Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:40609' (ECDSA) to the list of known hosts.
2025/04/29 02:20:30 fuzzer started
2025/04/29 02:20:31 dialing manager at localhost:36753
syzkaller login: [   92.620197] cgroup: Unknown subsys name 'net'
[   92.758634] cgroup: Unknown subsys name 'cpuset'
[   92.797408] cgroup: Unknown subsys name 'rlimit'
2025/04/29 02:20:45 syscalls: 201
2025/04/29 02:20:45 code coverage: enabled
2025/04/29 02:20:45 comparison tracing: enabled
2025/04/29 02:20:45 extra coverage: enabled
2025/04/29 02:20:45 setuid sandbox: enabled
2025/04/29 02:20:45 namespace sandbox: enabled
2025/04/29 02:20:45 Android sandbox: enabled
2025/04/29 02:20:45 fault injection: enabled
2025/04/29 02:20:45 leak checking: enabled
2025/04/29 02:20:45 net packet injection: enabled
2025/04/29 02:20:45 net device setup: enabled
2025/04/29 02:20:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/29 02:20:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/29 02:20:45 USB emulation: enabled
2025/04/29 02:20:45 hci packet injection: enabled
2025/04/29 02:20:45 wifi device emulation: enabled
2025/04/29 02:20:45 802.15.4 emulation: enabled
2025/04/29 02:20:45 fetching corpus: 0, signal 0/0 (executing program)
2025/04/29 02:20:46 starting 8 fuzzer processes
02:20:46 executing program 0:
geteuid()
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e8, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12aa9f04}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x83b40f8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fb50bd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51cf3493}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x640831ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x993841d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19106eec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f3c5455}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf749}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x136520b9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x628510f6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb093}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x578c6dd0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x659a09cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8559}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d65fbd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f7b4fdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51bbb579}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x181dd9b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x405d840b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9878}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d08}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c28dd65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x270f3f52}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7170876e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44e7bf4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2df38bc5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c491891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6eb8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2)
sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
r3 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x80, 0x800)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000640)=0xe8)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000840), 0x4)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x1b0, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5eab41dfc04169a4}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xfc, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4664395}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28fca6ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61a375ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77d6beac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee87369}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x688f846b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x305b3bcb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d3e379c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x134bd09}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e044bd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c32b74f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25b0cd2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ac59a6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4520257d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f950bd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfcf2ccc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb6b7d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55ab2600}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f10fff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x8040)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b40), r2)
geteuid()
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x74, r8, 0x2b8871de04eeba9c, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8004)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x74, r9, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040015}, 0x40)

02:20:46 executing program 1:
io_setup(0x10001, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_io_uring_complete(0x0)
r2 = pidfd_open(0xffffffffffffffff, 0x0)
io_submit(r0, 0x4, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x1f, 0xffffffffffffffff, &(0x7f0000000040)="c34d2fc8de55546c2c4d845aa72f8194045cb56770fc2ee407ce423fd0cdc705da813590ab09c9803ac9c0c62e06a0650a3ecd9c624bd7480c12688f2c9bb474655a54298261f73cadbd8f59369c6fa93538b453089b8bde826bb9cdc3a5d0eebb76499421d504257881d9401737ec9d41015d1f727590b14395bdeb8c83bbc92815dd0f12f55ab533bd058e2db39ad83fc9d99ca6bf594d042da830dadaeeed563b3d1d138b966cac95857a9df445d9b2ee2e357a0fe61961be9e911c915649bc6c594bdd8f3a46dea0b3e513e249a63232e80b", 0xd4, 0x200, 0x0, 0x7, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x1225, 0xffffffffffffffff, &(0x7f0000000180)="fac287309d230dddcc89cc079e569278f19d04892a22c92039828a84b3869e84be1364352d96c59de9f6f0d86bdbacdaf6d1d03d80fc4b29613f18ba46bef54a655d0ad332c94267aafb1123379ea7e7eab59cba45fb2c41ad6fe96f256d11357c087d46522f7e3e27a4dd0b0c25824c28663116d1c7d48019c919658c62c0c4597a12bb553c22e1812ca94b50aede", 0x8f, 0x0, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffc, 0xffffffffffffffff, &(0x7f0000000280)="ddd32a409228e95c009ceccd436612e55a361cd7f525fa80cf71f2306c7baf731243c625fb6add70f2e0c7d87573d2e32aefef3e2b6a1d46e8182d5623f76d61ec4eeb2a0297977125dc3cdafd685e", 0x4f, 0x7f, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x385f, r2, &(0x7f0000000340)="859c903258d19759edcf26eba2af581e4bc718f4d634f1c159a7e488d6f75a1a3f7c1bc90db28dd3b1871daf93f77f6bca67203bec476a032b412911487bb2293ff3341710fd3e0ef15bf8fe79f165a33912c6e7566634ce791d9e1c8d2b32a9912716342ab4ce3c3db6335e8f3ebb0282ed1e883b7710b49f3d8c4ead657893beacb8b1112a8f6cc143c881008857a3f69c78ec1ed5885f049e7a0e4332a9b9d0e9cdae824cf9e6071b5436032ff8bf992e4a4b510d9fc2a22a36bef60d6f094f4dc0d1802b2d5b3ff5b3b295aeb2d1c0ecb23a9e3d1a607ca67e8a879bdb6b19fab5253139f486be59ddd51f35444121405e2dec167f607d32d97a11", 0xfd, 0x7fffffff, 0x0, 0x7083faf3fff6be38}])
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000004c0)=0x8000000000000000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004015)
write$cgroup_freezer_state(r1, &(0x7f0000000640)='FROZEN\x00', 0x7)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0xc1)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x81)
r6 = shmget(0x1, 0x4000, 0x10, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_UNLOCK(r6, 0xc)
rt_sigaction(0x3c, &(0x7f0000000980)={&(0x7f0000000900)="6780998446155c00c4c10d73d541666564660fdb853a5c90ddc421fa7e7f2667420ff31f440f9211f3400fa7c0c4a17d510d9777ce45c403791dcc747cf6", 0x18000001, &(0x7f0000000940)="c48261907c0800c423996cf532c4817810ee66460f3823e1363e43c1369f0f18d8c442e198c1c46379056a000af346acc4c249be9c6603000000", {[0x3]}}, 0x0, 0x8, &(0x7f00000009c0))
sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044001)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)

02:20:46 executing program 3:
getgid()
getgid()
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000), 0x1, 0x1, 0x1}, 0x44e)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
r3 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80, 0x0)
getsockname(r3, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000240)=0x80)
r4 = getgid()
setgid(r4)
socketpair(0x28, 0xa, 0x4, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r3)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000440)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000004c0)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000c80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x634, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x8, 0x4, 0x3}, {0xfde4, 0x4, 0x7, 0x20}]}}}]}}, {{0x8, 0x1, r8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xfffffffd}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x634}, 0x1, 0x0, 0x0, 0x44}, 0x28000)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000d00)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000cc0), 0x1, 0x1}, 0x0)

02:20:46 executing program 2:
socketpair(0x18, 0x3, 0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
r3 = epoll_create1(0x80000)
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xffff)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1ff0bed2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7d93}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c00)={'batadv_slave_0\x00', <r7=>0x0})
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000c40)=0x3f, &(0x7f0000000c80)=0x2)
sendto$packet(r4, &(0x7f0000000cc0)="745a55536608d8987b13", 0xa, 0x800, &(0x7f0000000d00)={0x11, 0x2, r2, 0x1, 0x5, 0x6, @local}, 0x14)
pipe(&(0x7f0000000d40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, &(0x7f0000000d80))
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000e40), r8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f00)={'erspan0\x00', &(0x7f0000000e80)={'gre0\x00', <r11=>r7, 0x8, 0x8000, 0x5, 0x4, {{0x18, 0x4, 0x1, 0x3, 0x60, 0x67, 0x0, 0x3f, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x40}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xa1, [@multicast1, @private=0xa010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @timestamp={0x44, 0x24, 0x8b, 0x0, 0x7, [0x1ff, 0x9, 0x0, 0x80000000, 0x9, 0x14, 0x80000001, 0x8]}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000f40)={@local, @dev, <r12=>0x0}, &(0x7f0000000f80)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f00000010c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000011c0)={'batadv0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001a00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001280)={0x718, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r2}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x2, 0x1}, {0x3, 0xa1, 0x5, 0x3}, {0x4, 0x9, 0x2d, 0x10000}, {0x773d, 0x3, 0x4, 0x1}, {0x800, 0x1, 0x0, 0x7fff}, {0x6, 0x1f, 0x30, 0xd1c0}, {0x800, 0x4, 0x1f, 0x4}, {0x723, 0x1, 0x9, 0xffff}]}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7fff, 0x1f, 0x7, 0x3ff}, {0x1, 0xe0, 0x0, 0x9}, {0x115c, 0x6, 0x6, 0x7fffffff}, {0x8, 0x81, 0x8, 0x101}, {0x5, 0x7, 0x1, 0x66f1}, {0x1, 0x8, 0x1, 0x10001}, {0x9, 0x40, 0x87, 0x7f}, {0x150b, 0x2, 0xff}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x63, 0x7, 0x9}, {0x401, 0x8, 0x0, 0x6}, {0xb8bc, 0xd2, 0x3f, 0x6}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r13}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1060}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x22dc89e3}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x4c0c2}, 0x10)

[  108.058155] audit: type=1400 audit(1745893246.746:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:20:46 executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4)
socketpair(0x9, 0x800, 0x40000, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', <r5=>0x0, 0x2d, 0x2, 0x1, 0xbb28, 0x30, @private0, @local, 0x8, 0x7800, 0x1, 0x100}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'erspan0\x00', <r7=>0x0, 0x10, 0x40, 0x6, 0x881, {{0x22, 0x4, 0x2, 0x8, 0x88, 0x66, 0x0, 0x4, 0x2f, 0x0, @empty, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xf8, 0x1, 0x9, [{@rand_addr=0x64010102, 0x80000000}, {@broadcast, 0xff}, {@private=0xa010101, 0x3f}, {@loopback, 0xffffffff}, {@multicast2, 0x1ff}]}, @noop, @lsrr={0x83, 0x1f, 0x50, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}, @local, @broadcast, @loopback, @remote, @local]}, @rr={0x7, 0x1b, 0xfd, [@remote, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, @loopback, @private=0xa010100]}, @noop, @generic={0x88, 0x7, "2c4f03a366"}, @ra={0x94, 0x4, 0x1}]}}}}})
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000540)={@empty, @dev, <r8=>0x0}, &(0x7f0000000580)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000600)={0x620, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x260f2b9c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2d0b}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x691, 0xf7, 0xfb, 0x2}, {0x8, 0x7f, 0xb2, 0x40}, {0x81, 0x1, 0x16, 0x5}, {0xbc9, 0x9, 0x9, 0x80}, {0x0, 0x4, 0x6, 0x10001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'syztnl1\x00', r8, 0x7, 0x8000, 0x81, 0x8, {{0xc, 0x4, 0x3, 0x3f, 0x30, 0x64, 0x0, 0x81, 0x2f, 0x0, @local, @empty, {[@noop, @lsrr={0x83, 0x3, 0x48}, @timestamp={0x44, 0x18, 0xe0, 0x0, 0x2, [0x80000000, 0x80000001, 0x1, 0x7, 0x800]}]}}}}})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SNDMTU(r10, 0x112, 0xc, &(0x7f0000000d80)=0x1514, 0x2)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'syztnl1\x00', <r11=>r8, 0x4, 0x3f, 0x10, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x7, 0x7, 0x2, 0xffff}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'gretap0\x00', r11, 0x700, 0x80, 0x0, 0xf27, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x1, [{@private=0xa010102, 0x2}, {@local, 0x10000}]}]}}}}})
r12 = syz_io_uring_complete(0x0)
getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000001000)={{{@in6=@private1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000001100)=0xe8)
r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0xe3b3f02f95ccf836, r12, 0x10000000)
syz_io_uring_submit(0x0, r13, &(0x7f0000001240)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001140)="31ef331af2477db7eece7c8385012f9066edd38fad478590b6082e539c71b989acba3b3d944fd46d313819598b2d45136458e98594a588fda429255a24687c217c68bb88dc5b8132e9932eb510a6dbe4dd01afddad9cb5bd4132dd9b5962ab2dae203369713473768732cf9804fe3470bcd5d76763de2c109b53e765d667f9c7e8d2b6b178b7e904cb3798256e4bf67b0bdfbaaa3e1eb0fbc9d4479ece2df95ce074158c240ec6be299cd66d0edbfb2bf75ae3f01026bb206db7b170541253d9e7d3556dfb4a394ef27d609bbca20f804ad2e0d4fdcbcc9063ca99", 0xdb, 0x20044840, 0x1}, 0x4)

02:20:46 executing program 5:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="59990e7a3abbe8fba43fbf7387b57ab9dbb36970a4cdffa185e053da1410d4f503c3489d713e3effae79ca7451f8d1dc4bf2090e453f0b222c874ada6b0497dd839ecd6f227d53984eb9fcdf42606200399f190d26aa630aa5d7cef8ebcac6446acb8cb69d3e9d134c89e6ad725f07200a70dd99670d4b0d95de1841a5785e6c8c63f3fcf123c2bb00", 0x89, 0x0)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f0000000180)=""/153, 0x99, &(0x7f00000002c0)={&(0x7f0000000240)={'sha1-avx2\x00'}, &(0x7f0000000280)="68610ffc099690d6e7f3", 0xa})
r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r1)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x51fe24c480eb6177}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x786}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000040}, 0x48000)
socketpair(0x5, 0x2, 0x3, &(0x7f0000002e40)={<r3=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000003100)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002ec0)={0x1e8, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x71, 0x5}}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0x191)
r4 = request_key(&(0x7f0000003140)='id_resolver\x00', &(0x7f0000003180)={'syz', 0x0}, &(0x7f00000031c0)='\x00', r2)
keyctl$dh_compute(0x17, &(0x7f0000003200)={r4, r0, r0}, &(0x7f0000003240)=""/119, 0x77, &(0x7f0000003400)={&(0x7f00000032c0)={'streebog512-generic\x00'}, &(0x7f0000003300)="37dc9ea1a5ccfbd3a9d947fedc294d9bce7f302bac16dc8a8193ec6e741072f673afbeffbf1c05c48e7f9f0df8cfa10065fb4eab27eb1ded6948f97fa45b84f18862297da570c54ef1e14d020dc439e0d216801e42073c9185f045330d883f6923ecb9a4aa5bd75da6870a9c458f95d2bab91a1c01f7519a511830a9419c17babb0449380f224fc46c42a402ab5511bb0e8e05eda5a6329958323908cc1c6a5f2447d3761ffb92300ee880c9d4ad46006b3d3411e64578c31cf202c9cd057f8c8368f77617fd4bea8a4453a395a640c6bb3e55e16b3a19a6cb856ac8a0", 0xdd})
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000003540)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000003500)={&(0x7f0000003480)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9914}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffef}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
add_key$fscrypt_v1(&(0x7f0000003580), &(0x7f00000035c0)={'fscrypt:', @desc4}, &(0x7f0000003600)={0x0, "f441ceaf9cad5641bbb50fb2298419899204357894976b4a14de59a385fcaae33b09d5de6257e4be010c2f0fdcb6e54e6e2c8cffbfe95f3258d785278f8d67db", 0x3e}, 0x48, r2)
add_key$user(&(0x7f0000003680), &(0x7f00000036c0)={'syz', 0x0}, &(0x7f0000003700)="c72903b07049d7e60d", 0x9, 0xfffffffffffffffc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000003740)={'batadv_slave_0\x00', <r5=>0x0})
r6 = add_key$fscrypt_v1(&(0x7f00000038c0), &(0x7f0000003900)={'fscrypt:', @desc3}, &(0x7f0000003940)={0x0, "7a1f2e41430d1e01f19cc4dec8ca5a9d16a74440f6efba0dc1d70024f22b9afdb0b9046e81b7dc4c0c5b627a1ce1198a73fdc8a88f4adf73686b317935571615", 0x8}, 0x48, r4)
add_key$user(&(0x7f0000003780), &(0x7f00000037c0)={'syz', 0x1}, &(0x7f0000003800)="51e2dcd85778f57895d5a694fad1f46123b4173443b04f1aba05affe6a2d032f91edac82c483f9ff08ffd2446d647fbc06ce6ea9bc80900942a6c81a4ef919f91b9412314a7bec08f2ae60630ed6306d5b04ee7e1c0b8c82fcd5b416c7b1e02c4063c0b16a646365d9c1e2b5d29c66d7d057e6d77a11de22a27524d8bdd8857f87147ab5bc3eac01b4d114b97a86ff79656e6c8d1ccec8f7255d68f18dae5bc95b064a34aec02254bb8af8ff8324bc8289377e2653222a57", 0xb8, r6)
r7 = add_key$user(&(0x7f00000039c0), &(0x7f0000003a00)={'syz', 0x2}, &(0x7f0000003a40)="85fc60bb70ed337c1349a755", 0xc, r1)
keyctl$dh_compute(0x17, &(0x7f0000003a80)={r7, r0, r4}, &(0x7f0000003ac0)=""/8, 0x8, &(0x7f0000004b40)={&(0x7f0000003b00)={'sha256-arm64-neon\x00'}, &(0x7f0000003b40)="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", 0x1000})
r8 = syz_genetlink_get_family_id$team(&(0x7f0000004bc0), r3)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000005140)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005100)={&(0x7f0000004e40)={0x284, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9113}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x1004c000}, 0x40010)

02:20:46 executing program 6:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r0=>0x0})
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@can={0x1d, <r2=>0x0}, &(0x7f00000000c0)=0x80, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x7ff, 0x2000}, 0x5)
socketpair(0x1f, 0x1, 0xffffffff, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname(r4, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x208, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40049)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r3)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@multicast2, @rand_addr, <r6=>0x0}, &(0x7f0000000640)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000700)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', <r8=>r0, 0x1, 0x7, 0x7, 0xfffffffc, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, {[@timestamp={0x44, 0x2c, 0xcf, 0x0, 0x2, [0x8, 0x73c5544a, 0x1, 0x0, 0x2, 0x9, 0x80000000, 0x4, 0x0, 0x3]}, @rr={0x7, 0x7, 0x7a, [@remote]}, @lsrr={0x83, 0xf, 0x35, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6_vti0\x00', <r9=>r2, 0x2f, 0x1, 0x7, 0x2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x7800, 0x1f, 0xe97}})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000c40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x308, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfad4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0xff}, {0x6, 0x6, 0xde, 0x9}, {0x7, 0x40, 0x80, 0x66a5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}]}, 0x308}, 0x1, 0x0, 0x0, 0x4801}, 0x4048881)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'sit0\x00', r8, 0x2f, 0x6, 0x80, 0x1ff, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x10, 0x1, 0x100, 0x7ff}})
r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x44089)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000e80)={'batadv_slave_0\x00'})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCDELRT(r11, 0x890c, &(0x7f0000000f00)={0x0, @hci={0x1f, 0x1, 0x4}, @l2={0x1f, 0x9, @any, 0x1ff, 0x2}, @vsock={0x28, 0x0, 0x0, @host}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000ec0)='sit0\x00', 0x100000000, 0xfffffffffffffff7, 0x1000})
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000f80)=0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0))

02:20:46 executing program 7:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4100)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9}, 0x8001)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d636eb9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r2)
r3 = socket$inet(0x2, 0x800, 0x40)
syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff)
getsockname(r0, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000580)=0x80)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', <r7=>0x0, 0x2f, 0xbd, 0x8, 0x0, 0x27, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, 0x8, 0x7, 0x61a, 0x100}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'gre0\x00', <r8=>0x0, 0x1, 0x20, 0x6, 0x5, {{0x16, 0x4, 0x1, 0x5, 0x58, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@lsrr={0x83, 0xb, 0x28, [@rand_addr=0x64010102, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xb, "cd4e3392481ca17264"}, @noop, @ssrr={0x89, 0x1f, 0xb1, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1, @multicast1]}, @generic={0x44, 0x8, "642e834b328b"}]}}}}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8)
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000cc0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={0x308, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xcc, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6b91, 0x0, 0xeb, 0x1}, {0x8, 0x4, 0x7, 0x5}, {0x1, 0x5, 0x6, 0x4}, {0x3, 0x6, 0x80}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x87, 0x3, 0x4, 0x6}, {0x40, 0x3, 0x9}, {0x7, 0x0, 0x8, 0x5}, {0x5, 0x2, 0xc0, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff97be}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x308}}, 0x40)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4018}, 0x40014)
socketpair(0x15, 0x800, 0x0, &(0x7f0000000e00))
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000e40)={0x2, 0x0, [0x0, 0x0]})

[  109.371403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.380169] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.387565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.392078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.395460] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.399143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.416379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.426887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.434517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.451769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.538634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.542591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.544988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.562977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.564341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.566816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.579900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.581251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.593245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.595911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.648111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  109.652327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  109.654413] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  109.670109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.679287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.694931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  109.703478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  109.703587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  109.708185] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  109.717412] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  109.723385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  109.728177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  109.732318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  109.741491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  109.749607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  109.751387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  109.753289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  109.778228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  109.783519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  109.786221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.512228] Bluetooth: hci1: command tx timeout
[  111.576934] Bluetooth: hci0: command tx timeout
[  111.639745] Bluetooth: hci3: command tx timeout
[  111.703785] Bluetooth: hci2: command tx timeout
[  111.767735] Bluetooth: hci4: command tx timeout
[  111.896210] Bluetooth: hci7: command tx timeout
[  111.897079] Bluetooth: hci6: command tx timeout
[  111.898707] Bluetooth: hci5: command tx timeout
[  113.558978] Bluetooth: hci1: command tx timeout
[  113.623747] Bluetooth: hci0: command tx timeout
[  113.686972] Bluetooth: hci3: command tx timeout
[  113.751717] Bluetooth: hci2: command tx timeout
[  113.814783] Bluetooth: hci4: command tx timeout
[  113.944962] Bluetooth: hci7: command tx timeout
[  113.945423] Bluetooth: hci5: command tx timeout
[  113.945978] Bluetooth: hci6: command tx timeout
[  115.606751] Bluetooth: hci1: command tx timeout
[  115.670843] Bluetooth: hci0: command tx timeout
[  115.734725] Bluetooth: hci3: command tx timeout
[  115.798740] Bluetooth: hci2: command tx timeout
[  115.863835] Bluetooth: hci4: command tx timeout
[  115.990809] Bluetooth: hci6: command tx timeout
[  115.991297] Bluetooth: hci5: command tx timeout
[  115.992219] Bluetooth: hci7: command tx timeout
[  117.655523] Bluetooth: hci1: command tx timeout
[  117.718728] Bluetooth: hci0: command tx timeout
[  117.782780] Bluetooth: hci3: command tx timeout
[  117.846845] Bluetooth: hci2: command tx timeout
[  117.912019] Bluetooth: hci4: command tx timeout
[  118.038771] Bluetooth: hci5: command tx timeout
[  118.039244] Bluetooth: hci7: command tx timeout
[  118.039642] Bluetooth: hci6: command tx timeout
[  169.381054] syz-executor.7 (288) used greatest stack depth: 25016 bytes left
[  169.525868] syz-executor.4 (285) used greatest stack depth: 24744 bytes left
[  172.215402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.216978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.219647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.230228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.231887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.232256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.249518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.259871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.264141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.265146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.268387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.281008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.285917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.290293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.300270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.332430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.333583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.344119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.364215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.369904] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.373197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.378075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.386225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.412373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.416019] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.486687] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.489626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  172.515213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.518368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  172.531230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.535536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.556401] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.561116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.563247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.580890] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  172.895717] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  172.903515] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  172.914047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.013126] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.053155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  174.295165] Bluetooth: hci0: command tx timeout
[  174.359514] Bluetooth: hci1: command tx timeout
[  174.486963] Bluetooth: hci2: command tx timeout
[  174.488183] Bluetooth: hci4: command tx timeout
[  174.551818] Bluetooth: hci3: command tx timeout
[  174.680392] Bluetooth: hci6: command tx timeout
[  174.934817] Bluetooth: hci5: command tx timeout
[  175.254863] Bluetooth: hci7: command tx timeout
[  176.342790] Bluetooth: hci0: command tx timeout
[  176.406753] Bluetooth: hci1: command tx timeout
[  176.535029] Bluetooth: hci2: command tx timeout
[  176.535467] Bluetooth: hci4: command tx timeout
[  176.598725] Bluetooth: hci3: command tx timeout
[  176.726979] Bluetooth: hci6: command tx timeout
[  176.982859] Bluetooth: hci5: command tx timeout
[  177.302732] Bluetooth: hci7: command tx timeout
[  178.390748] Bluetooth: hci0: command tx timeout
[  178.454746] Bluetooth: hci1: command tx timeout
[  178.582990] Bluetooth: hci4: command tx timeout
[  178.583429] Bluetooth: hci2: command tx timeout
[  178.647835] Bluetooth: hci3: command tx timeout
[  178.774721] Bluetooth: hci6: command tx timeout
[  179.030745] Bluetooth: hci5: command tx timeout
[  179.351945] Bluetooth: hci7: command tx timeout
[  180.438726] Bluetooth: hci0: command tx timeout
[  180.504704] Bluetooth: hci1: command tx timeout
[  180.631113] Bluetooth: hci2: command tx timeout
[  180.631529] Bluetooth: hci4: command tx timeout
[  180.694718] Bluetooth: hci3: command tx timeout
[  180.822781] Bluetooth: hci6: command tx timeout
[  181.078772] Bluetooth: hci5: command tx timeout
[  181.398752] Bluetooth: hci7: command tx timeout
[  234.478338] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.481413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.485301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.493311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.498957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.613585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.622528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.627960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.641371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.646375] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.697375] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.700163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.704164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.720957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  234.726121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.732473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  234.735074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  234.736516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.771496] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  234.779938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.801544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  234.805316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  234.811538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  234.834437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  234.840012] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  234.856423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  234.881642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  234.890944] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  234.894987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  234.901202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  234.907905] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.938579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  234.942584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.982225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.988059] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  234.999997] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.006143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.008600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.019641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  235.039958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.566769] Bluetooth: hci0: command tx timeout
[  236.694865] Bluetooth: hci1: command tx timeout
[  236.886917] Bluetooth: hci2: command tx timeout
[  236.886993] Bluetooth: hci4: command tx timeout
[  236.888931] Bluetooth: hci3: command tx timeout
[  236.951790] Bluetooth: hci5: command tx timeout
[  237.078762] Bluetooth: hci6: command tx timeout
[  237.146004] Bluetooth: hci7: command tx timeout
[  238.614993] Bluetooth: hci0: command tx timeout
[  238.742895] Bluetooth: hci1: command tx timeout
[  238.935691] Bluetooth: hci4: command tx timeout
[  238.937008] Bluetooth: hci2: command tx timeout
[  238.937177] Bluetooth: hci3: command tx timeout
[  238.999718] Bluetooth: hci5: command tx timeout
[  239.127245] Bluetooth: hci6: command tx timeout
[  239.190946] Bluetooth: hci7: command tx timeout
[  240.662733] Bluetooth: hci0: command tx timeout
[  240.790893] Bluetooth: hci1: command tx timeout
[  240.982781] Bluetooth: hci2: command tx timeout
[  240.982831] Bluetooth: hci3: command tx timeout
[  240.983281] Bluetooth: hci4: command tx timeout
[  241.047755] Bluetooth: hci5: command tx timeout
[  241.174808] Bluetooth: hci6: command tx timeout
[  241.239719] Bluetooth: hci7: command tx timeout
[  242.710756] Bluetooth: hci0: command tx timeout
[  242.838954] Bluetooth: hci1: command tx timeout
[  243.032777] Bluetooth: hci3: command tx timeout
[  243.034258] Bluetooth: hci2: command tx timeout
[  243.035181] Bluetooth: hci4: command tx timeout
[  243.094799] Bluetooth: hci5: command tx timeout
[  243.223919] Bluetooth: hci6: command tx timeout
[  243.287398] Bluetooth: hci7: command tx timeout
[  296.745107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  296.752216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  296.755464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  296.766412] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  296.775151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  296.880074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.885991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.888229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.895946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.900962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.934850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  296.937189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  296.941143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  296.947538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  296.960118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.049640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  297.056214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  297.062382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  297.064256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  297.069096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  297.072467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  297.077613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  297.095817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  297.099286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  297.102107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  297.108001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  297.109508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  297.111448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  297.127418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  297.133432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  297.311233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  297.325355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  297.365538] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  297.370166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  297.379557] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  297.384124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  297.385589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  297.394095] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  297.405089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  297.447944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.839042] Bluetooth: hci0: command tx timeout
[  298.966813] Bluetooth: hci1: command tx timeout
[  299.030805] Bluetooth: hci2: command tx timeout
[  299.222911] Bluetooth: hci4: command tx timeout
[  299.224773] Bluetooth: hci3: command tx timeout
[  299.286882] Bluetooth: hci5: command tx timeout
[  299.478913] Bluetooth: hci7: command tx timeout
[  299.606751] Bluetooth: hci6: command tx timeout
[  300.888694] Bluetooth: hci0: command tx timeout
[  301.015062] Bluetooth: hci1: command tx timeout
[  301.078919] Bluetooth: hci2: command tx timeout
[  301.270991] Bluetooth: hci4: command tx timeout
[  301.271489] Bluetooth: hci3: command tx timeout
[  301.335706] Bluetooth: hci5: command tx timeout
[  301.526949] Bluetooth: hci7: command tx timeout
[  301.654741] Bluetooth: hci6: command tx timeout
[  302.934915] Bluetooth: hci0: command tx timeout
[  303.063066] Bluetooth: hci1: command tx timeout
[  303.127841] Bluetooth: hci2: command tx timeout
[  303.318834] Bluetooth: hci4: command tx timeout
[  303.319340] Bluetooth: hci3: command tx timeout
[  303.382763] Bluetooth: hci5: command tx timeout
[  303.574838] Bluetooth: hci7: command tx timeout
[  303.702731] Bluetooth: hci6: command tx timeout
[  304.982718] Bluetooth: hci0: command tx timeout
[  305.110912] Bluetooth: hci1: command tx timeout
[  305.174904] Bluetooth: hci2: command tx timeout
[  305.367791] Bluetooth: hci4: command tx timeout
[  305.368292] Bluetooth: hci3: command tx timeout
[  305.430753] Bluetooth: hci5: command tx timeout
[  305.622939] Bluetooth: hci7: command tx timeout
[  305.750853] Bluetooth: hci6: command tx timeout
[  359.292133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.293549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  359.296599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  359.303312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  359.306434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.311313] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  359.316322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  359.321498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  359.326402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.337234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.396951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.405782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.409162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.430405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.436307] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.505950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  359.519364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  359.533062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  359.598391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  359.609799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  359.613938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  359.621587] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  359.627374] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  359.629944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  359.640952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.643129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  359.676384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  359.682431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.691108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.702394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  359.709354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  359.712784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  359.723404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  359.732626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  359.740228] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  359.754904] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  359.769763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  359.771285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  359.803999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  359.828957] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  361.366951] Bluetooth: hci0: command tx timeout
[  361.431591] Bluetooth: hci1: command tx timeout
[  361.558777] Bluetooth: hci2: command tx timeout
[  361.751857] Bluetooth: hci3: command tx timeout
[  361.880789] Bluetooth: hci6: command tx timeout
[  361.881436] Bluetooth: hci5: command tx timeout
[  361.942781] Bluetooth: hci4: command tx timeout
[  361.943739] Bluetooth: hci7: command tx timeout
[  363.415912] Bluetooth: hci0: command tx timeout
[  363.478707] Bluetooth: hci1: command tx timeout
[  363.606810] Bluetooth: hci2: command tx timeout
[  363.799778] Bluetooth: hci3: command tx timeout
[  363.927911] Bluetooth: hci5: command tx timeout
[  363.927962] Bluetooth: hci6: command tx timeout
[  363.990919] Bluetooth: hci4: command tx timeout
[  363.991389] Bluetooth: hci7: command tx timeout
[  365.464133] Bluetooth: hci0: command tx timeout
[  365.529749] Bluetooth: hci1: command tx timeout
[  365.655714] Bluetooth: hci2: command tx timeout
[  365.847762] Bluetooth: hci3: command tx timeout
[  365.974887] Bluetooth: hci6: command tx timeout
[  365.977694] Bluetooth: hci5: command tx timeout
[  366.038719] Bluetooth: hci7: command tx timeout
[  366.039761] Bluetooth: hci4: command tx timeout
[  367.510943] Bluetooth: hci0: command tx timeout
[  367.574939] Bluetooth: hci1: command tx timeout
[  367.703706] Bluetooth: hci2: command tx timeout
[  367.896166] Bluetooth: hci3: command tx timeout
[  368.022940] Bluetooth: hci5: command tx timeout
[  368.022993] Bluetooth: hci6: command tx timeout
[  368.088966] Bluetooth: hci4: command tx timeout
[  368.089456] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
02:25:49  Registers:
info registers vcpu 0
RAX=ffffffff87a31bc8 RBX=ffff888015639bc0 RCX=0000000000000200 RDX=873d0e13b074236a
RSI=ffff88801563a690 RDI=ffff88801563a690 RBP=0000000000000000 RSP=ffff88806ce088d0
R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000012ac0
R12=ffff88801563a690 R13=0000000000000000 R14=0000000000000003 R15=ffff88801563a618
RIP=ffffffff81511cd0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe86c203540 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe86c6dd000 CR3=0000000024323000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff
XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69
XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8160074e RBX=ffffffff816003c0 RCX=ffff888031b8fb68 RDX=1ffff11006371f64
RSI=ffffffff8160074e RDI=ffffffff8160074e RBP=ffff888031b8fb60 RSP=ffff888031b8fac8
R8 =0000000000000001 R9 =ffff888031b8fb08 R10=000000000003b124 R11=00000000000043ac
R12=ffff888031b8fb90 R13=0000000000000000 R14=ffff88802dbf3780 R15=0000000000000cc0
RIP=ffffffff812d713f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6eb9882540 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe5800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcc93ddf20 CR3=0000000007296000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000