Warning: Permanently added '[localhost]:53245' (ECDSA) to the list of known hosts.
2025/06/08 20:06:03 fuzzer started
2025/06/08 20:06:03 dialing manager at localhost:40003
syzkaller login: [   97.971375] cgroup: Unknown subsys name 'net'
[   98.113049] cgroup: Unknown subsys name 'cpuset'
[   98.158655] cgroup: Unknown subsys name 'rlimit'
2025/06/08 20:06:21 syscalls: 200
2025/06/08 20:06:21 code coverage: enabled
2025/06/08 20:06:21 comparison tracing: enabled
2025/06/08 20:06:21 extra coverage: enabled
2025/06/08 20:06:21 setuid sandbox: enabled
2025/06/08 20:06:21 namespace sandbox: enabled
2025/06/08 20:06:21 Android sandbox: enabled
2025/06/08 20:06:21 fault injection: enabled
2025/06/08 20:06:21 leak checking: enabled
2025/06/08 20:06:21 net packet injection: enabled
2025/06/08 20:06:21 net device setup: enabled
2025/06/08 20:06:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 20:06:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 20:06:21 USB emulation: enabled
2025/06/08 20:06:21 hci packet injection: enabled
2025/06/08 20:06:21 wifi device emulation: enabled
2025/06/08 20:06:21 802.15.4 emulation: enabled
2025/06/08 20:06:21 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 20:06:23 starting 8 fuzzer processes
20:06:23 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000450)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x1f)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
mkdirat$cgroup(r0, &(0x7f0000000240)='syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10)
r4 = openat$cgroup(r3, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x0, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r6, &(0x7f00000003c0), 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r5)
openat$cgroup_type(r0, &(0x7f0000000440), 0x2, 0x0)
perf_event_open$cgroup(&(0x7f0000000480)={0x221e1ad0a3c94720, 0x80, 0x5, 0x6, 0x1, 0x4, 0x0, 0x80, 0x10044, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x1, 0x4}, 0x48023, 0x800, 0x80000001, 0x7, 0x2, 0x69e, 0x8001, 0x0, 0x81, 0x0, 0x8000}, r5, 0xd, r0, 0x5)
mount_setattr(r3, &(0x7f0000000500)='./file0\x00', 0x9000, &(0x7f0000000540)={0x10000c, 0x107, 0x20000, {r3}}, 0x20)

20:06:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1)
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x815)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x635}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa70}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='cpuset.effective_mems\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6323901c}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2400c840}, 0x2008040)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x104, 0x0, 0x601, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff8ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000080}, 0x4048080)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r4, 0x603, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4ce}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3258}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000041}, 0x8040)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0xc00000, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000880))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000900)={0x0, @isdn={0x22, 0x3e, 0x4, 0x1, 0x7}, @l2tp={0x2, 0x0, @private=0xa010100, 0x4}, @sco, 0x2, 0x0, 0x0, 0x0, 0xb2, &(0x7f00000008c0)='ip_vti0\x00', 0x2, 0x64dec8ad, 0x4})
r7 = openat$cgroup_ro(r6, &(0x7f0000000980)='memory.numa_stat\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r5)
sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x307}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c003}, 0x4000014)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000b40)={0x3, &(0x7f0000000b00)=[{0x5, 0x4, 0x9, 0x75}, {0x9, 0xda, 0x4, 0xfffffffc}, {0xd6, 0x4, 0x9, 0x3}]})

20:06:23 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0)
ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000000040)={0x3})
socket$inet_icmp(0x2, 0x2, 0x1)
openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0)
openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x1ff)
r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0)
openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0)
ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000240))
openat$cgroup(r1, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080010c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x8001, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000400), 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x124, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x11}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x39}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff81}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40200a5)
r5 = openat$cgroup_ro(r1, &(0x7f0000000700)='cpuacct.usage_sys\x00', 0x0, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004010)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x820}, 0xc850)

[  117.657931] audit: type=1400 audit(1749413183.798:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
20:06:23 executing program 3:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002220}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x414, 0x15, 0x200, 0x70bd25, 0x25dfdbfd, {0x22, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "9e6d035ab1ad106d3f7deec051f5db8eb948c0d3308ba99ecb6005e9630560c06ee7bb48a5fddd080b7ca7ae3fedae9374d36fbb846a4a65b158ba22e217ef56a598bbf8983a"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "699a2f361d20c93a813d0c7838e5d869c594ff61f2f374e770871517421644839fb29732c05d82333a2ca43d316b5ade13c946e1bc0fa11a9c0194e57b7939c1b4c9badddca8d4ce54d9d2a0db717e9e870d09cfb2dfa51321a59ee491e08533cb6393488ec116c61483cde5d6126eb59f2a9f41ea64224dc35772d021a2d31b"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b5111ae24191dfc5a6b8b2574ba8a82a674f00c01f81d53715855af2ac3a2693000391032840968bd04b0ad389aabe575b2b5bcfb73fc4c692776b0168e48f7f088ab18333eddbe0ae9b6f7c0db7a23ad261d36cf5b559995a9c0e9a2883c4a622aac6eaaa3f21f32c47ac010965f6ea21edb981ddb6f52b996a062b9885b8c22a5aae62d1e4b24a19eb4372dc77920382aa44e3da9fcdbd104c9fbc427f2e92a100fd7baf61bde98f"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "77d8e39d48c428498c27384630e63ae33ce1d0d6e8f2b8a12fa602c063c0f7abbb7a91f3293bb1fe0fe3e9e04f1d172fc7efe8d8a791b258c8f87d93fc1957c6f1deb915f7f9d616805b004eeb7ed9e5469e1bde3e18a39941d79bcfaaacb8d593263794f3c14f15b6e31745c6a417e7cc35f58b2fb72ad0756b3cc064e3e6172eb0175a02e8e7a25ffe2088b3bfa24de016d7ae64381134f6a780ade80367da7494ad8d337d306c959d9c2eb36e3159be4441ed0788394469f0beca674eaf0a03edc8759238faec4891974128353afe57c992dc5ccbe0906ffd11"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "1cdc07bed01062a10b6be11e0195bf53d7b336ed81a6ffd2a67451007db066eada46fdda84bade6597ce27e84ec6414b335c4de7ae758103af0a5035868cd29e35790b455c96f5b5b0109df099de1875f5fbcf00a17497d679a97edfb10f0aa4ae6070eebfd3c89d4c982f2a2fdab5492418e6ba342a42715e6eca94cd3ae886603b1c7323931dd2028b6589878860a9617b1066939dc194556b244f9656f68ddf579a2913490b55a9379f53ad71a82df4c59a27e8bef911159e4a28"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "2e213559b408121523ce298d109086ae8fcec55cf5124d4ff47a5b165cc10e44020d885d7159ef4ab076a274430b067fcc9dd2cf86bc939c6acbd2f4915a822462949c8fa622e66812ad9200b7fb46ce603bacabf0103c7be7eed5a4d092b5aa202ba2db3f5a6fb50f7a8441578994a031a81aa5ae0aac44d0314d45b06238edde2b9ea3a01a6eb635e9bb3f4efdf9e4dcdc290ee00fa1f38279672be29b1f3adfa99f6e31a8221865c05ee0a1aca4acdb204f7cbd57d7865280970b528e2cc160abe27eb76aa9a49fb0ceb077ca5737230f2cc5c3c3d5c2ee26"}]}, 0x414}, 0x1, 0x0, 0x0, 0x40042}, 0x8801)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair(0x26, 0x6, 0xc0000000, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0xc)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x30000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8801)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8814)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x5)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100006}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x10001, 0x5b}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x15}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0)
ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000bc0))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r3)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x14040000}, 0x400c004)

20:06:23 executing program 4:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ip6gretap0\x00'})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@local, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}]})
perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x4, 0x51, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x4, 0xa863, 0x3, 0xe5f, 0x8000, 0xff, 0x0, 0xd56, 0x0, 0x4ff7}, r0, 0x9, r0, 0x0)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x80000)
accept4$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0xc0000)
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000002c0))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x500, 0x0)
ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00)
r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)={0x1, 0x8, [@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @broadcast, @remote, @multicast, @random="71e3b87d740c", @empty]})
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000003c0))
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000400)={0x1}, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0)
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000480)=0x1)
r5 = openat$cgroup_pressure(r3, &(0x7f00000004c0)='cpu.pressure\x00', 0x2, 0x0)
io_cancel(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x6, r5, &(0x7f0000000500)="e469e379e8e3c03083167d1102d629334ec3dad6a2cfd1fd129694747597095d6e99238c6f87f5e22e35552cf6b5393c8c99a12438fa31f6c48d48efc61a1aea4d4947200f40022a9c3f3677490a6e2f1ec2", 0x52, 0x6d, 0x0, 0x3}, &(0x7f00000005c0))
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000640)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)

20:06:23 executing program 5:
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sync()
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x334)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x71c)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8006}, 0x810)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x801)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48841}, 0x40001)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x7)
socketpair(0x11, 0x804, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={0x0, @phonet={0x23, 0x7, 0x3, 0x5}, @xdp={0x2c, 0x4, 0x0, 0x24}, @xdp={0x2c, 0xe, r5, 0x33}, 0x200, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)='veth1_macvtap\x00', 0x0, 0x4})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x40, 0x4, 0x80, 0x6}, {0x4, 0x4, 0x6, 0x4db}, {0x800, 0x2, 0x1f, 0x8}]})
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)

20:06:23 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040))
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x68f}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x25}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x37a}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x12, 0x4, 0x70bd25, 0x25dfdbff, {0x9, 0x53, 0x5, 0x80, {0x4e21, 0x4e21, [0x91b1, 0x4537, 0xfffffff7, 0x7fff], [0xff, 0x8001, 0x80000000, 0x40], r2, [0x8001, 0x6]}, 0x1, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "5e56be513d817b8e9157356a3cc2187db0b24cbbe2ff01ca7e7631"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000082)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000400)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000005c0)={0x0, 0x4, [@empty, @multicast, @remote, @local]})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000600)={0xfffffff9}, 0x4)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000680)={0x0, @in={0x2, 0x4e24, @multicast2}, @qipcrtr={0x2a, 0x2, 0x7fff}, @can, 0xb3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)='bond_slave_1\x00', 0x1000, 0x1328, 0xff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = accept(r7, 0x0, &(0x7f0000000740))
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r3)
sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r9, 0x400, 0x8000, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48d0}, 0x4c800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000818}, 0x24004000)

20:06:23 executing program 7:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight.nice\x00', 0x2, 0x0)
r1 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0)
r3 = syz_open_dev$rtc(&(0x7f0000000100), 0x6, 0x40)
ioctl$RTC_AIE_ON(r3, 0x7001)
r4 = perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0xd0, 0x7, 0x9, 0xd5, 0x0, 0x100000000, 0x8130, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8000000, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10010, 0x78f, 0x9, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x8}, r0, 0x2, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x8, 0x30, 0x2, 0x3, 0x0, 0x71df, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x40000, 0x3, 0x1ff, 0x1, 0xffff, 0x1000, 0x9, 0x0, 0x5, 0x0, 0xc1fe}, r1, 0x5, r4, 0x9)
r5 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
r6 = openat$cgroup(r5, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0)
clone3(&(0x7f0000000540)={0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=<r7=>0x0, {0x2a}, &(0x7f0000000380)=""/121, 0x79, &(0x7f0000000400)=""/134, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0xeb4b25a82f1fb59)
clone3(&(0x7f0000003940)={0x40200, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)=<r9=>0x0, {0x2d}, &(0x7f0000001900)=""/4096, 0x1000, &(0x7f0000002900)=""/4096, &(0x7f0000003900)=[r7], 0x1, {r1}}, 0x58)
clone3(&(0x7f0000003a00)={0x101020000, 0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740), {0x16}, &(0x7f0000000780)=""/4096, 0x1000, &(0x7f0000001780)=""/163, &(0x7f00000039c0)=[r9], 0x1, {r5}}, 0x58)
openat$cgroup_pressure(r5, &(0x7f0000003a80)='io.pressure\x00', 0x2, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000003c00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x8c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc2e8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003c80), r5)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x54, r10, 0x124, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
perf_event_open$cgroup(&(0x7f0000003e00)={0x4, 0x80, 0x1, 0xff, 0x9, 0xf7, 0x0, 0x8, 0x1000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f0000003dc0), 0x4}, 0x2600, 0x3f, 0x1, 0x4, 0x10000, 0x4, 0x7fff, 0x0, 0x2, 0x0, 0x3}, r6, 0x10, r5, 0x8)

[  119.088363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.090703] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.094405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.101586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.103330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.106226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.125334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.133420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.133992] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.141631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.144588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.145628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.147392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.158082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.162384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.165166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.183230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.191118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.202473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.202898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.205027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.212062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.213135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.216454] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.218474] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.227604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.229812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.233917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.234686] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.238210] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.249614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.250534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.251950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.254062] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.258150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.279271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.305411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.318255] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.337624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.342229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.209608] Bluetooth: hci1: command tx timeout
[  121.273250] Bluetooth: hci0: command tx timeout
[  121.337024] Bluetooth: hci6: command tx timeout
[  121.338094] Bluetooth: hci5: command tx timeout
[  121.338694] Bluetooth: hci3: command tx timeout
[  121.340096] Bluetooth: hci2: command tx timeout
[  121.340689] Bluetooth: hci4: command tx timeout
[  121.400896] Bluetooth: hci7: command tx timeout
[  123.258800] Bluetooth: hci1: command tx timeout
[  123.320880] Bluetooth: hci0: command tx timeout
[  123.384918] Bluetooth: hci3: command tx timeout
[  123.385436] Bluetooth: hci6: command tx timeout
[  123.386429] Bluetooth: hci4: command tx timeout
[  123.387051] Bluetooth: hci2: command tx timeout
[  123.387546] Bluetooth: hci5: command tx timeout
[  123.448857] Bluetooth: hci7: command tx timeout
[  125.305094] Bluetooth: hci1: command tx timeout
[  125.369476] Bluetooth: hci0: command tx timeout
[  125.432925] Bluetooth: hci4: command tx timeout
[  125.433371] Bluetooth: hci5: command tx timeout
[  125.434865] Bluetooth: hci2: command tx timeout
[  125.435281] Bluetooth: hci6: command tx timeout
[  125.435700] Bluetooth: hci3: command tx timeout
[  125.496873] Bluetooth: hci7: command tx timeout
[  127.353976] Bluetooth: hci1: command tx timeout
[  127.417776] Bluetooth: hci0: command tx timeout
[  127.481929] Bluetooth: hci3: command tx timeout
[  127.482382] Bluetooth: hci5: command tx timeout
[  127.482963] Bluetooth: hci6: command tx timeout
[  127.483391] Bluetooth: hci2: command tx timeout
[  127.483425] Bluetooth: hci4: command tx timeout
[  127.546798] Bluetooth: hci7: command tx timeout
[  181.580412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.584594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.589024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.600125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.605670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.634690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.639607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.643953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.654165] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.660040] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.662199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.665238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.667268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.677911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.683477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.721497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.730236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.734468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.743926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.748517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.761454] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.764421] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.767397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.796630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.804553] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.819530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.832883] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.840533] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.843119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.847193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.847458] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.849581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.854183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.856162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  181.861778] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.863289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.866074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.869409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  181.881224] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.894191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.672968] Bluetooth: hci0: command tx timeout
[  183.737639] Bluetooth: hci1: command tx timeout
[  183.800838] Bluetooth: hci2: command tx timeout
[  183.864809] Bluetooth: hci3: command tx timeout
[  183.928937] Bluetooth: hci5: command tx timeout
[  183.929801] Bluetooth: hci4: command tx timeout
[  183.930310] Bluetooth: hci7: command tx timeout
[  183.930855] Bluetooth: hci6: command tx timeout
[  185.721125] Bluetooth: hci0: command tx timeout
[  185.784840] Bluetooth: hci1: command tx timeout
[  185.848966] Bluetooth: hci2: command tx timeout
[  185.914019] Bluetooth: hci3: command tx timeout
[  185.977993] Bluetooth: hci7: command tx timeout
[  185.978441] Bluetooth: hci6: command tx timeout
[  185.979859] Bluetooth: hci4: command tx timeout
[  185.980103] Bluetooth: hci5: command tx timeout
[  187.768814] Bluetooth: hci0: command tx timeout
[  187.834772] Bluetooth: hci1: command tx timeout
[  187.896873] Bluetooth: hci2: command tx timeout
[  187.961175] Bluetooth: hci3: command tx timeout
[  188.024976] Bluetooth: hci6: command tx timeout
[  188.025062] Bluetooth: hci7: command tx timeout
[  188.025845] Bluetooth: hci5: command tx timeout
[  188.026205] Bluetooth: hci4: command tx timeout
[  189.816962] Bluetooth: hci0: command tx timeout
[  189.883011] Bluetooth: hci1: command tx timeout
[  189.944884] Bluetooth: hci2: command tx timeout
[  190.008944] Bluetooth: hci3: command tx timeout
[  190.072813] Bluetooth: hci4: command tx timeout
[  190.073292] Bluetooth: hci5: command tx timeout
[  190.073441] Bluetooth: hci7: command tx timeout
[  190.073715] Bluetooth: hci6: command tx timeout
[  243.941382] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.952318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.960010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.964108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.977237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.979096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.985155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.993292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.008450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  244.014988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  244.076367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.082343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.087283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.104057] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.111122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.130543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.139132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.143605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.150858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.166568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.236870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.243422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.254081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.259389] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.265354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.277516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.285566] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.302940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.324662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.332546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.335671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.347337] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.363268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.363277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.375692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.380795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.393309] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.409845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.416498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.465679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  246.073989] Bluetooth: hci0: command tx timeout
[  246.075810] Bluetooth: hci1: command tx timeout
[  246.136885] Bluetooth: hci2: command tx timeout
[  246.201559] Bluetooth: hci3: command tx timeout
[  246.330822] Bluetooth: hci4: command tx timeout
[  246.393354] Bluetooth: hci5: command tx timeout
[  246.457940] Bluetooth: hci6: command tx timeout
[  246.585199] Bluetooth: hci7: command tx timeout
[  248.121102] Bluetooth: hci0: command tx timeout
[  248.121973] Bluetooth: hci1: command tx timeout
[  248.184941] Bluetooth: hci2: command tx timeout
[  248.249335] Bluetooth: hci3: command tx timeout
[  248.377245] Bluetooth: hci4: command tx timeout
[  248.441442] Bluetooth: hci5: command tx timeout
[  248.505352] Bluetooth: hci6: command tx timeout
[  248.633212] Bluetooth: hci7: command tx timeout
[  250.169804] Bluetooth: hci0: command tx timeout
[  250.169875] Bluetooth: hci1: command tx timeout
[  250.232819] Bluetooth: hci2: command tx timeout
[  250.297048] Bluetooth: hci3: command tx timeout
[  250.425959] Bluetooth: hci4: command tx timeout
[  250.489108] Bluetooth: hci5: command tx timeout
[  250.552809] Bluetooth: hci6: command tx timeout
[  250.681813] Bluetooth: hci7: command tx timeout
[  252.217017] Bluetooth: hci0: command tx timeout
[  252.217499] Bluetooth: hci1: command tx timeout
[  252.282111] Bluetooth: hci2: command tx timeout
[  252.347857] Bluetooth: hci3: command tx timeout
[  252.473810] Bluetooth: hci4: command tx timeout
[  252.538052] Bluetooth: hci5: command tx timeout
[  252.603813] Bluetooth: hci6: command tx timeout
[  252.729807] Bluetooth: hci7: command tx timeout
[  306.386144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.390552] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.395657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.406286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.414608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.846317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.854362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.860375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.865984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.871313] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.877076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.883104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.894874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.899409] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.919423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.922609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  306.925276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.929658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.935317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.942957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.960406] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.960693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  306.964599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  306.967011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.976147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  306.981488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  306.985567] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.009396] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.049209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.051663] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.053457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.061806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.069604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.071595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.075376] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.081311] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.115162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.121336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.127031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.147320] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.472894] Bluetooth: hci0: command tx timeout
[  309.049930] Bluetooth: hci5: command tx timeout
[  309.051220] Bluetooth: hci1: command tx timeout
[  309.112956] Bluetooth: hci3: command tx timeout
[  309.114131] Bluetooth: hci2: command tx timeout
[  309.176875] Bluetooth: hci4: command tx timeout
[  309.244080] Bluetooth: hci6: command tx timeout
[  309.305343] Bluetooth: hci7: command tx timeout
[  310.522069] Bluetooth: hci0: command tx timeout
[  311.098963] Bluetooth: hci1: command tx timeout
[  311.099463] Bluetooth: hci5: command tx timeout
[  311.161957] Bluetooth: hci2: command tx timeout
[  311.162417] Bluetooth: hci3: command tx timeout
[  311.226112] Bluetooth: hci4: command tx timeout
[  311.290060] Bluetooth: hci6: command tx timeout
[  311.355758] Bluetooth: hci7: command tx timeout
[  312.569897] Bluetooth: hci0: command tx timeout
[  313.144823] Bluetooth: hci1: command tx timeout
[  313.145321] Bluetooth: hci5: command tx timeout
[  313.208919] Bluetooth: hci3: command tx timeout
[  313.209393] Bluetooth: hci2: command tx timeout
[  313.273892] Bluetooth: hci4: command tx timeout
[  313.337792] Bluetooth: hci6: command tx timeout
[  313.401910] Bluetooth: hci7: command tx timeout
[  314.616875] Bluetooth: hci0: command tx timeout
[  315.193024] Bluetooth: hci5: command tx timeout
[  315.194172] Bluetooth: hci1: command tx timeout
[  315.259284] Bluetooth: hci3: command tx timeout
[  315.261475] Bluetooth: hci2: command tx timeout
[  315.321930] Bluetooth: hci4: command tx timeout
[  315.384931] Bluetooth: hci6: command tx timeout
[  315.449812] Bluetooth: hci7: command tx timeout
[  368.846476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  368.852445] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  368.859178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  368.868838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  368.875179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.030646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.033829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.040254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.047620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.055264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.074144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.087217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.093508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.109486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.113216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.162493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.166470] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.169158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.172288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.176385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.176970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.185483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.192431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.193551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.202515] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.222900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.228555] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.253280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.262001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.263396] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.361060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.369982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.372385] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.379638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.393704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.406029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.426167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.452442] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.477353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  369.479027] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.938083] Bluetooth: hci0: command tx timeout
[  371.131261] Bluetooth: hci1: command tx timeout
[  371.193807] Bluetooth: hci2: command tx timeout
[  371.322134] Bluetooth: hci3: command tx timeout
[  371.384836] Bluetooth: hci5: command tx timeout
[  371.577169] Bluetooth: hci6: command tx timeout
[  371.641355] Bluetooth: hci7: command tx timeout
[  371.706092] Bluetooth: hci4: command tx timeout
[  372.984911] Bluetooth: hci0: command tx timeout
[  373.177168] Bluetooth: hci1: command tx timeout
[  373.240964] Bluetooth: hci2: command tx timeout
[  373.368935] Bluetooth: hci3: command tx timeout
[  373.433054] Bluetooth: hci5: command tx timeout
[  373.625068] Bluetooth: hci6: command tx timeout
[  373.688811] Bluetooth: hci7: command tx timeout
[  373.753009] Bluetooth: hci4: command tx timeout
[  375.033207] Bluetooth: hci0: command tx timeout
[  375.225280] Bluetooth: hci1: command tx timeout
[  375.290349] Bluetooth: hci2: command tx timeout
[  375.417262] Bluetooth: hci3: command tx timeout
[  375.481069] Bluetooth: hci5: command tx timeout
[  375.673924] Bluetooth: hci6: command tx timeout
[  375.737145] Bluetooth: hci7: command tx timeout
[  375.801179] Bluetooth: hci4: command tx timeout
[  377.081826] Bluetooth: hci0: command tx timeout
[  377.272885] Bluetooth: hci1: command tx timeout
[  377.338774] Bluetooth: hci2: command tx timeout
[  377.465984] Bluetooth: hci3: command tx timeout
[  377.528891] Bluetooth: hci5: command tx timeout
[  377.720922] Bluetooth: hci6: command tx timeout
[  377.785625] Bluetooth: hci7: command tx timeout
[  377.848993] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
20:11:32  Registers:
info registers vcpu 0
RAX=0000000000010001 RBX=1ffff1100d9c11a5 RCX=ffffffff81647860 RDX=ffff888024a89b80
RSI=ffffffff8164786a RDI=0000000000000005 RBP=ffff888024a89b80 RSP=ffff88806ce08d20
R8 =0000000000000000 R9 =fffffbfff0f0a529 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffff88806ce289c0 R15=0000000000000000
RIP=ffffffff81647872 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5f68ad7540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5f68fb0000 CR3=00000000310db000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000006477746567006e65706f64
XMM04=7374656700746867696c7961645f5f00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=e281047b366a7b3b RDX=000000003a0c5f33
RSI=000000004244f748 RDI=000000001636d167 RBP=ffffffff85c1cbc0 RSP=ffff88802d3271f8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b13b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe63243b540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe632915000 CR3=000000002f323000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=4f0063305f315f315f4c53534e45504f XMM03=000000000000000000656d69745f6f73
XMM04=65675f6b636f6c635f6f7364765f5f00 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000