Warning: Permanently added '[localhost]:32130' (ECDSA) to the list of known hosts.
2025/01/19 18:46:43 fuzzer started
2025/01/19 18:46:44 dialing manager at localhost:44245
syzkaller login: [   75.684674] cgroup: Unknown subsys name 'net'
[   75.783094] cgroup: Unknown subsys name 'cpuset'
[   75.814342] cgroup: Unknown subsys name 'rlimit'
[   81.890574] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   92.862757] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/19 18:47:02 syscalls: 201
2025/01/19 18:47:02 code coverage: enabled
2025/01/19 18:47:02 comparison tracing: enabled
2025/01/19 18:47:02 extra coverage: enabled
2025/01/19 18:47:02 setuid sandbox: enabled
2025/01/19 18:47:02 namespace sandbox: enabled
2025/01/19 18:47:02 Android sandbox: enabled
2025/01/19 18:47:02 fault injection: enabled
2025/01/19 18:47:02 leak checking: enabled
2025/01/19 18:47:02 net packet injection: enabled
2025/01/19 18:47:02 net device setup: enabled
2025/01/19 18:47:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/19 18:47:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/19 18:47:02 USB emulation: enabled
2025/01/19 18:47:02 hci packet injection: enabled
2025/01/19 18:47:02 wifi device emulation: enabled
2025/01/19 18:47:02 802.15.4 emulation: enabled
2025/01/19 18:47:02 fetching corpus: 0, signal 0/0 (executing program)
2025/01/19 18:47:03 starting 8 fuzzer processes
18:47:03 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4a00, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r0, {0x3, 0x8}}, './file0\x00'})
syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffffffa, 0x80003)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000084)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4250}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0xc40, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r9, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4008004)
ioctl$CDROM_SELECT_DISK(r6, 0x5322, 0xffffffffffffff80)

18:47:03 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x30}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8811}, 0x800)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20000000)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0xc01, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2a}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x42018f15}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2a}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c0}, 0x481)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000440))
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x840)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000600)=0x10000, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@remote, @remote}, &(0x7f0000000680)=0xc)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa8, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2f6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x2c}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000000}, 0x14)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x29e09000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x3fa, 0x4, 0x70bd25, 0x25dfdbfd, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40)
sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x148, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x27}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6a9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x6}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000801}, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r3, 0x237dfd540b8c58b8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2f9b}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffc}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004085}, 0x4040)
r4 = memfd_secret(0x80000)
ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000e80))
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001140)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1d8, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x27}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="45ac968268"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f815d0a572dbc503a3def4e3ac"}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0bb0c2fefc84bd9159dd4f2a65"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f73775a52b"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "009f68f6baa5662033e57e1c3a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "63624f4d815a1966f14a651d7f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9ee688fe2ea11c5058b51045a2"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a312eec47"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67ec2e3aa4"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "c616"}], @NL80211_ATTR_MAC={0xa, 0x6, @random="ec9505806f89"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

18:47:04 executing program 7:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x70}}, 0xc084)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x495}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x4044004)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = memfd_secret(0x80000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="e9dff26068cb"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="95f63ca5cee1"}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c844}, 0x4000000)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5e}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000000}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_IE={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x34}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r5=>r3, {0x9, 0x6}}, './file0\x00'})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r5)
pipe(&(0x7f0000000740)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x49df}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r4, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7, 0x4}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0xc044)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}}, 0x20000000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r1)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80800}, 0x20000000)

[   95.290115] audit: type=1400 audit(1737312424.041:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:47:04 executing program 6:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044049)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0xec1824d5f96bea6e, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80022000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x234, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x2}}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x25}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x30}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x98}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x800}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x234}, 0x1, 0x0, 0x0, 0x4}, 0x24000004)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
pipe(&(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8850}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r1, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r6=>r2, {0x3}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x8080)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd0, 0x5}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044000)
accept(r4, &(0x7f0000000b40)=@pppol2tp={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000bc0)=0x80)
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x81780028}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbb}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
r9 = socket(0x0, 0x6, 0x9)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00'})
shmctl$SHM_UNLOCK(0x0, 0xc)

18:47:04 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x101cc0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x316dbfb7}}, './file0\x00'})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4)
r2 = syz_io_uring_setup(0x268f, &(0x7f0000000680)={0x0, 0xcc2f, 0x20, 0x3, 0x3bf, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000700), &(0x7f0000000740)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000780)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14, 0x1}, 0x3ff)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x62ed}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x10}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004011)
syz_io_uring_setup(0x141a, &(0x7f00000008c0)={0x0, 0x4e90, 0x0, 0x2, 0x44}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000940), &(0x7f0000000980))
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000009c0)={0xfffffffffffff000, 0x4})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r4=>r2, {0x8}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r5, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x2c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c4}, 0x48045)
ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000bc0))
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r7=>r2, {0x6e1, 0x3b}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000c40)={0x0, 0xa6, 0x4dbf7c05})
openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000c80), 0x2, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/module/auth_rpcgss', 0x0, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'})
openat$sr(0xffffffffffffff9c, &(0x7f0000000d40), 0x480000, 0x0)

18:47:04 executing program 2:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x428, 0x3f4, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x2, 0x3, [0x1000, 0x200, 0x0, 0x10000, 0x101, 0xe67a, 0x3, 0x6, 0x20, 0xfffffff9, 0xfb, 0x8, 0x6, 0x3, 0x9, 0x3ff, 0x6, 0xffff0af2, 0x6, 0xfffffff7, 0xf6, 0x6, 0x8, 0x1, 0x3f, 0x6, 0x8001, 0x6, 0x7fff, 0x8, 0x7fff, 0x1f, 0x1, 0x8000, 0x6, 0x4, 0x1d5, 0x6, 0x9, 0x2, 0x40, 0x0, 0x4, 0x8000, 0x5, 0x4, 0x793, 0x5f6, 0x1ff, 0x1, 0x7, 0xfffffffa, 0x80000, 0x7, 0x1f8, 0x3, 0x9, 0x0, 0x1d4, 0x4, 0x0, 0x8, 0x8001, 0x3], [0x1, 0x1f, 0x5, 0x2, 0x7fffffff, 0x8, 0xffffffff, 0x200, 0x4, 0x5, 0x8, 0xfffffffd, 0x3, 0x80000001, 0x4, 0x8, 0x4cb, 0x5, 0x4, 0x40, 0x4, 0x0, 0x1, 0x6, 0x8, 0x400, 0x0, 0xfffffffd, 0x2, 0x9, 0x81, 0xcd, 0x9, 0x800, 0x7ff, 0xffffffff, 0x8, 0x6, 0x0, 0x400, 0x8, 0x400, 0x10001, 0x8, 0xfffffff8, 0x8, 0x7f, 0x5, 0x8000, 0xdc4d, 0x6, 0x2, 0x8, 0xfffffff8, 0x7, 0x7, 0xfff, 0x81, 0x1000, 0x1ff, 0xe5, 0x8, 0x2, 0x2], [0xfffeffff, 0x7fff, 0x4, 0xffffff7f, 0x4, 0xffff, 0x5, 0x400, 0x2, 0x7, 0x1ff, 0x7, 0x0, 0x3f, 0x4, 0xf92, 0x7, 0x0, 0x3ff, 0x0, 0x5, 0x49509766, 0x100, 0x31, 0x6, 0x4, 0x0, 0x200, 0x40, 0x6, 0x7, 0x0, 0x7, 0x1, 0x2, 0x7986, 0x1000, 0x7fffffff, 0x5, 0x7, 0x800, 0x8000, 0x0, 0x8, 0x6, 0x7, 0x6, 0x0, 0x1000, 0x4, 0x9, 0x0, 0x1ff, 0xffffffff, 0x800, 0x0, 0x3ff, 0x7fff, 0xff, 0x4, 0xffff, 0x4b7, 0x3], [0x5, 0xfb1, 0x8d, 0x40, 0x101, 0x0, 0x1, 0x6, 0x6, 0x20, 0x9, 0x3a719a78, 0xd, 0x80000001, 0x7, 0xe7, 0x40, 0x8, 0xffff, 0x8, 0x2, 0x25, 0x9, 0x8001, 0x7fff, 0x6, 0x0, 0x1, 0x0, 0x7ff, 0x5, 0xc3d, 0x3, 0x3, 0xffffffff, 0x80000000, 0x0, 0x2, 0x7, 0x7e6f5b86, 0x7fffffff, 0x8, 0x7fffffff, 0x80, 0x200, 0x5, 0x1, 0x1f, 0x0, 0x68, 0x4, 0x19d, 0x1, 0x4, 0x1daf, 0x5, 0x5, 0x6, 0x8001, 0xfffffff8, 0x1, 0x4, 0xc4f8, 0x4], 0x6, ['$^', ',!+\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20000010}, 0x804)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x402180, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xe4, 0x0, 0x702, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r3 = pidfd_getfd(r1, r1, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r3)
pipe(&(0x7f0000000900)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_uring_setup(0x7e0d, &(0x7f0000000940)={0x0, 0x1ce3, 0x0, 0x2, 0x2fc, 0x0, r5})
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x6a810300}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x218}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd21}]}, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x40)
r6 = syz_open_dev$vcsa(&(0x7f0000000c40), 0x4, 0x640)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xc8, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9d5e}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xebc9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa572}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
ioctl$CDROM_SELECT_DISK(r1, 0x5322, 0x9)
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x8040)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f0000001100)={0x22c, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xe}}}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="ec76baee8bab46edb5205f78d14873c2c40fd45ee2061da2105bd4be8af5c7"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1c9, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @peer_mgmt={0x75, 0x18, {0x0, 0x8, @val=0x100, @val=0x2c, @val="723b31b2fefba91bfd96da862cef1920"}}, @tim={0x5, 0x95, {0x1, 0x92, 0xf4, "a56a27bb9f13fd54e5cfb7708447c53b0a44ca5dcac811d2036239346bfd1cc5f010e53e095780740754f285bea7848158df523f3d8cc0a1aac880dbe7256f19a9547b8eeb203ee3b7a5ad4a5a3adb95705f9c0186876b8909dca46fb33feb13e22e9e27e5299f30b7f514efc6555073aaa12d6755022afeb01f736a91c37206207c56bf640279b8d22436af0e9d7b5b3d80"}}, @channel_switch={0x25, 0x3, {0x0, 0x7c, 0x80}}, @challenge={0x10, 0x1, 0x5a}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}, @perr={0x84, 0xdb, {0x40, 0xd, [@ext={{}, @broadcast, 0x8852, @device_a, 0x3c}, @ext={{}, @broadcast, 0x52b6, @device_b, 0x9}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x39}, @not_ext={{}, @device_a, 0x1, "", 0x1d}, @ext={{}, @device_b, 0x5, @device_a, 0x1e}, @not_ext={{}, @device_a, 0x7, "", 0x1b}, @ext={{}, @device_a, 0x4, @device_a, 0x6}, @not_ext={{}, @broadcast, 0x800, "", 0x35}, @ext={{}, @device_a, 0x6, @device_b}, @not_ext={{}, @device_b, 0x8, "", 0xc}, @ext={{}, @device_a, 0x8142, @broadcast, 0x4}, @not_ext={{}, @device_b, 0x2, "", 0x9}, @ext={{}, @device_a, 0xce, @device_b, 0x3f}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8000, @val=0xfffb, @void, @void}}, @gcr_ga={0xbd, 0x6, @device_b}, @peer_mgmt={0x75, 0x6, {0x401, 0x2, @void, @val=0x1, @void}}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x24001001}, 0x4000884)
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe6bb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x24000010)

18:47:04 executing program 4:
r0 = memfd_secret(0x80000)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='*^[.\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c)
r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x9000000000000000, 0x400)
write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)={'ip_vti0', 0x32, 0x37}, 0xa)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='$}&@$@@\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000005c0))
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x101080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r4=>r0, {0x4, 0x1}}, './file0\x00'})
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x6f}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x33d}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x9041)
r5 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_UNLOCK(r5, 0xc)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000780)={0xa0000003})
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x70102, 0x0)
write$rfkill(r6, &(0x7f0000000800)={0x3, 0x6, 0x1, 0x1, 0x1}, 0x8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4001)
syz_io_uring_setup(0x4b4f, &(0x7f0000000940)={0x0, 0x7ec0, 0x8, 0x3, 0x7f, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000009c0)=<r7=>0x0, &(0x7f0000000a00))
syz_io_uring_submit(r7, 0x0, &(0x7f0000000a40)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x401a}, 0x1}, 0xffffffff)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000a80))

18:47:04 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0)
ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040))
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000080)=0x6b9)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f00000000c0))
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000100)=0x4)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000140))
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x9)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x6)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000200)={0xa0000000})
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000240))
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>r0, {0x9}}, './file0\x00'})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0xa100, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x0, 0x227, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44840}, 0x20000080)
ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>r0, {0x8, 0x4}}, './file0\x00'})
ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000480)=0x8001)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000004c0))
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4004000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0x60002000})
ioctl$BLKRRPART(r2, 0x125f, 0x0)

[   96.899887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.903943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.905917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.906594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.908523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.910163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.911284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.915898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.917528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.919033] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.920639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.921247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.922247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.922997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.925996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.932212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.933730] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.936067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.938979] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   96.939653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.940632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.942364] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   96.943658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.945675] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   96.945894] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.948318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.974025] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   96.985060] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   96.985459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   96.991975] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   96.994642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   96.996008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.996254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   97.012252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   97.017668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   97.019125] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   97.023933] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   97.025900] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   97.026825] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   97.027328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   97.028458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   97.029040] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   97.033071] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   97.037683] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   97.038187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   97.051869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   97.055726] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   97.063141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   99.025570] Bluetooth: hci1: command tx timeout
[   99.026032] Bluetooth: hci0: command tx timeout
[   99.026285] Bluetooth: hci2: command tx timeout
[   99.089493] Bluetooth: hci6: command tx timeout
[   99.090057] Bluetooth: hci3: command tx timeout
[   99.090323] Bluetooth: hci4: command tx timeout
[   99.090663] Bluetooth: hci7: command tx timeout
[   99.152552] Bluetooth: hci5: command tx timeout
[  101.074486] Bluetooth: hci1: command tx timeout
[  101.074615] Bluetooth: hci2: command tx timeout
[  101.074678] Bluetooth: hci0: command tx timeout
[  101.136753] Bluetooth: hci3: command tx timeout
[  101.136884] Bluetooth: hci6: command tx timeout
[  101.137003] Bluetooth: hci7: command tx timeout
[  101.137078] Bluetooth: hci4: command tx timeout
[  101.201502] Bluetooth: hci5: command tx timeout
[  103.121580] Bluetooth: hci0: command tx timeout
[  103.121731] Bluetooth: hci2: command tx timeout
[  103.121786] Bluetooth: hci1: command tx timeout
[  103.185906] Bluetooth: hci3: command tx timeout
[  103.186025] Bluetooth: hci6: command tx timeout
[  103.186120] Bluetooth: hci4: command tx timeout
[  103.186182] Bluetooth: hci7: command tx timeout
[  103.248942] Bluetooth: hci5: command tx timeout
[  105.169666] Bluetooth: hci0: command tx timeout
[  105.170233] Bluetooth: hci1: command tx timeout
[  105.170320] Bluetooth: hci2: command tx timeout
[  105.233881] Bluetooth: hci4: command tx timeout
[  105.233963] Bluetooth: hci3: command tx timeout
[  105.234045] Bluetooth: hci7: command tx timeout
[  105.234107] Bluetooth: hci6: command tx timeout
[  105.296455] Bluetooth: hci5: command tx timeout
[  156.405526] syz-executor.1 (289) used greatest stack depth: 23456 bytes left
[  158.752317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.756593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.759147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.762840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.766664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.777735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.791936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.800422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.804803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.807765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.812246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.816917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.820325] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.822892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.827622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.835576] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.837618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.839455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.888915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.892920] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.904689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  158.913573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  158.920315] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  158.922793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  158.947230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.954608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  158.956848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  158.980720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.013629] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  159.021735] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.032793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  159.076845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  159.131319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  159.131614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  159.149745] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  159.156774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  159.173732] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  159.174098] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  159.175498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  159.181936] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  159.184984] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  159.209642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  159.220887] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  159.222880] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  159.263661] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  159.291007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  159.337641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  159.363290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  160.912527] Bluetooth: hci1: command tx timeout
[  160.912816] Bluetooth: hci0: command tx timeout
[  160.912937] Bluetooth: hci2: command tx timeout
[  160.976581] Bluetooth: hci3: command tx timeout
[  161.104525] Bluetooth: hci4: command tx timeout
[  161.297537] Bluetooth: hci7: command tx timeout
[  161.298780] Bluetooth: hci6: command tx timeout
[  161.489167] Bluetooth: hci5: command tx timeout
[  162.960457] Bluetooth: hci2: command tx timeout
[  162.960513] Bluetooth: hci0: command tx timeout
[  162.960608] Bluetooth: hci1: command tx timeout
[  163.025485] Bluetooth: hci3: command tx timeout
[  163.152617] Bluetooth: hci4: command tx timeout
[  163.344471] Bluetooth: hci7: command tx timeout
[  163.344522] Bluetooth: hci6: command tx timeout
[  163.539548] Bluetooth: hci5: command tx timeout
[  165.008661] Bluetooth: hci2: command tx timeout
[  165.008789] Bluetooth: hci1: command tx timeout
[  165.008877] Bluetooth: hci0: command tx timeout
[  165.073488] Bluetooth: hci3: command tx timeout
[  165.201467] Bluetooth: hci4: command tx timeout
[  165.392457] Bluetooth: hci7: command tx timeout
[  165.393078] Bluetooth: hci6: command tx timeout
[  165.586414] Bluetooth: hci5: command tx timeout
[  167.056448] Bluetooth: hci0: command tx timeout
[  167.056519] Bluetooth: hci1: command tx timeout
[  167.056594] Bluetooth: hci2: command tx timeout
[  167.120491] Bluetooth: hci3: command tx timeout
[  167.249061] Bluetooth: hci4: command tx timeout
[  167.442574] Bluetooth: hci7: command tx timeout
[  167.442713] Bluetooth: hci6: command tx timeout
[  167.633544] Bluetooth: hci5: command tx timeout
[  221.216062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.220755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.232589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.235977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.238170] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.238849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.277034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.279078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.284582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.289674] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.290771] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.293632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.341145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.343605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.351988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.354930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.357690] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  221.358511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.532556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.533183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.533793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.535871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.536799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.537311] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.546583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.563973] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.591201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.595281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.599495] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.601452] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.603639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.609782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.627073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.629447] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.633651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  221.640246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.759656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.814653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.817622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.826972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.828953] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  221.829853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.832915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.836722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.839463] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.847500] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.861615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  221.873634] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  223.313500] Bluetooth: hci1: command tx timeout
[  223.313598] Bluetooth: hci0: command tx timeout
[  223.443114] Bluetooth: hci2: command tx timeout
[  223.569482] Bluetooth: hci4: command tx timeout
[  223.698499] Bluetooth: hci5: command tx timeout
[  223.762446] Bluetooth: hci3: command tx timeout
[  223.888509] Bluetooth: hci6: command tx timeout
[  224.019454] Bluetooth: hci7: command tx timeout
[  225.360661] Bluetooth: hci0: command tx timeout
[  225.362293] Bluetooth: hci1: command tx timeout
[  225.488625] Bluetooth: hci2: command tx timeout
[  225.616601] Bluetooth: hci4: command tx timeout
[  225.744500] Bluetooth: hci5: command tx timeout
[  225.808479] Bluetooth: hci3: command tx timeout
[  225.936488] Bluetooth: hci6: command tx timeout
[  226.065440] Bluetooth: hci7: command tx timeout
[  227.408459] Bluetooth: hci1: command tx timeout
[  227.408551] Bluetooth: hci0: command tx timeout
[  227.536476] Bluetooth: hci2: command tx timeout
[  227.666363] Bluetooth: hci4: command tx timeout
[  227.792490] Bluetooth: hci5: command tx timeout
[  227.858437] Bluetooth: hci3: command tx timeout
[  227.984480] Bluetooth: hci6: command tx timeout
[  228.112457] Bluetooth: hci7: command tx timeout
[  229.457618] Bluetooth: hci0: command tx timeout
[  229.457958] Bluetooth: hci1: command tx timeout
[  229.585585] Bluetooth: hci2: command tx timeout
[  229.712577] Bluetooth: hci4: command tx timeout
[  229.840436] Bluetooth: hci5: command tx timeout
[  229.906379] Bluetooth: hci3: command tx timeout
[  230.032471] Bluetooth: hci6: command tx timeout
[  230.162376] Bluetooth: hci7: command tx timeout
[  284.318045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  284.320576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  284.323518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  284.331910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  284.337050] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  284.340892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  284.505381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  284.508841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  284.510953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  284.516845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  284.521748] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  284.523919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  284.577628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  284.580856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  284.585183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  284.589879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  284.593142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  284.595095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.620834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  284.635691] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  284.636729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  284.664053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  284.668011] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  284.669525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  284.715299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  284.737740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  284.748858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  284.774195] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  284.778924] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  284.780580] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  284.781391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.819686] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  284.820557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  284.840525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  284.843733] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  284.849177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  284.877191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  284.895647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  284.899396] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  284.902909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  284.914124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  284.934207] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  284.966446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  284.970715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  284.971550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  284.973828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  284.997218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  285.004877] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  286.416564] Bluetooth: hci0: command tx timeout
[  286.545642] Bluetooth: hci1: command tx timeout
[  286.672514] Bluetooth: hci3: command tx timeout
[  286.738374] Bluetooth: hci2: command tx timeout
[  286.865579] Bluetooth: hci5: command tx timeout
[  286.928411] Bluetooth: hci4: command tx timeout
[  287.121640] Bluetooth: hci7: command tx timeout
[  287.122793] Bluetooth: hci6: command tx timeout
[  288.465388] Bluetooth: hci0: command tx timeout
[  288.593416] Bluetooth: hci1: command tx timeout
[  288.721369] Bluetooth: hci3: command tx timeout
[  288.784464] Bluetooth: hci2: command tx timeout
[  288.913606] Bluetooth: hci5: command tx timeout
[  288.977439] Bluetooth: hci4: command tx timeout
[  289.169441] Bluetooth: hci6: command tx timeout
[  289.169566] Bluetooth: hci7: command tx timeout
[  290.513346] Bluetooth: hci0: command tx timeout
[  290.641485] Bluetooth: hci1: command tx timeout
[  290.768990] Bluetooth: hci3: command tx timeout
[  290.833356] Bluetooth: hci2: command tx timeout
[  290.960379] Bluetooth: hci5: command tx timeout
[  291.025491] Bluetooth: hci4: command tx timeout
[  291.218064] Bluetooth: hci7: command tx timeout
[  291.218147] Bluetooth: hci6: command tx timeout
[  292.560590] Bluetooth: hci0: command tx timeout
[  292.689455] Bluetooth: hci1: command tx timeout
[  292.817395] Bluetooth: hci3: command tx timeout
[  292.882364] Bluetooth: hci2: command tx timeout
[  293.008393] Bluetooth: hci5: command tx timeout
[  293.073656] Bluetooth: hci4: command tx timeout
[  293.265727] Bluetooth: hci6: command tx timeout
[  293.265844] Bluetooth: hci7: command tx timeout
[  346.914395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  346.919459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.924166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  346.929069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  346.932721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.934965] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  346.941952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.942633] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  346.943534] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  346.975212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.979237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  346.981783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.041793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  347.046065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  347.048556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  347.057695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  347.068677] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  347.074185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  347.136765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  347.139953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  347.145859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  347.149089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  347.151521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  347.175763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  347.177115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  347.180975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  347.182004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  347.185814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  347.186673] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  347.190838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  347.193806] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  347.194654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.197550] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  347.205231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  347.206744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  347.209729] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  347.219910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  347.220533] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  347.229569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  347.233456] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  347.242552] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  347.256983] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  347.259615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  347.264991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  347.269594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  347.314111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  347.357806] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  347.376141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  349.009231] Bluetooth: hci1: command tx timeout
[  349.009521] Bluetooth: hci0: command tx timeout
[  349.138636] Bluetooth: hci2: command tx timeout
[  349.265464] Bluetooth: hci5: command tx timeout
[  349.265535] Bluetooth: hci3: command tx timeout
[  349.329554] Bluetooth: hci7: command tx timeout
[  349.329621] Bluetooth: hci4: command tx timeout
[  349.520547] Bluetooth: hci6: command tx timeout
[  351.056442] Bluetooth: hci1: command tx timeout
[  351.056534] Bluetooth: hci0: command tx timeout
[  351.184405] Bluetooth: hci2: command tx timeout
[  351.312688] Bluetooth: hci3: command tx timeout
[  351.312709] Bluetooth: hci5: command tx timeout
[  351.376357] Bluetooth: hci4: command tx timeout
[  351.376468] Bluetooth: hci7: command tx timeout
[  351.570500] Bluetooth: hci6: command tx timeout
[  353.105563] Bluetooth: hci0: command tx timeout
[  353.106446] Bluetooth: hci1: command tx timeout
[  353.233362] Bluetooth: hci2: command tx timeout
[  353.360533] Bluetooth: hci5: command tx timeout
[  353.361478] Bluetooth: hci3: command tx timeout
[  353.425367] Bluetooth: hci4: command tx timeout
[  353.425455] Bluetooth: hci7: command tx timeout
[  353.616793] Bluetooth: hci6: command tx timeout
[  355.152649] Bluetooth: hci1: command tx timeout
[  355.152771] Bluetooth: hci0: command tx timeout
[  355.280671] Bluetooth: hci2: command tx timeout
[  355.408598] Bluetooth: hci5: command tx timeout
[  355.408742] Bluetooth: hci3: command tx timeout
[  355.472406] Bluetooth: hci7: command tx timeout
[  355.472549] Bluetooth: hci4: command tx timeout
[  355.664446] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
18:52:12  Registers:
info registers vcpu 0
RAX=ffff88800f7a1bc0 RBX=dffffc0000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff85c18d00 RDI=ffff88800f7a2e68 RBP=ffff88801917cc00 RSP=ffff88802a727b58
R8 =0000000000000001 R9 =fffffbfff0fe0de4 R10=ffffffff87f06f27 R11=0000000000000000
R12=0000000000000001 R13=ffffffff81ad7daf R14=ffff88800f7a1bc0 R15=ffffffff85c55de0
RIP=ffffffff84a8b0d0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f80316e5540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8031bb1008 CR3=000000002c602000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81315e18 RDX=fffffbfff0c8043b
RSI=0000000000000008 RDI=ffffffff864021d0 RBP=000000000003a64c RSP=ffff88806cf09fd0
R8 =0000000000000000 R9 =fffffbfff0c8043a R10=ffffffff864021d7 R11=00000000fa83b2da
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84ab0080 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5e82871f0 CR3=0000000025522000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff0000000000
XMM02=000000ff0000000000000000ff000000 XMM03=0000000000000000000000ff00000000
XMM04=0000ff00000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000