci7: command tx timeout
[  344.248675] Bluetooth: hci6: command tx timeout
[  345.720573] Bluetooth: hci0: command tx timeout
[  345.850547] Bluetooth: hci1: command tx timeout
[  346.040567] Bluetooth: hci2: command tx timeout
[  346.168606] Bluetooth: hci5: command tx timeout
[  346.168674] Bluetooth: hci3: command tx timeout
[  346.234517] Bluetooth: hci4: command tx timeout
[  346.298149] Bluetooth: hci7: command tx timeout
[  346.298176] Bluetooth: hci6: command tx timeout
[  347.769578] Bluetooth: hci0: command tx timeout
[  347.896554] Bluetooth: hci1: command tx timeout
[  348.088635] Bluetooth: hci2: command tx timeout
[  348.216597] Bluetooth: hci3: command tx timeout
[  348.217583] Bluetooth: hci5: command tx timeout
[  348.280579] Bluetooth: hci4: command tx timeout
[  348.344798] Bluetooth: hci6: command tx timeout
[  348.344860] Bluetooth: hci7: command tx timeout
[  349.817585] Bluetooth: hci0: command tx timeout
[  349.944653] Bluetooth: hci1: command tx timeout
[  350.139620] Bluetooth: hci2: command tx timeout
[  350.267693] Bluetooth: hci5: command tx timeout
[  350.267726] Bluetooth: hci3: command tx timeout
[  350.329575] Bluetooth: hci4: command tx timeout
[  350.394554] Bluetooth: hci7: command tx timeout
[  350.394578] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
04:42:24  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84a108d4 RDX=ffff888035420000
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88800cac5760 RSP=ffff88802b4cfb30
R8 =0000000000000001 R9 =fffffbfff0fdfbea R10=0000000000000001 R11=0000000000000003
R12=0000000000000003 R13=ffff88802c9f6400 R14=dffffc0000000000 R15=ffff88802b4cfc78
RIP=ffffffff84a108d6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f70aa2f3020 CR3=000000002f238000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff8880091739c0 RCX=ffffffff84a669bf RDX=ffff88800b9b3780
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffff888029087a00
R8 =0000000000000001 R9 =fffffbfff0fdfbe4 R10=ffff8880091739c2 R11=0000000000000001
R12=ffff8880091739c2 R13=dffffc0000000000 R14=ffff888029087c50 R15=0000000000000000
RIP=ffffffff8171c324 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faece8a7008 CR3=000000002b4c2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000