Warning: Permanently added '[localhost]:51860' (ECDSA) to the list of known hosts.
2025/05/23 22:12:44 fuzzer started
2025/05/23 22:12:45 dialing manager at localhost:46087
syzkaller login: [   93.983421] cgroup: Unknown subsys name 'net'
[   94.134986] cgroup: Unknown subsys name 'cpuset'
[   94.186745] cgroup: Unknown subsys name 'rlimit'
2025/05/23 22:13:09 syscalls: 210
2025/05/23 22:13:09 code coverage: enabled
2025/05/23 22:13:09 comparison tracing: enabled
2025/05/23 22:13:09 extra coverage: enabled
2025/05/23 22:13:09 setuid sandbox: enabled
2025/05/23 22:13:09 namespace sandbox: enabled
2025/05/23 22:13:09 Android sandbox: enabled
2025/05/23 22:13:09 fault injection: enabled
2025/05/23 22:13:09 leak checking: enabled
2025/05/23 22:13:09 net packet injection: enabled
2025/05/23 22:13:09 net device setup: enabled
2025/05/23 22:13:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/23 22:13:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/23 22:13:09 USB emulation: enabled
2025/05/23 22:13:09 hci packet injection: enabled
2025/05/23 22:13:09 wifi device emulation: enabled
2025/05/23 22:13:09 802.15.4 emulation: enabled
2025/05/23 22:13:09 fetching corpus: 0, signal 0/0 (executing program)
2025/05/23 22:13:11 starting 8 fuzzer processes
22:13:11 executing program 0:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0x8, 0x6}, 'port0\x00', 0x8, 0x50, 0x401, 0x9, 0x822, 0xfffffffc, 0x6, 0x0, 0x4, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000180)={0x1, 0x3ca, 0x0, 'queue1\x00', 0x95e})
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x2, 0x1, 0x5})
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f00000002c0))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x1f, 0x3, 0x4, 0x81, 0x0, 0x8, 0xc0402, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xffff, 0x3}, 0x4000, 0x10000, 0x4, 0x5, 0x1f, 0xcf, 0x9, 0x0, 0x80000001, 0x0, 0x7f}, 0x0, 0x0, r3, 0x1)
r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000400)={{0x20, 0x4}, 'port1\x00', 0x41, 0x100000, 0x0, 0x2, 0x7fff, 0x15e6, 0x81, 0x0, 0x2, 0x11})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000004c0)={0x0, 0xff, 0x0, 'queue0\x00', 0x1})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x6, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40008c4)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000006c0))
r7 = syz_io_uring_setup(0x25c2, &(0x7f00000008c0)={0x0, 0xe5f3, 0x2, 0x2, 0x138, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000940), &(0x7f0000000980))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x10010, r7, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000009c0))

22:13:11 executing program 1:
r0 = socket(0x28, 0x1, 0x2)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x1})
socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r3=>0x0, 0x2f, 0x7f, 0x5, 0x1, 0x34, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @remote}, 0x710, 0x10, 0x5, 0x5686ac59}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x144, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x144}, 0x1, 0x0, 0x0, 0x40014}, 0x40001)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000480)={0x1, 0x1, {0x2, 0x3, 0x1000, 0x2, 0x1}, 0xd29})
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0)
ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000540)={'\x00', 0x1, 0x2, 0x3})
write$char_usb(0xffffffffffffffff, &(0x7f00000005c0)="22a897c73bbc68ae78ecf6ac605d1697436bec65eb83fc61fbe987b48a9ba1dbaaca596d01090ba78fc9b4bb1b5f84742402dd77df2960c14763fab4ce85fa831a301b152f4188015abbf35293fa280ace65caec426736557ac23c82859506d6c07f26036ee3fcde758479a827064b77fe2fe0246b099a25a6d3404b9d16a4bb93d351e58b0b8ae07d0415bd6dc136ffb270c0272947ab9365a53bb6f111ce48464f0e2ecb5ebe", 0xa7)
r5 = socket(0x1a, 0x800, 0x800)
ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000002980))
recvmmsg(r5, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000002ac0)=""/204, 0xcc}, {&(0x7f0000002bc0)=""/251, 0xfb}, {&(0x7f0000002cc0)=""/97, 0x61}, {&(0x7f0000002d40)=""/78, 0x4e}], 0x5, &(0x7f0000002e40)=""/243, 0xf3}, 0x1f}, {{&(0x7f0000002f40)=@nl, 0x80, &(0x7f0000003240)=[{&(0x7f0000002fc0)=""/2, 0x2}, {&(0x7f0000003000)=""/91, 0x5b}, {&(0x7f0000003080)=""/250, 0xfa}, {&(0x7f0000003180)=""/133, 0x85}], 0x4, &(0x7f0000003280)=""/162, 0xa2}, 0x81}, {{&(0x7f0000003340)=@ll={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000033c0)}, 0x7}, {{&(0x7f0000003400)=@ieee802154, 0x80, &(0x7f0000004500)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/114, 0x72}], 0x2, &(0x7f0000004540)=""/122, 0x7a}, 0x8}], 0x4, 0x40, &(0x7f00000046c0))
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000004780)={'ip6tnl0\x00', &(0x7f0000004700)={'sit0\x00', r6, 0x2f, 0x7, 0x1, 0x80000000, 0x8, @remote, @private0, 0x8, 0x10, 0x7bf, 0x4}})
r7 = socket(0x21, 0x2, 0x53)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000004840)={'syztnl1\x00', &(0x7f00000047c0)={'sit0\x00', <r8=>r6, 0x29, 0x81, 0x1, 0x100, 0x4, @mcast2, @private2, 0x7, 0x40, 0x6, 0x101}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000004900)={'ip6gre0\x00', &(0x7f0000004880)={'ip6gre0\x00', r8, 0x0, 0x7, 0xc7, 0xee, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, 0x40, 0x7800, 0x1000, 0x401}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000004a80)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004a40)={&(0x7f00000049c0)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1)

22:13:11 executing program 2:
remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000007, 0x6, 0x1000)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x6007, @fd_index=0x6, 0x6, &(0x7f0000000440)=[{&(0x7f0000000000)="46de061fb34672865ec2ee94da78c33a600e6d3e5cb790d936487db59634eef675e331b51b367a567b36975e0d378901c06f83c165f32d1580953bb1b65e25674bece6a0b5eac6632077f72a4fe8d4668cb6dc013b09f13b5b83af4329c83e755cd37020d6573f5ce9190b64854fb3728a2b7e18e7ef2381cca4be459439cb43d7f24e34", 0x84}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="1bd7c8c2", 0x4}, {&(0x7f0000000140)="6f7877b87c0605c8abd4fa1604ebb8a3b09b35d084ddf75709dc0ed8f1412367bef355b0404d365954bafb9ff72addcf83ce93bb7be6ca99da1b971d1a041f16e6083344eeb48790fd8fea8685444002c6e7646b958ba8029bb736aea5fa51b6c495d4d826a8e9d44719fb953b8ff16b22fc54c7448868bba243d7df899fd1115ba3cb14c5e51cfc20c84fec0915205cdcbb2dec658cbb4a202ca4dfdcaa692bd8a915b3fae4d57d99b7cedc9fa05d9c90cd69091cbb93ccfae33505e838f0", 0xbf}, {&(0x7f0000000200)="53196163798a88a91e726b3c9475592a4ce560bbd905e621f0bf538ca9d33fc6762935a3290a5f3d0ee1cd287dc882d30ee71bf32a0505ebebdce08837d798c22818cef03f11738e04baec98ec549120f95a49f9802e32e6001bd64fbeb66ed73dde148ff3ba7c603ad2f35701e941f8f24a21b6755f5f585f2ce50fb6cb7393d24c3f1b559bcc1c2ae3c633d762515fcb54c2a91d18855135700cf6eb6325e6d555a7831347", 0xa6}, {&(0x7f00000002c0)="981f6391634bbe135976fd89eecced40cba20aeae8ddf7b2e8b60d16f62257d8ffbab6652f0c7bcff964e32bb8b35d479955a1d45ef54f48017eaba743c28488dc62ab42275b86e8ac99ffdfc08a79f9817448ef844ca4189e8521db212f045bd6d76d7ece67925a998be7c13b781d839636a59da2e2978603763af222839bb825ae49028d05f4e1aca38b", 0x8b}, {&(0x7f0000000380)="bd4b466bcee9ec4c443802153074bf41b7a24a0148d423bd397713de3111b6099dddec8e5325a330935c024b855503dd750fc85a4bab92268fad941d71790dc6e0e68a8666e12d685ae0e16ea2831a1ea4ec99f728e6a91aa7f46e4c18b95ab6a4e4ed2e93f347dac818485ac771c8ed8068395bc5999bff5bb65a339fda1d235a827cda43cb5057a06f54a6ac56dea8c88c37f67fd96db770b32ece80a7f011b9", 0xa1}], 0x7, 0x8, 0x0, {0x3}}, 0x9)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000005c0)={[0xfffffffeffffffff]}, 0x8)
syz_io_uring_setup(0x1555, &(0x7f0000000600)={0x0, 0x1f24, 0x0, 0x1, 0x3}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000680), &(0x7f00000006c0))
r0 = semget$private(0x0, 0x1, 0xc)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000700)=""/125)
r1 = semget$private(0x0, 0x4, 0x54b)
semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000780)=""/9)
epoll_pwait2(0xffffffffffffffff, &(0x7f00000007c0)=[{}, {}, {}], 0x3, &(0x7f0000000800), &(0x7f0000000840)={[0x100]}, 0x8)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x98, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xdde1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0xa0)
semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000a40)=""/13)
semctl$SEM_INFO(r0, 0x4, 0x13, &(0x7f0000000a80)=""/150)
r3 = epoll_create(0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000b40))
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000d40)={0x40000000})
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000d80), 0x380, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x48, r2, 0xbf42994c428a03e5, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb42}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0xaa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4040000)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x18c4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4002004}, 0x8040)

[  119.570542] audit: type=1400 audit(1748038391.183:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:13:11 executing program 3:
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @llc={0x1a, 0x118, 0xfb, 0x1f, 0x8, 0x0, @local}, @in={0x2, 0x4e23, @empty}, @isdn={0x22, 0x4, 0x8, 0x8, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x2fda, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x7, 0x6, 0x1})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x8054)
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0xfffffffffffffffc, 0x20000000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x46}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000011)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xc1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8841}, 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x2a4ec2, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x8140, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r2, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x48040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000780), r5)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000800), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffe00, 0x8, 0xfffffffe]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xabd}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'syztnl0\x00', <r8=>0x0, 0x4, 0x7, 0x0, 0x55, 0xa, @local, @private2, 0x8, 0x20, 0x5, 0x81}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b00)={'ip6gre0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', <r9=>0x0, 0x2f, 0x1, 0x6b, 0x9, 0x4d, @mcast1, @remote, 0x10, 0x7, 0x0, 0x8}})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000009a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000009a00)={&(0x7f0000009140)={0x894, r7, 0x600, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x91}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffa70}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x32, 0x1, 0x9}, {0x8, 0x2, 0x80, 0xd9}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xff, 0x8, 0x0, 0x9c}, {0x8, 0xd8, 0x20}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x0, 0x90, 0x101}, {0x53, 0x7, 0x4, 0x2869d7cb}, {0x34e, 0xfb, 0x7f, 0x1}, {0x931, 0x9, 0x9, 0xe31e}, {0x8000, 0x1f, 0x5, 0x5}, {0x6, 0x7, 0x20, 0xb3f}, {0x946f, 0x45, 0x0, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x894}, 0x1, 0x0, 0x0, 0x20040081}, 0xc045)

22:13:11 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x41f0}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf91b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x5a198efa1731c606}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x114}, 0x1, 0x0, 0x0, 0x8880}, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x8008)
socketpair(0xa, 0x1, 0x7, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000801)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40041}, 0x8080)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r5)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, r8, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x120}, 0x1, 0x0, 0x0, 0x10000000}, 0x81)
syz_io_uring_setup(0x2deb, &(0x7f0000000a40)={0x0, 0xcd33, 0x0, 0x0, 0x121, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)=<r9=>0x0)
syz_io_uring_submit(0x0, r9, &(0x7f0000000b40)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x0)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r2)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x6c, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010)
r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000e40)={&(0x7f0000000d00), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r11, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6b}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x80, 0x3f, 0x4, 0x5]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040060}, 0x0)

22:13:11 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x80, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7b1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x200400c1}, 0x80004)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000021c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x140004}, 0xc, &(0x7f0000002180)={&(0x7f0000001f40)={0x224, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x224}, 0x1, 0x0, 0x0, 0x40}, 0x40010)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan1\x00'})
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002240), 0x8000, 0x0)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000022c0), r2)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x10001080}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x70)
epoll_create1(0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_ifreq(r7, 0x8938, &(0x7f0000002400)={'bridge0\x00', @ifru_names})

22:13:11 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', <r0=>0x0, 0x4, 0x20, 0x3, 0xffffff04, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x20, 0x1, 0x7}})
recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/30, 0x1e}], 0x5}, 0xa8dd}, {{&(0x7f0000000500)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/15, 0xf}], 0x1, &(0x7f0000000600)=""/188, 0xbc}, 0x3}, {{&(0x7f00000006c0)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/53, 0x35}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/3, 0x3}], 0x3}, 0xfc}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/202, 0xca}, {&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/98, 0x62}, {&(0x7f0000000b40)=""/38, 0x26}, {&(0x7f0000000b80)=""/121, 0x79}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x7, &(0x7f0000000d80)=""/147, 0x93}, 0x5db6d4a8}], 0x4, 0xa061, 0x0)
socketpair(0x2a, 0x5, 0x0, &(0x7f0000000f40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48044}, 0x15)
r4 = socket(0x15, 0x800, 0x5)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000001100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x20004011)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000001280)={'ip6_vti0\x00', &(0x7f0000001200)={'ip6tnl0\x00', r0, 0x2b, 0x5e, 0x4, 0x80000001, 0x8, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x0, 0xa7}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000012c0)={'team0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'ip6tnl0\x00', r6, 0x0, 0x7, 0x0, 0x9, 0x7a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x20, 0x1, 0x903, 0xfffffffa}})
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000013c0), 0x4c0000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001400))
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001640), r1)
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001800)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x124, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x988c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1c}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r9, &(0x7f0000001840)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0xc6, 0x0, 0x20, 0xbf5, 0x40, 0x800}}}, 0x12)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r1)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
ioctl$PTP_ENABLE_PPS(r7, 0x40043d04, 0x0)

22:13:11 executing program 7:
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c811}, 0x20000000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x240100, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000140)={0x12})
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000600)={'\x00', 0x1000, 0x3, 0x100})
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000006c0)={'\x00', 0x12000, 0x1, 0x10000})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x35}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0xc040010)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0xc042)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000a00)={{0x1, 0x2}, {0x5, 0x3}, 0xffff})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44000}, 0x4040050)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbcb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r3)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000ec0)={&(0x7f0000000d40), 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, r4, 0x404, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000f00), 0x80000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4044)
ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000001080)={'\x00', 0x8c4c, 0x0, 0x5})
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001100))
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000001140)={0x7, 0x2})

[  120.800829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.807738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.812254] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.820153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.826186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  121.046838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.063694] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.066567] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.084751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.091951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.094434] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.100209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.106849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.138117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.154009] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.185296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.204768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.207196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.219812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.232298] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  121.236593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  121.245882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  121.249884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  121.304040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  121.316671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  121.322942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  121.335941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  121.344551] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  121.346854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  121.350064] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  121.352772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  121.360006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  121.366619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  121.376991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  121.377227] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  121.384324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  121.389213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  121.396854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  121.404795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.410229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  122.869568] Bluetooth: hci0: command tx timeout
[  123.188555] Bluetooth: hci1: command tx timeout
[  123.253383] Bluetooth: hci2: command tx timeout
[  123.315478] Bluetooth: hci3: command tx timeout
[  123.379608] Bluetooth: hci4: command tx timeout
[  123.443825] Bluetooth: hci7: command tx timeout
[  123.507448] Bluetooth: hci6: command tx timeout
[  123.508013] Bluetooth: hci5: command tx timeout
[  124.915407] Bluetooth: hci0: command tx timeout
[  125.236428] Bluetooth: hci1: command tx timeout
[  125.299566] Bluetooth: hci2: command tx timeout
[  125.363663] Bluetooth: hci3: command tx timeout
[  125.427831] Bluetooth: hci4: command tx timeout
[  125.491492] Bluetooth: hci7: command tx timeout
[  125.555481] Bluetooth: hci5: command tx timeout
[  125.555909] Bluetooth: hci6: command tx timeout
[  126.963484] Bluetooth: hci0: command tx timeout
[  127.284506] Bluetooth: hci1: command tx timeout
[  127.348490] Bluetooth: hci2: command tx timeout
[  127.413463] Bluetooth: hci3: command tx timeout
[  127.476428] Bluetooth: hci4: command tx timeout
[  127.540772] Bluetooth: hci7: command tx timeout
[  127.606433] Bluetooth: hci5: command tx timeout
[  127.606850] Bluetooth: hci6: command tx timeout
[  129.012652] Bluetooth: hci0: command tx timeout
[  129.333526] Bluetooth: hci1: command tx timeout
[  129.398614] Bluetooth: hci2: command tx timeout
[  129.460414] Bluetooth: hci3: command tx timeout
[  129.524552] Bluetooth: hci4: command tx timeout
[  129.588516] Bluetooth: hci7: command tx timeout
[  129.651431] Bluetooth: hci6: command tx timeout
[  129.651856] Bluetooth: hci5: command tx timeout
[  184.018128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.024984] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.029167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.040270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.045289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.194251] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.200687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.205992] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.213220] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.220999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.274883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.284199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.302280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.310397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.332971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.339400] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.358383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.388894] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.406204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.424716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  184.427598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  184.432871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  184.450691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  184.455174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.467863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  184.471542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  184.485634] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  184.487212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  184.500053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  184.520654] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  184.532556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  184.538147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  184.554852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  184.563595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  184.581815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  184.590123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  184.598201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  184.603160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  184.623805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  184.646886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.100419] Bluetooth: hci0: command tx timeout
[  186.292683] Bluetooth: hci1: command tx timeout
[  186.421594] Bluetooth: hci2: command tx timeout
[  186.547527] Bluetooth: hci4: command tx timeout
[  186.548281] Bluetooth: hci3: command tx timeout
[  186.740631] Bluetooth: hci6: command tx timeout
[  186.741226] Bluetooth: hci5: command tx timeout
[  186.741471] Bluetooth: hci7: command tx timeout
[  188.147570] Bluetooth: hci0: command tx timeout
[  188.339547] Bluetooth: hci1: command tx timeout
[  188.468397] Bluetooth: hci2: command tx timeout
[  188.597374] Bluetooth: hci3: command tx timeout
[  188.597812] Bluetooth: hci4: command tx timeout
[  188.787455] Bluetooth: hci7: command tx timeout
[  188.788636] Bluetooth: hci6: command tx timeout
[  188.788664] Bluetooth: hci5: command tx timeout
[  190.195921] Bluetooth: hci0: command tx timeout
[  190.389041] Bluetooth: hci1: command tx timeout
[  190.515454] Bluetooth: hci2: command tx timeout
[  190.643442] Bluetooth: hci4: command tx timeout
[  190.643884] Bluetooth: hci3: command tx timeout
[  190.835671] Bluetooth: hci6: command tx timeout
[  190.836166] Bluetooth: hci5: command tx timeout
[  190.836759] Bluetooth: hci7: command tx timeout
[  192.243440] Bluetooth: hci0: command tx timeout
[  192.435990] Bluetooth: hci1: command tx timeout
[  192.565426] Bluetooth: hci2: command tx timeout
[  192.691468] Bluetooth: hci3: command tx timeout
[  192.692280] Bluetooth: hci4: command tx timeout
[  192.883988] Bluetooth: hci7: command tx timeout
[  192.885425] Bluetooth: hci6: command tx timeout
[  192.886195] Bluetooth: hci5: command tx timeout
[  246.092823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.099065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.102900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.111774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.115898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.275507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.277192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.278994] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.284910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.299951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.302871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.303493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.307923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.315027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.328800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.448995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.458311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  246.466706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  246.473241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  246.479866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  246.713521] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.726278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  246.729058] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.730479] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  246.736770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  246.737752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  246.739621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  246.744166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  246.756278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  246.757098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  246.770770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  246.773034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  246.774959] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  246.790752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  246.795467] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  246.799974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  246.814818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  246.824718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  246.836489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.836910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  248.181529] Bluetooth: hci0: command tx timeout
[  248.371556] Bluetooth: hci1: command tx timeout
[  248.371576] Bluetooth: hci2: command tx timeout
[  248.563615] Bluetooth: hci3: command tx timeout
[  248.885389] Bluetooth: hci5: command tx timeout
[  248.885417] Bluetooth: hci4: command tx timeout
[  248.947661] Bluetooth: hci6: command tx timeout
[  248.947727] Bluetooth: hci7: command tx timeout
[  250.227418] Bluetooth: hci0: command tx timeout
[  250.419412] Bluetooth: hci2: command tx timeout
[  250.421622] Bluetooth: hci1: command tx timeout
[  250.613515] Bluetooth: hci3: command tx timeout
[  250.931620] Bluetooth: hci4: command tx timeout
[  250.934735] Bluetooth: hci5: command tx timeout
[  250.995498] Bluetooth: hci6: command tx timeout
[  250.996617] Bluetooth: hci7: command tx timeout
[  252.277592] Bluetooth: hci0: command tx timeout
[  252.469638] Bluetooth: hci1: command tx timeout
[  252.470099] Bluetooth: hci2: command tx timeout
[  252.661080] Bluetooth: hci3: command tx timeout
[  252.981878] Bluetooth: hci5: command tx timeout
[  252.981996] Bluetooth: hci4: command tx timeout
[  253.044504] Bluetooth: hci7: command tx timeout
[  253.044622] Bluetooth: hci6: command tx timeout
[  254.323587] Bluetooth: hci0: command tx timeout
[  254.515563] Bluetooth: hci2: command tx timeout
[  254.515619] Bluetooth: hci1: command tx timeout
[  254.708435] Bluetooth: hci3: command tx timeout
[  255.027603] Bluetooth: hci4: command tx timeout
[  255.027663] Bluetooth: hci5: command tx timeout
[  255.093509] Bluetooth: hci7: command tx timeout
[  255.093573] Bluetooth: hci6: command tx timeout
[  308.428942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  308.436955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  308.439955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  308.451046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  308.458184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  308.556281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.566685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.568873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.578045] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.584781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.622179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  308.638858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  308.643774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  308.652315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  308.660075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  308.884169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.915526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.917459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.928008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.939578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.949772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.969878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.971743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.978797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.982067] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.000921] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.004013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.015823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.020519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.030753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.034893] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.055020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.060133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.073738] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.105174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.107669] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.131727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.135676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.145798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  309.196637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  310.515590] Bluetooth: hci0: command tx timeout
[  310.644732] Bluetooth: hci1: command tx timeout
[  310.708406] Bluetooth: hci2: command tx timeout
[  311.155453] Bluetooth: hci5: command tx timeout
[  311.219791] Bluetooth: hci4: command tx timeout
[  311.220691] Bluetooth: hci3: command tx timeout
[  311.285607] Bluetooth: hci6: command tx timeout
[  311.475426] Bluetooth: hci7: command tx timeout
[  312.563740] Bluetooth: hci0: command tx timeout
[  312.691772] Bluetooth: hci1: command tx timeout
[  312.757434] Bluetooth: hci2: command tx timeout
[  313.204599] Bluetooth: hci5: command tx timeout
[  313.269633] Bluetooth: hci4: command tx timeout
[  313.270114] Bluetooth: hci3: command tx timeout
[  313.332738] Bluetooth: hci6: command tx timeout
[  313.523437] Bluetooth: hci7: command tx timeout
[  314.612427] Bluetooth: hci0: command tx timeout
[  314.740394] Bluetooth: hci1: command tx timeout
[  314.804684] Bluetooth: hci2: command tx timeout
[  315.251386] Bluetooth: hci5: command tx timeout
[  315.316446] Bluetooth: hci4: command tx timeout
[  315.316939] Bluetooth: hci3: command tx timeout
[  315.379651] Bluetooth: hci6: command tx timeout
[  315.572412] Bluetooth: hci7: command tx timeout
[  316.660397] Bluetooth: hci0: command tx timeout
[  316.787435] Bluetooth: hci1: command tx timeout
[  316.854416] Bluetooth: hci2: command tx timeout
[  317.299688] Bluetooth: hci5: command tx timeout
[  317.366039] Bluetooth: hci4: command tx timeout
[  317.366557] Bluetooth: hci3: command tx timeout
[  317.428550] Bluetooth: hci6: command tx timeout
[  317.620406] Bluetooth: hci7: command tx timeout
[  370.708606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.715071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.720316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.735044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.747620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.784919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  370.791852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  370.796949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  370.803500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  370.808981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  370.892037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.898108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.923893] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.938260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.949987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.030263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.038955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.050890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.093958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.115654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.164466] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.172150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.176820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.186853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.191151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.200956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.201688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.202571] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.212556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.260113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.265503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.269146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.295267] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.298206] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.305830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.325185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.338871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.376910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  371.382119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.383212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  372.789391] Bluetooth: hci0: command tx timeout
[  372.851602] Bluetooth: hci1: command tx timeout
[  373.043501] Bluetooth: hci2: command tx timeout
[  373.235559] Bluetooth: hci3: command tx timeout
[  373.299447] Bluetooth: hci4: command tx timeout
[  373.491498] Bluetooth: hci7: command tx timeout
[  373.492463] Bluetooth: hci5: command tx timeout
[  373.493188] Bluetooth: hci6: command tx timeout
[  374.835663] Bluetooth: hci0: command tx timeout
[  374.900517] Bluetooth: hci1: command tx timeout
[  375.093373] Bluetooth: hci2: command tx timeout
[  375.284437] Bluetooth: hci3: command tx timeout
[  375.347407] Bluetooth: hci4: command tx timeout
[  375.540510] Bluetooth: hci6: command tx timeout
[  375.540999] Bluetooth: hci5: command tx timeout
[  375.541483] Bluetooth: hci7: command tx timeout
[  376.885387] Bluetooth: hci0: command tx timeout
[  376.948514] Bluetooth: hci1: command tx timeout
[  377.142565] Bluetooth: hci2: command tx timeout
[  377.332890] Bluetooth: hci3: command tx timeout
[  377.396590] Bluetooth: hci4: command tx timeout
[  377.587887] Bluetooth: hci6: command tx timeout
[  377.589428] Bluetooth: hci5: command tx timeout
[  377.589868] Bluetooth: hci7: command tx timeout
[  378.932440] Bluetooth: hci0: command tx timeout
[  378.996382] Bluetooth: hci1: command tx timeout
[  379.188699] Bluetooth: hci2: command tx timeout
[  379.380906] Bluetooth: hci3: command tx timeout
[  379.445736] Bluetooth: hci4: command tx timeout
[  379.636464] Bluetooth: hci6: command tx timeout
[  379.636948] Bluetooth: hci7: command tx timeout
[  379.638114] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
22:18:13  Registers:
info registers vcpu 0
RAX=ffff888009618001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888009617d01
RSI=ffff888009617dc0 RDI=ffff888009617888 RBP=ffff8880096178d0 RSP=ffff888009617808
R8 =ffffffff868035e2 R9 =ffff8880096178b8 R10=000000000003b67d R11=00000000000119f9
R12=ffff8880096178d8 R13=ffff8880096178c0 R14=ffff888009617dc8 R15=ffff888009617878
RIP=ffffffff81354728 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1708bdbec0 CR3=0000000015984000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff888016c0fb40 RCX=ffffffff86875908 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88806cf31850 RBP=ffff888016c08000 RSP=ffff88806cf08a08
R8 =ffffffff8687590c R9 =ffff88806cf08ab8 R10=000000000003b67d R11=0000000000024a79
R12=ffff88806cf08a01 R13=ffff88806cf08ac0 R14=ffff888016c0fb40 R15=ffff88806cf08a78
RIP=ffffffff8135466e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f932fc94010 CR3=000000003113b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000