nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd706d619451bf6e"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10850) 12:29:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0930c0100ad5cdff785459f464fbe94cc8760c5fe4dac7b5f3632f2188afde121da4be4817592e16c92532fb3fb7891a31434fbd36af6af158128bcb0f40063e6f1251cd999e3c2bf79"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0930c0100ad5cdff785459f464fbe94cc8760c5fe4dac7b5f3632f2188afde121da4be4817592e16c92532fb3fb7891a31434fbd36af6af158128bcb0f40063e6f1251cd999e3c2bf79"], 0x5) (async) 12:29:08 executing program 0: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000040)=0x4869e08e, 0x4) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x301200) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/243) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:08 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:08 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x60}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd706d619451bf6e"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10850) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x60}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd706d619451bf6e"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10850) (async) 12:29:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0930c0100ad5cdff785459f464fbe94cc8760c5fe4dac7b5f3632f2188afde121da4be4817592e16c92532fb3fb7891a31434fbd36af6af158128bcb0f40063e6f1251cd999e3c2bf79"], 0x5) 12:29:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:09 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) [ 1505.539536] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0xa347, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000200)=0xc9ef) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r3}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002480), 0x410083, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) sendmsg$unix(r4, &(0x7f00000025c0)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000300)="0fef1f45cb8d93ea2a8858c711512d76142caf9208a659cf94c29b5be87ddd4384685c784bafb13fae5b9e5765f33058f415439499b63c8a193c0dceef58d90eceeff4f2ff46ffeaecfc3dc4ee4fff4200a3ccc1558eeec596cf38a3346632e2750394d2fba1b0ab58237b287f", 0x6d}, {&(0x7f00000001c0)="901ca344c999a58a48dab0dba13a83ac2966e84edf6bfe5ae6586be55b01896becf37eb4425efef372d3698e", 0x2c}, {&(0x7f0000000380)="f8ade953ff77fcdc20312fbbb73fa7a5ec528c3f31e83988949736ec7e74ab42b6fbb4645cd196ba3159acdce5f36edfe90449e3a8d7198292108b503eb2989f231cb294653d5973d61c1ae33960e04d0c5efb45388bc3ee850c67462ae6d72555d801200c0c31eefc7c6b0adc4934943e683a1eaad27fc77a14313de3df707a4a371ea5c4e7f750c46c5c9cd5965f4cbcdfa710b35b928bd0451919a54e34126faea6bb073bb55e45f0ea4bcf3b46703d4f143294d7b0af4797633e95768b90dda7bc06167c30ba154a1b0c5e5f2682d243ce0a9c6e528926e7c9e80894200917e62ad4d2678e7d228bfefbd9f5afe9e45c4e67164929fb37c2ab77fcd8c27059ca24b60bbcd18320240583c4ec1fed7489b2fded6967ba7f483ea01a03fffafbae73d152a808bdc463df86f101da2585338a6d5c8aa39c3b9d3c36d111bed7e733624f6c8623b014038c4f7352013f3c4971eda4aa977ecd07943a7523bddf8939cf0df0da01113b72d862d19189f93cac7ce3d8b7b2267d2b7243511ae714b0cedd918f6c683623a357c8ccef74cc324aa83d01c8d54c667abc2bd3938df3154a10afe1fa151809ca0e6fbc93e42f1f7791d8b7c77ccb1980c736ab5376b4802c6e5afe216a9bd9d0f02a4fe7a301a509564e0fbcd5004ed8e677f4db3d69073b9f47554b2091388285204dfcc578fe2c29bf6d88a418975e99cdea32cebeb8d45141675c4914e733006f654cd70571fd97e60b99aa971aef5da9b82a1f0163781d84f98e1a1212a3c3662072962c8a1752b79aec4d92059f14ba272b84874eeb1bd84cc789fd8294082292d39b29c3dbb21792cb841623e86c1ab3cd7ff9ed259c7065a186b8b0fdc24c791dc8aa32157801f6296396a8715f56d77cd340f4f111d8b46f71e47f29075737c0fad019f9b18669a8eefa47aff4957b658f97e8e5df0d7a5b3cac68805df68cb4e09a52118f483aa5e89a247011385693b9390820979de5e8b57947858ba37fdfe8b51dba4b192c7de8e5b00b0dd30abf61ed39c3af1a35060c9a6cab74bb0d5428f949ae4b53a2e8d7f0d7519c2b6f810e3426a4e831fa23e6e90981aa680931a30c0dcc07e518180c90ab4b7296e5f1dcb5ac2e03ad623c53c0e136fbbb09deacf2443183baf34c1841fadc8bccfa407bae13b5ec241f29696f1e049aedafd61469e39d53312275c3c0c02e0c05fa5543f4f4e891bdd3644fa43b296b3107d2bbf483a02389dacc5b0600ee9ddd507917c359a6e7cba9fee727fa87f75058b2a159737e5f6d63570bad82bc60d969f597e1047c491e0c8d5903fed3fe67e77ca4cbe059d384b712da09b3fdbbd3194a946ad3211f7f233cb6240dfcd3e2cadf8cf6e684037055980f32a4bac8ddbe66f49884fa4cdb8595b40c8807d3dac37e8c9438e101b1e30b53731528d7474e9b483d44595e2d4db700e0bbe5c158bf54b12eabb77da0f877ef006ad0b755bb80e624397c27050782b3e5619c75c17d89f381bf037c136a383ca198c8adf0974648b32de479d90613dd50c380fcd9c8bfb879da3d745aadc34100ceb7d285207e95cd3e35deba8e6b89abf4c19d7151d25ab5f28bce9d577efb6a9498d2245b27d31e6ca0251d18f4df6daac455be4fe6a6a2dbab5e81b7f791ecc60e411e7cdc39f0458f57ab35ec558e418adef3ac041f5bbdb793dbea91a47deb6beeb135677692f17dc938253eca8b07764a35f0e1f5c7804b2316a986d35f956d53aa5f9e2081e7f85db8dfc67c8f5bac11009db8370d913681b5847390fcbb7c9d4f3f5216747918ee7b0d1fb7bcf4731e63fc2f369a4fd3a298d236522550cc1e17eb788eb94e43556288adf03685f5743634a33503de85955483ef6763f06f708081df762c456f1eb21a77d2a94c0d83bb44bf40926279371bc1dd03b5a15fac6c5ad7f4de1ec36e6f7d93ac4a82781fdbb7c38aa299451af6d29bfc35f6665783632e8707e3f63931daaa3edca08f54db030819184ff05b18693036da4936904ffecb95ba57c8d07dab2166b0f161fcf1f591461d8e98c17921f9ac16bc4e90d848f0f914434f75673f3936dfa6579cf683f05bf9331506a4048044cb7aa5539aaf07a54e6d6717cd1590aecde68cbdab5c01f793004666c00feb73fe4bbc867af5359a3b89db548e42de778ecfb9e484cce41ef7ce4c9ca68de7296bbaaf4638ae909a09bc6f53c5d5895a5f2224afe9f7786e743e52b3aafa98e095f14ed3339d293bb9fe2b601ae938fcf06bc44934fe0d73ae0e462001be6eebe8d12355d2578dfd85ecc0a684d2c2bebe9b62b76bc00c05a0969b6367e76d94171b39cddb5b9de7c41ec14b217986805dd26c28d50d56b0470b6009a469174cd7a54e7feb224cbc46fcc8c9612b4780f95a460f590fb7446ff7cc227d41ec213567c3e71d708a5e84526c524fe4aba4a0d75ac0e2aaa2a6eba012edcce53aa3ca78797bf81d570ec89a58321f99e4eeee8fcf63a38155aa81facbe9cec4a67d75dc28ab3a8896f23d2257f29bac6579b5892aaf327f159058f31db73e20e75b62f9be6b19ec437710749884c1e4587230e104e53619a3571a55df85fc4ca8e8efcc75ce0e8717f9566c9b0a937077273c41034e71ecd436cdef7fe1e48e7934b76d081489871482ecc6fdc22d20762adf5bf08751028d274c588e5979ba24e80f8bba7aa3e34ec654e3ebfeec15d7a4190c9070027e90a1c649b416cf11e1ea71cc42eca9b48383f6b62912231b3cc099e42809c4aa63de1fbf33e48b3f2ffd225907b36a3004966233663ca011ed37a3ad879e9fe0fb2df8ca6d6325eae0e19b072ede231132a98ae1d944c8772417445acc557f00366f5eb8f5709c4fcfbf3824201f626e160f0249ca4994ef2b566ed6d81aa1cbceb380d5e4d11495597b36031a03f7237829d4a76885f67856c602b995b4ee0a473caa257b3c89422923ecd5359e943ebff2c4816cac9a8dfa76cf7c8a202a0f7fabfa9cd35c1a7ee47673f8c77e44a68710c0a8440d23c205080471518de06ea50c513863a3501549e1e58fa12835e19c96e3bcac542f0314840a333aa3711b52c305a69796f884f56c9567e0c30d2bba499ff2a9ceff070dd255361677ebb72732913dd72bd091062492bc39fa6152a7e8cbdf66b7b74dfdee98851172737636a42cfe96ce240da60553dd7a62f93cc8bf4cb9168eddab6b3eb3072f03eb79c279b5eaea7eade0c3fbbc92dab777cbbd7d6b2781579be4d0c81a7f347a2e19b28607ce6c488a811160be31bef58a2c295306ec2833b5bf39fa5390c3fcad99c963cae795356a311b213f7b358ed1461810d702589ad56e3018b3bc39d81feae840ec906b3a71410a7052f728c4a8c002bcce518f6e0880f899ff9da7fafd5936df03de5f822d0b1e6701c2dc6b7924e5b680e9bd2488a8887ac3e974d842d938b6ebc341a9a1d7eb04507f01492b8915a830a0b12a0670ab32ae98b551b0e16287391ed38e5d793bc53f5d4ba0fe003a14f88e00054c46bce67f82448afcee79f4415a39e072dc350d7952ffb456c23d8a8718fc82e3fbb1bf11e34d7de18ade8f0800cfe6a0be95dd0af6f4d8b86efdb830dffc0e9aeaa15ce0e59c9f62daaadc3d9e0c0d97cbe1f22121329eab32af15b96e0b0c5a78b9b50d45cf5dd68559211e73504d1e96a1d401826ee70de0435444a42b5dac8f49607b0bd0b48e08b577c9cd73f5eaa42d683dd3db9b4736faeb8ab7d9ff2a9c9878472a11c98f77748292b222a30461fc2e9d1aa09e1e75830b866c6356fb84d120219777cb75c16090dcfb254666b1cc7550f888091701cbfc385770dc369c4eba81db9f2c59aa340f4503fdcca9eae61e2a7616f9f737f222307d2cf75162813f3790eb2c0ea40c8b4d5c32501a9628a17521ab7a6c98855db0edae68e387604040b3f571d0a88542311eaef406d9684727f2a75ba89cd47d82b2cfcfedae90ea14216ddf90dfa18ef6080acd9fa10e331919dffdf10ac375bca356c35a94b979783294a615e1d6dc134f3c2f1a007d0c9388a8c99a9f45a5db35022df98ad454dc30865a61cf5af93e2f22d83d6f8a06f256c3487f4c85209f4b240ed9ba6c47e7714e0ab5f9bc01baf60064813cfc56a905209bf6b8ca7a6fbbe6d8623d5b4fbe61164e38e8d84df21ba1ce8816a6119c572549118ed238933496fab597c97f3189d1a8f30042b78da392e11d400ca0b2a99f48ed5b670261d472054ca184e6bcd17014532e16f50190005a026fca830214fc6450f45a8c740a80baf8a310eb8beafaed53a44f7021f2975040cf8bb1bf42fc20fae651b5e3e249b465b20b16dfdd43583d0b240d9c55402c492974d0485fc16ce0caf49a1df60d57145c878eb65da4dcec6bfe04cff584c89f90a232cc77e7ea68526b5ef410d21f2bccc08ff0e0058a53782f4da6ab1ba3ec8e68df4bd0093ec95e888bd83b3dbcc2decb6aeb8ef526232928c2bfab58bbd9bbad8e681a10f93d640f7570c5035add3af20a9b7963f6214fdae9eebf09056e03125dd22d48242f7c3c1df11d794d5dd277221c6d0bb451c7069b05062a809fe2ff06530c2518deedebcc6e67a3bd7eb5b853cbc3732fbf61ddf9b58477766748d022005c708f89d7399d6164e7fbdfd390ec1b79e07226b18536889a51e76cc41861e413f411ef1ea188c892cecdec8f8a0c8d5f6e55cb2ef596b8e0aef39f4bd1358cf6d73b8f2f2d548bc94c918fcb69ac60338cd010ec5641f64f4628ed3cfdfdaf62d7107571c9aff27e5e674f00d1e2e6c1e9b793ed959c7da205d9f99313e781983cae2628f5b1ff757a08517d797c00b9b0991e6aec7e93e208dd5dd112e484cb8ce730e69fe466166eb350933525c0fdc026da144123c5acf51d5b5a4785924442fd9666f5b51ef0ed028f4358ef8d5887a9f389757a4c13f6b6bce8d96978e0b68b00d7e8a5e62914043b0c29e778a117da129aefa5c36fcb25fa7b0b6259eb5f69e88adc4cb59b5cdab4c2978f8316aaa97762242bb903336f1285e42d4341c3f200f8e9186b1e95067e35444aeab5bce71231d52e2b5b74ec0ef82f3cb62da85bb13231576a2ae5fa9524318d07fd0a2a69a5242fe48b234e015a4f6cc05d98dcc56b79ca4b760a3fcbfe2788e8aa4f2ab4c5e2eaa289ce9f36dbb29024e3e2e39ee5a3787fc7576a8b04aaf3c5c4f079ba4a35920640a1c432c54dc2dcc225906412040a74a0391c39e460c94229a878522feb6edaebdf0e44f2c5019da8e828794572353397cc21ea1cea386698ce9675c5b49b603993d990f822a4bf979750077c144db589d0b9958853c5f86e07d9b5299aa7513ee5eebfe89a9202889a543f22105f6bc6caa95fec85a7dbbce281b9c274ca0cbea0cbdec61f69bccc3ad925b38016493250904289a7019b4ff614b90793ee1e959f34e87e3c97560fce9ad5fdfe4495cf19f2a2c64cfa00295c67bd8e2ce6dbe2a04d43654732ea788c9402a2438693cc87032292466ae6a0cfbe8d4ba102659d5e7604e35f0b9cdcbb3e48564daa7c7157bb2ec1e83ff09339ad12937b5b582dbaf7b55d3a37e99cff80a8e79fc15b52d1308f9b71aef56993367dba53fa59bbc8275837e20f2b19391de91bdedded39522f0e15d5abc386607b160ee2f0d83870c5b5fe036bd1a247f4be6b76b310db42e5560a75235d7031b5baf4faa830be662d8ba86cd890845537c0540d00bdbff23681f40e5b90c2ae74688045d50c61e42503a77118eb1eb978e7af7892bb", 0x1000}, {&(0x7f0000001380)="0f37b6adc244752e639b2ecc2a40e90d791bf320e251dbf7eba1ad7a183399da401265b5386ee9e135c4a3c1b361f413", 0x30}, {&(0x7f00000013c0)="a5e65f9345f299dbe18137bd550fdaf4ca48952104f626cefc89c63b998907c08aaca992d0b676630c", 0x29}, {&(0x7f0000001400)="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", 0x1000}], 0x6, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000010000076ec01a8000001000000", @ANYRES32=r2, @ANYRES32=r0], 0x90, 0x4000800}, 0x8881) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000001, 0x200002) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/19) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000080)=""/74) 12:29:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x7c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x60}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd706d619451bf6e"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10850) 12:29:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) [ 1505.683417] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0xa347, 0x4) (async, rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000200)=0xc9ef) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r3}) (async, rerun: 32) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002480), 0x410083, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) sendmsg$unix(r4, &(0x7f00000025c0)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000300)="0fef1f45cb8d93ea2a8858c711512d76142caf9208a659cf94c29b5be87ddd4384685c784bafb13fae5b9e5765f33058f415439499b63c8a193c0dceef58d90eceeff4f2ff46ffeaecfc3dc4ee4fff4200a3ccc1558eeec596cf38a3346632e2750394d2fba1b0ab58237b287f", 0x6d}, {&(0x7f00000001c0)="901ca344c999a58a48dab0dba13a83ac2966e84edf6bfe5ae6586be55b01896becf37eb4425efef372d3698e", 0x2c}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="0f37b6adc244752e639b2ecc2a40e90d791bf320e251dbf7eba1ad7a183399da401265b5386ee9e135c4a3c1b361f413", 0x30}, {&(0x7f00000013c0)="a5e65f9345f299dbe18137bd550fdaf4ca48952104f626cefc89c63b998907c08aaca992d0b676630c", 0x29}, {&(0x7f0000001400)="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", 0x1000}], 0x6, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000010000076ec01a8000001000000", @ANYRES32=r2, @ANYRES32=r0], 0x90, 0x4000800}, 0x8881) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000001, 0x200002) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/19) (async) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000080)=""/74) 12:29:09 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/230, 0xe6, 0x3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$bt_hci(r0, &(0x7f0000000140), 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="58fef452fb0000000096b212fe92035d18cec1a4e9010000008000"], 0x5) 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/230, 0xe6, 0x3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="58fef452fb0000000096b212fe92035d18cec1a4e9010000008000"], 0x5) 12:29:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (rerun: 32) 12:29:09 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000b7070000000000000016615663bd65898330dd07f049f22f98adedb7ffd998f0b7b77953a1f372903b8da9afd5431a75a77cf8c76fc3ee6bba9a12c9393ec58882af965e66c54aa7", @ANYRES32=r2, @ANYRESDEC=r1], 0xd8}}, 0x0) [ 1505.885887] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1505.925221] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) (rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000240)=0xa347, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000200)=0xc9ef) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r3}) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002480), 0x410083, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r7, 0x0, 0x0, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000024c0), 0x0, 0x0) sendmsg$unix(r4, &(0x7f00000025c0)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000300)="0fef1f45cb8d93ea2a8858c711512d76142caf9208a659cf94c29b5be87ddd4384685c784bafb13fae5b9e5765f33058f415439499b63c8a193c0dceef58d90eceeff4f2ff46ffeaecfc3dc4ee4fff4200a3ccc1558eeec596cf38a3346632e2750394d2fba1b0ab58237b287f", 0x6d}, {&(0x7f00000001c0)="901ca344c999a58a48dab0dba13a83ac2966e84edf6bfe5ae6586be55b01896becf37eb4425efef372d3698e", 0x2c}, {&(0x7f0000000380)="f8ade953ff77fcdc20312fbbb73fa7a5ec528c3f31e83988949736ec7e74ab42b6fbb4645cd196ba3159acdce5f36edfe90449e3a8d7198292108b503eb2989f231cb294653d5973d61c1ae33960e04d0c5efb45388bc3ee850c67462ae6d72555d801200c0c31eefc7c6b0adc4934943e683a1eaad27fc77a14313de3df707a4a371ea5c4e7f750c46c5c9cd5965f4cbcdfa710b35b928bd0451919a54e34126faea6bb073bb55e45f0ea4bcf3b46703d4f143294d7b0af4797633e95768b90dda7bc06167c30ba154a1b0c5e5f2682d243ce0a9c6e528926e7c9e80894200917e62ad4d2678e7d228bfefbd9f5afe9e45c4e67164929fb37c2ab77fcd8c27059ca24b60bbcd18320240583c4ec1fed7489b2fded6967ba7f483ea01a03fffafbae73d152a808bdc463df86f101da2585338a6d5c8aa39c3b9d3c36d111bed7e733624f6c8623b014038c4f7352013f3c4971eda4aa977ecd07943a7523bddf8939cf0df0da01113b72d862d19189f93cac7ce3d8b7b2267d2b7243511ae714b0cedd918f6c683623a357c8ccef74cc324aa83d01c8d54c667abc2bd3938df3154a10afe1fa151809ca0e6fbc93e42f1f7791d8b7c77ccb1980c736ab5376b4802c6e5afe216a9bd9d0f02a4fe7a301a509564e0fbcd5004ed8e677f4db3d69073b9f47554b2091388285204dfcc578fe2c29bf6d88a418975e99cdea32cebeb8d45141675c4914e733006f654cd70571fd97e60b99aa971aef5da9b82a1f0163781d84f98e1a1212a3c3662072962c8a1752b79aec4d92059f14ba272b84874eeb1bd84cc789fd8294082292d39b29c3dbb21792cb841623e86c1ab3cd7ff9ed259c7065a186b8b0fdc24c791dc8aa32157801f6296396a8715f56d77cd340f4f111d8b46f71e47f29075737c0fad019f9b18669a8eefa47aff4957b658f97e8e5df0d7a5b3cac68805df68cb4e09a52118f483aa5e89a247011385693b9390820979de5e8b57947858ba37fdfe8b51dba4b192c7de8e5b00b0dd30abf61ed39c3af1a35060c9a6cab74bb0d5428f949ae4b53a2e8d7f0d7519c2b6f810e3426a4e831fa23e6e90981aa680931a30c0dcc07e518180c90ab4b7296e5f1dcb5ac2e03ad623c53c0e136fbbb09deacf2443183baf34c1841fadc8bccfa407bae13b5ec241f29696f1e049aedafd61469e39d53312275c3c0c02e0c05fa5543f4f4e891bdd3644fa43b296b3107d2bbf483a02389dacc5b0600ee9ddd507917c359a6e7cba9fee727fa87f75058b2a159737e5f6d63570bad82bc60d969f597e1047c491e0c8d5903fed3fe67e77ca4cbe059d384b712da09b3fdbbd3194a946ad3211f7f233cb6240dfcd3e2cadf8cf6e684037055980f32a4bac8ddbe66f49884fa4cdb8595b40c8807d3dac37e8c9438e101b1e30b53731528d7474e9b483d44595e2d4db700e0bbe5c158bf54b12eabb77da0f877ef006ad0b755bb80e624397c27050782b3e5619c75c17d89f381bf037c136a383ca198c8adf0974648b32de479d90613dd50c380fcd9c8bfb879da3d745aadc34100ceb7d285207e95cd3e35deba8e6b89abf4c19d7151d25ab5f28bce9d577efb6a9498d2245b27d31e6ca0251d18f4df6daac455be4fe6a6a2dbab5e81b7f791ecc60e411e7cdc39f0458f57ab35ec558e418adef3ac041f5bbdb793dbea91a47deb6beeb135677692f17dc938253eca8b07764a35f0e1f5c7804b2316a986d35f956d53aa5f9e2081e7f85db8dfc67c8f5bac11009db8370d913681b5847390fcbb7c9d4f3f5216747918ee7b0d1fb7bcf4731e63fc2f369a4fd3a298d236522550cc1e17eb788eb94e43556288adf03685f5743634a33503de85955483ef6763f06f708081df762c456f1eb21a77d2a94c0d83bb44bf40926279371bc1dd03b5a15fac6c5ad7f4de1ec36e6f7d93ac4a82781fdbb7c38aa299451af6d29bfc35f6665783632e8707e3f63931daaa3edca08f54db030819184ff05b18693036da4936904ffecb95ba57c8d07dab2166b0f161fcf1f591461d8e98c17921f9ac16bc4e90d848f0f914434f75673f3936dfa6579cf683f05bf9331506a4048044cb7aa5539aaf07a54e6d6717cd1590aecde68cbdab5c01f793004666c00feb73fe4bbc867af5359a3b89db548e42de778ecfb9e484cce41ef7ce4c9ca68de7296bbaaf4638ae909a09bc6f53c5d5895a5f2224afe9f7786e743e52b3aafa98e095f14ed3339d293bb9fe2b601ae938fcf06bc44934fe0d73ae0e462001be6eebe8d12355d2578dfd85ecc0a684d2c2bebe9b62b76bc00c05a0969b6367e76d94171b39cddb5b9de7c41ec14b217986805dd26c28d50d56b0470b6009a469174cd7a54e7feb224cbc46fcc8c9612b4780f95a460f590fb7446ff7cc227d41ec213567c3e71d708a5e84526c524fe4aba4a0d75ac0e2aaa2a6eba012edcce53aa3ca78797bf81d570ec89a58321f99e4eeee8fcf63a38155aa81facbe9cec4a67d75dc28ab3a8896f23d2257f29bac6579b5892aaf327f159058f31db73e20e75b62f9be6b19ec437710749884c1e4587230e104e53619a3571a55df85fc4ca8e8efcc75ce0e8717f9566c9b0a937077273c41034e71ecd436cdef7fe1e48e7934b76d081489871482ecc6fdc22d20762adf5bf08751028d274c588e5979ba24e80f8bba7aa3e34ec654e3ebfeec15d7a4190c9070027e90a1c649b416cf11e1ea71cc42eca9b48383f6b62912231b3cc099e42809c4aa63de1fbf33e48b3f2ffd225907b36a3004966233663ca011ed37a3ad879e9fe0fb2df8ca6d6325eae0e19b072ede231132a98ae1d944c8772417445acc557f00366f5eb8f5709c4fcfbf3824201f626e160f0249ca4994ef2b566ed6d81aa1cbceb380d5e4d11495597b36031a03f7237829d4a76885f67856c602b995b4ee0a473caa257b3c89422923ecd5359e943ebff2c4816cac9a8dfa76cf7c8a202a0f7fabfa9cd35c1a7ee47673f8c77e44a68710c0a8440d23c205080471518de06ea50c513863a3501549e1e58fa12835e19c96e3bcac542f0314840a333aa3711b52c305a69796f884f56c9567e0c30d2bba499ff2a9ceff070dd255361677ebb72732913dd72bd091062492bc39fa6152a7e8cbdf66b7b74dfdee98851172737636a42cfe96ce240da60553dd7a62f93cc8bf4cb9168eddab6b3eb3072f03eb79c279b5eaea7eade0c3fbbc92dab777cbbd7d6b2781579be4d0c81a7f347a2e19b28607ce6c488a811160be31bef58a2c295306ec2833b5bf39fa5390c3fcad99c963cae795356a311b213f7b358ed1461810d702589ad56e3018b3bc39d81feae840ec906b3a71410a7052f728c4a8c002bcce518f6e0880f899ff9da7fafd5936df03de5f822d0b1e6701c2dc6b7924e5b680e9bd2488a8887ac3e974d842d938b6ebc341a9a1d7eb04507f01492b8915a830a0b12a0670ab32ae98b551b0e16287391ed38e5d793bc53f5d4ba0fe003a14f88e00054c46bce67f82448afcee79f4415a39e072dc350d7952ffb456c23d8a8718fc82e3fbb1bf11e34d7de18ade8f0800cfe6a0be95dd0af6f4d8b86efdb830dffc0e9aeaa15ce0e59c9f62daaadc3d9e0c0d97cbe1f22121329eab32af15b96e0b0c5a78b9b50d45cf5dd68559211e73504d1e96a1d401826ee70de0435444a42b5dac8f49607b0bd0b48e08b577c9cd73f5eaa42d683dd3db9b4736faeb8ab7d9ff2a9c9878472a11c98f77748292b222a30461fc2e9d1aa09e1e75830b866c6356fb84d120219777cb75c16090dcfb254666b1cc7550f888091701cbfc385770dc369c4eba81db9f2c59aa340f4503fdcca9eae61e2a7616f9f737f222307d2cf75162813f3790eb2c0ea40c8b4d5c32501a9628a17521ab7a6c98855db0edae68e387604040b3f571d0a88542311eaef406d9684727f2a75ba89cd47d82b2cfcfedae90ea14216ddf90dfa18ef6080acd9fa10e331919dffdf10ac375bca356c35a94b979783294a615e1d6dc134f3c2f1a007d0c9388a8c99a9f45a5db35022df98ad454dc30865a61cf5af93e2f22d83d6f8a06f256c3487f4c85209f4b240ed9ba6c47e7714e0ab5f9bc01baf60064813cfc56a905209bf6b8ca7a6fbbe6d8623d5b4fbe61164e38e8d84df21ba1ce8816a6119c572549118ed238933496fab597c97f3189d1a8f30042b78da392e11d400ca0b2a99f48ed5b670261d472054ca184e6bcd17014532e16f50190005a026fca830214fc6450f45a8c740a80baf8a310eb8beafaed53a44f7021f2975040cf8bb1bf42fc20fae651b5e3e249b465b20b16dfdd43583d0b240d9c55402c492974d0485fc16ce0caf49a1df60d57145c878eb65da4dcec6bfe04cff584c89f90a232cc77e7ea68526b5ef410d21f2bccc08ff0e0058a53782f4da6ab1ba3ec8e68df4bd0093ec95e888bd83b3dbcc2decb6aeb8ef526232928c2bfab58bbd9bbad8e681a10f93d640f7570c5035add3af20a9b7963f6214fdae9eebf09056e03125dd22d48242f7c3c1df11d794d5dd277221c6d0bb451c7069b05062a809fe2ff06530c2518deedebcc6e67a3bd7eb5b853cbc3732fbf61ddf9b58477766748d022005c708f89d7399d6164e7fbdfd390ec1b79e07226b18536889a51e76cc41861e413f411ef1ea188c892cecdec8f8a0c8d5f6e55cb2ef596b8e0aef39f4bd1358cf6d73b8f2f2d548bc94c918fcb69ac60338cd010ec5641f64f4628ed3cfdfdaf62d7107571c9aff27e5e674f00d1e2e6c1e9b793ed959c7da205d9f99313e781983cae2628f5b1ff757a08517d797c00b9b0991e6aec7e93e208dd5dd112e484cb8ce730e69fe466166eb350933525c0fdc026da144123c5acf51d5b5a4785924442fd9666f5b51ef0ed028f4358ef8d5887a9f389757a4c13f6b6bce8d96978e0b68b00d7e8a5e62914043b0c29e778a117da129aefa5c36fcb25fa7b0b6259eb5f69e88adc4cb59b5cdab4c2978f8316aaa97762242bb903336f1285e42d4341c3f200f8e9186b1e95067e35444aeab5bce71231d52e2b5b74ec0ef82f3cb62da85bb13231576a2ae5fa9524318d07fd0a2a69a5242fe48b234e015a4f6cc05d98dcc56b79ca4b760a3fcbfe2788e8aa4f2ab4c5e2eaa289ce9f36dbb29024e3e2e39ee5a3787fc7576a8b04aaf3c5c4f079ba4a35920640a1c432c54dc2dcc225906412040a74a0391c39e460c94229a878522feb6edaebdf0e44f2c5019da8e828794572353397cc21ea1cea386698ce9675c5b49b603993d990f822a4bf979750077c144db589d0b9958853c5f86e07d9b5299aa7513ee5eebfe89a9202889a543f22105f6bc6caa95fec85a7dbbce281b9c274ca0cbea0cbdec61f69bccc3ad925b38016493250904289a7019b4ff614b90793ee1e959f34e87e3c97560fce9ad5fdfe4495cf19f2a2c64cfa00295c67bd8e2ce6dbe2a04d43654732ea788c9402a2438693cc87032292466ae6a0cfbe8d4ba102659d5e7604e35f0b9cdcbb3e48564daa7c7157bb2ec1e83ff09339ad12937b5b582dbaf7b55d3a37e99cff80a8e79fc15b52d1308f9b71aef56993367dba53fa59bbc8275837e20f2b19391de91bdedded39522f0e15d5abc386607b160ee2f0d83870c5b5fe036bd1a247f4be6b76b310db42e5560a75235d7031b5baf4faa830be662d8ba86cd890845537c0540d00bdbff23681f40e5b90c2ae74688045d50c61e42503a77118eb1eb978e7af7892bb", 0x1000}, {&(0x7f0000001380)="0f37b6adc244752e639b2ecc2a40e90d791bf320e251dbf7eba1ad7a183399da401265b5386ee9e135c4a3c1b361f413", 0x30}, {&(0x7f00000013c0)="a5e65f9345f299dbe18137bd550fdaf4ca48952104f626cefc89c63b998907c08aaca992d0b676630c", 0x29}, {&(0x7f0000001400)="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", 0x1000}], 0x6, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r8, @ANYBLOB="18000010000076ec01a8000001000000", @ANYRES32=r2, @ANYRES32=r0], 0x90, 0x4000800}, 0x8881) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000001, 0x200002) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/19) (async) ioctl$EVIOCGMTSLOTS(r9, 0x8040450a, &(0x7f0000000080)=""/74) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/230, 0xe6, 0x3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$bt_hci(r0, &(0x7f0000000140), 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="58fef452fb0000000096b212fe92035d18cec1a4e9010000008000"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/230, 0xe6, 0x3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="58fef452fb0000000096b212fe92035d18cec1a4e9010000008000"], 0x5) (async) 12:29:09 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000b7070000000000000016615663bd65898330dd07f049f22f98adedb7ffd998f0b7b77953a1f372903b8da9afd5431a75a77cf8c76fc3ee6bba9a12c9393ec58882af965e66c54aa7", @ANYRES32=r2, @ANYRESDEC=r1], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000b7070000000000000016615663bd65898330dd07f049f22f98adedb7ffd998f0b7b77953a1f372903b8da9afd5431a75a77cf8c76fc3ee6bba9a12c9393ec58882af965e66c54aa7", @ANYRES32=r2, @ANYRESDEC=r1], 0xd8}}, 0x0) (async) 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/136) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:09 executing program 2: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x5) 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:09 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/136) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/136) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:09 executing program 2: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (rerun: 64) 12:29:09 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000b7070000000000000016615663bd65898330dd07f049f22f98adedb7ffd998f0b7b77953a1f372903b8da9afd5431a75a77cf8c76fc3ee6bba9a12c9393ec58882af965e66c54aa7", @ANYRES32=r2, @ANYRESDEC=r1], 0xd8}}, 0x0) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x5) 12:29:09 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x74, r0, 0x224, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x108, r5, 0x838, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb207}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008080) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x18}}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xff59, 0x7, {0x23, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x42}, 0x4000) [ 1506.275368] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/136) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:09 executing program 2: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='@'], 0x5) 12:29:09 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r1, 0xd855000) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x1f) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000000cb57c3241c6be6771bbea7d964490d7689089c3b9113fa69e857cf23f253c759fdbbe1906b393e30e20df0cda2420c5cc1053c670365354c659f8a876450eeec9040cca22ab5d5541f94e08f60d2b4f199fc7de222e428158f9eff95c3de30ab1d9557cbaf3b2048665a9520e5b9de7d3dd678241a7041c170266b422765940ce56016c8783e9fb095dba2354", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:09 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0xa, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x4}, 0x6) 12:29:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:09 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x74, r0, 0x224, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x108, r5, 0x838, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb207}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008080) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x18}}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xff59, 0x7, {0x23, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x42}, 0x4000) [ 1506.417594] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0x401, 0x2, {0x4}, 0x4, 0x7}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:09 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r1, 0xd855000) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x1f) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000000cb57c3241c6be6771bbea7d964490d7689089c3b9113fa69e857cf23f253c759fdbbe1906b393e30e20df0cda2420c5cc1053c670365354c659f8a876450eeec9040cca22ab5d5541f94e08f60d2b4f199fc7de222e428158f9eff95c3de30ab1d9557cbaf3b2048665a9520e5b9de7d3dd678241a7041c170266b422765940ce56016c8783e9fb095dba2354", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r1, 0xd855000) (async) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x1f) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000000cb57c3241c6be6771bbea7d964490d7689089c3b9113fa69e857cf23f253c759fdbbe1906b393e30e20df0cda2420c5cc1053c670365354c659f8a876450eeec9040cca22ab5d5541f94e08f60d2b4f199fc7de222e428158f9eff95c3de30ab1d9557cbaf3b2048665a9520e5b9de7d3dd678241a7041c170266b422765940ce56016c8783e9fb095dba2354", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e4faa00801200d49a2f6002a1a1bae4370000b1e4c6e9e81bfb94f8dbad6670b8810f34cef047a74934733e62a9f432a1cc93da58385272e31b947121158c79e59160f6476fc243bec9e918f421a48bc367b73c155d414c01ce42557245b8ebee332e0690912b17c3378cfb1889aee538689182d501779db22a95ab5ecb986ee69d0c31513f8ff014b4d322eaef625998338206239742ba613b0d922cde9b55a1772d7f750d4835dc80d1b58b0270f40d8d1bcc4a85a68d1802a892b5ddadd04d0e05d8282f92"], 0x5) r1 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r1, 0x0, 0x2}) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0x401, 0x2, {0x4}, 0x4, 0x7}) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:10 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0xa, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x4}, 0x6) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x74, r0, 0x224, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x11}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x108, r5, 0x838, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xbc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb207}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008080) (async) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x94, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x18}}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x59}, @IPVS_SVC_ATTR_PE_NAME, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x52}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xff59, 0x7, {0x23, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x42}, 0x4000) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e4faa00801200d49a2f6002a1a1bae4370000b1e4c6e9e81bfb94f8dbad6670b8810f34cef047a74934733e62a9f432a1cc93da58385272e31b947121158c79e59160f6476fc243bec9e918f421a48bc367b73c155d414c01ce42557245b8ebee332e0690912b17c3378cfb1889aee538689182d501779db22a95ab5ecb986ee69d0c31513f8ff014b4d322eaef625998338206239742ba613b0d922cde9b55a1772d7f750d4835dc80d1b58b0270f40d8d1bcc4a85a68d1802a892b5ddadd04d0e05d8282f92"], 0x5) r1 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r1, 0x0, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e4faa00801200d49a2f6002a1a1bae4370000b1e4c6e9e81bfb94f8dbad6670b8810f34cef047a74934733e62a9f432a1cc93da58385272e31b947121158c79e59160f6476fc243bec9e918f421a48bc367b73c155d414c01ce42557245b8ebee332e0690912b17c3378cfb1889aee538689182d501779db22a95ab5ecb986ee69d0c31513f8ff014b4d322eaef625998338206239742ba613b0d922cde9b55a1772d7f750d4835dc80d1b58b0270f40d8d1bcc4a85a68d1802a892b5ddadd04d0e05d8282f92"], 0x5) (async) gettid() (async) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r1, 0x0, 0x2}) (async) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x50, r1, 0xd855000) (async) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x1f) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d80000000cb57c3241c6be6771bbea7d964490d7689089c3b9113fa69e857cf23f253c759fdbbe1906b393e30e20df0cda2420c5cc1053c670365354c659f8a876450eeec9040cca22ab5d5541f94e08f60d2b4f199fc7de222e428158f9eff95c3de30ab1d9557cbaf3b2048665a9520e5b9de7d3dd678241a7041c170266b422765940ce56016c8783e9fb095dba2354", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0x401, 0x2, {0x4}, 0x4, 0x7}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000000)={0x0, 0x401, 0x2, {0x4}, 0x4, 0x7}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e4faa00801200d49a2f6002a1a1bae4370000b1e4c6e9e81bfb94f8dbad6670b8810f34cef047a74934733e62a9f432a1cc93da58385272e31b947121158c79e59160f6476fc243bec9e918f421a48bc367b73c155d414c01ce42557245b8ebee332e0690912b17c3378cfb1889aee538689182d501779db22a95ab5ecb986ee69d0c31513f8ff014b4d322eaef625998338206239742ba613b0d922cde9b55a1772d7f750d4835dc80d1b58b0270f40d8d1bcc4a85a68d1802a892b5ddadd04d0e05d8282f92"], 0x5) (async) r1 = gettid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r1, 0x0, 0x2}) 12:29:10 executing program 0: add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0xa, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x4}, 0x6) (rerun: 32) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8004025", @ANYRES16=r0, @ANYRESOCT=r0], 0xd8}}, 0x0) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffaae, 0x2800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x8, 0x4) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8004025", @ANYRES16=r0, @ANYRESOCT=r0], 0xd8}}, 0x0) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8004025", @ANYRES16=r0, @ANYRESOCT=r0], 0xd8}}, 0x0) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffaae, 0x2800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffaae, 0x2800) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x8, 0x4) (async) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18765c028b7927bc9015e36b47ae0000d6fa8481bc4b1adb44bcf8c8d21a02e771b678bafcb0dfb45dbcc2d75e82fe6d912cf7efb245bf8fde5e5ad1c9eb02367dd6b6e372da647a598a4eef2a5922fd3678ef98fc8dbe68b11d365c05fd8f7820b3013f9ebb1a03ff5ba00345c26d1b0b572de710ec84d4e883568ebff2890f4f482749411066fa256d8df0d84e7c1fd38b965746128bc5", @ANYRES16=r2, @ANYBLOB="01002dbd70840300002504"], 0xd8}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@enter_looper, @increfs={0x40046304, 0x2}, @enter_looper], 0x12, 0x0, &(0x7f0000000180)="f8795506465027999c1a314fe28e76243c0e"}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000000)={0x1, 0x8, 0x9, 0x4, 0x20d, 0x3}) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffaae, 0x2800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x8, 0x4) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x20800) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (rerun: 32) 12:29:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18765c028b7927bc9015e36b47ae0000d6fa8481bc4b1adb44bcf8c8d21a02e771b678bafcb0dfb45dbcc2d75e82fe6d912cf7efb245bf8fde5e5ad1c9eb02367dd6b6e372da647a598a4eef2a5922fd3678ef98fc8dbe68b11d365c05fd8f7820b3013f9ebb1a03ff5ba00345c26d1b0b572de710ec84d4e883568ebff2890f4f482749411066fa256d8df0d84e7c1fd38b965746128bc5", @ANYRES16=r2, @ANYBLOB="01002dbd70840300002504"], 0xd8}}, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@enter_looper, @increfs={0x40046304, 0x2}, @enter_looper], 0x12, 0x0, &(0x7f0000000180)="f8795506465027999c1a314fe28e76243c0e"}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000000)={0x1, 0x8, 0x9, 0x4, 0x20d, 0x3}) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x1000001, 0x110, 0xffffffffffffffff, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x337c}]}, 0x1c}}, 0xc014) sysfs$2(0x2, 0xa749, &(0x7f0000000180)=""/15) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd750c0100", @ANYRES8], 0x5) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x20800) 12:29:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:10 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18765c028b7927bc9015e36b47ae0000d6fa8481bc4b1adb44bcf8c8d21a02e771b678bafcb0dfb45dbcc2d75e82fe6d912cf7efb245bf8fde5e5ad1c9eb02367dd6b6e372da647a598a4eef2a5922fd3678ef98fc8dbe68b11d365c05fd8f7820b3013f9ebb1a03ff5ba00345c26d1b0b572de710ec84d4e883568ebff2890f4f482749411066fa256d8df0d84e7c1fd38b965746128bc5", @ANYRES16=r2, @ANYBLOB="01002dbd70840300002504"], 0xd8}}, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@enter_looper, @increfs={0x40046304, 0x2}, @enter_looper], 0x12, 0x0, &(0x7f0000000180)="f8795506465027999c1a314fe28e76243c0e"}) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000000)={0x1, 0x8, 0x9, 0x4, 0x20d, 0x3}) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x200001) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x7]) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, 0x0, 0x20800) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x337c}]}, 0x1c}}, 0xc014) sysfs$2(0x2, 0xa749, &(0x7f0000000180)=""/15) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd750c0100", @ANYRES8], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x337c}]}, 0x1c}}, 0xc014) (async) sysfs$2(0x2, 0xa749, &(0x7f0000000180)=""/15) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd750c0100", @ANYRES8], 0x5) (async) [ 1507.283812] Bluetooth: hci2 command 0x0401 tx timeout 12:29:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4, 0x1, "1c6913", 0x80, 0x7}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x48d4}, 0x4890) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x200001) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x7]) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xe663fec868c10d50) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x337c}]}, 0x1c}}, 0xc014) sysfs$2(0x2, 0xa749, &(0x7f0000000180)=""/15) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd750c0100", @ANYRES8], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x337c}]}, 0x1c}}, 0xc014) (async) sysfs$2(0x2, 0xa749, &(0x7f0000000180)=""/15) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fd750c0100", @ANYRES8], 0x5) (async) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4, 0x1, "1c6913", 0x80, 0x7}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x48d4}, 0x4890) 12:29:10 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xe663fec868c10d50) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xe663fec868c10d50) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x200001) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x7]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x10000, 0x200001) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x2, 0x7]) (async) 12:29:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5) 12:29:10 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3651}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x31}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2004c095) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000fbe8eb10e614defa22add83a16ccab9b1da064c46cd1a5b27f74ba3bfd439e752c598c3e303bb13aac84af86bb4d757da0d39444a59041b89d19a32f1e80b35020feee449eaeb7caa4baf83dbc6dd85c30764625495d07cb96c97c85241407923e92c30ae4e2f270db305b9ec6bfa7adac4d621e6d63b776c003a2c24a34445c2b0c", @ANYRES16=r0, @ANYBLOB="01efa2bd7104fcdbdf0000"], 0xd8}}, 0x0) 12:29:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x4, 0x1, "1c6913", 0x80, 0x7}) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x48d4}, 0x4890) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xe663fec868c10d50) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xe663fec868c10d50) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000180)=""/140) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5) 12:29:11 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3651}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x31}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2004c095) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000fbe8eb10e614defa22add83a16ccab9b1da064c46cd1a5b27f74ba3bfd439e752c598c3e303bb13aac84af86bb4d757da0d39444a59041b89d19a32f1e80b35020feee449eaeb7caa4baf83dbc6dd85c30764625495d07cb96c97c85241407923e92c30ae4e2f270db305b9ec6bfa7adac4d621e6d63b776c003a2c24a34445c2b0c", @ANYRES16=r0, @ANYBLOB="01efa2bd7104fcdbdf0000"], 0xd8}}, 0x0) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25046a1dd290326f776ce2294fa5157f5f5c8d23d08b1ea8fe50463c3bbf9fede8e3750011b569ae68d4632bf80b57433480ea1f9046d5b6ec07e8c4f3c3c8788cddc56648f9cfdbb97b77ef65b2051f723c27b77962310e3690731130437904ed2a7bf2b9f02eed1b89ebab9256e70e65c853d039ec9f977491b1e886c29c94adf3e42a6496a21ccba15731377bc6c3f474a5ef78191ed23bc4b0ab"], 0xd8}}, 0x0) 12:29:11 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0x9f, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x8, 0x4, 0x1f, 0xda0, 0x4d1, 0x84de}}}, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x1, 0x1, 'queue0\x00', 0xff}) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async, rerun: 64) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000180)=""/140) (rerun: 64) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x5) (async) 12:29:11 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0x9f, &(0x7f0000000200)=0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x8, 0x4, 0x1f, 0xda0, 0x4d1, 0x84de}}}, 0x12) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x1, 0x1, 'queue0\x00', 0xff}) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25046a1dd290326f776ce2294fa5157f5f5c8d23d08b1ea8fe50463c3bbf9fede8e3750011b569ae68d4632bf80b57433480ea1f9046d5b6ec07e8c4f3c3c8788cddc56648f9cfdbb97b77ef65b2051f723c27b77962310e3690731130437904ed2a7bf2b9f02eed1b89ebab9256e70e65c853d039ec9f977491b1e886c29c94adf3e42a6496a21ccba15731377bc6c3f474a5ef78191ed23bc4b0ab"], 0xd8}}, 0x0) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000180)=""/140) 12:29:11 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0)=0x9f, &(0x7f0000000200)=0x4) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc8, 0x8, 0x4, 0x1f, 0xda0, 0x4d1, 0x84de}}}, 0x12) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x9, 0x1, 0x1, 'queue0\x00', 0xff}) 12:29:11 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3651}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x31}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x2004c095) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000fbe8eb10e614defa22add83a16ccab9b1da064c46cd1a5b27f74ba3bfd439e752c598c3e303bb13aac84af86bb4d757da0d39444a59041b89d19a32f1e80b35020feee449eaeb7caa4baf83dbc6dd85c30764625495d07cb96c97c85241407923e92c30ae4e2f270db305b9ec6bfa7adac4d621e6d63b776c003a2c24a34445c2b0c", @ANYRES16=r0, @ANYBLOB="01efa2bd7104fcdbdf0000"], 0xd8}}, 0x0) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf25046a1dd290326f776ce2294fa5157f5f5c8d23d08b1ea8fe50463c3bbf9fede8e3750011b569ae68d4632bf80b57433480ea1f9046d5b6ec07e8c4f3c3c8788cddc56648f9cfdbb97b77ef65b2051f723c27b77962310e3690731130437904ed2a7bf2b9f02eed1b89ebab9256e70e65c853d039ec9f977491b1e886c29c94adf3e42a6496a21ccba15731377bc6c3f474a5ef78191ed23bc4b0ab"], 0xd8}}, 0x0) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x81, "5f6ba5", 0xc4, 0x5}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x5) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048094}, 0x20040050) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x50, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="13cb22fbae91c16f4ef21b142a13ac918ea6a9941c719e48da4ae1791f86661a8e4980"], 0xd8}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d33b31549ec5f73c92fcb5a1f6229aa33382b7be04002d15845afa9e89d54ea90494830b7283cde58a6c5a3743a3b2327c7fc5c9972968815c59e26622eaec8f55debe9212efe26aec63646ee9b004d5f3a56e554afec96b678fb64eb3c90ee7428ee47555c1d1d969b2c9e7afaad1587e2ccf8ecaf68be2ebd516ecf9b889f2ace2d0d0ee2a3435fa5d7ddc08beaa8632c0099b569378d1bf69f3b1c8a198c8d8f17421226a42243f53d2677f6463a5120eec60eac99748", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x81, "5f6ba5", 0xc4, 0x5}) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x5) (async) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:11 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048094}, 0x20040050) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x50, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="13cb22fbae91c16f4ef21b142a13ac918ea6a9941c719e48da4ae1791f86661a8e4980"], 0xd8}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d33b31549ec5f73c92fcb5a1f6229aa33382b7be04002d15845afa9e89d54ea90494830b7283cde58a6c5a3743a3b2327c7fc5c9972968815c59e26622eaec8f55debe9212efe26aec63646ee9b004d5f3a56e554afec96b678fb64eb3c90ee7428ee47555c1d1d969b2c9e7afaad1587e2ccf8ecaf68be2ebd516ecf9b889f2ace2d0d0ee2a3435fa5d7ddc08beaa8632c0099b569378d1bf69f3b1c8a198c8d8f17421226a42243f53d2677f6463a5120eec60eac99748", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x81, "5f6ba5", 0xc4, 0x5}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x81, "5f6ba5", 0xc4, 0x5}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x5) 12:29:11 executing program 5: connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048094}, 0x20040050) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x50, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="13cb22fbae91c16f4ef21b142a13ac918ea6a9941c719e48da4ae1791f86661a8e4980"], 0xd8}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d33b31549ec5f73c92fcb5a1f6229aa33382b7be04002d15845afa9e89d54ea90494830b7283cde58a6c5a3743a3b2327c7fc5c9972968815c59e26622eaec8f55debe9212efe26aec63646ee9b004d5f3a56e554afec96b678fb64eb3c90ee7428ee47555c1d1d969b2c9e7afaad1587e2ccf8ecaf68be2ebd516ecf9b889f2ace2d0d0ee2a3435fa5d7ddc08beaa8632c0099b569378d1bf69f3b1c8a198c8d8f17421226a42243f53d2677f6463a5120eec60eac99748", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d33b31549ec5f73c92fcb5a1f6229aa33382b7be04002d15845afa9e89d54ea90494830b7283cde58a6c5a3743a3b2327c7fc5c9972968815c59e26622eaec8f55debe9212efe26aec63646ee9b004d5f3a56e554afec96b678fb64eb3c90ee7428ee47555c1d1d969b2c9e7afaad1587e2ccf8ecaf68be2ebd516ecf9b889f2ace2d0d0ee2a3435fa5d7ddc08beaa8632c0099b569378d1bf69f3b1c8a198c8d8f17421226a42243f53d2677f6463a5120eec60eac99748", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @inquiry={{0x401, 0x5}, {"8e384b", 0x0, 0x40}}}, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x89d, 0x4) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/196) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) 12:29:11 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xd8}}, 0x0) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 12:29:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) (async) 12:29:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @inquiry={{0x401, 0x5}, {"8e384b", 0x0, 0x40}}}, 0x9) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x89d, 0x4) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/196) 12:29:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:11 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:29:11 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xd8}}, 0x0) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @inquiry={{0x401, 0x5}, {"8e384b", 0x0, 0x40}}}, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x89d, 0x4) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/196) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @inquiry={{0x401, 0x5}, {"8e384b", 0x0, 0x40}}}, 0x9) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x89d, 0x4) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/196) (async) 12:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:12 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) (async) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xd8}}, 0x0) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x0, 0x84) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a71af67edd2163cda858e9f6471188e154fa6ec03dcadad4d2e31ff2de352fe08065160323072370628b260c261f2d0cd56fb8b1a1a6426c4b73c99aa3a97a007df92c38ae7091b872549d65d1e91b5d94112aa1b225785b43a1ee05b8e332c0c374d2040d12f278f953452eab30e062f329c296e53e844dc1daffa862c321657cedb918c04ea3540b1e1f491d163d2718966398fdc94af8db5611bfa28174"], 0x5) 12:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x20800) 12:29:12 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0xffff, 0x1, 'client1\x00', 0x1, "03ec7ea40f1bc4dc", "6f8d525be02c5394a778585eab54aad826818a7b16909b75490740eb5fcdd1a4", 0x4, 0x200}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xac, r0, 0x2, 0x9, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) socket$inet_udp(0x2, 0x2, 0x0) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x4040, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x138, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ac0}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fc29db585a1bdbdf250d00000008000600ff030000080004"], 0x24}}, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000000780)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x98, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x436}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x98}}, 0x20000004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600420}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x180, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0xf4, [0x0, 0xfffff001, 0x2], [{0x3ff, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x6ae3, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x200, 0x9, 0x1, 0x1}, {0x81, 0x8000, 0x0, 0x0, 0x1}, {0xce48, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xffffff00, 0x6, 0x1, 0x1, 0x1}, {0x401, 0x6, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x40000000, 0x200, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}], 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750cd448"], 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000280)={0xba, [0x3f, 0x8001, 0x8], [{0x3, 0x236, 0x1, 0x1, 0x1, 0x1}, {0x35, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x60000000, 0x1, 0x0, 0x1, 0x1}, {0x10000, 0x20000, 0x1}, {0x1d, 0x800, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x65, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x15b, 0x1}, {0x2, 0xe4a3, 0x0, 0x0, 0x1}, {0x74d9, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1000, 0x0, 0x1}], 0x3}) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x4040, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x138, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ac0}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fc29db585a1bdbdf250d00000008000600ff030000080004"], 0x24}}, 0x4) (async, rerun: 32) r4 = openat$cgroup_ro(r3, &(0x7f0000000780)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x98, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x436}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x98}}, 0x20000004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600420}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x180, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x0, 0x84) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a71af67edd2163cda858e9f6471188e154fa6ec03dcadad4d2e31ff2de352fe08065160323072370628b260c261f2d0cd56fb8b1a1a6426c4b73c99aa3a97a007df92c38ae7091b872549d65d1e91b5d94112aa1b225785b43a1ee05b8e332c0c374d2040d12f278f953452eab30e062f329c296e53e844dc1daffa862c321657cedb918c04ea3540b1e1f491d163d2718966398fdc94af8db5611bfa28174"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a71af67edd2163cda858e9f6471188e154fa6ec03dcadad4d2e31ff2de352fe08065160323072370628b260c261f2d0cd56fb8b1a1a6426c4b73c99aa3a97a007df92c38ae7091b872549d65d1e91b5d94112aa1b225785b43a1ee05b8e332c0c374d2040d12f278f953452eab30e062f329c296e53e844dc1daffa862c321657cedb918c04ea3540b1e1f491d163d2718966398fdc94af8db5611bfa28174"], 0x5) (async) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x9, [0x7, 0x18, 0xfffffff9], [{0x81, 0x3ff}, {0xdb2, 0x400, 0x1}, {0x3, 0x3f, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8001, 0x4, 0x1}, {0x0, 0x3, 0x0, 0x1}, {0x4, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xcda5, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x6, 0x0, 0x1}, {0x0, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x0, 0x1}, {0x8, 0xffff, 0x0, 0x1}], 0x4}) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0xffff, 0x1, 'client1\x00', 0x1, "03ec7ea40f1bc4dc", "6f8d525be02c5394a778585eab54aad826818a7b16909b75490740eb5fcdd1a4", 0x4, 0x200}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xac, r0, 0x2, 0x9, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0xffff, 0x1, 'client1\x00', 0x1, "03ec7ea40f1bc4dc", "6f8d525be02c5394a778585eab54aad826818a7b16909b75490740eb5fcdd1a4", 0x4, 0x200}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xac, r0, 0x2, 0x9, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 12:29:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x7f}}}, 0x6) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0xf4, [0x0, 0xfffff001, 0x2], [{0x3ff, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x6ae3, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x200, 0x9, 0x1, 0x1}, {0x81, 0x8000, 0x0, 0x0, 0x1}, {0xce48, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xffffff00, 0x6, 0x1, 0x1, 0x1}, {0x401, 0x6, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x40000000, 0x200, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}], 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750cd448"], 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000280)={0xba, [0x3f, 0x8001, 0x8], [{0x3, 0x236, 0x1, 0x1, 0x1, 0x1}, {0x35, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x60000000, 0x1, 0x0, 0x1, 0x1}, {0x10000, 0x20000, 0x1}, {0x1d, 0x800, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x65, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x15b, 0x1}, {0x2, 0xe4a3, 0x0, 0x0, 0x1}, {0x74d9, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1000, 0x0, 0x1}], 0x3}) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x4040, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x138, r0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ac0}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fc29db585a1bdbdf250d00000008000600ff030000080004"], 0x24}}, 0x4) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000780)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r0, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r3) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x98, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x436}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x98}}, 0x20000004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600420}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x180, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x9, [0x7, 0x18, 0xfffffff9], [{0x81, 0x3ff}, {0xdb2, 0x400, 0x1}, {0x3, 0x3f, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8001, 0x4, 0x1}, {0x0, 0x3, 0x0, 0x1}, {0x4, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xcda5, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x6, 0x0, 0x1}, {0x0, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x0, 0x1}, {0x8, 0xffff, 0x0, 0x1}], 0x4}) (rerun: 64) 12:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0xffff, 0x1, 'client1\x00', 0x1, "03ec7ea40f1bc4dc", "6f8d525be02c5394a778585eab54aad826818a7b16909b75490740eb5fcdd1a4", 0x4, 0x200}) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xac, r0, 0x2, 0x9, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x4004010) (async) socket$inet_udp(0x2, 0x2, 0x0) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_sctp(0x2, 0x0, 0x84) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a71af67edd2163cda858e9f6471188e154fa6ec03dcadad4d2e31ff2de352fe08065160323072370628b260c261f2d0cd56fb8b1a1a6426c4b73c99aa3a97a007df92c38ae7091b872549d65d1e91b5d94112aa1b225785b43a1ee05b8e332c0c374d2040d12f278f953452eab30e062f329c296e53e844dc1daffa862c321657cedb918c04ea3540b1e1f491d163d2718966398fdc94af8db5611bfa28174"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="a71af67edd2163cda858e9f6471188e154fa6ec03dcadad4d2e31ff2de352fe08065160323072370628b260c261f2d0cd56fb8b1a1a6426c4b73c99aa3a97a007df92c38ae7091b872549d65d1e91b5d94112aa1b225785b43a1ee05b8e332c0c374d2040d12f278f953452eab30e062f329c296e53e844dc1daffa862c321657cedb918c04ea3540b1e1f491d163d2718966398fdc94af8db5611bfa28174"], 0x5) (async) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0xf4, [0x0, 0xfffff001, 0x2], [{0x3ff, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x6ae3, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x200, 0x9, 0x1, 0x1}, {0x81, 0x8000, 0x0, 0x0, 0x1}, {0xce48, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xffffff00, 0x6, 0x1, 0x1, 0x1}, {0x401, 0x6, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x40000000, 0x200, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}], 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750cd448"], 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000280)={0xba, [0x3f, 0x8001, 0x8], [{0x3, 0x236, 0x1, 0x1, 0x1, 0x1}, {0x35, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x60000000, 0x1, 0x0, 0x1, 0x1}, {0x10000, 0x20000, 0x1}, {0x1d, 0x800, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x65, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x15b, 0x1}, {0x2, 0xe4a3, 0x0, 0x0, 0x1}, {0x74d9, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1000, 0x0, 0x1}], 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000180)={0xf4, [0x0, 0xfffff001, 0x2], [{0x3ff, 0x3f, 0x0, 0x1, 0x0, 0x1}, {0x6ae3, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x0, 0x1}, {0x200, 0x9, 0x1, 0x1}, {0x81, 0x8000, 0x0, 0x0, 0x1}, {0xce48, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xffffff00, 0x6, 0x1, 0x1, 0x1}, {0x401, 0x6, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x40000000, 0x200, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}], 0x1}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750cd448"], 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000280)={0xba, [0x3f, 0x8001, 0x8], [{0x3, 0x236, 0x1, 0x1, 0x1, 0x1}, {0x35, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x9, 0x1, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x0, 0x1}, {0x10001, 0x60000000, 0x1, 0x0, 0x1, 0x1}, {0x10000, 0x20000, 0x1}, {0x1d, 0x800, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x65, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x15b, 0x1}, {0x2, 0xe4a3, 0x0, 0x0, 0x1}, {0x74d9, 0x100, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x1000, 0x0, 0x1}], 0x3}) (async) 12:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x9, [0x7, 0x18, 0xfffffff9], [{0x81, 0x3ff}, {0xdb2, 0x400, 0x1}, {0x3, 0x3f, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x8001, 0x4, 0x1}, {0x0, 0x3, 0x0, 0x1}, {0x4, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x5, 0xcda5, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x6, 0x0, 0x1}, {0x0, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1f, 0x0, 0x1, 0x0, 0x1}, {0x8, 0xffff, 0x0, 0x1}], 0x4}) 12:29:12 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="52f2d27e7d83aceeca1b14747e0e38568d002504117b483ab498e977ae8b06"], 0xd8}}, 0x0) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 12:29:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x81, "5f6ba5", 0xc4, 0x5}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:12 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="52f2d27e7d83aceeca1b14747e0e38568d002504117b483ab498e977ae8b06"], 0xd8}}, 0x0) 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0104100108c6fafdb693ef006d425668912532fe70299608ef9897777f35b8e343619439555ace07d4a06efd0251a0d3868b9addc2e721e3a6e8c531d2b63972e4e04aa70d9af540bc9e068437e04980be6d2d3b96ddd5764bc63db3eb0d4027c15de6f7bc765bc7d1ebc02878ff7259a9da4e2da96df9f932"], 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="8e271c5bc24034be8c2d7882d09f4fac9d22546b2ec2d891069e2d2a6162914a5ad9aeffdbd89695da328cef435f6955c4dc7402f72202757af2484390175eab93d4e98ccd4fef32cce45e6d111881fe602daca2f82fc9be754c514fd48a50c66753d2770271bd3c12e2862312817370e008d709bc75c0f39af9b0819da3082a3bd84275fb99204db3a9ce87ff2e04b5") 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 12:29:12 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="52f2d27e7d83aceeca1b14747e0e38568d002504117b483ab498e977ae8b06"], 0xd8}}, 0x0) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x9}}}, 0x5) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0104100108c6fafdb693ef006d425668912532fe70299608ef9897777f35b8e343619439555ace07d4a06efd0251a0d3868b9addc2e721e3a6e8c531d2b63972e4e04aa70d9af540bc9e068437e04980be6d2d3b96ddd5764bc63db3eb0d4027c15de6f7bc765bc7d1ebc02878ff7259a9da4e2da96df9f932"], 0x5) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="8e271c5bc24034be8c2d7882d09f4fac9d22546b2ec2d891069e2d2a6162914a5ad9aeffdbd89695da328cef435f6955c4dc7402f72202757af2484390175eab93d4e98ccd4fef32cce45e6d111881fe602daca2f82fc9be754c514fd48a50c66753d2770271bd3c12e2862312817370e008d709bc75c0f39af9b0819da3082a3bd84275fb99204db3a9ce87ff2e04b5") 12:29:12 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 12:29:12 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="52f2d27e7d83aceeca1b14747e0e38568d002504117b483ab498e977ae8b06"], 0xd8}}, 0x0) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) (async) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250d0000000800060000800000850c7af941e5077ad208412efb0e16f39faaac2376c8fc75ffffffff000000001d45e7b63d5ff92219ac98315051455ade856d827266a6184725a9fd65ac2899f5a83c8fce2c92928a438f920db01a7f5c4b0f4c6899a45c7dc4b544fee674"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) [ 1509.363432] Bluetooth: hci2 command 0x0401 tx timeout 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x9}}}, 0x5) 12:29:12 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250d0000000800060000800000850c7af941e5077ad208412efb0e16f39faaac2376c8fc75ffffffff000000001d45e7b63d5ff92219ac98315051455ade856d827266a6184725a9fd65ac2899f5a83c8fce2c92928a438f920db01a7f5c4b0f4c6899a45c7dc4b544fee674"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250d0000000800060000800000850c7af941e5077ad208412efb0e16f39faaac2376c8fc75ffffffff000000001d45e7b63d5ff92219ac98315051455ade856d827266a6184725a9fd65ac2899f5a83c8fce2c92928a438f920db01a7f5c4b0f4c6899a45c7dc4b544fee674"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) (async) 12:29:12 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000000)=0x9) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c470826b8f277b6453b84a7bd7500000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) (async) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 12:29:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0104100108c6fafdb693ef006d425668912532fe70299608ef9897777f35b8e343619439555ace07d4a06efd0251a0d3868b9addc2e721e3a6e8c531d2b63972e4e04aa70d9af540bc9e068437e04980be6d2d3b96ddd5764bc63db3eb0d4027c15de6f7bc765bc7d1ebc02878ff7259a9da4e2da96df9f932"], 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="8e271c5bc24034be8c2d7882d09f4fac9d22546b2ec2d891069e2d2a6162914a5ad9aeffdbd89695da328cef435f6955c4dc7402f72202757af2484390175eab93d4e98ccd4fef32cce45e6d111881fe602daca2f82fc9be754c514fd48a50c66753d2770271bd3c12e2862312817370e008d709bc75c0f39af9b0819da3082a3bd84275fb99204db3a9ce87ff2e04b5") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0104100108c6fafdb693ef006d425668912532fe70299608ef9897777f35b8e343619439555ace07d4a06efd0251a0d3868b9addc2e721e3a6e8c531d2b63972e4e04aa70d9af540bc9e068437e04980be6d2d3b96ddd5764bc63db3eb0d4027c15de6f7bc765bc7d1ebc02878ff7259a9da4e2da96df9f932"], 0x5) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="8e271c5bc24034be8c2d7882d09f4fac9d22546b2ec2d891069e2d2a6162914a5ad9aeffdbd89695da328cef435f6955c4dc7402f72202757af2484390175eab93d4e98ccd4fef32cce45e6d111881fe602daca2f82fc9be754c514fd48a50c66753d2770271bd3c12e2862312817370e008d709bc75c0f39af9b0819da3082a3bd84275fb99204db3a9ce87ff2e04b5") (async) 12:29:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x9}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x9}}}, 0x5) (async) [ 1509.498802] nla_parse: 18 callbacks suppressed [ 1509.498808] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:13 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4400c001}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) 12:29:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) 12:29:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4e51000100"], 0x5) 12:29:13 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250d0000000800060000800000850c7af941e5077ad208412efb0e16f39faaac2376c8fc75ffffffff000000001d45e7b63d5ff92219ac98315051455ade856d827266a6184725a9fd65ac2899f5a83c8fce2c92928a438f920db01a7f5c4b0f4c6899a45c7dc4b544fee674"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf250d0000000800060000800000850c7af941e5077ad208412efb0e16f39faaac2376c8fc75ffffffff000000001d45e7b63d5ff92219ac98315051455ade856d827266a6184725a9fd65ac2899f5a83c8fce2c92928a438f920db01a7f5c4b0f4c6899a45c7dc4b544fee674"], 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) (async) [ 1509.667507] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:13 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4400c001}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) 12:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/230, 0xe6, 0x3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$bt_hci(r0, &(0x7f0000000140), 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="58fef452fb0000000096b212fe92035d18cec1a4e9010000008000"], 0x5) 12:29:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4e51000100"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4e51000100"], 0x5) (async) 12:29:13 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040800}, 0x4000) 12:29:13 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) [ 1509.805396] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:13 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6f3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4400c001}, 0x4000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) [ 1509.904208] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4e51000100"], 0x5) 12:29:13 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:13 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040800}, 0x4000) 12:29:13 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="013830f8", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = userfaultfd(0x80c00) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) [ 1509.954946] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1509.970781] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:13 executing program 2: r0 = getpgid(0x0) getpgid(r0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d16e882ae76f872f15409b3e69886c391eecfa1591f406202b55234a26de03ca6a1ccdbfdef7972e8e7173874f40b99fcf235dcef0b2f99a815e6d8561ed44e2499acb6f4aaec163859a4b79fd492641742275f6db86d614a2224025ae30514fcf5774f84c405781cde9964c38e3a268bdefa84d3fcf7dddcc82541f053085dc5a1287a9ac6ede5ab2e00024902b750300029cddbb89c34e", 0x98}, {&(0x7f0000000240)="776a0c1eda1c6d758e7a63f19b49a236cabbc32d90199d89768cd57759b2aeb1c977b359832a1352e89963126ac27d8316093860f19dd64e373d1dffb330bb389a4983a9980440dd9aa259d42f5773167817916cf6717b1e86e93b037a4f4c40849661fe1245d170741f1cf5471185816d93291db85200585170525f4900a9d0ecc5f7f36bd3b5669cda7ec2273acc75e88b12987c5ff2f439e2c654d714cea525943becc841ff2f933be4806adeb3e76584e751271db205e9e24f0b81182dbd1512a794f5da7a94d0dd", 0xca}, {&(0x7f00000000c0)="71165fde8133765578e1ef5d9d749d5e7bf87a63cb9014f63850abfd14347858ba267e6e2ec59b414f2cd3becd11f4421892e90650131d5720427c5c831c3b116b5e2292b3daaeda24f73c96b020ca930a871294953d954b02f1319a809c205dad90434765a7bdfde360f1bef6eda705fd39e453a170b95c", 0x78}, {&(0x7f0000000040)="e9fb54edc30a3c065fc02d439d111f534f66c89dc415096099cb3fe6e5351765dfe2b50bf2d984cb000dbc89bfe252956abf2b", 0x33}], 0x4, 0x0, 0x0, 0x1}, 0x8000) 12:29:13 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040800}, 0x4000) 12:29:13 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="013830f8", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async, rerun: 64) r2 = userfaultfd(0x80c00) (rerun: 64) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) 12:29:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x20800) [ 1510.082896] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.4'. 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) socket$unix(0x1, 0x1, 0x0) (async) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:13 executing program 2: r0 = getpgid(0x0) getpgid(r0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d16e882ae76f872f15409b3e69886c391eecfa1591f406202b55234a26de03ca6a1ccdbfdef7972e8e7173874f40b99fcf235dcef0b2f99a815e6d8561ed44e2499acb6f4aaec163859a4b79fd492641742275f6db86d614a2224025ae30514fcf5774f84c405781cde9964c38e3a268bdefa84d3fcf7dddcc82541f053085dc5a1287a9ac6ede5ab2e00024902b750300029cddbb89c34e", 0x98}, {&(0x7f0000000240)="776a0c1eda1c6d758e7a63f19b49a236cabbc32d90199d89768cd57759b2aeb1c977b359832a1352e89963126ac27d8316093860f19dd64e373d1dffb330bb389a4983a9980440dd9aa259d42f5773167817916cf6717b1e86e93b037a4f4c40849661fe1245d170741f1cf5471185816d93291db85200585170525f4900a9d0ecc5f7f36bd3b5669cda7ec2273acc75e88b12987c5ff2f439e2c654d714cea525943becc841ff2f933be4806adeb3e76584e751271db205e9e24f0b81182dbd1512a794f5da7a94d0dd", 0xca}, {&(0x7f00000000c0)="71165fde8133765578e1ef5d9d749d5e7bf87a63cb9014f63850abfd14347858ba267e6e2ec59b414f2cd3becd11f4421892e90650131d5720427c5c831c3b116b5e2292b3daaeda24f73c96b020ca930a871294953d954b02f1319a809c205dad90434765a7bdfde360f1bef6eda705fd39e453a170b95c", 0x78}, {&(0x7f0000000040)="e9fb54edc30a3c065fc02d439d111f534f66c89dc415096099cb3fe6e5351765dfe2b50bf2d984cb000dbc89bfe252956abf2b", 0x33}], 0x4, 0x0, 0x0, 0x1}, 0x8000) 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:13 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="013830f8", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = userfaultfd(0x80c00) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="013830f8", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) userfaultfd(0x80c00) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) 12:29:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:13 executing program 2: r0 = getpgid(0x0) getpgid(r0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d16e882ae76f872f15409b3e69886c391eecfa1591f406202b55234a26de03ca6a1ccdbfdef7972e8e7173874f40b99fcf235dcef0b2f99a815e6d8561ed44e2499acb6f4aaec163859a4b79fd492641742275f6db86d614a2224025ae30514fcf5774f84c405781cde9964c38e3a268bdefa84d3fcf7dddcc82541f053085dc5a1287a9ac6ede5ab2e00024902b750300029cddbb89c34e", 0x98}, {&(0x7f0000000240)="776a0c1eda1c6d758e7a63f19b49a236cabbc32d90199d89768cd57759b2aeb1c977b359832a1352e89963126ac27d8316093860f19dd64e373d1dffb330bb389a4983a9980440dd9aa259d42f5773167817916cf6717b1e86e93b037a4f4c40849661fe1245d170741f1cf5471185816d93291db85200585170525f4900a9d0ecc5f7f36bd3b5669cda7ec2273acc75e88b12987c5ff2f439e2c654d714cea525943becc841ff2f933be4806adeb3e76584e751271db205e9e24f0b81182dbd1512a794f5da7a94d0dd", 0xca}, {&(0x7f00000000c0)="71165fde8133765578e1ef5d9d749d5e7bf87a63cb9014f63850abfd14347858ba267e6e2ec59b414f2cd3becd11f4421892e90650131d5720427c5c831c3b116b5e2292b3daaeda24f73c96b020ca930a871294953d954b02f1319a809c205dad90434765a7bdfde360f1bef6eda705fd39e453a170b95c", 0x78}, {&(0x7f0000000040)="e9fb54edc30a3c065fc02d439d111f534f66c89dc415096099cb3fe6e5351765dfe2b50bf2d984cb000dbc89bfe252956abf2b", 0x33}], 0x4, 0x0, 0x0, 0x1}, 0x8000) getpgid(0x0) (async) getpgid(r0) (async) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="d16e882ae76f872f15409b3e69886c391eecfa1591f406202b55234a26de03ca6a1ccdbfdef7972e8e7173874f40b99fcf235dcef0b2f99a815e6d8561ed44e2499acb6f4aaec163859a4b79fd492641742275f6db86d614a2224025ae30514fcf5774f84c405781cde9964c38e3a268bdefa84d3fcf7dddcc82541f053085dc5a1287a9ac6ede5ab2e00024902b750300029cddbb89c34e", 0x98}, {&(0x7f0000000240)="776a0c1eda1c6d758e7a63f19b49a236cabbc32d90199d89768cd57759b2aeb1c977b359832a1352e89963126ac27d8316093860f19dd64e373d1dffb330bb389a4983a9980440dd9aa259d42f5773167817916cf6717b1e86e93b037a4f4c40849661fe1245d170741f1cf5471185816d93291db85200585170525f4900a9d0ecc5f7f36bd3b5669cda7ec2273acc75e88b12987c5ff2f439e2c654d714cea525943becc841ff2f933be4806adeb3e76584e751271db205e9e24f0b81182dbd1512a794f5da7a94d0dd", 0xca}, {&(0x7f00000000c0)="71165fde8133765578e1ef5d9d749d5e7bf87a63cb9014f63850abfd14347858ba267e6e2ec59b414f2cd3becd11f4421892e90650131d5720427c5c831c3b116b5e2292b3daaeda24f73c96b020ca930a871294953d954b02f1319a809c205dad90434765a7bdfde360f1bef6eda705fd39e453a170b95c", 0x78}, {&(0x7f0000000040)="e9fb54edc30a3c065fc02d439d111f534f66c89dc415096099cb3fe6e5351765dfe2b50bf2d984cb000dbc89bfe252956abf2b", 0x33}], 0x4, 0x0, 0x0, 0x1}, 0x8000) (async) 12:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="01006dbd7000fcdbdf2505"], 0xd8}}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) [ 1510.269716] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) (async) 12:29:13 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x63, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a2594d0588000003", @ANYRES16=r0, @ANYBLOB="01002ebd7000fcdbdf2504"], 0xd8}}, 0x4850) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2002c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x10) 12:29:13 executing program 1: sysfs$1(0x1, &(0x7f0000000000)='\\\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21750c1200"], 0x5) 12:29:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000340)="41cd59b7f712431ec6bd8d942103ec4eeabd6e84000fa7209234aa313dc192ee6a4fd3193eaff3d1d0fd78f5e8364a01f108d494796eefe968bb9a769a12296739de1b794d2f1cc6725dc458508547fb2e8e312d58e61afa6400f9e264cc5142d97281bff12aa9db633c98ad5130291f028ed55394591fd4a00878ddea6c3f262dbb3f93d44544d44c7969a918369015014d6a0f7047040dc3e6efc9bf430e980d63f890e6f2c82757957dc67d819dfff42ac10308cedf6da11b1a4cfc931449bdd43415d345c4fbb0") ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000180)={0x1, 0x3, 0x0, 0x8000, 0x8000000000000000, 0x1, 0xe5, 0x56a, 0xa0, 0x5, 0x74f4488f, 0xeb36e561c3da3b90}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x20, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "0b676cff671ec4c4cdc5098229c75a48"}}}, 0x16) 12:29:13 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x63, 0x4) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a2594d0588000003", @ANYRES16=r0, @ANYBLOB="01002ebd7000fcdbdf2504"], 0xd8}}, 0x4850) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2002c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x10) 12:29:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="01006dbd7000fcdbdf2505"], 0xd8}}, 0x40000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) 12:29:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) 12:29:13 executing program 1: sysfs$1(0x1, &(0x7f0000000000)='\\\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21750c1200"], 0x5) sysfs$1(0x1, &(0x7f0000000000)='\\\x00') (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21750c1200"], 0x5) (async) 12:29:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000340)="41cd59b7f712431ec6bd8d942103ec4eeabd6e84000fa7209234aa313dc192ee6a4fd3193eaff3d1d0fd78f5e8364a01f108d494796eefe968bb9a769a12296739de1b794d2f1cc6725dc458508547fb2e8e312d58e61afa6400f9e264cc5142d97281bff12aa9db633c98ad5130291f028ed55394591fd4a00878ddea6c3f262dbb3f93d44544d44c7969a918369015014d6a0f7047040dc3e6efc9bf430e980d63f890e6f2c82757957dc67d819dfff42ac10308cedf6da11b1a4cfc931449bdd43415d345c4fbb0") (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000180)={0x1, 0x3, 0x0, 0x8000, 0x8000000000000000, 0x1, 0xe5, 0x56a, 0xa0, 0x5, 0x74f4488f, 0xeb36e561c3da3b90}) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x20, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "0b676cff671ec4c4cdc5098229c75a48"}}}, 0x16) 12:29:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x63, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a2594d0588000003", @ANYRES16=r0, @ANYBLOB="01002ebd7000fcdbdf2504"], 0xd8}}, 0x4850) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2002c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x63, 0x4) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a2594d0588000003", @ANYRES16=r0, @ANYBLOB="01002ebd7000fcdbdf2504"], 0xd8}}, 0x4850) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2002c0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xb0, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffe}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) 12:29:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="01006dbd7000fcdbdf2505"], 0xd8}}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) 12:29:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) (async) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000340)="41cd59b7f712431ec6bd8d942103ec4eeabd6e84000fa7209234aa313dc192ee6a4fd3193eaff3d1d0fd78f5e8364a01f108d494796eefe968bb9a769a12296739de1b794d2f1cc6725dc458508547fb2e8e312d58e61afa6400f9e264cc5142d97281bff12aa9db633c98ad5130291f028ed55394591fd4a00878ddea6c3f262dbb3f93d44544d44c7969a918369015014d6a0f7047040dc3e6efc9bf430e980d63f890e6f2c82757957dc67d819dfff42ac10308cedf6da11b1a4cfc931449bdd43415d345c4fbb0") ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000180)={0x1, 0x3, 0x0, 0x8000, 0x8000000000000000, 0x1, 0xe5, 0x56a, 0xa0, 0x5, 0x74f4488f, 0xeb36e561c3da3b90}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x20, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "0b676cff671ec4c4cdc5098229c75a48"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000340)="41cd59b7f712431ec6bd8d942103ec4eeabd6e84000fa7209234aa313dc192ee6a4fd3193eaff3d1d0fd78f5e8364a01f108d494796eefe968bb9a769a12296739de1b794d2f1cc6725dc458508547fb2e8e312d58e61afa6400f9e264cc5142d97281bff12aa9db633c98ad5130291f028ed55394591fd4a00878ddea6c3f262dbb3f93d44544d44c7969a918369015014d6a0f7047040dc3e6efc9bf430e980d63f890e6f2c82757957dc67d819dfff42ac10308cedf6da11b1a4cfc931449bdd43415d345c4fbb0") (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000180)={0x1, 0x3, 0x0, 0x8000, 0x8000000000000000, 0x1, 0xe5, 0x56a, 0xa0, 0x5, 0x74f4488f, 0xeb36e561c3da3b90}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x20, 0x4) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) write$bt_hci(r4, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "0b676cff671ec4c4cdc5098229c75a48"}}}, 0x16) (async) 12:29:14 executing program 1: sysfs$1(0x1, &(0x7f0000000000)='\\\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21750c1200"], 0x5) sysfs$1(0x1, &(0x7f0000000000)='\\\x00') (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21750c1200"], 0x5) (async) 12:29:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9eb00000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2fd6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x63}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffa721}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44005}, 0x40005) 12:29:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) (async) 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) [ 1510.840817] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x172bba43771573a0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9eb00000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2fd6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x63}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffa721}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44005}, 0x40005) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12:29:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x172bba43771573a0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x172bba43771573a0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) 12:29:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9eb00000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2fd6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x63}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffa721}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44005}, 0x40005) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9eb00000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2fd6}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x63}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffa721}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44005}, 0x40005) (async) 12:29:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x172bba43771573a0, 0x0) (rerun: 32) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20000801) 12:29:14 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20000801) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) [ 1511.178012] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:14 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20000801) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20000801) (async) 12:29:14 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7f, [0x0, 0x7], 0x5}, 0x10) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250700000008000a000100000014001f00ff02000000000000000000000000000114001f0020010000000000000000000000000001050022000000000006001d0002000000050006003f0000000800091202000000050004000400000006000e0058080000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d88ae602e5ff", @ANYRES16=r0, @ANYRESOCT=r1], 0xd8}}, 0x0) 12:29:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x25a, 0x4], 0x100}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffdf, 0x4}, 0x6) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7f, [0x0, 0x7], 0x5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7f, [0x0, 0x7], 0x5}, 0x10) (async) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r1, @ANYBLOB="01ff03000000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}, @L2TP_ATTR_OFFSET={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 12:29:14 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x25a, 0x4], 0x100}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffdf, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x25a, 0x4], 0x100}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffdf, 0x4}, 0x6) (async) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250700000008000a000100000014001f00ff02000000000000000000000000000114001f0020010000000000000000000000000001050022000000000006001d0002000000050006003f0000000800091202000000050004000400000006000e0058080000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44) (async, rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d88ae602e5ff", @ANYRES16=r0, @ANYRESOCT=r1], 0xd8}}, 0x0) (rerun: 64) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r1, @ANYBLOB="01ff03000000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}, @L2TP_ATTR_OFFSET={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r1, @ANYBLOB="01ff03000000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}, @L2TP_ATTR_OFFSET={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) (async) 12:29:14 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7f, [0x0, 0x7], 0x5}, 0x10) 12:29:14 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x25a, 0x4], 0x100}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffdf, 0x4}, 0x6) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250700000008000a000100000014001f00ff02000000000000000000000000000114001f0020010000000000000000000000000001050022000000000006001d0002000000050006003f0000000800091202000000050004000400000006000e0058080000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d88ae602e5ff", @ANYRES16=r0, @ANYRESOCT=r1], 0xd8}}, 0x0) (rerun: 32) [ 1511.453671] Bluetooth: hci2 command 0x0401 tx timeout 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x8000, 'Mgw', 0x9b, 0x7f}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8000000", @ANYRES32=r1, @ANYBLOB="01ff03000000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xa2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000000}, @L2TP_ATTR_OFFSET={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x80) 12:29:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0xc849) 12:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c010066744d97326df5026f3b329c8a1476369b01b0f7a537a86fc80ba050245ba139f84bd08f568f1bb2729954eddb9c9670179799ce44b3"], 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x8, "068f23", 0xe, 0x1}) 12:29:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x8000, 'Mgw', 0x9b, 0x7f}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:14 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/125) recvfrom$unix(r3, &(0x7f0000000000)=""/244, 0xf4, 0x10100, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="08000c2dbd7000fddb39ad6430b1446e528c6c18f0df25"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c010066744d97326df5026f3b329c8a1476369b01b0f7a537a86fc80ba050245ba139f84bd08f568f1bb2729954eddb9c9670179799ce44b3"], 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x8, "068f23", 0xe, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c010066744d97326df5026f3b329c8a1476369b01b0f7a537a86fc80ba050245ba139f84bd08f568f1bb2729954eddb9c9670179799ce44b3"], 0x5) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x8, "068f23", 0xe, 0x1}) (async) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/125) recvfrom$unix(r3, &(0x7f0000000000)=""/244, 0xf4, 0x10100, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="08000c2dbd7000fddb39ad6430b1446e528c6c18f0df25"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000440)=0x6e, 0x800) r2 = accept$unix(r1, &(0x7f00000003c0), &(0x7f00000000c0)=0x6e) gettid() ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="622db516e02d636d57dd7e260be0783a62d8af32a2a37a433fc57d0475caaf641da379e3fbf0723af55057f7a61f91c268b7befb70cb48d2a299", 0x3a}, {&(0x7f00000001c0)="6e2fe08f5495e760a3fcb89ce02354e370c23be00312da", 0x17}, {&(0x7f0000000200)="a2b6bb0febbb3143a2ae2582d29f7016ab1409b14dba1052cec4c4a2112af8382950363c7f0e3d6d4067e8505fec7ba749ff0675cf515e27b4e9cb20a6cc0be5bf06cf707970462b69c53069c19f6fe656052d9bb9bfee91b876896bc4744d09cd7717394a02", 0x66}], 0x3, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58}, 0x40) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x8000, 'Mgw', 0x9b, 0x7f}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x8000, 'Mgw', 0x9b, 0x7f}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4000) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0xc849) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c010066744d97326df5026f3b329c8a1476369b01b0f7a537a86fc80ba050245ba139f84bd08f568f1bb2729954eddb9c9670179799ce44b3"], 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x8, "068f23", 0xe, 0x1}) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/125) recvfrom$unix(r3, &(0x7f0000000000)=""/244, 0xf4, 0x10100, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="08000c2dbd7000fddb39ad6430b1446e528c6c18f0df25"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/125) (async) recvfrom$unix(r3, &(0x7f0000000000)=""/244, 0xf4, 0x10100, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="08000c2dbd7000fddb39ad6430b1446e528c6c18f0df25"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084) (async) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000440)=0x6e, 0x800) r2 = accept$unix(r1, &(0x7f00000003c0), &(0x7f00000000c0)=0x6e) gettid() ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="622db516e02d636d57dd7e260be0783a62d8af32a2a37a433fc57d0475caaf641da379e3fbf0723af55057f7a61f91c268b7befb70cb48d2a299", 0x3a}, {&(0x7f00000001c0)="6e2fe08f5495e760a3fcb89ce02354e370c23be00312da", 0x17}, {&(0x7f0000000200)="a2b6bb0febbb3143a2ae2582d29f7016ab1409b14dba1052cec4c4a2112af8382950363c7f0e3d6d4067e8505fec7ba749ff0675cf515e27b4e9cb20a6cc0be5bf06cf707970462b69c53069c19f6fe656052d9bb9bfee91b876896bc4744d09cd7717394a02", 0x66}], 0x3, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000440)=0x6e, 0x800) (async) accept$unix(r1, &(0x7f00000003c0), &(0x7f00000000c0)=0x6e) (async) gettid() (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="622db516e02d636d57dd7e260be0783a62d8af32a2a37a433fc57d0475caaf641da379e3fbf0723af55057f7a61f91c268b7befb70cb48d2a299", 0x3a}, {&(0x7f00000001c0)="6e2fe08f5495e760a3fcb89ce02354e370c23be00312da", 0x17}, {&(0x7f0000000200)="a2b6bb0febbb3143a2ae2582d29f7016ab1409b14dba1052cec4c4a2112af8382950363c7f0e3d6d4067e8505fec7ba749ff0675cf515e27b4e9cb20a6cc0be5bf06cf707970462b69c53069c19f6fe656052d9bb9bfee91b876896bc4744d09cd7717394a02", 0x66}], 0x3, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58}, 0x40) (async) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0xc849) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d201907002bff040100000000000000030104000200000003008e02"], 0x1d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x14801, 0x0) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4000) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/232) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x20001) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000280)=0x80000000) r3 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1f, 0x100) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000340)=""/155) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2c}}}, 0x5) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) (async) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000440)=0x6e, 0x800) r2 = accept$unix(r1, &(0x7f00000003c0), &(0x7f00000000c0)=0x6e) (async, rerun: 32) gettid() (async, rerun: 32) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="622db516e02d636d57dd7e260be0783a62d8af32a2a37a433fc57d0475caaf641da379e3fbf0723af55057f7a61f91c268b7befb70cb48d2a299", 0x3a}, {&(0x7f00000001c0)="6e2fe08f5495e760a3fcb89ce02354e370c23be00312da", 0x17}, {&(0x7f0000000200)="a2b6bb0febbb3143a2ae2582d29f7016ab1409b14dba1052cec4c4a2112af8382950363c7f0e3d6d4067e8505fec7ba749ff0675cf515e27b4e9cb20a6cc0be5bf06cf707970462b69c53069c19f6fe656052d9bb9bfee91b876896bc4744d09cd7717394a02", 0x66}], 0x3, &(0x7f0000000300)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58}, 0x40) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d201907002bff040100000000000000030104000200000003008e02"], 0x1d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x14801, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d201907002bff040100000000000000030104000200000003008e02"], 0x1d) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x14801, 0x0) (async) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}}}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x89b, 0x4000) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000340)=""/205) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="8700000037d79c8e7b77f61385da93c38107b20325e3d007538f22", @ANYRES16=r1, @ANYBLOB="000327bd7000ffdbdf25010000005c00028006000f000b0700000800080003000000080007007955000014000100fe80000000000000000000000000001514000100fc02000000000000000000000000000108000800b400000006000e004e20000006000e004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x42000}, 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r1], 0xd8}}, 0x0) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/232) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x20001) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000280)=0x80000000) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1f, 0x100) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000340)=""/155) (async) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2c}}}, 0x5) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d201907002bff040100000000000000030104000200000003008e02"], 0x1d) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x14801, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010d201907002bff040100000000000000030104000200000003008e02"], 0x1d) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x14801, 0x0) (async) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}}}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x89b, 0x4000) (rerun: 32) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000340)=""/205) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="8700000037d79c8e7b77f61385da93c38107b20325e3d007538f22", @ANYRES16=r1, @ANYBLOB="000327bd7000ffdbdf25010000005c00028006000f000b0700000800080003000000080007007955000014000100fe80000000000000000000000000001514000100fc02000000000000000000000000000108000800b400000006000e004e20000006000e004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x42000}, 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r1], 0xd8}}, 0x0) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/232) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x20001) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000280)=0x80000000) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) (async) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1f, 0x100) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000340)=""/155) (async) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2c}}}, 0x5) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_phy_link={{0x436, 0x6f}, {0xc8, 0xf7, 0x9d, "d395a7d21e693b4aa912c6bb91c86463d0b440ffba9776487ff978e4c4475821c77ca03141dcedac8ef55f325a2858729f90cea5a3a651a2b069ebf819064ce3254dd2b25d9f0ca0a7682f2721f5a1b6f96305ee9f26fb18016ed8d32b6483ded96f7669dd69e13441645e3d"}}}, 0x73) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x3, 0x39, {0x8, 0x7}, 0x6}) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}}}, 0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x89b, 0x4000) (rerun: 64) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000340)=""/205) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="8700000037d79c8e7b77f61385da93c38107b20325e3d007538f22", @ANYRES16=r1, @ANYBLOB="000327bd7000ffdbdf25010000005c00028006000f000b0700000800080003000000080007007955000014000100fe80000000000000000000000000001514000100fc02000000000000000000000000000108000800b400000006000e004e20000006000e004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x42000}, 0x50) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r1], 0xd8}}, 0x0) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_phy_link={{0x436, 0x6f}, {0xc8, 0xf7, 0x9d, "d395a7d21e693b4aa912c6bb91c86463d0b440ffba9776487ff978e4c4475821c77ca03141dcedac8ef55f325a2858729f90cea5a3a651a2b069ebf819064ce3254dd2b25d9f0ca0a7682f2721f5a1b6f96305ee9f26fb18016ed8d32b6483ded96f7669dd69e13441645e3d"}}}, 0x73) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x3, 0x39, {0x8, 0x7}, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_phy_link={{0x436, 0x6f}, {0xc8, 0xf7, 0x9d, "d395a7d21e693b4aa912c6bb91c86463d0b440ffba9776487ff978e4c4475821c77ca03141dcedac8ef55f325a2858729f90cea5a3a651a2b069ebf819064ce3254dd2b25d9f0ca0a7682f2721f5a1b6f96305ee9f26fb18016ed8d32b6483ded96f7669dd69e13441645e3d"}}}, 0x73) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x3, 0x39, {0x8, 0x7}, 0x6}) (async) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0xfec9) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4020}, 0x20000801) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 12:29:15 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0xfec9) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4020}, 0x20000801) bind$bt_hci(r0, &(0x7f0000000140), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4020}, 0x20000801) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:29:15 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_phy_link={{0x436, 0x6f}, {0xc8, 0xf7, 0x9d, "d395a7d21e693b4aa912c6bb91c86463d0b440ffba9776487ff978e4c4475821c77ca03141dcedac8ef55f325a2858729f90cea5a3a651a2b069ebf819064ce3254dd2b25d9f0ca0a7682f2721f5a1b6f96305ee9f26fb18016ed8d32b6483ded96f7669dd69e13441645e3d"}}}, 0x73) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x3, 0x39, {0x8, 0x7}, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @accept_phy_link={{0x436, 0x6f}, {0xc8, 0xf7, 0x9d, "d395a7d21e693b4aa912c6bb91c86463d0b440ffba9776487ff978e4c4475821c77ca03141dcedac8ef55f325a2858729f90cea5a3a651a2b069ebf819064ce3254dd2b25d9f0ca0a7682f2721f5a1b6f96305ee9f26fb18016ed8d32b6483ded96f7669dd69e13441645e3d"}}}, 0x73) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00000000c0)={0x0, 0x3, 0x39, {0x8, 0x7}, 0x6}) (async) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0xfec9) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) (async) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) (async) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) (async) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x3e, 0x18000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="373a5c7a2ddd6641b9bf08992ccf1389456abb98e95ec499ec4ae63a473a218151a34a88c30f7c1bbcce1073f6e943e22d2d03ab36b95c7a57b6f08d5e1904ea3a193dc87cbea1df9bdc842345769a46dfe6af611f2ee8a37b626f863c795f4d305f1eb507fef19baf09644a887e97bc74460768b12f044532c436b1a941ca5e9cc12a45f7c95bd29f00275389dddf00daa20a09f192a96be9d2ab6047eba4f551ec99c463ac150d5985005ab9f16ba7137da035c898741f32bbde6e71f1d76271e097922cbf7324e4f2dd8a9a3cbde7426629188f9df59f1e92", 0xda}], 0x1, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r0, r0, r5, r6, r7]}}], 0xf0}, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "bd709c", 0x64, 0xff}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4020}, 0x20000801) bind$bt_hci(r0, &(0x7f0000000140), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4020}, 0x20000801) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x24000, 'syz0\x00', @null, 0x104c, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c4495c302f7059336213300", @ANYRES16=0x0, @ANYBLOB="e03e2abd7000fcdbdf250700000006001d0004000000050004000900000008000b0002000000050005000000000005001300c1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x54) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) (async) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) (rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) (async, rerun: 32) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) (rerun: 32) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x3e, 0x18000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="373a5c7a2ddd6641b9bf08992ccf1389456abb98e95ec499ec4ae63a473a218151a34a88c30f7c1bbcce1073f6e943e22d2d03ab36b95c7a57b6f08d5e1904ea3a193dc87cbea1df9bdc842345769a46dfe6af611f2ee8a37b626f863c795f4d305f1eb507fef19baf09644a887e97bc74460768b12f044532c436b1a941ca5e9cc12a45f7c95bd29f00275389dddf00daa20a09f192a96be9d2ab6047eba4f551ec99c463ac150d5985005ab9f16ba7137da035c898741f32bbde6e71f1d76271e097922cbf7324e4f2dd8a9a3cbde7426629188f9df59f1e92", 0xda}], 0x1, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r0, r0, r5, r6, r7]}}], 0xf0}, 0x4) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "bd709c", 0x64, 0xff}) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x24000, 'syz0\x00', @null, 0x104c, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) 12:29:15 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c4495c302f7059336213300", @ANYRES16=0x0, @ANYBLOB="e03e2abd7000fcdbdf250700000006001d0004000000050004000900000008000b0002000000050005000000000005001300c1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x54) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c4495c302f7059336213300", @ANYRES16=0x0, @ANYBLOB="e03e2abd7000fcdbdf250700000006001d0004000000050004000900000008000b0002000000050005000000000005001300c1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x54) (async) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) (async) 12:29:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x24000, 'syz0\x00', @null, 0x104c, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000200), 0x3e, 0x18000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="373a5c7a2ddd6641b9bf08992ccf1389456abb98e95ec499ec4ae63a473a218151a34a88c30f7c1bbcce1073f6e943e22d2d03ab36b95c7a57b6f08d5e1904ea3a193dc87cbea1df9bdc842345769a46dfe6af611f2ee8a37b626f863c795f4d305f1eb507fef19baf09644a887e97bc74460768b12f044532c436b1a941ca5e9cc12a45f7c95bd29f00275389dddf00daa20a09f192a96be9d2ab6047eba4f551ec99c463ac150d5985005ab9f16ba7137da035c898741f32bbde6e71f1d76271e097922cbf7324e4f2dd8a9a3cbde7426629188f9df59f1e92", 0xda}], 0x1, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r2]}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r4, r0, r0, r0, r5, r6, r7]}}], 0xf0}, 0x4) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "bd709c", 0x64, 0xff}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r8, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c4495c302f7059336213300", @ANYRES16=0x0, @ANYBLOB="e03e2abd7000fcdbdf250700000006001d0004000000050004000900000008000b0002000000050005000000000005001300c1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x54) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c4495c302f7059336213300", @ANYRES16=0x0, @ANYBLOB="e03e2abd7000fcdbdf250700000006001d0004000000050004000900000008000b0002000000050005000000000005001300c1000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x54) (async) 12:29:15 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044051}, 0x4800) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="ea2504"], 0xd8}}, 0x0) 12:29:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@any, 0x8000, 0x1, 0xfd, 0xb9e, 0x3}}}, 0x11) (async) 12:29:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) 12:29:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x94ba, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x6, [0x1, 0x3], 0x5e}, 0x10) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01755fec734e11fd50aca4810c0106cb61b2d239d81ec02b897441d855e394c4a2fb100bc5625766aed0c5b3d21229fd92fe19ea9a314dd8dcae411102f125336e9495ab879adf22b80949dbf15291ffcaf83c7351bfb4bd27eea72a8f330641544e2a"], 0x5) 12:29:15 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) openat$cgroup_ro(r2, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x100010, r2, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r5, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x4000080) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000200", @ANYRES16=r0, @ANYBLOB="01002d0b418b72d4494f9d"], 0xd8}}, 0x0) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="01002d00fcdbdf25040000"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="20f028847000fbdbdf250d00000014000000010005000100000008000800ff01000008000500800000002c00018008000b0073697000060001000a000000060004004e2000000800050000000000080009001b0000000c000280060002004e2400000800040040000000080006003f00000048000180060004004e200000060002006200000014000300ffffffff000000000000000000000000feff06003000000002ddf2a999768da5a26246220000000c0007003000000001000000070006006e7100002c000280060002004e200000060002004e22000008000600c0cc00000800070035090000080005000900000014000180060002008900000008000b00736970002c00038014000600fc01000000000000000000000000000114000000000000000f0700"/305], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12:29:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0xc849) 12:29:15 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="01002d00fcdbdf25040000"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="01002d00fcdbdf25040000"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044051}, 0x4800) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="ea2504"], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) (async) 12:29:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x94ba, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x6, [0x1, 0x3], 0x5e}, 0x10) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01755fec734e11fd50aca4810c0106cb61b2d239d81ec02b897441d855e394c4a2fb100bc5625766aed0c5b3d21229fd92fe19ea9a314dd8dcae411102f125336e9495ab879adf22b80949dbf15291ffcaf83c7351bfb4bd27eea72a8f330641544e2a"], 0x5) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{}, {'OQd'}}}, 0x40) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044051}, 0x4800) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="ea2504"], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfffffffc, 0x4) 12:29:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000240)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}}}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x89b, 0x4000) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000340)=""/205) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="8700000037d79c8e7b77f61385da93c38107b20325e3d007538f22", @ANYRES16=r1, @ANYBLOB="000327bd7000ffdbdf25010000005c00028006000f000b0700000800080003000000080007007955000014000100fe80000000000000000000000000001514000100fc02000000000000000000000000000108000800b400000006000e004e20000006000e004e230000"], 0x70}, 0x1, 0x0, 0x0, 0x42000}, 0x50) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r1], 0xd8}}, 0x0) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{}, {'OQd'}}}, 0x40) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="01002d00fcdbdf25040000"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x3}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa640}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24d1f8218503210b452ff0a517dc402de872d231a48bdfc925a34c52bc95e0e7f331a227190becd8de42ff209d5ded09ad3c48aae65d", @ANYRES16=r0, @ANYRES8=r4], 0xd8}}, 0x0) 12:29:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x94ba, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x6, [0x1, 0x3], 0x5e}, 0x10) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01755fec734e11fd50aca4810c0106cb61b2d239d81ec02b897441d855e394c4a2fb100bc5625766aed0c5b3d21229fd92fe19ea9a314dd8dcae411102f125336e9495ab879adf22b80949dbf15291ffcaf83c7351bfb4bd27eea72a8f330641544e2a"], 0x5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x94ba, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140), 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x6, [0x1, 0x3], 0x5e}, 0x10) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01755fec734e11fd50aca4810c0106cb61b2d239d81ec02b897441d855e394c4a2fb100bc5625766aed0c5b3d21229fd92fe19ea9a314dd8dcae411102f125336e9495ab879adf22b80949dbf15291ffcaf83c7351bfb4bd27eea72a8f330641544e2a"], 0x5) (async) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, 0x0, 0xc849) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_class_of_dev={{}, {'OQd'}}}, 0x40) (rerun: 32) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x8000, 0x2}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x100010, r1, 0xe2bb6000) 12:29:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="01006dbd7000fcdbdf2505"], 0xd8}}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1f0e0000", @ANYRES16=r0, @ANYRES8=r0], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x8000, 0x2}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x100010, r1, 0xe2bb6000) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x3}) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa640}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24d1f8218503210b452ff0a517dc402de872d231a48bdfc925a34c52bc95e0e7f331a227190becd8de42ff209d5ded09ad3c48aae65d", @ANYRES16=r0, @ANYRES8=r4], 0xd8}}, 0x0) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xb) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="7c1fc8f6d097f3120c2fd777bb794a699a35ecba3bad321e68630b6f447aeae54bf0526370b09ae8423a00c2ec5e8f7a531742b76655d0f73100f5bb148a349ff0055752ebd31bf9ca2296d45e994e2ba6aad123f8e7ab2db75e436ed650806f42bbea93e171afd443af012120682762f663c8c89b28a684de8c5228e55a") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bind$bt_hci(r0, &(0x7f0000000140), 0x6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcbf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x24044811) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e4000000"], 0x5) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x8000, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x100010, r1, 0xe2bb6000) 12:29:16 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x3}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa640}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24d1f8218503210b452ff0a517dc402de872d231a48bdfc925a34c52bc95e0e7f331a227190becd8de42ff209d5ded09ad3c48aae65d", @ANYRES16=r0, @ANYRES8=r4], 0xd8}}, 0x0) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1f0e0000", @ANYRES16=r0, @ANYRES8=r0], 0xd8}}, 0x0) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xb) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="7c1fc8f6d097f3120c2fd777bb794a699a35ecba3bad321e68630b6f447aeae54bf0526370b09ae8423a00c2ec5e8f7a531742b76655d0f73100f5bb148a349ff0055752ebd31bf9ca2296d45e994e2ba6aad123f8e7ab2db75e436ed650806f42bbea93e171afd443af012120682762f663c8c89b28a684de8c5228e55a") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bind$bt_hci(r0, &(0x7f0000000140), 0x6) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcbf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x24044811) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e4000000"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="7c1fc8f6d097f3120c2fd777bb794a699a35ecba3bad321e68630b6f447aeae54bf0526370b09ae8423a00c2ec5e8f7a531742b76655d0f73100f5bb148a349ff0055752ebd31bf9ca2296d45e994e2ba6aad123f8e7ab2db75e436ed650806f42bbea93e171afd443af012120682762f663c8c89b28a684de8c5228e55a") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcbf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x24044811) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e4000000"], 0x5) (async) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x3}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa640}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24d1f8218503210b452ff0a517dc402de872d231a48bdfc925a34c52bc95e0e7f331a227190becd8de42ff209d5ded09ad3c48aae65d", @ANYRES16=r0, @ANYRES8=r4], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x3}) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa640}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x40044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24d1f8218503210b452ff0a517dc402de872d231a48bdfc925a34c52bc95e0e7f331a227190becd8de42ff209d5ded09ad3c48aae65d", @ANYRES16=r0, @ANYRES8=r4], 0xd8}}, 0x0) (async) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="0001000003b824dcdcd8f07765b532932bd3708acece527252e6ebe2ce851e7e271573ab4d6aef07df28fec4d551f9fe248b4ed8f9e7dde8b6811f3be5b8043d28d9d17c4a7ac2606dde8c8a4cd004c46401fcee4a2d9b337797dcb6bb7beb32f687698d11d929adaa320ae67081d036ab55f184a25e7ec24284697867a1116d854cc84362bc233d94b2959b4eb1", @ANYRES16=r3, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20004054}, 0x24000801) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1f0e0000", @ANYRES16=r0, @ANYRES8=r0], 0xd8}}, 0x0) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (fail_nth: 1) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xb) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000000)="7c1fc8f6d097f3120c2fd777bb794a699a35ecba3bad321e68630b6f447aeae54bf0526370b09ae8423a00c2ec5e8f7a531742b76655d0f73100f5bb148a349ff0055752ebd31bf9ca2296d45e994e2ba6aad123f8e7ab2db75e436ed650806f42bbea93e171afd443af012120682762f663c8c89b28a684de8c5228e55a") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe4, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7b5}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xdcbf}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x24044811) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00e4000000"], 0x5) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000006c846d08000000005a183dff5b4365af9c02d8324f3ef6759195d1fc3f0581b54f0f00"/53, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r2, 0x1f, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x808}, 0xc040) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffe3f}}, 0xc849) syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x224000) 12:29:16 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20044881) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x81, 0x9, 0x7fff, 0x800, 0x4, 0x101}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448fd, &(0x7f0000000180)="212a4389762ec2c8c762480c7b985c483627a73079ccf4262e96d6c2223071ecf12d6af21d7e8ecd07521df3afff383994964a2b529e9465e4e045275cdcf65f330c11497d61cba13668285de83ff09f06511b2a8c33e95f480133efb4f051466c9824ba09bad349a2187a3d3d71c66711a4fe975ad8759a7c41863273b87c7a9312281acede2743348bf74fb3f930fec45227501a9d3c63161f69d15d2d6e327b5e0029") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7, 0x400ffff], 0x100}, 0x10) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000001"], 0x5) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000006c846d08000000005a183dff5b4365af9c02d8324f3ef6759195d1fc3f0581b54f0f00"/53, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r2, 0x1f, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x808}, 0xc040) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000006c846d08000000005a183dff5b4365af9c02d8324f3ef6759195d1fc3f0581b54f0f00"/53, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r2, 0x1f, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) (async) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x808}, 0xc040) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) (async) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0xfffefeff, 0xfffffffffffffcc9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffe3f}}, 0xc849) syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x224000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffe3f}}, 0xc849) (async) syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x224000) (async) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000006c846d08000000005a183dff5b4365af9c02d8324f3ef6759195d1fc3f0581b54f0f00"/53, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r2, 0x1f, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x808}, 0xc040) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000006c846d08000000005a183dff5b4365af9c02d8324f3ef6759195d1fc3f0581b54f0f00"/53, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={r2, 0x1f, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) (async) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x808}, 0xc040) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2) (async) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20044881) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20044881) (async) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x81, 0x9, 0x7fff, 0x800, 0x4, 0x101}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_bt_hci(r2, 0x800448fd, &(0x7f0000000180)="212a4389762ec2c8c762480c7b985c483627a73079ccf4262e96d6c2223071ecf12d6af21d7e8ecd07521df3afff383994964a2b529e9465e4e045275cdcf65f330c11497d61cba13668285de83ff09f06511b2a8c33e95f480133efb4f051466c9824ba09bad349a2187a3d3d71c66711a4fe975ad8759a7c41863273b87c7a9312281acede2743348bf74fb3f930fec45227501a9d3c63161f69d15d2d6e327b5e0029") (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7, 0x400ffff], 0x100}, 0x10) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000001"], 0x5) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0xfffefeff, 0xfffffffffffffcc9) (rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffe3f}}, 0xc849) syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x224000) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x804, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x500}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20010}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x81, 0x9, 0x7fff, 0x800, 0x4, 0x101}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448fd, &(0x7f0000000180)="212a4389762ec2c8c762480c7b985c483627a73079ccf4262e96d6c2223071ecf12d6af21d7e8ecd07521df3afff383994964a2b529e9465e4e045275cdcf65f330c11497d61cba13668285de83ff09f06511b2a8c33e95f480133efb4f051466c9824ba09bad349a2187a3d3d71c66711a4fe975ad8759a7c41863273b87c7a9312281acede2743348bf74fb3f930fec45227501a9d3c63161f69d15d2d6e327b5e0029") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7, 0x400ffff], 0x100}, 0x10) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000001"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x81, 0x9, 0x7fff, 0x800, 0x4, 0x101}) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x800448fd, &(0x7f0000000180)="212a4389762ec2c8c762480c7b985c483627a73079ccf4262e96d6c2223071ecf12d6af21d7e8ecd07521df3afff383994964a2b529e9465e4e045275cdcf65f330c11497d61cba13668285de83ff09f06511b2a8c33e95f480133efb4f051466c9824ba09bad349a2187a3d3d71c66711a4fe975ad8759a7c41863273b87c7a9312281acede2743348bf74fb3f930fec45227501a9d3c63161f69d15d2d6e327b5e0029") (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7, 0x400ffff], 0x100}, 0x10) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000001"], 0x5) (async) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0xfffefeff, 0xfffffffffffffcc9) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000edc836166d745458b04e20595d2e86229dbce62dd4be44d5ac01797b29c9c598f1e04c8cb7bd082283ba77c161cb623d15b71efc4ac93b5b2f8e1f6d41aefcbde7b273d79ab22bafe9cfcac6610b309ff73a6f7ab04e110de54182c91d", @ANYRES16=r2, @ANYBLOB="00002abd7000fbdbdf250700000030000380050008001f0000000500080020000000140006002001000000000000000000000000000106000400e000000008000500ff0300000800060000080000"], 0x54}}, 0x94) 12:29:16 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRESOCT=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x20044881) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x804, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x500}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20010}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000edc836166d745458b04e20595d2e86229dbce62dd4be44d5ac01797b29c9c598f1e04c8cb7bd082283ba77c161cb623d15b71efc4ac93b5b2f8e1f6d41aefcbde7b273d79ab22bafe9cfcac6610b309ff73a6f7ab04e110de54182c91d", @ANYRES16=r2, @ANYBLOB="00002abd7000fbdbdf250700000030000380050008001f0000000500080020000000140006002001000000000000000000000000000106000400e000000008000500ff0300000800060000080000"], 0x54}}, 0x94) 12:29:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="b6daff7c1ca33e4f3043b94728629e975e863fb9b18f5b8cefefd19c8a29d01a9b21025cd5dfd1531ce23c103b3b91"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x56d001, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc8, 0x97}}}, 0x7) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000080)="ca2c1b97b2fb", 0x6) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0xdc, &(0x7f0000000180)="8bedb577bdffb0293305110a43fd3b61565d3204e0b3f185c1682f27ad69940aac1e017f397bcb94dfaac9f270cfa0d457823821a0b2bfca2bd75a97cff951c4a43acd0a3e3b34a4f5bdca8245bc38ffcec260be37604b28446ba938acc64dc87b32e5734d7741d664ae327178182d981bb0a5a8aa19d0ac87952f83e9069593fa6fd79aaa5e3b9987cc589a751811f7004cb98ed3e7a421c265bdaf61d2aa47f6b0b80c83a30c0bfcaa299bb46c9292e9d8cebf7d1ec91a076d83a04b69f39b52cc9196d4ecc75c68a186d29160e3ff79f9f87ce688759c36182609"}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) 12:29:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:29:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="b6daff7c1ca33e4f3043b94728629e975e863fb9b18f5b8cefefd19c8a29d01a9b21025cd5dfd1531ce23c103b3b91"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="b6daff7c1ca33e4f3043b94728629e975e863fb9b18f5b8cefefd19c8a29d01a9b21025cd5dfd1531ce23c103b3b91"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) (async) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000edc836166d745458b04e20595d2e86229dbce62dd4be44d5ac01797b29c9c598f1e04c8cb7bd082283ba77c161cb623d15b71efc4ac93b5b2f8e1f6d41aefcbde7b273d79ab22bafe9cfcac6610b309ff73a6f7ab04e110de54182c91d", @ANYRES16=r2, @ANYBLOB="00002abd7000fbdbdf250700000030000380050008001f0000000500080020000000140006002001000000000000000000000000000106000400e000000008000500ff0300000800060000080000"], 0x54}}, 0x94) 12:29:16 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20c0, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x804, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async, rerun: 64) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x500}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20010}, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0xdc, &(0x7f0000000180)="8bedb577bdffb0293305110a43fd3b61565d3204e0b3f185c1682f27ad69940aac1e017f397bcb94dfaac9f270cfa0d457823821a0b2bfca2bd75a97cff951c4a43acd0a3e3b34a4f5bdca8245bc38ffcec260be37604b28446ba938acc64dc87b32e5734d7741d664ae327178182d981bb0a5a8aa19d0ac87952f83e9069593fa6fd79aaa5e3b9987cc589a751811f7004cb98ed3e7a421c265bdaf61d2aa47f6b0b80c83a30c0bfcaa299bb46c9292e9d8cebf7d1ec91a076d83a04b69f39b52cc9196d4ecc75c68a186d29160e3ff79f9f87ce688759c36182609"}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0xdc, &(0x7f0000000180)="8bedb577bdffb0293305110a43fd3b61565d3204e0b3f185c1682f27ad69940aac1e017f397bcb94dfaac9f270cfa0d457823821a0b2bfca2bd75a97cff951c4a43acd0a3e3b34a4f5bdca8245bc38ffcec260be37604b28446ba938acc64dc87b32e5734d7741d664ae327178182d981bb0a5a8aa19d0ac87952f83e9069593fa6fd79aaa5e3b9987cc589a751811f7004cb98ed3e7a421c265bdaf61d2aa47f6b0b80c83a30c0bfcaa299bb46c9292e9d8cebf7d1ec91a076d83a04b69f39b52cc9196d4ecc75c68a186d29160e3ff79f9f87ce688759c36182609"}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) 12:29:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x56d001, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc8, 0x97}}}, 0x7) (async) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000080)="ca2c1b97b2fb", 0x6) 12:29:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="b6daff7c1ca33e4f3043b94728629e975e863fb9b18f5b8cefefd19c8a29d01a9b21025cd5dfd1531ce23c103b3b91"], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) clock_gettime(0x7, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) 12:29:16 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x56d001, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/64) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_tx_power={{0xc2d, 0x3}, {0xc8, 0x97}}}, 0x7) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000080)="ca2c1b97b2fb", 0x6) 12:29:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x0, 0xdc, &(0x7f0000000180)="8bedb577bdffb0293305110a43fd3b61565d3204e0b3f185c1682f27ad69940aac1e017f397bcb94dfaac9f270cfa0d457823821a0b2bfca2bd75a97cff951c4a43acd0a3e3b34a4f5bdca8245bc38ffcec260be37604b28446ba938acc64dc87b32e5734d7741d664ae327178182d981bb0a5a8aa19d0ac87952f83e9069593fa6fd79aaa5e3b9987cc589a751811f7004cb98ed3e7a421c265bdaf61d2aa47f6b0b80c83a30c0bfcaa299bb46c9292e9d8cebf7d1ec91a076d83a04b69f39b52cc9196d4ecc75c68a186d29160e3ff79f9f87ce688759c36182609"}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) 12:29:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0xf4}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) clock_gettime(0x7, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) 12:29:16 executing program 1: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x1, &(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000011c0)=0x40) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xc6d4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x5) 12:29:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x8, 0xfff, "4bee7d", 0x3, 0xff}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0xf4}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) clock_gettime(0x7, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) [ 1513.523275] Bluetooth: hci2 command 0x0401 tx timeout 12:29:16 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x7) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x8, 0xfff, "4bee7d", 0x3, 0xff}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x8, 0xfff, "4bee7d", 0x3, 0xff}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0xc859) 12:29:17 executing program 5: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/36) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x4ad7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRES64, @ANYBLOB="1c4ba8307961bc9bbf122fcc3160ecf482ce65ec9a50662b4294d7924abd80f29cfb49429bd570a92e82fc4d7a3a4c0b1118a7df704061bf4942f82bfeaa5742691816e7256f0a0223dc38b494efe856df96bf8ebda66db63bb314aef09261906aeec1e629552b0b13f79fae9679ffffffffffffffffb334"], 0xd8}}, 0x20044040) 12:29:17 executing program 1: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x1, &(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000011c0)=0x40) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xc6d4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x5) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x1, &(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000011c0)=0x40) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xc6d4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x5) (async) 12:29:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000040)={0x0, 0x0, 0xf4}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x2, 0x80000000, 0x8001, 0x5}) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0xc859) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0xc859) (async) 12:29:17 executing program 5: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/36) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x4ad7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRES64, @ANYBLOB="1c4ba8307961bc9bbf122fcc3160ecf482ce65ec9a50662b4294d7924abd80f29cfb49429bd570a92e82fc4d7a3a4c0b1118a7df704061bf4942f82bfeaa5742691816e7256f0a0223dc38b494efe856df96bf8ebda66db63bb314aef09261906aeec1e629552b0b13f79fae9679ffffffffffffffffb334"], 0xd8}}, 0x20044040) sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/36) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x4ad7, 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRES64, @ANYBLOB="1c4ba8307961bc9bbf122fcc3160ecf482ce65ec9a50662b4294d7924abd80f29cfb49429bd570a92e82fc4d7a3a4c0b1118a7df704061bf4942f82bfeaa5742691816e7256f0a0223dc38b494efe856df96bf8ebda66db63bb314aef09261906aeec1e629552b0b13f79fae9679ffffffffffffffffb334"], 0xd8}}, 0x20044040) (async) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x8, 0xfff, "4bee7d", 0x3, 0xff}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x8, 0xfff, "4bee7d", 0x3, 0xff}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:17 executing program 1: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001180)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x1, &(0x7f0000000180)=""/4096, 0x1000}, &(0x7f00000011c0)=0x40) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xc6d4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (rerun: 32) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x5) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x4404009d) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x2, 0x80000000, 0x8001, 0x5}) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x12, [0xf3, 0x5], 0x5}, 0x10) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0xc859) 12:29:17 executing program 5: sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/36) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0x4ad7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16, @ANYRES64, @ANYBLOB="1c4ba8307961bc9bbf122fcc3160ecf482ce65ec9a50662b4294d7924abd80f29cfb49429bd570a92e82fc4d7a3a4c0b1118a7df704061bf4942f82bfeaa5742691816e7256f0a0223dc38b494efe856df96bf8ebda66db63bb314aef09261906aeec1e629552b0b13f79fae9679ffffffffffffffffb334"], 0xd8}}, 0x20044040) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x2, 0x80000000, 0x8001, 0x5}) 12:29:17 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn(0x22, 0x3, 0x22) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x4404009d) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x12, [0xf3, 0x5], 0x5}, 0x10) 12:29:17 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1ff, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7fff625a2c7d5beef0b18dbcbc1e7ed49c739e3acdb4da991f67c259c68a7e4e9ac2c72dada70cc028fdf418c9478bf7cdd10536970747f138d152aac720ccf8323d4b0bcb3bfad9c28e972ecedf852ab337e172901eb83e784d5198f18eaecbdd175564053740f30bb79c9b625ba4c6"], 0x5) 12:29:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @remote, @default, @rose, @rose, @default, @remote, @rose]}, &(0x7f00000000c0)=0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x4404009d) 12:29:17 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn(0x22, 0x3, 0x22) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$isdn(0x22, 0x3, 0x22) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x12, [0xf3, 0x5], 0x5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x12, [0xf3, 0x5], 0x5}, 0x10) (async) 12:29:17 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1ff, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7fff625a2c7d5beef0b18dbcbc1e7ed49c739e3acdb4da991f67c259c68a7e4e9ac2c72dada70cc028fdf418c9478bf7cdd10536970747f138d152aac720ccf8323d4b0bcb3bfad9c28e972ecedf852ab337e172901eb83e784d5198f18eaecbdd175564053740f30bb79c9b625ba4c6"], 0x5) 12:29:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @remote, @default, @rose, @rose, @default, @remote, @rose]}, &(0x7f00000000c0)=0x48) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 12:29:17 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xd28df009994940fc}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000011) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02c046b5e24cdf82fc632252f3bcb02c6c000000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fcdbdf2504000000080006000200000038000180060001000a000000060004004e240000080009003600000006000100020000001400030000000000000000000000000000000001080005000001000008000600d40000000800060003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="da000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$isdn(0x22, 0x3, 0x22) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='net_cls.classid\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:17 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1ff, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff7fff625a2c7d5beef0b18dbcbc1e7ed49c739e3acdb4da991f67c259c68a7e4e9ac2c72dada70cc028fdf418c9478bf7cdd10536970747f138d152aac720ccf8323d4b0bcb3bfad9c28e972ecedf852ab337e172901eb83e784d5198f18eaecbdd175564053740f30bb79c9b625ba4c6"], 0x5) 12:29:17 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1cec00, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2a7, 0x3800]) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7d63500d4abad438db10e4b41cbe40001d08952e23bafb4395f169099a6f5db919cc2699b9454a3fddf9aa4aa0e1331822ed5805ad3a1a91da1a60037247a0443ae33048afca79f46c54c63cc5e2a32200e8f0f1d0795386dea10458364261a4e15e82aa0485b8957f9c654b3da656d40c765f50ac80894c26e72e1185e345654dec18480a75e72b4e6305d796c4248717d39db1be2f7b15fd9614e1271cef8e98deb49f05705b8ee3a30dd90584a3deea022916d85217f1be4bc2832f73563602b9b1ebafc0459b023a4c123600008cde317ca337882f8593"], 0x5) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000340)="65894b7779db1683e1d52b9594b4ac63824ffd1644537b8c3f347ef7ca43004d3d734c731cc97a3bee5db34c2c3b87592523cb9f31663215f1a4b8e5880017a8a5c8c95d4ca0dcd8a484dcf1fbeb6d87f0497a794aaf9a73af549a8e523ecff4947eea22eca9938d1c1cfb6cb9495be72dd975b69acb8704bf72db20df") setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xfff, [0x6, 0x6], 0x100}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x9bc6, 0x4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x101, [0x9, 0x8], 0x1}, 0x10) 12:29:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4f36, 0x20}}}, 0x8) 12:29:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @remote, @default, @rose, @rose, @default, @remote, @rose]}, &(0x7f00000000c0)=0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @null}, [@rose, @remote, @default, @rose, @rose, @default, @remote, @rose]}, &(0x7f00000000c0)=0x48) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:17 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xd28df009994940fc}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000011) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02c046b5e24cdf82fc632252f3bcb02c6c000000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fcdbdf2504000000080006000200000038000180060001000a000000060004004e240000080009003600000006000100020000001400030000000000000000000000000000000001080005000001000008000600d40000000800060003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="da000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xd28df009994940fc}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000011) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02c046b5e24cdf82fc632252f3bcb02c6c000000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fcdbdf2504000000080006000200000038000180060001000a000000060004004e240000080009003600000006000100020000001400030000000000000000000000000000000001080005000001000008000600d40000000800060003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="da000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:17 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1cec00, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2a7, 0x3800]) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7d63500d4abad438db10e4b41cbe40001d08952e23bafb4395f169099a6f5db919cc2699b9454a3fddf9aa4aa0e1331822ed5805ad3a1a91da1a60037247a0443ae33048afca79f46c54c63cc5e2a32200e8f0f1d0795386dea10458364261a4e15e82aa0485b8957f9c654b3da656d40c765f50ac80894c26e72e1185e345654dec18480a75e72b4e6305d796c4248717d39db1be2f7b15fd9614e1271cef8e98deb49f05705b8ee3a30dd90584a3deea022916d85217f1be4bc2832f73563602b9b1ebafc0459b023a4c123600008cde317ca337882f8593"], 0x5) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000340)="65894b7779db1683e1d52b9594b4ac63824ffd1644537b8c3f347ef7ca43004d3d734c731cc97a3bee5db34c2c3b87592523cb9f31663215f1a4b8e5880017a8a5c8c95d4ca0dcd8a484dcf1fbeb6d87f0497a794aaf9a73af549a8e523ecff4947eea22eca9938d1c1cfb6cb9495be72dd975b69acb8704bf72db20df") setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xfff, [0x6, 0x6], 0x100}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x9bc6, 0x4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x101, [0x9, 0x8], 0x1}, 0x10) 12:29:17 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400180, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) ioctl$sock_bt_hci(r1, 0x2e, &(0x7f0000000040)="2740391b4b7f963ca4e765d976ee211be60335739a308cc6a6f72ad4dbbd25527c5273d58e96f27ee314521e3894a8ca4f829682e91ab4e33d7c015fa438057bcd808a71d24b6071ea43b2310a6ec3da0c9447150dc086a4") 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4f36, 0x20}}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4f36, 0x20}}}, 0x8) (async) 12:29:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x3, 0x6, "d2d7f3", 0x2, 0x6}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x0, 0x40, 0x687, 0x7, 0x81, 0xff}, {0x5c, 0x6, 0x8, 0x8000, 0xfffffff9, 0x8}}}}, 0x25) 12:29:17 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="07ec467caaf460fc04e5b429fc9219a87ce42a0182800c8a1f8503686ac5f71c1134be7b7becc0ed04d533345f263684b86fdfbbffbe29d86c0b8998d72267fde2f3e92da9f96fa3739259ebd844666eea883b37f464c480421bf519e6946cd61cd186fdc89adc67436bea396d6af7877b912cb1598234cb1b31"], 0xd8}}, 0x0) 12:29:17 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400180, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) ioctl$sock_bt_hci(r1, 0x2e, &(0x7f0000000040)="2740391b4b7f963ca4e765d976ee211be60335739a308cc6a6f72ad4dbbd25527c5273d58e96f27ee314521e3894a8ca4f829682e91ab4e33d7c015fa438057bcd808a71d24b6071ea43b2310a6ec3da0c9447150dc086a4") ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400180, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) ioctl$sock_bt_hci(r1, 0x2e, &(0x7f0000000040)="2740391b4b7f963ca4e765d976ee211be60335739a308cc6a6f72ad4dbbd25527c5273d58e96f27ee314521e3894a8ca4f829682e91ab4e33d7c015fa438057bcd808a71d24b6071ea43b2310a6ec3da0c9447150dc086a4") (async) 12:29:17 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xd28df009994940fc}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x8000011) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="02c046b5e24cdf82fc632252f3bcb02c6c000000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fcdbdf2504000000080006000200000038000180060001000a000000060004004e240000080009003600000006000100020000001400030000000000000000000000000000000001080005000001000008000600d40000000800060003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="da000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x3, 0x6, "d2d7f3", 0x2, 0x6}) (async) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x0, 0x40, 0x687, 0x7, 0x81, 0xff}, {0x5c, 0x6, 0x8, 0x8000, 0xfffffff9, 0x8}}}}, 0x25) 12:29:17 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1cec00, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2a7, 0x3800]) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x1}, 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7d63500d4abad438db10e4b41cbe40001d08952e23bafb4395f169099a6f5db919cc2699b9454a3fddf9aa4aa0e1331822ed5805ad3a1a91da1a60037247a0443ae33048afca79f46c54c63cc5e2a32200e8f0f1d0795386dea10458364261a4e15e82aa0485b8957f9c654b3da656d40c765f50ac80894c26e72e1185e345654dec18480a75e72b4e6305d796c4248717d39db1be2f7b15fd9614e1271cef8e98deb49f05705b8ee3a30dd90584a3deea022916d85217f1be4bc2832f73563602b9b1ebafc0459b023a4c123600008cde317ca337882f8593"], 0x5) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000340)="65894b7779db1683e1d52b9594b4ac63824ffd1644537b8c3f347ef7ca43004d3d734c731cc97a3bee5db34c2c3b87592523cb9f31663215f1a4b8e5880017a8a5c8c95d4ca0dcd8a484dcf1fbeb6d87f0497a794aaf9a73af549a8e523ecff4947eea22eca9938d1c1cfb6cb9495be72dd975b69acb8704bf72db20df") setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0xfff, [0x6, 0x6], 0x100}, 0x10) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x9bc6, 0x4) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x101, [0x9, 0x8], 0x1}, 0x10) 12:29:17 executing program 4: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400180, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) ioctl$sock_bt_hci(r1, 0x2e, &(0x7f0000000040)="2740391b4b7f963ca4e765d976ee211be60335739a308cc6a6f72ad4dbbd25527c5273d58e96f27ee314521e3894a8ca4f829682e91ab4e33d7c015fa438057bcd808a71d24b6071ea43b2310a6ec3da0c9447150dc086a4") ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400180, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) ioctl$sock_bt_hci(r1, 0x2e, &(0x7f0000000040)="2740391b4b7f963ca4e765d976ee211be60335739a308cc6a6f72ad4dbbd25527c5273d58e96f27ee314521e3894a8ca4f829682e91ab4e33d7c015fa438057bcd808a71d24b6071ea43b2310a6ec3da0c9447150dc086a4") (async) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4f36, 0x20}}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x4f36, 0x20}}}, 0x8) (async) 12:29:17 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="07ec467caaf460fc04e5b429fc9219a87ce42a0182800c8a1f8503686ac5f71c1134be7b7becc0ed04d533345f263684b86fdfbbffbe29d86c0b8998d72267fde2f3e92da9f96fa3739259ebd844666eea883b37f464c480421bf519e6946cd61cd186fdc89adc67436bea396d6af7877b912cb1598234cb1b31"], 0xd8}}, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="07ec467caaf460fc04e5b429fc9219a87ce42a0182800c8a1f8503686ac5f71c1134be7b7becc0ed04d533345f263684b86fdfbbffbe29d86c0b8998d72267fde2f3e92da9f96fa3739259ebd844666eea883b37f464c480421bf519e6946cd61cd186fdc89adc67436bea396d6af7877b912cb1598234cb1b31"], 0xd8}}, 0x0) (async) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x5, "a46032", 0x0, 0x6c}) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="01752a01d070bf64d2cf01c0c54a6ac6d50d0000f98e1200f7ff00d443d2a973a7f3314b01afbecfea0da4b29c2011487dd2deef8ae327cac2e8cf2a603d226334d01ce12c8da42ed1329cc9587e2e0643e96689e1d713f067afab8eed17aaf9b595ca3f000000000000007ddc3530254bc491e1399255dc00e70f137fde355c672956cb9babffcbb1a6930a72ae82ae6034044ba91e682e0fd9caf097b5bccdefbc870da629dfed8ca9a1267a9585b7e1788090206b84b59a9488f692968b6bd33638fba5a7f189033c8cd8e9f907fc765c7f743a5c0c3e54b6b94d99e5708c5413b2efaf6c98b45d378ad143c31757bb38c231f9fb80df0504e5eb8f262b512c2324715ad378ea814d4d9ec1fb4daa183b50f92ceb6340f8bcbb3a184960d09681b9389b8123f720e174f2cedec8ad12508d23fb2900000000000035be9eadb5d10e57fc037f68aa102ccb5ebfdbaa249078633116f08b8cc27f8c1549643825a6ab4e4e00912f50d8a1dba5eeabf4325d938d3e99f2ec8267cf78e4a6b4791eb8b4e5ce81cd15ef3519de4affd3865b"], 0x5) 12:29:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x3, 0x6, "d2d7f3", 0x2, 0x6}) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x0, 0x40, 0x687, 0x7, 0x81, 0xff}, {0x5c, 0x6, 0x8, 0x8000, 0xfffffff9, 0x8}}}}, 0x25) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x3, 0x6, "d2d7f3", 0x2, 0x6}) (async) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x0, 0x40, 0x687, 0x7, 0x81, 0xff}, {0x5c, 0x6, 0x8, 0x8000, 0xfffffff9, 0x8}}}}, 0x25) (async) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c0100e2c67cf6100706745e0000d53a9f1550fca50bef5c98c8e96d21e7351581cf2012168e5624e3bca3ff5a0e5577e43de237d23293ef8a7b0468f48df1daac4a3f21661438c277500922be47d8193f64f2668bcd"], 0x5) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x40000018}, 0x0) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xb00, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}}, 0x4000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x5, "a46032", 0x0, 0x6c}) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x5) 12:29:17 executing program 5: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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", @ANYBLOB="07ec467caaf460fc04e5b429fc9219a87ce42a0182800c8a1f8503686ac5f71c1134be7b7becc0ed04d533345f263684b86fdfbbffbe29d86c0b8998d72267fde2f3e92da9f96fa3739259ebd844666eea883b37f464c480421bf519e6946cd61cd186fdc89adc67436bea396d6af7877b912cb1598234cb1b31"], 0xd8}}, 0x0) 12:29:17 executing program 0: r0 = getpgid(0x0) getpgid(r0) sched_rr_get_interval(r0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c0100e2c67cf6100706745e0000d53a9f1550fca50bef5c98c8e96d21e7351581cf2012168e5624e3bca3ff5a0e5577e43de237d23293ef8a7b0468f48df1daac4a3f21661438c277500922be47d8193f64f2668bcd"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c0100e2c67cf6100706745e0000d53a9f1550fca50bef5c98c8e96d21e7351581cf2012168e5624e3bca3ff5a0e5577e43de237d23293ef8a7b0468f48df1daac4a3f21661438c277500922be47d8193f64f2668bcd"], 0x5) (async) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xb00, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}}, 0x4000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x40000018}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x40000018}, 0x0) (async) 12:29:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c0100e2c67cf6100706745e0000d53a9f1550fca50bef5c98c8e96d21e7351581cf2012168e5624e3bca3ff5a0e5577e43de237d23293ef8a7b0468f48df1daac4a3f21661438c277500922be47d8193f64f2668bcd"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01750c0100e2c67cf6100706745e0000d53a9f1550fca50bef5c98c8e96d21e7351581cf2012168e5624e3bca3ff5a0e5577e43de237d23293ef8a7b0468f48df1daac4a3f21661438c277500922be47d8193f64f2668bcd"], 0x5) (async) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) (async, rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x5, "a46032", 0x0, 0x6c}) (async) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x5) 12:29:17 executing program 0: r0 = getpgid(0x0) getpgid(r0) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (async, rerun: 64) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xb00, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x34}}, 0x4000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x40000018}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x40000018}, 0x0) (async) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0xdbc1a000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="1ceaf1e7cc01c0c7a76b9f142e1c521730b675c148fa2d987d1dc9d5d6781b8bdc18feb3318668a708d1af7b51e2a580faff2f493409bcd919a3af332ce0d5819ac8c710ae70f622dc1cce9cc66c1d91f12b4b6f7d9603440cf1700daebad31f83292d7d5bd7bba610ae0c833d94045231677cb75c56acbbbb989149548694568d6de3f1cb4d3c805df1a370a2e6ab45aade2d3f96a30da60fc3eae0fad042d2284516a54503adfa9cbb33f695505dc671") 12:29:17 executing program 0: r0 = getpgid(0x0) getpgid(r0) sched_rr_get_interval(r0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getpgid(0x0) (async) getpgid(r0) (async) sched_rr_get_interval(r0, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x2, 0xec, "6b3fc9", 0xa, 0x58}) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="0222147ac5f88aa56a3ad41b16960a98aded247670ae19a4d5aa557c62837cd65f0569c011801e834668c5a2b7314753d9ce194f9a33f5921078b75d5b890b45de88889596c24f7fe209d02a5f5a") 12:29:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x3}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:17 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0xdbc1a000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="1ceaf1e7cc01c0c7a76b9f142e1c521730b675c148fa2d987d1dc9d5d6781b8bdc18feb3318668a708d1af7b51e2a580faff2f493409bcd919a3af332ce0d5819ac8c710ae70f622dc1cce9cc66c1d91f12b4b6f7d9603440cf1700daebad31f83292d7d5bd7bba610ae0c833d94045231677cb75c56acbbbb989149548694568d6de3f1cb4d3c805df1a370a2e6ab45aade2d3f96a30da60fc3eae0fad042d2284516a54503adfa9cbb33f695505dc671") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0xdbc1a000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="1ceaf1e7cc01c0c7a76b9f142e1c521730b675c148fa2d987d1dc9d5d6781b8bdc18feb3318668a708d1af7b51e2a580faff2f493409bcd919a3af332ce0d5819ac8c710ae70f622dc1cce9cc66c1d91f12b4b6f7d9603440cf1700daebad31f83292d7d5bd7bba610ae0c833d94045231677cb75c56acbbbb989149548694568d6de3f1cb4d3c805df1a370a2e6ab45aade2d3f96a30da60fc3eae0fad042d2284516a54503adfa9cbb33f695505dc671") (async) 12:29:17 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d805070dc0216b8a1edfb24ab5a853c316bc84018041c6b468f32bd3b1f5ef5ecddd0110dd11e92470e9c1a00905363d3410702edce007ad4e11b6907a1e12800aad81d05f6a5d587912ef0eef47086322f7cc417804d782e12e4d435668dc7d12872eaa8a05f3b2a9fa30ed2b72dbdd9691d218273db93717720b507e82d6dfde063c03e3649370e7ef747a36f8b679bf63babff62634a7ff129dfd3a5688c9910a2b3196d8ed37d7", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd4, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcf}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ee01b09}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x60801}, 0x40014) [ 1514.503793] nla_parse: 26 callbacks suppressed [ 1514.503798] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r1 = getpgid(0x0) getpgid(r1) r2 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="1c235696e39c7073da30a35f20f760b71c24ebd1ce5e2be19921f0e95ff761164dbbd3878fe4c9c9fea29b857571f90287a459bb3597b12ca57febaf32ac3eb48dae3aaae9322270bea334582b23b3c1c5c0ad19713170bafa3ceab31c4681c3b66f0e869ce7d3646c39bbb3ddc472b2bf157bc9637a123ef7bd00f90f07bbb0814a297178165997", 0x88}, {&(0x7f0000000400)="b13b4ba1bf53c2a8249cbf499ca8a2385cdc15ada015ec25b15a702756e6882c922617d9829de8258e4d402de3ae40b23bae2dab189bcc230093b92d4ab51a05c0d2f7b88affde587121eb9240626ec3f10e7b067f1f3ccc6452d216", 0x5c}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xffffffffffffffff}}}], 0x20, 0x2004c084}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x3ee83b4f, 0x0, 0x3, 0x102, 0x7, 0x3}) openat$cgroup_ro(r5, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x83, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000800) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESOCT=r2], 0xd8}}, 0x0) 12:29:18 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d805070dc0216b8a1edfb24ab5a853c316bc84018041c6b468f32bd3b1f5ef5ecddd0110dd11e92470e9c1a00905363d3410702edce007ad4e11b6907a1e12800aad81d05f6a5d587912ef0eef47086322f7cc417804d782e12e4d435668dc7d12872eaa8a05f3b2a9fa30ed2b72dbdd9691d218273db93717720b507e82d6dfde063c03e3649370e7ef747a36f8b679bf63babff62634a7ff129dfd3a5688c9910a2b3196d8ed37d7", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd4, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcf}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ee01b09}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x60801}, 0x40014) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d805070dc0216b8a1edfb24ab5a853c316bc84018041c6b468f32bd3b1f5ef5ecddd0110dd11e92470e9c1a00905363d3410702edce007ad4e11b6907a1e12800aad81d05f6a5d587912ef0eef47086322f7cc417804d782e12e4d435668dc7d12872eaa8a05f3b2a9fa30ed2b72dbdd9691d218273db93717720b507e82d6dfde063c03e3649370e7ef747a36f8b679bf63babff62634a7ff129dfd3a5688c9910a2b3196d8ed37d7", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd4, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcf}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ee01b09}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x60801}, 0x40014) (async) 12:29:18 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0xdbc1a000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="1ceaf1e7cc01c0c7a76b9f142e1c521730b675c148fa2d987d1dc9d5d6781b8bdc18feb3318668a708d1af7b51e2a580faff2f493409bcd919a3af332ce0d5819ac8c710ae70f622dc1cce9cc66c1d91f12b4b6f7d9603440cf1700daebad31f83292d7d5bd7bba610ae0c833d94045231677cb75c56acbbbb989149548694568d6de3f1cb4d3c805df1a370a2e6ab45aade2d3f96a30da60fc3eae0fad042d2284516a54503adfa9cbb33f695505dc671") syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x10, r0, 0xdbc1a000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_type(r2, &(0x7f0000000000), 0x2, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x6, 0x4) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="1ceaf1e7cc01c0c7a76b9f142e1c521730b675c148fa2d987d1dc9d5d6781b8bdc18feb3318668a708d1af7b51e2a580faff2f493409bcd919a3af332ce0d5819ac8c710ae70f622dc1cce9cc66c1d91f12b4b6f7d9603440cf1700daebad31f83292d7d5bd7bba610ae0c833d94045231677cb75c56acbbbb989149548694568d6de3f1cb4d3c805df1a370a2e6ab45aade2d3f96a30da60fc3eae0fad042d2284516a54503adfa9cbb33f695505dc671") (async) 12:29:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xfffd}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x6, 0x8b81], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ab4695b29a8177229211a00d86b1c1dc80acfd30d64cbd9c3984f07bd4ad30d7bd978dc4116e16e5f9520fbca6f219b589ad985ce5a6026fbcc08f9a7bd61768d90a252916691901857669c35f08ee976f8cdd0b326d02a7927d0ee8ac3a4a155d69c5353dbbab228ffb0b80c025ada80b80195df914ac31ffc51603eed5e42cadba00"/144], 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2180, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xfb410efc49c3225, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000001c0)={0x7, 0x20, 0x3ff, {0xfffffffd, 0x2}, 0x8, 0xffffffe0}) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESOCT=r2], 0xd8}}, 0x0) 12:29:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) (async) r1 = getpgid(0x0) getpgid(r1) (async) r2 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="1c235696e39c7073da30a35f20f760b71c24ebd1ce5e2be19921f0e95ff761164dbbd3878fe4c9c9fea29b857571f90287a459bb3597b12ca57febaf32ac3eb48dae3aaae9322270bea334582b23b3c1c5c0ad19713170bafa3ceab31c4681c3b66f0e869ce7d3646c39bbb3ddc472b2bf157bc9637a123ef7bd00f90f07bbb0814a297178165997", 0x88}, {&(0x7f0000000400)="b13b4ba1bf53c2a8249cbf499ca8a2385cdc15ada015ec25b15a702756e6882c922617d9829de8258e4d402de3ae40b23bae2dab189bcc230093b92d4ab51a05c0d2f7b88affde587121eb9240626ec3f10e7b067f1f3ccc6452d216", 0x5c}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xffffffffffffffff}}}], 0x20, 0x2004c084}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x3ee83b4f, 0x0, 0x3, 0x102, 0x7, 0x3}) openat$cgroup_ro(r5, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x83, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000800) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x2, 0xec, "6b3fc9", 0xa, 0x58}) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="0222147ac5f88aa56a3ad41b16960a98aded247670ae19a4d5aa557c62837cd65f0569c011801e834668c5a2b7314753d9ce194f9a33f5921078b75d5b890b45de88889596c24f7fe209d02a5f5a") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x2, 0xec, "6b3fc9", 0xa, 0x58}) (async) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="0222147ac5f88aa56a3ad41b16960a98aded247670ae19a4d5aa557c62837cd65f0569c011801e834668c5a2b7314753d9ce194f9a33f5921078b75d5b890b45de88889596c24f7fe209d02a5f5a") (async) 12:29:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xfffd}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x6, 0x8b81], 0x1}, 0x10) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ab4695b29a8177229211a00d86b1c1dc80acfd30d64cbd9c3984f07bd4ad30d7bd978dc4116e16e5f9520fbca6f219b589ad985ce5a6026fbcc08f9a7bd61768d90a252916691901857669c35f08ee976f8cdd0b326d02a7927d0ee8ac3a4a155d69c5353dbbab228ffb0b80c025ada80b80195df914ac31ffc51603eed5e42cadba00"/144], 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2180, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xfb410efc49c3225, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000001c0)={0x7, 0x20, 0x3ff, {0xfffffffd, 0x2}, 0x8, 0xffffffe0}) 12:29:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) (async) r1 = getpgid(0x0) getpgid(r1) (async) r2 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="1c235696e39c7073da30a35f20f760b71c24ebd1ce5e2be19921f0e95ff761164dbbd3878fe4c9c9fea29b857571f90287a459bb3597b12ca57febaf32ac3eb48dae3aaae9322270bea334582b23b3c1c5c0ad19713170bafa3ceab31c4681c3b66f0e869ce7d3646c39bbb3ddc472b2bf157bc9637a123ef7bd00f90f07bbb0814a297178165997", 0x88}, {&(0x7f0000000400)="b13b4ba1bf53c2a8249cbf499ca8a2385cdc15ada015ec25b15a702756e6882c922617d9829de8258e4d402de3ae40b23bae2dab189bcc230093b92d4ab51a05c0d2f7b88affde587121eb9240626ec3f10e7b067f1f3ccc6452d216", 0x5c}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xffffffffffffffff}}}], 0x20, 0x2004c084}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x3ee83b4f, 0x0, 0x3, 0x102, 0x7, 0x3}) (async) openat$cgroup_ro(r5, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x83, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000800) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:18 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x670301) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x3f, 0x3}, 'port0\x00', 0x31, 0x40000, 0x4, 0x4, 0x7f, 0x4, 0xb8, 0x0, 0x5, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="09750c0108"], 0x5) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESOCT=r2], 0xd8}}, 0x0) 12:29:18 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c, r0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d805070dc0216b8a1edfb24ab5a853c316bc84018041c6b468f32bd3b1f5ef5ecddd0110dd11e92470e9c1a00905363d3410702edce007ad4e11b6907a1e12800aad81d05f6a5d587912ef0eef47086322f7cc417804d782e12e4d435668dc7d12872eaa8a05f3b2a9fa30ed2b72dbdd9691d218273db93717720b507e82d6dfde063c03e3649370e7ef747a36f8b679bf63babff62634a7ff129dfd3a5688c9910a2b3196d8ed37d7", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd4, r0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcf}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ee01b09}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x60801}, 0x40014) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504bd5d4f0e90170d5a5ed3d2cca7a6769bf4c9f699cc193423312904d8c325115cb9c058f77ea0014584f584857a3c2dffd3333d37e075d8b05cb997615429fa9214297719d3606e6a5d7b6614b9655acad2d0c929e347646ddff0903b7d26527d84714677cad7e3f68a7c6ef4bff6e897d8050e11bed80260ffb9ca8f56d263020f65f70520e3a2d99b"], 0xd8}}, 0x0) 12:29:18 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x9010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) 12:29:18 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x670301) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x3f, 0x3}, 'port0\x00', 0x31, 0x40000, 0x4, 0x4, 0x7f, 0x4, 0xb8, 0x0, 0x5, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="09750c0108"], 0x5) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x670301) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x3f, 0x3}, 'port0\x00', 0x31, 0x40000, 0x4, 0x4, 0x7f, 0x4, 0xb8, 0x0, 0x5, 0x6}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="09750c0108"], 0x5) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) (async) 12:29:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="ac284636d02642880387bb21f58d835b3d82096cf10319607625c76af93dbfe97bb46ff504f77ef3a57f0c71eaa2769a69389b87015971d6a8f97d241bfb5193f1e13a7f0e74ec997ce95850e7e57c4faa7c24562f321db5f01381e357c8927f82d7609ee8dfb1ea314122a285de24373dc374", 0x73}], 0x1, &(0x7f0000000180)=[@rights={{0x0, 0x1, 0x1, [r1]}}], 0x20, 0x80}, 0x480b1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x1e525000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504bd5d4f0e90170d5a5ed3d2cca7a6769bf4c9f699cc193423312904d8c325115cb9c058f77ea0014584f584857a3c2dffd3333d37e075d8b05cb997615429fa9214297719d3606e6a5d7b6614b9655acad2d0c929e347646ddff0903b7d26527d84714677cad7e3f68a7c6ef4bff6e897d8050e11bed80260ffb9ca8f56d263020f65f70520e3a2d99b"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504bd5d4f0e90170d5a5ed3d2cca7a6769bf4c9f699cc193423312904d8c325115cb9c058f77ea0014584f584857a3c2dffd3333d37e075d8b05cb997615429fa9214297719d3606e6a5d7b6614b9655acad2d0c929e347646ddff0903b7d26527d84714677cad7e3f68a7c6ef4bff6e897d8050e11bed80260ffb9ca8f56d263020f65f70520e3a2d99b"], 0xd8}}, 0x0) (async) 12:29:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x2, 0xec, "6b3fc9", 0xa, 0x58}) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="0222147ac5f88aa56a3ad41b16960a98aded247670ae19a4d5aa557c62837cd65f0569c011801e834668c5a2b7314753d9ce194f9a33f5921078b75d5b890b45de88889596c24f7fe209d02a5f5a") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x2, 0xec, "6b3fc9", 0xa, 0x58}) (async) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="0222147ac5f88aa56a3ad41b16960a98aded247670ae19a4d5aa557c62837cd65f0569c011801e834668c5a2b7314753d9ce194f9a33f5921078b75d5b890b45de88889596c24f7fe209d02a5f5a") (async) 12:29:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="ac284636d02642880387bb21f58d835b3d82096cf10319607625c76af93dbfe97bb46ff504f77ef3a57f0c71eaa2769a69389b87015971d6a8f97d241bfb5193f1e13a7f0e74ec997ce95850e7e57c4faa7c24562f321db5f01381e357c8927f82d7609ee8dfb1ea314122a285de24373dc374", 0x73}], 0x1, &(0x7f0000000180)=[@rights={{0x0, 0x1, 0x1, [r1]}}], 0x20, 0x80}, 0x480b1) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x1e525000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 12:29:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xfffd}, 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x6, 0x8b81], 0x1}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="05ab4695b29a8177229211a00d86b1c1dc80acfd30d64cbd9c3984f07bd4ad30d7bd978dc4116e16e5f9520fbca6f219b589ad985ce5a6026fbcc08f9a7bd61768d90a252916691901857669c35f08ee976f8cdd0b326d02a7927d0ee8ac3a4a155d69c5353dbbab228ffb0b80c025ada80b80195df914ac31ffc51603eed5e42cadba00"/144], 0x5) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2180, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0xfb410efc49c3225, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f00000001c0)={0x7, 0x20, 0x3ff, {0xfffffffd, 0x2}, 0x8, 0xffffffe0}) 12:29:18 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x670301) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x3f, 0x3}, 'port0\x00', 0x31, 0x40000, 0x4, 0x4, 0x7f, 0x4, 0xb8, 0x0, 0x5, 0x6}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="09750c0108"], 0x5) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) [ 1515.488515] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:18 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x9010) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) 12:29:18 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504bd5d4f0e90170d5a5ed3d2cca7a6769bf4c9f699cc193423312904d8c325115cb9c058f77ea0014584f584857a3c2dffd3333d37e075d8b05cb997615429fa9214297719d3606e6a5d7b6614b9655acad2d0c929e347646ddff0903b7d26527d84714677cad7e3f68a7c6ef4bff6e897d8050e11bed80260ffb9ca8f56d263020f65f70520e3a2d99b"], 0xd8}}, 0x0) 12:29:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="ac284636d02642880387bb21f58d835b3d82096cf10319607625c76af93dbfe97bb46ff504f77ef3a57f0c71eaa2769a69389b87015971d6a8f97d241bfb5193f1e13a7f0e74ec997ce95850e7e57c4faa7c24562f321db5f01381e357c8927f82d7609ee8dfb1ea314122a285de24373dc374", 0x73}], 0x1, &(0x7f0000000180)=[@rights={{0x0, 0x1, 0x1, [r1]}}], 0x20, 0x80}, 0x480b1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x1e525000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="ac284636d02642880387bb21f58d835b3d82096cf10319607625c76af93dbfe97bb46ff504f77ef3a57f0c71eaa2769a69389b87015971d6a8f97d241bfb5193f1e13a7f0e74ec997ce95850e7e57c4faa7c24562f321db5f01381e357c8927f82d7609ee8dfb1ea314122a285de24373dc374", 0x73}], 0x1, &(0x7f0000000180)=[@rights={{0x0, 0x1, 0x1, [r1]}}], 0x20, 0x80}, 0x480b1) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x1e525000) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x1ff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x121101, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c089) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x501500, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x14c, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x201}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0xa, 0x1, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/198, 0xc6, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/110, 0x6e, 0x2, 0x16}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @enter_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x3}], 0xb0, 0x0, &(0x7f00000007c0)="3ff80c41191585bfec2a2bcfe10aeaf82a18358dc74f3e69a29a16e37d18a8386711706d82b428861a3e5e6d61436d8949c69703afd9b8ade313d9a690d6037139ff0e161904c8d956b9c72235f3de2e6d59f9154b04ff9ee9693a590d7e1c6c8234461e608e5aa7745fda67e70e3e4eb2dd8503b3f2e72a404d1a471e939ce85579654927aecad07fa3e736036c4c9f1a08cebe4a547f4ca116f842c44af3f2e6ee8d7c3395d60a6d168ff7b9ca669c"}) [ 1515.589505] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1515.607070] Bluetooth: hci2 command 0x0401 tx timeout 12:29:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000400)=0x2) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x88, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56af}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40010) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb0}}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}}, 0x11) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002de0265c2a01a4c331"], 0xd8}}, 0x0) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0x8) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x9010) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x9010) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) (async) 12:29:19 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x1ff, 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x121101, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c089) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x501500, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x14c, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x201}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0xa, 0x1, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/198, 0xc6, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/110, 0x6e, 0x2, 0x16}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @enter_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x3}], 0xb0, 0x0, &(0x7f00000007c0)="3ff80c41191585bfec2a2bcfe10aeaf82a18358dc74f3e69a29a16e37d18a8386711706d82b428861a3e5e6d61436d8949c69703afd9b8ade313d9a690d6037139ff0e161904c8d956b9c72235f3de2e6d59f9154b04ff9ee9693a590d7e1c6c8234461e608e5aa7745fda67e70e3e4eb2dd8503b3f2e72a404d1a471e939ce85579654927aecad07fa3e736036c4c9f1a08cebe4a547f4ca116f842c44af3f2e6ee8d7c3395d60a6d168ff7b9ca669c"}) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000140)="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") r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) openat$cgroup_ro(r1, &(0x7f0000000400)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="d7", 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x8804) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0x8) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000400)=0x2) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x88, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56af}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40010) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb0}}, 0xc000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}}, 0x11) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002de0265c2a01a4c331"], 0xd8}}, 0x0) 12:29:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000140)="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") (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async) openat$cgroup_ro(r1, &(0x7f0000000400)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="d7", 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x8804) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) [ 1515.715612] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:19 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1540, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x1ff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x121101, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c089) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x501500, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x14c, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x201}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0xa, 0x1, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/198, 0xc6, 0x2, 0x1a}, @flat=@handle={0x73682a85, 0x1, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/110, 0x6e, 0x2, 0x16}, @flat=@handle={0x73682a85, 0x100, 0x1}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x400}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}}, @enter_looper, @release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x3}], 0xb0, 0x0, &(0x7f00000007c0)="3ff80c41191585bfec2a2bcfe10aeaf82a18358dc74f3e69a29a16e37d18a8386711706d82b428861a3e5e6d61436d8949c69703afd9b8ade313d9a690d6037139ff0e161904c8d956b9c72235f3de2e6d59f9154b04ff9ee9693a590d7e1c6c8234461e608e5aa7745fda67e70e3e4eb2dd8503b3f2e72a404d1a471e939ce85579654927aecad07fa3e736036c4c9f1a08cebe4a547f4ca116f842c44af3f2e6ee8d7c3395d60a6d168ff7b9ca669c"}) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0x8) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0xdc) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) clock_getres(0x7, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x3, 0x67c6, 0x7b000, 0x337, 0xfff, 0x1}) 12:29:19 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000400)=0x2) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x88, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56af}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40010) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb0}}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}}, 0x11) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002de0265c2a01a4c331"], 0xd8}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x4, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7f, 0x6, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='memory.swap.events\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000400)=0x2) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) (async) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x88, r5, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56af}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040d0}, 0x40010) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0xb0}}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x24}}, 0x11) (async) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="01002de0265c2a01a4c331"], 0xd8}}, 0x0) (async) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040001}, 0x200088d0) 12:29:19 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000140)="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") (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) (async) openat$cgroup_ro(r1, &(0x7f0000000400)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x4}, 0x6) (async, rerun: 32) sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000002c0)="d7", 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x8804) (rerun: 32) 12:29:19 executing program 2: ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x1e0, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) [ 1515.840440] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0xdc) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) clock_getres(0x7, &(0x7f00000000c0)) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x3, 0x67c6, 0x7b000, 0x337, 0xfff, 0x1}) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x34}, {0xc9, 0xa}}}, 0x7) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040001}, 0x200088d0) 12:29:19 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x34}, {0xc9, 0xa}}}, 0x7) (rerun: 32) 12:29:19 executing program 2: ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x1e0, 0x4) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) 12:29:19 executing program 0: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040)=0x7, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040001}, 0x200088d0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x200000c4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xac, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040001}, 0x200088d0) (async) 12:29:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0xdc) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) clock_getres(0x7, &(0x7f00000000c0)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x3, 0x67c6, 0x7b000, 0x337, 0xfff, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0xdc) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) clock_getres(0x7, &(0x7f00000000c0)) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x80) (async) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000080)={0x3, 0x67c6, 0x7b000, 0x337, 0xfff, 0x1}) (async) [ 1515.961786] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:19 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x34}, {0xc9, 0xa}}}, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x34}, {0xc9, 0xa}}}, 0x7) (async) 12:29:19 executing program 0: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040)=0x7, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) (async) 12:29:19 executing program 2: ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async, rerun: 32) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x1e0, 0x4) (async, rerun: 64) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/94, 0x5e, 0x2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000080)=0x1, 0x4) [ 1516.067166] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0xffffffffffffff80) 12:29:19 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x90}, 0x0) 12:29:19 executing program 0: setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040)=0x7, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040)=0x7, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) (async) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="5db21ec56b352967d8e121d853d7475676596576d02517e5d96345edad6c33e23e3b529f07b359ca04a8a2f9b38fe1ba05b5921822d06e55") bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/94, 0x5e, 0x2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) (async) recvfrom$unix(r2, &(0x7f00000000c0)=""/94, 0x5e, 0x2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000080)=0x1, 0x4) (async) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0xffffffffffffff80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0xffffffffffffff80) (async) 12:29:19 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = getpgid(0x0) getpgid(r4) r5 = geteuid() getgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) r7 = gettid() r8 = getegid() r9 = getpgid(0x0) getpgid(r9) r10 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)="439d6ed8c8e3404191a42f5c63f5422e23a468b5d389e83e63a0e3d052d68881a363aa63a640133520a41473e2951eb672c846b99d6b39028932d648fedddfa84e09ebd2203911e161937bfc3f87bedb6013c3a95184280b9893", 0x5a}, {&(0x7f0000000380)="f098d8dcdb0e20ddfa0293cd256d422c4815410c43761a2114953c6f7efcc0bc707139953f0000f36e7fa0108526d158f3763f41c26f04f23fa46cb6fe27497b749283e31dc420e47fdbeed3bf38e00b902030ab598c60c1692ee05e9421cb2af2bed6c87f6bb86809785162b0ff17a524b348b86961d91dbca30905194802dfd7ee5c7a5c16b96fc093ad3e731e57950aefdb6fcf1fdb43d7a357dbce08be49192806366220036685d8f32b318ca0b0a672d179faa8b1d1242c4093596420c318df0285ac113cfcd9b58eac6eb5a3998c8efca594e7043c5a4a11c69abf115cbebda12eb03bdc8b8c80e123c34646c4826296d1bbfb797e70a094f7d6bdbbe7cf7eadac94895a9da110babe4a03221c2dc5515aefeeedb59aeaca88eff853655aec4bb7fc69ffb1d3c846f36daedad7a865ca7d84df6e3a28577aab4dfd09dc7c746105104a75fb9fe00920bb548cc98f02d9ea578b922d29c72b9a62936eb2331cc54c5a40d0a409c6a563c6e15199dd3ba8fe160ee6de77f2e3fdbe6cf981eb946188e157e5cf88bb03e44dc63791a23dcfb8db3074391e4d6463f0465a5cbfef21b9388da9b0068e1abcb3db3172480207809c8c5b73dab09fb8064e55c42d368aa277bb9f54a06d00c9135838a09110c425190e3b4837407761d8653e0d8afd94b1b0b408906b64301185bd5a7e30059832233da58bad67c479229a00a192dca6343f93c35cbfb13238263321b02afea15214495de385e0735aa21b56f9a4ae69b40453942ec9d00a6e9c62dae884115f13feb5076bead65179c9b6adb8b750b3d36856ffa74b0ab80d274a3c919b57d474c9b99bf923aa799c0ceaf67c6167deb5f877698c30bc955008a5c0b7c8752908c37561e5394636235f879ec20b16d0e7fe1701555d170269238fc4edf72ad523f7e54a2473f572020b9742ab242521ed7dfb14f3150c20249cd151ea7df09a7b46994e13dee6ecafdd7f0624311fca86ec55f464ec2c124fb71df4797775eef30451d95bf7aa7219121538108eee8a213cd27efbdce57eeb7f2ffa49fc656c63d18bf7df33c23ffe19430773a7373cfa5326a32a63a093f505c34aa7136456a0dcf164e888ff458b9d46f639902c834e6351463698148ce10f45b4e387a054fd9c098fef78db97a42eaebf98a6253f0f4fda4093ebccf915bf107b2f1b4d226ecfe1d57048df018ecbe2320c0f480468fe23563d09dd69c4a02f062342b3c2cea3e62d0376fa4485495b0a1aa4132d2672c32635ad8039a4d23a5e4627d69354c76d512aacd7c350662d6c40615930e56e6ce1e9057c152d569760d1aefd0f78780f293dbb40a783b70a848507423cf5bb163e57d9844ab3902f19e35fd91ee194d3336c57d029d1bbb19edf0dd9fdd04ae9206117fb8ec0e04aa7da4e5ea66651b00c9c4840486f31d98cba381e1fa5f17a3cfe6d4e7ff3d94bb64f76aeb7d886ae9a7ddb025899445b8777dd9e06cd5b7b45055589c958e4d6e7874955529d5c9e997d77107665464e523ee11c5205b2a499fa53a8ec1c62882def9d3f58624cf565eefbaf451bafc0b10d0cc1816102933e94217a1828c2ec935c0bb19a19b25b06dc1e7c380cdff628abd2ab68c7213714f7d48169e1e723448f2b04272bdb792e100bfff9035a7ff31597dba9fcabc7149c3565e5ea9aa3be079836cefa9f0a6604947f1822184c14c2388db208f0e29b59fa5191af2878c24cfa314b006a1cfb789d10a7aa3a2ef225f930c11df8962890835a394c60809e960ae3fcf5b6950e945689fe995822f6cb006f4b236265a421a96964e44083c40aaad299653f3f8d1be55afd5d73df6fe76f4135a42d7b1387a9ed5210b739d5feedcc910b1e34d73dafc8a3dc6e1ce77576d4768f6fdb9a7662f6fcf59441974fa44e802391a984cdbd93a7055f6afcd526da39ab89f020c88e8ea54bdffa67c57163615e53677cc7946605b66fb82624898ffffe6af8919ff1ab5e485193dab04c26a904d0b1268dd26b259790a7bcebb46b1477051c0c19dc0414b913d5af0e63b94a79de80375d7c36f3b0ccccb0ce509d9ecc1df6476fe2fe43b9521f705776fb5b56ee1ee512543fd6da0b339266602757bec39051a8f8d7b479e499741afb8d85898a49c1d46847aba079cdc000ef3bc96b62977e14116cb65431b9f3a5c90fe7c4338ba3606251ec1cefc509cb4ce7c8557c7d97679f2f0e8d8d8dc3cfc18d22ca7760e76b57d3be0ec25519e3d7eb9ddcf43f96ee393d88832616f635d31c3ac8407c78e3b6ab652ecf21fbd06dc4f3719ecda8f21c3d87815015ba7283deb2c05a236efbcae728eaa6667245647830bdda986dd2505ebfea8d56406f79dc2c5c9d047609b06710a596a4d2bbcd9f2b5ca96aab7a36be878820be965a2a0cce616d6a0a08c92220c479c5e3bccfe51b4c0c1c1559d7955eb69d6029bb7feab6512724d265eb1b0a22af7aca4203dec27d8d0315b993be21befe50c2be6b88533337f2a15da8f2da0ff9d8af0cf5a48a30509fe6f6394e31464438d45936be356875c89c13932a8ecea1467b2c327b18d8a6cee59eb1f3011594b11104fd98e8327277f5347746d949bc7fb2bc0083ab1a619ff16bc5911f1f8e60eb24c6d4e1537103d3ec7737d7e0a61de1f6a51f409c2ee49d214d1b8fa6b1932ba6a2072a32b02ce88d4d199afa61c0fd29b4b982e03c6daa17e91df8df237b645f12f5844ff2b1d61d9af33a2e0674ccb644ef6b9c37387ad9ffad5ca5e62ef477094dc3bc062e37690dddc4e6f21d93bd3464b857518d3299966e6dffbee18b551f31436eb488e3aac0dd4bce6ec384b34b7fe92049b9c4c4104a635bb68a2b1768ade3932eb490e725b956b165ba3b762a7f005850440b7e62bdaceee5a8e612c6401d68b188fc632d2dfffe13f50624f6d48a535ebd377f11d6e3e0ee119df1278ed106f68ce13add87ce0c482718722c5456abc3c420ee0c2bc0bee23199ad4a850c356423745ab2713299ec4f60db5f8f4043ebf017e5592e8c099999c2aa068ce47328d145ff733a377e6bbb5f788e6b5da6af479387bc5ba727882490bfb7d683f94024d902eba72bba343d5e3c4aafd1798e88a00f5b22776144fdaaa0d37fb8ab18b01b318465db2bc6e2fe623bfdbe618aae2053a6945e15fcac8f179be625127bbf89fd81be5813653026efce4fee1d07215a340980c7d824ae33fd8f77db8625c0c3752b21effa008945f9b694098dfdda2fc7a6ac417770fc146583f8e06dc25b4cd5a1828126b4c865b6f8e18c2a84c7e1d4f88ce39c5e3cb1850fad25b2773123239a1bf9935bb853a1d0ea0b5f0a0b4674f9fe46cc5d0ae683fa7f888e9d6521c9e1e73aba96913d8f52d4b65dd54a19aea8e4b776d2c1a9969995f8b50b8703aa0fe8fd2d4f15c5f5261e658a420e6ff6f3744fcc307dbf5c10769ecf1ea57c0acd96a464a73ae0904263f1e59932909f930ac7b91a206125102b03427c6275184632031d7f26f34fc0131be690b5d1694c140b8dbff289a169662f6f8d723b6e6d418fbfd5fad644d01dc6618025d7721b799d7c8fca9039e5529ee0cfdd3ef52843aece4df16477edfa1313be9f99c22287c6d629f4014f4679510fbb35433ca46a93339403b949c93c5031fbf5f4e3440e824007401e84e73c5040b26872a2b2445a525fe3effc05f9ce6f6c3cf5346dfe77b01d87cfbc4eb37e39149bf36b2d4fb0ab8698811003fad7d8d2a9e483868dd61f637da404cf703c68e5d2ad47dca7e2ca6cd8e69f6b24e8567343061481f2c8eb3fed06ed83f8255b1723494d7ec18197f349f0ebb1672261933f9388368e55879541e82b164e9855080d8c4310c5a4b4097bfcc0b4516fee339447ce46d23b9db641d1fadca48744b7d5b545a3839377481e6a170cc60cdfb721f9f8ca156917e365b98d1a541707865928c21a4633d2b9ed07dbe8b6cc2d696fed99189fa5f2cbf79138f6a5a62bc3dad01d27fdb38db828563c4c05dbdbbedc89ead1037f90e0241a542fef4fcbf084f375a19d22e8712e30edd4d65957620d9d7b227a1d7e0192e17f73e080f32f2fb120555df877396280865158407b13436299176fc620a79bfe0509e3689a331f7f850607b38be8c8339de65c9ac130c7a7a6d3c04341071d5ef64d91d660889667a12f7b8524a4938ed7d88e582f665d98424bc48ddea1d9cdea6a39f5bfc7b50874707148ec19d3d03bffcdac6e9f22bc3427c83c7676b2129655ac067a75363f56b644008bb27c37f719412ec95327cca8b9f24fc3f5077a7b8eaa962a84332cc78f6e791051c4f6fbf00c39b03a16f9bbcde2004ef21a121806ebf9488fde8834cb1bbd2519bf47514b128b37e195431c32338b727f41c9c0a27c75684efa4af62b60c2548ab668ea72f650cff1c8f70eee3f19b1b30167154073b72935a002c5bfd0486a70650acf7a86f43f92c9f1d4a81b33226c3ab2c7ffa367fcb1577f0603aba35a2361e4c7415915638f2702c3938847bbcc074c1bd9369d4d2aa26959ea2d12a224f71963f01b01429c7dcad59fa62ba3ac7450dd8a56c76cca5ac8c692fb70147623ead0e54211c769ab388e024691ab69bdd7a0ab3c3591404d6998db0992a84f5d527eba3e037abe7c4ac0497f2f4079b96abaf03e9d45ed9c744b6a3a89430de5f32be2b00c296a18bc6256e5f60f513af00d4a896142bec6590981719609caefdbc76976d92cddd7accf0707b97367eab923f6d257430d96dae6a0c5aad390ea59d687af5b2c8a47f2140c9577a6ba4444833e89fed629198a12542211d39fbadc50cc0ca0209922391a6565c31362029e007421b2b71963e619d15ca9eb4ac377feccdb7e25d83a415109823b837e3eb514b6902406e8839da460b671b9e9fcf420f2338eff5bc71d8cd307ac133505768c44700e30724e9e2032981e64062dfaa135cbd2dab02cf3e035581c18b07428f3b34ddc45e7e8313e96b6d17a749d5bbdfc46fe6559e7f33c591f4b9ac6ad549f0f909e8b10251d7a3ccfa3d3d408904248486e04a385dec010f7182b1ddad05e65d770d4de728c2dd49ed20fe22275efdaf6f801647afb81d1bee80dbbdc8531746ff04f621c2e631307936bf09ee1d265249caa6bda3f93d8f089a0db0b65e7811ddae060b60e828386a5c96bb140348f783a39ed23d457f4547104eeb2d2e33bc65530ff21570536228adcd3aa54e9130058934d5d7f194c5ccf282d14841a7b4143cc1f23316db1ccd7c639e729270b076015cedf918ce37a6724ba51123494a95cc49f5e8ddd5d1c721c793fd4f01338afa1f96322473c65ba8b9fb8f4fa459dc783313033f68cd8b34079953c694cc8b16c6deaabc5c7de719d82c0b934f49a942808c341dd6a6cc26f91df1044ba10d33a09dbfabd206772504724e51b990fb5395e6c4b70bc800c8f4e07aab5a0779fd98017018e73654a3ccdb9c3212c0f88384ece13d78a6467376a0d5b3f6f77e9afcbaddd77e242480c255a58d211026a8946e025a9ce62339685cf3748988e4644f91d1964687995f7035bbe8abef1baf8ff462c56c98b5d3bf3c9793b5915f23207acf05e0def96f1c68ccd4abc6a44662a274420def7305f1387ea0bc9d76ece1412373d022973920a7d6a68b00ade892e58f2e6aff44d07de96a1df4134caf5e7d979f2422030d51e17404911c5efc904e07df4a3e551054e16b7c0d5c3c39fbe73813d79c75b327e2fa9f3f970ce99ef0b8e0c7b38975b9a76e1ab", 0x1000}, {&(0x7f00000001c0)="f0f0264f15e51680f775076c55b4c8414588a8fb2c553fcc787d41c61be66cea6566514c80c9d899bc0476fa5e037dbc87c1b155984445e0bfd92877bf672a75e120410b6df6d6fe2de5beac6ad00e03fad4e927194786151c14b69da01b80060d0e24a135a1e78d5171552d9c20086225b7854aed033a887719794b9881b6f21f73fbc7fe14b298191878fbeeab4a65554e350f0366a05b86", 0x99}, {&(0x7f0000001380)="336f5914b0416abb1c1067970b6b786f6b28a4b7ce842395bbc3a8f2de434ab2f9e0ea43cbac03b0e63b20f93bb9b179dda59665ca173edeb014ccfd037f7201534a6a593d2684f9c951720d7f19d23132021990e3c2efe03209518e9519a7", 0x5f}, {&(0x7f0000001400)="5a869d7981977186e35c51acadab7555c346384e7e03ac325832f9374af8808d64693ba9abef379210ca6b31713c0bb8adf01c959a48d9597c19135140df4727b4e92a716d761d76b6e3627f925c6b5afc537ea4621f75d9b845900df602677ba4490dd5cfa64880b9d65d41fad136b0d0ba64795a955db6ad76db581c0bce13bfe1e23cb914be534e765531dc9a77a809ef41ed87d252637ce9032673b86b6695f931032badf146aead81e1e77b7035d9e25a916613897e44fe1cdba2c107f96fe8b0ec9d88fd35599ff63a02d570ea9be34312d9597a71995cec0533ecd3f298c86c76079ceca0aabec4904dbcbebd8fd183646aa4d8c081d220", 0xfb}, {&(0x7f0000001500)="fa0970e7a5f6fa2de35b7de39913830f07bfd9e4b4f66b674666d4ea3be84d8cecaa20b92d12c87045cd622e511177940a457d2d6e1b279f921ce4151882e83211cf7c4cae8f16d7c1a0b5af9742fb34d9b8f64dd935ff79f1550e117dd9613ec3edf3ec44a4f478058b59b0bb97794bb72fbdead2b5d1fcfc874d32549f0815b7a29b3521b6c6db5f36506a7a51537a0f4bd047a39392515903330d4f7da89c02a21eeb1083f9f4c92962a9cec1d3de88796a90cd1a2a45f4775ccbc2377e8896f13ce7f17f329cb5710b956f72083ee10f5c94a036368a8c37bdd0b9", 0xdd}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB], 0x98, 0x800}, 0x40005) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x7, 0x5, 0xddcc, 0x2, 0x1, 0x200}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="dbdf2514"], 0xd8}}, 0x0) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 32) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="5db21ec56b352967d8e121d853d7475676596576d02517e5d96345edad6c33e23e3b529f07b359ca04a8a2f9b38fe1ba05b5921822d06e55") (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20004, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x1, 0x80000001, 0x6, 0x7f, 0x7, 0x81}) 12:29:19 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) (rerun: 32) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = getpgid(0x0) getpgid(r4) (async) r5 = geteuid() (async, rerun: 64) getgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) (async, rerun: 64) r7 = gettid() (async) r8 = getegid() r9 = getpgid(0x0) getpgid(r9) (async) r10 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)="439d6ed8c8e3404191a42f5c63f5422e23a468b5d389e83e63a0e3d052d68881a363aa63a640133520a41473e2951eb672c846b99d6b39028932d648fedddfa84e09ebd2203911e161937bfc3f87bedb6013c3a95184280b9893", 0x5a}, {&(0x7f0000000380)="f098d8dcdb0e20ddfa0293cd256d422c4815410c43761a2114953c6f7efcc0bc707139953f0000f36e7fa0108526d158f3763f41c26f04f23fa46cb6fe27497b749283e31dc420e47fdbeed3bf38e00b902030ab598c60c1692ee05e9421cb2af2bed6c87f6bb86809785162b0ff17a524b348b86961d91dbca30905194802dfd7ee5c7a5c16b96fc093ad3e731e57950aefdb6fcf1fdb43d7a357dbce08be49192806366220036685d8f32b318ca0b0a672d179faa8b1d1242c4093596420c318df0285ac113cfcd9b58eac6eb5a3998c8efca594e7043c5a4a11c69abf115cbebda12eb03bdc8b8c80e123c34646c4826296d1bbfb797e70a094f7d6bdbbe7cf7eadac94895a9da110babe4a03221c2dc5515aefeeedb59aeaca88eff853655aec4bb7fc69ffb1d3c846f36daedad7a865ca7d84df6e3a28577aab4dfd09dc7c746105104a75fb9fe00920bb548cc98f02d9ea578b922d29c72b9a62936eb2331cc54c5a40d0a409c6a563c6e15199dd3ba8fe160ee6de77f2e3fdbe6cf981eb946188e157e5cf88bb03e44dc63791a23dcfb8db3074391e4d6463f0465a5cbfef21b9388da9b0068e1abcb3db3172480207809c8c5b73dab09fb8064e55c42d368aa277bb9f54a06d00c9135838a09110c425190e3b4837407761d8653e0d8afd94b1b0b408906b64301185bd5a7e30059832233da58bad67c479229a00a192dca6343f93c35cbfb13238263321b02afea15214495de385e0735aa21b56f9a4ae69b40453942ec9d00a6e9c62dae884115f13feb5076bead65179c9b6adb8b750b3d36856ffa74b0ab80d274a3c919b57d474c9b99bf923aa799c0ceaf67c6167deb5f877698c30bc955008a5c0b7c8752908c37561e5394636235f879ec20b16d0e7fe1701555d170269238fc4edf72ad523f7e54a2473f572020b9742ab242521ed7dfb14f3150c20249cd151ea7df09a7b46994e13dee6ecafdd7f0624311fca86ec55f464ec2c124fb71df4797775eef30451d95bf7aa7219121538108eee8a213cd27efbdce57eeb7f2ffa49fc656c63d18bf7df33c23ffe19430773a7373cfa5326a32a63a093f505c34aa7136456a0dcf164e888ff458b9d46f639902c834e6351463698148ce10f45b4e387a054fd9c098fef78db97a42eaebf98a6253f0f4fda4093ebccf915bf107b2f1b4d226ecfe1d57048df018ecbe2320c0f480468fe23563d09dd69c4a02f062342b3c2cea3e62d0376fa4485495b0a1aa4132d2672c32635ad8039a4d23a5e4627d69354c76d512aacd7c350662d6c40615930e56e6ce1e9057c152d569760d1aefd0f78780f293dbb40a783b70a848507423cf5bb163e57d9844ab3902f19e35fd91ee194d3336c57d029d1bbb19edf0dd9fdd04ae9206117fb8ec0e04aa7da4e5ea66651b00c9c4840486f31d98cba381e1fa5f17a3cfe6d4e7ff3d94bb64f76aeb7d886ae9a7ddb025899445b8777dd9e06cd5b7b45055589c958e4d6e7874955529d5c9e997d77107665464e523ee11c5205b2a499fa53a8ec1c62882def9d3f58624cf565eefbaf451bafc0b10d0cc1816102933e94217a1828c2ec935c0bb19a19b25b06dc1e7c380cdff628abd2ab68c7213714f7d48169e1e723448f2b04272bdb792e100bfff9035a7ff31597dba9fcabc7149c3565e5ea9aa3be079836cefa9f0a6604947f1822184c14c2388db208f0e29b59fa5191af2878c24cfa314b006a1cfb789d10a7aa3a2ef225f930c11df8962890835a394c60809e960ae3fcf5b6950e945689fe995822f6cb006f4b236265a421a96964e44083c40aaad299653f3f8d1be55afd5d73df6fe76f4135a42d7b1387a9ed5210b739d5feedcc910b1e34d73dafc8a3dc6e1ce77576d4768f6fdb9a7662f6fcf59441974fa44e802391a984cdbd93a7055f6afcd526da39ab89f020c88e8ea54bdffa67c57163615e53677cc7946605b66fb82624898ffffe6af8919ff1ab5e485193dab04c26a904d0b1268dd26b259790a7bcebb46b1477051c0c19dc0414b913d5af0e63b94a79de80375d7c36f3b0ccccb0ce509d9ecc1df6476fe2fe43b9521f705776fb5b56ee1ee512543fd6da0b339266602757bec39051a8f8d7b479e499741afb8d85898a49c1d46847aba079cdc000ef3bc96b62977e14116cb65431b9f3a5c90fe7c4338ba3606251ec1cefc509cb4ce7c8557c7d97679f2f0e8d8d8dc3cfc18d22ca7760e76b57d3be0ec25519e3d7eb9ddcf43f96ee393d88832616f635d31c3ac8407c78e3b6ab652ecf21fbd06dc4f3719ecda8f21c3d87815015ba7283deb2c05a236efbcae728eaa6667245647830bdda986dd2505ebfea8d56406f79dc2c5c9d047609b06710a596a4d2bbcd9f2b5ca96aab7a36be878820be965a2a0cce616d6a0a08c92220c479c5e3bccfe51b4c0c1c1559d7955eb69d6029bb7feab6512724d265eb1b0a22af7aca4203dec27d8d0315b993be21befe50c2be6b88533337f2a15da8f2da0ff9d8af0cf5a48a30509fe6f6394e31464438d45936be356875c89c13932a8ecea1467b2c327b18d8a6cee59eb1f3011594b11104fd98e8327277f5347746d949bc7fb2bc0083ab1a619ff16bc5911f1f8e60eb24c6d4e1537103d3ec7737d7e0a61de1f6a51f409c2ee49d214d1b8fa6b1932ba6a2072a32b02ce88d4d199afa61c0fd29b4b982e03c6daa17e91df8df237b645f12f5844ff2b1d61d9af33a2e0674ccb644ef6b9c37387ad9ffad5ca5e62ef477094dc3bc062e37690dddc4e6f21d93bd3464b857518d3299966e6dffbee18b551f31436eb488e3aac0dd4bce6ec384b34b7fe92049b9c4c4104a635bb68a2b1768ade3932eb490e725b956b165ba3b762a7f005850440b7e62bdaceee5a8e612c6401d68b188fc632d2dfffe13f50624f6d48a535ebd377f11d6e3e0ee119df1278ed106f68ce13add87ce0c482718722c5456abc3c420ee0c2bc0bee23199ad4a850c356423745ab2713299ec4f60db5f8f4043ebf017e5592e8c099999c2aa068ce47328d145ff733a377e6bbb5f788e6b5da6af479387bc5ba727882490bfb7d683f94024d902eba72bba343d5e3c4aafd1798e88a00f5b22776144fdaaa0d37fb8ab18b01b318465db2bc6e2fe623bfdbe618aae2053a6945e15fcac8f179be625127bbf89fd81be5813653026efce4fee1d07215a340980c7d824ae33fd8f77db8625c0c3752b21effa008945f9b694098dfdda2fc7a6ac417770fc146583f8e06dc25b4cd5a1828126b4c865b6f8e18c2a84c7e1d4f88ce39c5e3cb1850fad25b2773123239a1bf9935bb853a1d0ea0b5f0a0b4674f9fe46cc5d0ae683fa7f888e9d6521c9e1e73aba96913d8f52d4b65dd54a19aea8e4b776d2c1a9969995f8b50b8703aa0fe8fd2d4f15c5f5261e658a420e6ff6f3744fcc307dbf5c10769ecf1ea57c0acd96a464a73ae0904263f1e59932909f930ac7b91a206125102b03427c6275184632031d7f26f34fc0131be690b5d1694c140b8dbff289a169662f6f8d723b6e6d418fbfd5fad644d01dc6618025d7721b799d7c8fca9039e5529ee0cfdd3ef52843aece4df16477edfa1313be9f99c22287c6d629f4014f4679510fbb35433ca46a93339403b949c93c5031fbf5f4e3440e824007401e84e73c5040b26872a2b2445a525fe3effc05f9ce6f6c3cf5346dfe77b01d87cfbc4eb37e39149bf36b2d4fb0ab8698811003fad7d8d2a9e483868dd61f637da404cf703c68e5d2ad47dca7e2ca6cd8e69f6b24e8567343061481f2c8eb3fed06ed83f8255b1723494d7ec18197f349f0ebb1672261933f9388368e55879541e82b164e9855080d8c4310c5a4b4097bfcc0b4516fee339447ce46d23b9db641d1fadca48744b7d5b545a3839377481e6a170cc60cdfb721f9f8ca156917e365b98d1a541707865928c21a4633d2b9ed07dbe8b6cc2d696fed99189fa5f2cbf79138f6a5a62bc3dad01d27fdb38db828563c4c05dbdbbedc89ead1037f90e0241a542fef4fcbf084f375a19d22e8712e30edd4d65957620d9d7b227a1d7e0192e17f73e080f32f2fb120555df877396280865158407b13436299176fc620a79bfe0509e3689a331f7f850607b38be8c8339de65c9ac130c7a7a6d3c04341071d5ef64d91d660889667a12f7b8524a4938ed7d88e582f665d98424bc48ddea1d9cdea6a39f5bfc7b50874707148ec19d3d03bffcdac6e9f22bc3427c83c7676b2129655ac067a75363f56b644008bb27c37f719412ec95327cca8b9f24fc3f5077a7b8eaa962a84332cc78f6e791051c4f6fbf00c39b03a16f9bbcde2004ef21a121806ebf9488fde8834cb1bbd2519bf47514b128b37e195431c32338b727f41c9c0a27c75684efa4af62b60c2548ab668ea72f650cff1c8f70eee3f19b1b30167154073b72935a002c5bfd0486a70650acf7a86f43f92c9f1d4a81b33226c3ab2c7ffa367fcb1577f0603aba35a2361e4c7415915638f2702c3938847bbcc074c1bd9369d4d2aa26959ea2d12a224f71963f01b01429c7dcad59fa62ba3ac7450dd8a56c76cca5ac8c692fb70147623ead0e54211c769ab388e024691ab69bdd7a0ab3c3591404d6998db0992a84f5d527eba3e037abe7c4ac0497f2f4079b96abaf03e9d45ed9c744b6a3a89430de5f32be2b00c296a18bc6256e5f60f513af00d4a896142bec6590981719609caefdbc76976d92cddd7accf0707b97367eab923f6d257430d96dae6a0c5aad390ea59d687af5b2c8a47f2140c9577a6ba4444833e89fed629198a12542211d39fbadc50cc0ca0209922391a6565c31362029e007421b2b71963e619d15ca9eb4ac377feccdb7e25d83a415109823b837e3eb514b6902406e8839da460b671b9e9fcf420f2338eff5bc71d8cd307ac133505768c44700e30724e9e2032981e64062dfaa135cbd2dab02cf3e035581c18b07428f3b34ddc45e7e8313e96b6d17a749d5bbdfc46fe6559e7f33c591f4b9ac6ad549f0f909e8b10251d7a3ccfa3d3d408904248486e04a385dec010f7182b1ddad05e65d770d4de728c2dd49ed20fe22275efdaf6f801647afb81d1bee80dbbdc8531746ff04f621c2e631307936bf09ee1d265249caa6bda3f93d8f089a0db0b65e7811ddae060b60e828386a5c96bb140348f783a39ed23d457f4547104eeb2d2e33bc65530ff21570536228adcd3aa54e9130058934d5d7f194c5ccf282d14841a7b4143cc1f23316db1ccd7c639e729270b076015cedf918ce37a6724ba51123494a95cc49f5e8ddd5d1c721c793fd4f01338afa1f96322473c65ba8b9fb8f4fa459dc783313033f68cd8b34079953c694cc8b16c6deaabc5c7de719d82c0b934f49a942808c341dd6a6cc26f91df1044ba10d33a09dbfabd206772504724e51b990fb5395e6c4b70bc800c8f4e07aab5a0779fd98017018e73654a3ccdb9c3212c0f88384ece13d78a6467376a0d5b3f6f77e9afcbaddd77e242480c255a58d211026a8946e025a9ce62339685cf3748988e4644f91d1964687995f7035bbe8abef1baf8ff462c56c98b5d3bf3c9793b5915f23207acf05e0def96f1c68ccd4abc6a44662a274420def7305f1387ea0bc9d76ece1412373d022973920a7d6a68b00ade892e58f2e6aff44d07de96a1df4134caf5e7d979f2422030d51e17404911c5efc904e07df4a3e551054e16b7c0d5c3c39fbe73813d79c75b327e2fa9f3f970ce99ef0b8e0c7b38975b9a76e1ab", 0x1000}, {&(0x7f00000001c0)="f0f0264f15e51680f775076c55b4c8414588a8fb2c553fcc787d41c61be66cea6566514c80c9d899bc0476fa5e037dbc87c1b155984445e0bfd92877bf672a75e120410b6df6d6fe2de5beac6ad00e03fad4e927194786151c14b69da01b80060d0e24a135a1e78d5171552d9c20086225b7854aed033a887719794b9881b6f21f73fbc7fe14b298191878fbeeab4a65554e350f0366a05b86", 0x99}, {&(0x7f0000001380)="336f5914b0416abb1c1067970b6b786f6b28a4b7ce842395bbc3a8f2de434ab2f9e0ea43cbac03b0e63b20f93bb9b179dda59665ca173edeb014ccfd037f7201534a6a593d2684f9c951720d7f19d23132021990e3c2efe03209518e9519a7", 0x5f}, {&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001500)="fa0970e7a5f6fa2de35b7de39913830f07bfd9e4b4f66b674666d4ea3be84d8cecaa20b92d12c87045cd622e511177940a457d2d6e1b279f921ce4151882e83211cf7c4cae8f16d7c1a0b5af9742fb34d9b8f64dd935ff79f1550e117dd9613ec3edf3ec44a4f478058b59b0bb97794bb72fbdead2b5d1fcfc874d32549f0815b7a29b3521b6c6db5f36506a7a51537a0f4bd047a39392515903330d4f7da89c02a21eeb1083f9f4c92962a9cec1d3de88796a90cd1a2a45f4775ccbc2377e8896f13ce7f17f329cb5710b956f72083ee10f5c94a036368a8c37bdd0b9", 0xdd}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB], 0x98, 0x800}, 0x40005) (async, rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (rerun: 64) 12:29:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x404200, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/94, 0x5e, 0x2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 64) setsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0xffffffffffffff80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0xffffffffffffff80) (async) 12:29:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x7, 0x5, 0xddcc, 0x2, 0x1, 0x200}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="dbdf2514"], 0xd8}}, 0x0) 12:29:19 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sync() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x401, [0x4, 0x8], 0x6}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x256000, 0x0) 12:29:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="5db21ec56b352967d8e121d853d7475676596576d02517e5d96345edad6c33e23e3b529f07b359ca04a8a2f9b38fe1ba05b5921822d06e55") bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="5db21ec56b352967d8e121d853d7475676596576d02517e5d96345edad6c33e23e3b529f07b359ca04a8a2f9b38fe1ba05b5921822d06e55") (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20004, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x1, 0x80000001, 0x6, 0x7f, 0x7, 0x81}) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) accept$unix(r2, 0x0, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="e2e6640100"], 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0x9, "8278f5", 0x82, 0xfb}) 12:29:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x7, 0x5, 0xddcc, 0x2, 0x1, 0x200}) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="dbdf2514"], 0xd8}}, 0x0) 12:29:19 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) sync() (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x401, [0x4, 0x8], 0x6}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x256000, 0x0) 12:29:19 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x763d00, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) accept4$bt_l2cap(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) socket$isdn(0x22, 0x3, 0x21) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r4 = socket$isdn(0x22, 0x3, 0x4) sendto$isdn(r4, 0x0, 0x1f, 0x40400d0, 0x0, 0x29) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "52a843", 0x4, 0x8}) 12:29:19 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = getpgid(0x0) getpgid(r4) r5 = geteuid() getgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) r7 = gettid() r8 = getegid() r9 = getpgid(0x0) getpgid(r9) r10 = geteuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)="439d6ed8c8e3404191a42f5c63f5422e23a468b5d389e83e63a0e3d052d68881a363aa63a640133520a41473e2951eb672c846b99d6b39028932d648fedddfa84e09ebd2203911e161937bfc3f87bedb6013c3a95184280b9893", 0x5a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="f0f0264f15e51680f775076c55b4c8414588a8fb2c553fcc787d41c61be66cea6566514c80c9d899bc0476fa5e037dbc87c1b155984445e0bfd92877bf672a75e120410b6df6d6fe2de5beac6ad00e03fad4e927194786151c14b69da01b80060d0e24a135a1e78d5171552d9c20086225b7854aed033a887719794b9881b6f21f73fbc7fe14b298191878fbeeab4a65554e350f0366a05b86", 0x99}, {&(0x7f0000001380)="336f5914b0416abb1c1067970b6b786f6b28a4b7ce842395bbc3a8f2de434ab2f9e0ea43cbac03b0e63b20f93bb9b179dda59665ca173edeb014ccfd037f7201534a6a593d2684f9c951720d7f19d23132021990e3c2efe03209518e9519a7", 0x5f}, {&(0x7f0000001400)="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", 0xfb}, {&(0x7f0000001500)="fa0970e7a5f6fa2de35b7de39913830f07bfd9e4b4f66b674666d4ea3be84d8cecaa20b92d12c87045cd622e511177940a457d2d6e1b279f921ce4151882e83211cf7c4cae8f16d7c1a0b5af9742fb34d9b8f64dd935ff79f1550e117dd9613ec3edf3ec44a4f478058b59b0bb97794bb72fbdead2b5d1fcfc874d32549f0815b7a29b3521b6c6db5f36506a7a51537a0f4bd047a39392515903330d4f7da89c02a21eeb1083f9f4c92962a9cec1d3de88796a90cd1a2a45f4775ccbc2377e8896f13ce7f17f329cb5710b956f72083ee10f5c94a036368a8c37bdd0b9", 0xdd}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB], 0x98, 0x800}, 0x40005) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) getpgid(0x0) (async) getpgid(r4) (async) geteuid() (async) getgroups(0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) (async) gettid() (async) getegid() (async) getpgid(0x0) (async) getpgid(r9) (async) geteuid() (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000100)="439d6ed8c8e3404191a42f5c63f5422e23a468b5d389e83e63a0e3d052d68881a363aa63a640133520a41473e2951eb672c846b99d6b39028932d648fedddfa84e09ebd2203911e161937bfc3f87bedb6013c3a95184280b9893", 0x5a}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="f0f0264f15e51680f775076c55b4c8414588a8fb2c553fcc787d41c61be66cea6566514c80c9d899bc0476fa5e037dbc87c1b155984445e0bfd92877bf672a75e120410b6df6d6fe2de5beac6ad00e03fad4e927194786151c14b69da01b80060d0e24a135a1e78d5171552d9c20086225b7854aed033a887719794b9881b6f21f73fbc7fe14b298191878fbeeab4a65554e350f0366a05b86", 0x99}, {&(0x7f0000001380)="336f5914b0416abb1c1067970b6b786f6b28a4b7ce842395bbc3a8f2de434ab2f9e0ea43cbac03b0e63b20f93bb9b179dda59665ca173edeb014ccfd037f7201534a6a593d2684f9c951720d7f19d23132021990e3c2efe03209518e9519a7", 0x5f}, {&(0x7f0000001400)="5a869d7981977186e35c51acadab7555c346384e7e03ac325832f9374af8808d64693ba9abef379210ca6b31713c0bb8adf01c959a48d9597c19135140df4727b4e92a716d761d76b6e3627f925c6b5afc537ea4621f75d9b845900df602677ba4490dd5cfa64880b9d65d41fad136b0d0ba64795a955db6ad76db581c0bce13bfe1e23cb914be534e765531dc9a77a809ef41ed87d252637ce9032673b86b6695f931032badf146aead81e1e77b7035d9e25a916613897e44fe1cdba2c107f96fe8b0ec9d88fd35599ff63a02d570ea9be34312d9597a71995cec0533ecd3f298c86c76079ceca0aabec4904dbcbebd8fd183646aa4d8c081d220", 0xfb}, {&(0x7f0000001500)="fa0970e7a5f6fa2de35b7de39913830f07bfd9e4b4f66b674666d4ea3be84d8cecaa20b92d12c87045cd622e511177940a457d2d6e1b279f921ce4151882e83211cf7c4cae8f16d7c1a0b5af9742fb34d9b8f64dd935ff79f1550e117dd9613ec3edf3ec44a4f478058b59b0bb97794bb72fbdead2b5d1fcfc874d32549f0815b7a29b3521b6c6db5f36506a7a51537a0f4bd047a39392515903330d4f7da89c02a21eeb1083f9f4c92962a9cec1d3de88796a90cd1a2a45f4775ccbc2377e8896f13ce7f17f329cb5710b956f72083ee10f5c94a036368a8c37bdd0b9", 0xdd}], 0x6, &(0x7f0000001680)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB], 0x98, 0x800}, 0x40005) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:19 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fd90700", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) accept$unix(r2, 0x0, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="e2e6640100"], 0x5) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0x9, "8278f5", 0x82, 0xfb}) 12:29:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x20004, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x9, 0x4) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) (async) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x1, 0x80000001, 0x6, 0x7f, 0x7, 0x81}) 12:29:19 executing program 4: write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sync() openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x401, [0x4, 0x8], 0x6}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x256000, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_rssi={{0x1405, 0x2}, {0xc8}}}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) sync() (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) (async) getpeername$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x401, [0x4, 0x8], 0x6}, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x256000, 0x0) (async) 12:29:19 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fd90700", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fd90700", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:19 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdb2504"], 0xd8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x3, 0x9, 0x0, 0x8, 0x1, 0x1}) 12:29:19 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x763d00, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) accept4$bt_l2cap(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) socket$isdn(0x22, 0x3, 0x21) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r4 = socket$isdn(0x22, 0x3, 0x4) sendto$isdn(r4, 0x0, 0x1f, 0x40400d0, 0x0, 0x29) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "52a843", 0x4, 0x8}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x763d00, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) (async) accept4$bt_l2cap(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) socket$isdn(0x22, 0x3, 0x21) (async) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) (async) socket$isdn(0x22, 0x3, 0x4) (async) sendto$isdn(r4, 0x0, 0x1f, 0x40400d0, 0x0, 0x29) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "52a843", 0x4, 0x8}) (async) 12:29:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) accept$unix(r2, 0x0, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="e2e6640100"], 0x5) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0x9, "8278f5", 0x82, 0xfb}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) accept$unix(r2, 0x0, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="e2e6640100"], 0x5) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x4, 0x9, "8278f5", 0x82, 0xfb}) (async) 12:29:19 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fd90700", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:19 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, 'syz1\x00', @bcast, 0x4, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 12:29:20 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x763d00, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) accept4$bt_l2cap(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) socket$isdn(0x22, 0x3, 0x21) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) (async, rerun: 64) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r4 = socket$isdn(0x22, 0x3, 0x4) sendto$isdn(r4, 0x0, 0x1f, 0x40400d0, 0x0, 0x29) (async, rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, "52a843", 0x4, 0x8}) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdb2504"], 0xd8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x3, 0x9, 0x0, 0x8, 0x1, 0x1}) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xc003) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, 'syz1\x00', @bcast, 0x4, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, 'syz1\x00', @bcast, 0x4, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="03170458f6e8f64a2dad34afc269276d2f74e26f5c675d94f69a9221d0277b2ae01cec397a80a720438c3fe9c962375737d0a20a9b808111") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21770c0100"], 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0xffffff13, 0x20, 0x20000, {0x8, 0xff}, 0x10001, 0x2}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdb2504"], 0xd8}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x3, 0x9, 0x0, 0x8, 0x1, 0x1}) 12:29:20 executing program 0: ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7, 'syz1\x00', @bcast, 0x4, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21770c0100"], 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0xffffff13, 0x20, 0x20000, {0x8, 0xff}, 0x10001, 0x2}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21770c0100"], 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0xffffff13, 0x20, 0x20000, {0x8, 0xff}, 0x10001, 0x2}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="03170458f6e8f64a2dad34afc269276d2f74e26f5c675d94f69a9221d0277b2ae01cec397a80a720438c3fe9c962375737d0a20a9b808111") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) [ 1516.663490] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xc003) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004004) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4006, 0x57aa, 0x4, 0x295b}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="21770c0100"], 0x5) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0xffffff13, 0x20, 0x20000, {0x8, 0xff}, 0x10001, 0x2}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="03170458f6e8f64a2dad34afc269276d2f74e26f5c675d94f69a9221d0277b2ae01cec397a80a720438c3fe9c962375737d0a20a9b808111") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)="03170458f6e8f64a2dad34afc269276d2f74e26f5c675d94f69a9221d0277b2ae01cec397a80a720438c3fe9c962375737d0a20a9b808111") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) 12:29:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004004) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (rerun: 64) [ 1516.787551] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1516.798266] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0xc003) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x200, 0x9], 0xf000}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x260081, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000000c0)="df9eeee221abb3078f234c54ef513856b36b2b3bed5032fa370e0046c5983f11ab3ecad50b1dc86da99c5ba55d053a686f911712920cf197ffb334198b5ccf81ddf12b6c5f5959c1ddece57ae285d5ef3064f91e20bedce38b995a4c4050a96edf") 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4006, 0x57aa, 0x4, 0x295b}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4006, 0x57aa, 0x4, 0x295b}) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) 12:29:20 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12:29:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x200, 0x9], 0xf000}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x260081, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000000c0)="df9eeee221abb3078f234c54ef513856b36b2b3bed5032fa370e0046c5983f11ab3ecad50b1dc86da99c5ba55d053a686f911712920cf197ffb334198b5ccf81ddf12b6c5f5959c1ddece57ae285d5ef3064f91e20bedce38b995a4c4050a96edf") 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) 12:29:20 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4006, 0x57aa, 0x4, 0x295b}) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004004) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) getsockname$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @netrom, @default, @remote, @null]}, &(0x7f0000000100)=0x48) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x200, 0x9], 0xf000}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x260081, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000000c0)="df9eeee221abb3078f234c54ef513856b36b2b3bed5032fa370e0046c5983f11ab3ecad50b1dc86da99c5ba55d053a686f911712920cf197ffb334198b5ccf81ddf12b6c5f5959c1ddece57ae285d5ef3064f91e20bedce38b995a4c4050a96edf") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x9, [0x200, 0x9], 0xf000}, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x260081, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000000c0)="df9eeee221abb3078f234c54ef513856b36b2b3bed5032fa370e0046c5983f11ab3ecad50b1dc86da99c5ba55d053a686f911712920cf197ffb334198b5ccf81ddf12b6c5f5959c1ddece57ae285d5ef3064f91e20bedce38b995a4c4050a96edf") (async) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x80}}}, 0x5) (async) 12:29:20 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 12:29:20 executing program 2: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockname$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @netrom, @default, @remote, @null]}, &(0x7f0000000100)=0x48) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) recvmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/154, 0x9a}, {&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/186, 0xba}], 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="566c1e03dacd5e5c2924bd47d72b4eb37b00a5099a5cee55050000000000000042b50759422a0ab374deafdd845f93d77310dd437e467190bc9e1f486eb92c0199e8fe1d4ac888625e3671b8b991b8eb7c1353a445c125ed9eed37"], 0xd0}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/250, 0xfa}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/166, 0xa6}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/14, 0xe}], 0x7, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/231, 0xe7}], 0x3, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/50, 0x32}], 0x2, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x40002003, &(0x7f0000003480)={0x77359400}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getpeername$unix(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x6e) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0xc000) 12:29:20 executing program 2: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) getsockname$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @default, @bcast, @netrom, @netrom, @default, @remote, @null]}, &(0x7f0000000100)=0x48) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/248) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) recvmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/154, 0x9a}, {&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/186, 0xba}], 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="566c1e03dacd5e5c2924bd47d72b4eb37b00a5099a5cee55050000000000000042b50759422a0ab374deafdd845f93d77310dd437e467190bc9e1f486eb92c0199e8fe1d4ac888625e3671b8b991b8eb7c1353a445c125ed9eed37"], 0xd0}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/250, 0xfa}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/166, 0xa6}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/14, 0xe}], 0x7, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/231, 0xe7}], 0x3, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/50, 0x32}], 0x2, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x40002003, &(0x7f0000003480)={0x77359400}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getpeername$unix(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x6e) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) recvmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/154, 0x9a}, {&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/186, 0xba}], 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="566c1e03dacd5e5c2924bd47d72b4eb37b00a5099a5cee55050000000000000042b50759422a0ab374deafdd845f93d77310dd437e467190bc9e1f486eb92c0199e8fe1d4ac888625e3671b8b991b8eb7c1353a445c125ed9eed37"], 0xd0}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/250, 0xfa}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/166, 0xa6}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/14, 0xe}], 0x7, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/231, 0xe7}], 0x3, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/50, 0x32}], 0x2, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x40002003, &(0x7f0000003480)={0x77359400}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) getpeername$unix(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x6e) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0xc000) (async) 12:29:20 executing program 2: ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x200, 0x7, 0x1, 0x10001, 0xe3, 0x6, 0x7fffffff, 0xffffffff, 0x1f00000000000, 0x866d, 0x1}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2000000, [0x8001, 0xfd], 0x1}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) 12:29:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0xc000) (async) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000c8b47280aaa0d4e260c8e2c699e5594255288eb82dc4550517d1e889c3220004931c5a0089ab70a8704000000bc896ad6d5f3a62b773bbbf9e1156173ea1d23761d7579d1145d0b464bc7833c144fca98855ebc83d2ebfb080ff4b026ad6148006e31d7e102d50aaba000a4f56a703a3eca451ef2b16290a00ab52cb79bb4833eeb4f4394d06477cb62f4357fa54c1d4d98c7c536e71cf7f007e453b7a569af7adf7da9b39455e9"], 0x5) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/248) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x1) (async) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/248) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) recvmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/154, 0x9a}, {&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/186, 0xba}], 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="566c1e03dacd5e5c2924bd47d72b4eb37b00a5099a5cee55050000000000000042b50759422a0ab374deafdd845f93d77310dd437e467190bc9e1f486eb92c0199e8fe1d4ac888625e3671b8b991b8eb7c1353a445c125ed9eed37"], 0xd0}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/250, 0xfa}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/166, 0xa6}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/14, 0xe}], 0x7, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/231, 0xe7}], 0x3, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/50, 0x32}], 0x2, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x40002003, &(0x7f0000003480)={0x77359400}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getpeername$unix(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x6e) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) (async) recvmmsg$unix(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000180)=""/233, 0xe9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/154, 0x9a}, {&(0x7f0000002340)=""/167, 0xa7}, {&(0x7f0000000040)=""/14, 0xe}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000002400)=""/186, 0xba}], 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="566c1e03dacd5e5c2924bd47d72b4eb37b00a5099a5cee55050000000000000042b50759422a0ab374deafdd845f93d77310dd437e467190bc9e1f486eb92c0199e8fe1d4ac888625e3671b8b991b8eb7c1353a445c125ed9eed37"], 0xd0}}, {{&(0x7f0000002640), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1, &(0x7f0000002700)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/250, 0xfa}, {&(0x7f0000002ac0)=""/34, 0x22}, {&(0x7f0000002b00)=""/166, 0xa6}, {&(0x7f0000002bc0)=""/105, 0x69}, {&(0x7f0000002c40)=""/14, 0xe}], 0x7, &(0x7f0000002d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002e00)=""/33, 0x21}, {&(0x7f0000002e40)=""/77, 0x4d}, {&(0x7f0000002ec0)=""/231, 0xe7}], 0x3, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003180)=""/5, 0x5}, {&(0x7f00000031c0)=""/50, 0x32}], 0x2, &(0x7f0000003240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x5, 0x40002003, &(0x7f0000003480)={0x77359400}) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) getpeername$unix(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x6e) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x200, 0x7, 0x1, 0x10001, 0xe3, 0x6, 0x7fffffff, 0xffffffff, 0x1f00000000000, 0x866d, 0x1}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2000000, [0x8001, 0xfd], 0x1}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x200, 0x7, 0x1, 0x10001, 0xe3, 0x6, 0x7fffffff, 0xffffffff, 0x1f00000000000, 0x866d, 0x1}) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2000000, [0x8001, 0xfd], 0x1}, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) (async) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r0, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8011}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="41002dbd7000fcdbdfb504"], 0xd8}}, 0x0) 12:29:20 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000c8b47280aaa0d4e260c8e2c699e5594255288eb82dc4550517d1e889c3220004931c5a0089ab70a8704000000bc896ad6d5f3a62b773bbbf9e1156173ea1d23761d7579d1145d0b464bc7833c144fca98855ebc83d2ebfb080ff4b026ad6148006e31d7e102d50aaba000a4f56a703a3eca451ef2b16290a00ab52cb79bb4833eeb4f4394d06477cb62f4357fa54c1d4d98c7c536e71cf7f007e453b7a569af7adf7da9b39455e9"], 0x5) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x8, 0x1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/248) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/138) write$bt_hci(r1, &(0x7f0000000040)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2}}}, 0x5) 12:29:20 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x200, 0x7, 0x1, 0x10001, 0xe3, 0x6, 0x7fffffff, 0xffffffff, 0x1f00000000000, 0x866d, 0x1}) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2000000, [0x8001, 0xfd], 0x1}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r3) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r0, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8011}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="41002dbd7000fcdbdfb504"], 0xd8}}, 0x0) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/138) write$bt_hci(r1, &(0x7f0000000040)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/138) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2}}}, 0x5) (async) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000c8b47280aaa0d4e260c8e2c699e5594255288eb82dc4550517d1e889c3220004931c5a0089ab70a8704000000bc896ad6d5f3a62b773bbbf9e1156173ea1d23761d7579d1145d0b464bc7833c144fca98855ebc83d2ebfb080ff4b026ad6148006e31d7e102d50aaba000a4f56a703a3eca451ef2b16290a00ab52cb79bb4833eeb4f4394d06477cb62f4357fa54c1d4d98c7c536e71cf7f007e453b7a569af7adf7da9b39455e9"], 0x5) 12:29:20 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/72) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x3f3, 0x4, 0x7, 0x3, 0x7, 0x6}) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r0, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8011}, 0x4) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="41002dbd7000fcdbdfb504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r0, 0xd00, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8011}, 0x4) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r0, @ANYBLOB="41002dbd7000fcdbdfb504"], 0xd8}}, 0x0) (async) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000180)=""/138) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x2}}}, 0x5) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 12:29:20 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0xc849) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1f, 0x4) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/72) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x3f3, 0x4, 0x7, 0x3, 0x7, 0x6}) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x1000, "a93642", 0x7f}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xfffc, 0x1}, 0x49) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async, rerun: 32) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x32) (rerun: 32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 12:29:20 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = getpgid(0x0) getpgid(r3) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x3}) 12:29:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000040)=""/72) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0x3f3, 0x4, 0x7, 0x3, 0x7, 0x6}) 12:29:20 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0xc849) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1f, 0x4) 12:29:20 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x1000, "a93642", 0x7f}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xfffc, 0x1}, 0x49) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x1000, "a93642", 0x7f}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xfffc, 0x1}, 0x49) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = getpgid(0x0) getpgid(r3) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x3}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) getpgid(0x0) (async) getpgid(r3) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x3}) (async) 12:29:21 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0xc849) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1f, 0x4) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 0: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x1, 0x1, 0x1, 0xff, "d7f4f0200cf70b68804da135aa9e517f2b0018cb677e9a2007cf99c2c050c6"}}}, 0x27) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x1000, "a93642", 0x7f}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xfffc, 0x1}, 0x49) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x1000, "a93642", 0x7f}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xfffc, 0x1}, 0x49) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:21 executing program 4: socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfe0b}, 0x1, 0x0, 0x0, 0x4000000}, 0xc809) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0xff000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25040000001c000180060002002f000000080009005f000000060002001d000000280001800800080001000000080008000010000014000300e0000002000000000000000000000000700003801400020067656e657665300000000000000000000800030001000000080003000400000008000500ac14140e14000200766c616e30000000000000000000000005000800b0000000060007004e240000080001000200000014000200776731000000000000000000000000002800038014000600ff010000000000000000000000000001080001000100000008000500e0000001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x32) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r3 = getpgid(0x0) getpgid(r3) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x3}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) getpgid(0x0) (async) getpgid(r3) (async) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000040)={r3, 0x0, 0x3}) (async) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 4: socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfe0b}, 0x1, 0x0, 0x0, 0x4000000}, 0xc809) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0xff000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25040000001c000180060002002f000000080009005f000000060002001d000000280001800800080001000000080008000010000014000300e0000002000000000000000000000000700003801400020067656e657665300000000000000000000800030001000000080003000400000008000500ac14140e14000200766c616e30000000000000000000000005000800b0000000060007004e240000080001000200000014000200776731000000000000000000000000002800038014000600ff010000000000000000000000000001080001000100000008000500e0000001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfe0b}, 0x1, 0x0, 0x0, 0x4000000}, 0xc809) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0xff000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25040000001c000180060002002f000000080009005f000000060002001d000000280001800800080001000000080008000010000014000300e0000002000000000000000000000000700003801400020067656e657665300000000000000000000800030001000000080003000400000008000500ac14140e14000200766c616e30000000000000000000000005000800b0000000060007004e240000080001000200000014000200776731000000000000000000000000002800038014000600ff010000000000000000000000000001080001000100000008000500e0000001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) (async) 12:29:21 executing program 0: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x5, 0x4) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x1, 0x1, 0x1, 0xff, "d7f4f0200cf70b68804da135aa9e517f2b0018cb677e9a2007cf99c2c050c6"}}}, 0x27) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006fd25e86ec0400002214724b7300000000000000"], 0x5) [ 1517.683139] Bluetooth: hci2 command 0x0401 tx timeout 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5d023edb38bf485f0a631018555b7785970100a25f45cd371f1b451a58a6cd61bacdba8c25db32ccda04005c77340ec3b0a5ea1388c72871e98433689c97efa881c5ae1a38249ebb3d18cd0307d6d658d883ae365ea49df78f5198a3a285744d858a0b17eae1bb6190a876969d827021459ffeae68350f1aa281f6970c6aa95c93773833820cb20fdc2807f14570e5c0f8fc70aaf638fa1744eec73a0429bbdaae015b5e3a85a3b768e2263f4da97a05f78438b500"/195], 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/229) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006fd25e86ec0400002214724b7300000000000000"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006fd25e86ec0400002214724b7300000000000000"], 0x5) (async) 12:29:21 executing program 3: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x30, 0xffffffffffffffff, 0xdc010000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xbb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80a0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 4: socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfe0b}, 0x1, 0x0, 0x0, 0x4000000}, 0xc809) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0xff000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25040000001c000180060002002f000000080009005f000000060002001d000000280001800800080001000000080008000010000014000300e0000002000000000000000000000000700003801400020067656e657665300000000000000000000800030001000000080003000400000008000500ac14140e14000200766c616e30000000000000000000000005000800b0000000060007004e240000080001000200000014000200776731000000000000000000000000002800038014000600ff010000000000000000000000000001080001000100000008000500e0000001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) socket$unix(0x1, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfe0b}, 0x1, 0x0, 0x0, 0x4000000}, 0xc809) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000002c0)=0xff000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r4, @ANYBLOB="00012bbd7000ffdbdf25040000001c000180060002002f000000080009005f000000060002001d000000280001800800080001000000080008000010000014000300e0000002000000000000000000000000700003801400020067656e657665300000000000000000000800030001000000080003000400000008000500ac14140e14000200766c616e30000000000000000000000005000800b0000000060007004e240000080001000200000014000200776731000000000000000000000000002800038014000600ff010000000000000000000000000001080001000100000008000500e0000001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000080}, 0x44000) (async) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5d023edb38bf485f0a631018555b7785970100a25f45cd371f1b451a58a6cd61bacdba8c25db32ccda04005c77340ec3b0a5ea1388c72871e98433689c97efa881c5ae1a38249ebb3d18cd0307d6d658d883ae365ea49df78f5198a3a285744d858a0b17eae1bb6190a876969d827021459ffeae68350f1aa281f6970c6aa95c93773833820cb20fdc2807f14570e5c0f8fc70aaf638fa1744eec73a0429bbdaae015b5e3a85a3b768e2263f4da97a05f78438b500"/195], 0x5) (async, rerun: 64) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/229) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006fd25e86ec0400002214724b7300000000000000"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006fd25e86ec0400002214724b7300000000000000"], 0x5) (async) 12:29:21 executing program 3: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x30, 0xffffffffffffffff, 0xdc010000) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xbb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80a0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:21 executing program 0: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x1, 0x1, 0x1, 0xff, "d7f4f0200cf70b68804da135aa9e517f2b0018cb677e9a2007cf99c2c050c6"}}}, 0x27) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x18, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x5, 0x4) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_ext_scan_rsp_data={{0x2038, 0x23}, {0x1, 0x1, 0x1, 0xff, "d7f4f0200cf70b68804da135aa9e517f2b0018cb677e9a2007cf99c2c050c6"}}}, 0x27) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5d023edb38bf485f0a631018555b7785970100a25f45cd371f1b451a58a6cd61bacdba8c25db32ccda04005c77340ec3b0a5ea1388c72871e98433689c97efa881c5ae1a38249ebb3d18cd0307d6d658d883ae365ea49df78f5198a3a285744d858a0b17eae1bb6190a876969d827021459ffeae68350f1aa281f6970c6aa95c93773833820cb20fdc2807f14570e5c0f8fc70aaf638fa1744eec73a0429bbdaae015b5e3a85a3b768e2263f4da97a05f78438b500"/195], 0x5) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/229) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="5d023edb38bf485f0a631018555b7785970100a25f45cd371f1b451a58a6cd61bacdba8c25db32ccda04005c77340ec3b0a5ea1388c72871e98433689c97efa881c5ae1a38249ebb3d18cd0307d6d658d883ae365ea49df78f5198a3a285744d858a0b17eae1bb6190a876969d827021459ffeae68350f1aa281f6970c6aa95c93773833820cb20fdc2807f14570e5c0f8fc70aaf638fa1744eec73a0429bbdaae015b5e3a85a3b768e2263f4da97a05f78438b500"/195], 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000180)=""/229) (async) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3, "c2"}, 0x9, 0x8000, &(0x7f0000000040)={0x22, 0x9, 0xf1, 0xfe, 0x8}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="95baa8"], 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) 12:29:21 executing program 3: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x30, 0xffffffffffffffff, 0xdc010000) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xbb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80a0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:21 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @default, 0x10000, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) recvfrom$netrom(r1, &(0x7f00000000c0)=""/9, 0x9, 0x0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @bcast, 0x3, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffb, 0x4}, 0x6) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3, "c2"}, 0x9, 0x8000, &(0x7f0000000040)={0x22, 0x9, 0xf1, 0xfe, 0x8}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="95baa8"], 0x5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3, "c2"}, 0x9, 0x8000, &(0x7f0000000040)={0x22, 0x9, 0xf1, 0xfe, 0x8}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="95baa8"], 0x5) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) (async) 12:29:21 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @default, 0x10000, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) recvfrom$netrom(r1, &(0x7f00000000c0)=""/9, 0x9, 0x0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @bcast, 0x3, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffb, 0x4}, 0x6) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1ff180, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d800f7b6", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 64) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3, "c2"}, 0x9, 0x8000, &(0x7f0000000040)={0x22, 0x9, 0xf1, 0xfe, 0x8}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="95baa8"], 0x5) (async, rerun: 32) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) (rerun: 32) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:21 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x1f, 'syz0\x00', @default, 0x10000, 0x4, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) recvfrom$netrom(r1, &(0x7f00000000c0)=""/9, 0x9, 0x0, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @bcast, 0x3, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffb, 0x4}, 0x6) 12:29:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x200, 0x4) clock_getres(0x5, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x6, "d1b508", 0x9, 0x8}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9b365b6aa9eeb1260663c05d900186e00000bb35db19cef0faf5e1fd2f2dd5ab3685e588185cafc82a4ef7a53d7df93354c001f7"], 0x5) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1ff180, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d800f7b6", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x200, 0x4) (async) clock_getres(0x5, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x99b, [0x3, 0x7], 0x9}, 0x10) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504", @ANYRESHEX=r0], 0xd8}}, 0x8) 12:29:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x99b, [0x3, 0x7], 0x9}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x99b, [0x3, 0x7], 0x9}, 0x10) (async) 12:29:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x200, 0x4) (async) clock_getres(0x5, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504", @ANYRESHEX=r0], 0xd8}}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504", @ANYRESHEX=r0], 0xd8}}, 0x8) (async) 12:29:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01750c0100938dad84fba63bc5651e4f6005f02fbbc82e260d5f5fb9b68d840804a04e157452b0753fec5cba7ed6e6fe3554441868845142152d17b861c4d2433e77eb9ce043c8e9628d6624669cc7b9000000000000"], 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = gettid() r4 = getegid() r5 = getpgid(0x0) r6 = geteuid() sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0xd9fb61dbe995e890, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="2f062dcffe17b47910640e13f5fa12fc5664b4c37a76a0a65faf104dc57c30fce6d1d6bbb3744ab6921613088d32c8512c0bed44e190913e3205e868bf3bd9b484d1b92bf51d29", 0x47}, {&(0x7f0000000280)="1cc0da0f9fade9d2e89e19a9dd92b609174fc3496ffdd7ab98ae879dc237421ae465cd09c4813eb6dfd3479480632f7160e00088e405e228dd4bc1b776811d37f243e5ee9e71f4b7ac59afcb74e5d0d6b0958fa89b9633e57383f08fbc1c36da08509cba566b72e9a180c26bb80ceb75ff46fef55370d05c02df4cedfd5c398745545a8e9827c07f23bfcf2d9234edafe740d79301575fd6ad9b52e040fa5d03d23736aebf11d6858d386ab3f9db904216b95077b423a1deb85e82260b87dd3ba598f16753d5e5e9cba136a4722ce5cf6862cf79de4e3f89ebdfb0a6ff18339c03d4c1b38b93a7b84f5a15fe16ec21200602", 0xf2}], 0x2, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x78, 0x4040001}, 0x3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x6002, 0x0) write$bt_hci(r7, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"0011ab"}}}, 0x7) ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0) 12:29:21 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1ff180, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d800f7b6", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000500220000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 12:29:21 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504", @ANYRESHEX=r0], 0xd8}}, 0x8) 12:29:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x6, "d1b508", 0x9, 0x8}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9b365b6aa9eeb1260663c05d900186e00000bb35db19cef0faf5e1fd2f2dd5ab3685e588185cafc82a4ef7a53d7df93354c001f7"], 0x5) 12:29:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x99b, [0x3, 0x7], 0x9}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x99b, [0x3, 0x7], 0x9}, 0x10) (async) 12:29:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000500220000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) 12:29:22 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x1010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040080) r1 = socket$isdn(0x22, 0x3, 0x23) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000200232c23d8d1ced06de1faf21dd6e9afdfd0f605438eb972629bdd2ba99d27dc9ff71b7d0f746597314a01151c4c77d0a6938fd5e0aee58955a4d273fd1d9ef1e732fab8cfa820efd7c07c2ef85a538103c4cd725", @ANYRES16=r0, @ANYBLOB="01004882ee3dc9f50b498c762f23da64d82d00000000dbdf2504"], 0xd8}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000006, 0x7419d484cfb37052, r3, 0x0) 12:29:22 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff5b, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYRES32=r0], 0xd8}}, 0x0) 12:29:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01750c0100938dad84fba63bc5651e4f6005f02fbbc82e260d5f5fb9b68d840804a04e157452b0753fec5cba7ed6e6fe3554441868845142152d17b861c4d2433e77eb9ce043c8e9628d6624669cc7b9000000000000"], 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) r3 = gettid() (async) r4 = getegid() r5 = getpgid(0x0) r6 = geteuid() sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0xd9fb61dbe995e890, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="2f062dcffe17b47910640e13f5fa12fc5664b4c37a76a0a65faf104dc57c30fce6d1d6bbb3744ab6921613088d32c8512c0bed44e190913e3205e868bf3bd9b484d1b92bf51d29", 0x47}, {&(0x7f0000000280)="1cc0da0f9fade9d2e89e19a9dd92b609174fc3496ffdd7ab98ae879dc237421ae465cd09c4813eb6dfd3479480632f7160e00088e405e228dd4bc1b776811d37f243e5ee9e71f4b7ac59afcb74e5d0d6b0958fa89b9633e57383f08fbc1c36da08509cba566b72e9a180c26bb80ceb75ff46fef55370d05c02df4cedfd5c398745545a8e9827c07f23bfcf2d9234edafe740d79301575fd6ad9b52e040fa5d03d23736aebf11d6858d386ab3f9db904216b95077b423a1deb85e82260b87dd3ba598f16753d5e5e9cba136a4722ce5cf6862cf79de4e3f89ebdfb0a6ff18339c03d4c1b38b93a7b84f5a15fe16ec21200602", 0xf2}], 0x2, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x78, 0x4040001}, 0x3) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x6002, 0x0) write$bt_hci(r7, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"0011ab"}}}, 0x7) ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0) 12:29:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000500220000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25010000000500220000100000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) (async) 12:29:22 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff5b, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYRES32=r0], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff5b, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYRES32=r0], 0xd8}}, 0x0) (async) 12:29:22 executing program 0: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/65, 0x41, 0x1, &(0x7f00000001c0)=""/124, 0x7c}, &(0x7f0000000180)=0x40) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:22 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x1010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040080) (async) r1 = socket$isdn(0x22, 0x3, 0x23) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000200232c23d8d1ced06de1faf21dd6e9afdfd0f605438eb972629bdd2ba99d27dc9ff71b7d0f746597314a01151c4c77d0a6938fd5e0aee58955a4d273fd1d9ef1e732fab8cfa820efd7c07c2ef85a538103c4cd725", @ANYRES16=r0, @ANYBLOB="01004882ee3dc9f50b498c762f23da64d82d00000000dbdf2504"], 0xd8}}, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000006, 0x7419d484cfb37052, r3, 0x0) 12:29:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48809) 12:29:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="01750c0100938dad84fba63bc5651e4f6005f02fbbc82e260d5f5fb9b68d840804a04e157452b0753fec5cba7ed6e6fe3554441868845142152d17b861c4d2433e77eb9ce043c8e9628d6624669cc7b9000000000000"], 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) r3 = gettid() r4 = getegid() (async, rerun: 64) r5 = getpgid(0x0) (rerun: 64) r6 = geteuid() sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000180)=@abs={0xd9fb61dbe995e890, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000200)="2f062dcffe17b47910640e13f5fa12fc5664b4c37a76a0a65faf104dc57c30fce6d1d6bbb3744ab6921613088d32c8512c0bed44e190913e3205e868bf3bd9b484d1b92bf51d29", 0x47}, {&(0x7f0000000280)="1cc0da0f9fade9d2e89e19a9dd92b609174fc3496ffdd7ab98ae879dc237421ae465cd09c4813eb6dfd3479480632f7160e00088e405e228dd4bc1b776811d37f243e5ee9e71f4b7ac59afcb74e5d0d6b0958fa89b9633e57383f08fbc1c36da08509cba566b72e9a180c26bb80ceb75ff46fef55370d05c02df4cedfd5c398745545a8e9827c07f23bfcf2d9234edafe740d79301575fd6ad9b52e040fa5d03d23736aebf11d6858d386ab3f9db904216b95077b423a1deb85e82260b87dd3ba598f16753d5e5e9cba136a4722ce5cf6862cf79de4e3f89ebdfb0a6ff18339c03d4c1b38b93a7b84f5a15fe16ec21200602", 0xf2}], 0x2, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0x78, 0x4040001}, 0x3) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x6002, 0x0) write$bt_hci(r7, &(0x7f0000000040)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"0011ab"}}}, 0x7) (async, rerun: 32) ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0) (rerun: 32) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff5b, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYRES32=r0], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff5b, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYRES32=r0], 0xd8}}, 0x0) (async) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c1800"], 0x5) 12:29:23 executing program 0: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/65, 0x41, 0x1, &(0x7f00000001c0)=""/124, 0x7c}, &(0x7f0000000180)=0x40) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48809) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48809) (async) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x6, "d1b508", 0x9, 0x8}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9b365b6aa9eeb1260663c05d900186e00000bb35db19cef0faf5e1fd2f2dd5ab3685e588185cafc82a4ef7a53d7df93354c001f7"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x6, "d1b508", 0x9, 0x8}) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9b365b6aa9eeb1260663c05d900186e00000bb35db19cef0faf5e1fd2f2dd5ab3685e588185cafc82a4ef7a53d7df93354c001f7"], 0x5) (async) 12:29:23 executing program 3: mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x4, 0x1010, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="00012cbd7000fbdbdf250b0000002000038014000600fc02000000000000000000000000000008000300030000000c000280080005001cc9b009080004001f0000000800060000008000080004000000000008000400078000000c000380080003000000000034000180090006006e6f6e65000000000800080024000000090006006c626c6300000000060004004e210000080008000200000038000180060001000a000000080008000500000014000300e0000001000000000000000000000000080005000100000006000200160000004000038006000400feff000008010500640101010800010002000000050008002100000014000600fc000000000000000000000000000001080005007f0000019135521b67682c656acebfc8aaa8eb400532930dd28409f42c55408c26390f39a641b246d9c1dfda760e16ab485cd408170e348617d1452978516ebf3301c978a3737cfbc82c76033e5d1767f6ce39777dd522db45eba4d29d45d4b6a0d453163661de3911267611157e357b3f1fa57cac9159b33cc13b3c88efd602a813f5680c53d780a9affe82079727cd8077f85823b06d1976d60b1b524a0836bd177d7d59b3e78761667e8944c28d29f30642a13c9c"], 0x118}, 0x1, 0x0, 0x0, 0x10000000}, 0x20040080) (async) r1 = socket$isdn(0x22, 0x3, 0x23) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000200232c23d8d1ced06de1faf21dd6e9afdfd0f605438eb972629bdd2ba99d27dc9ff71b7d0f746597314a01151c4c77d0a6938fd5e0aee58955a4d273fd1d9ef1e732fab8cfa820efd7c07c2ef85a538103c4cd725", @ANYRES16=r0, @ANYBLOB="01004882ee3dc9f50b498c762f23da64d82d00000000dbdf2504"], 0xd8}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000006, 0x7419d484cfb37052, r3, 0x0) [ 1519.762574] Bluetooth: hci2 command 0x0401 tx timeout 12:29:23 executing program 0: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/65, 0x41, 0x1, &(0x7f00000001c0)=""/124, 0x7c}, &(0x7f0000000180)=0x40) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x40}}, 0xc0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c1800"], 0x5) (rerun: 32) 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x40}}, 0xc0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/133) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 1519.846707] nla_parse: 18 callbacks suppressed [ 1519.846714] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48809) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80852d7b8d22e5ff6440de0a1d0ebb8f5a1f7f71ec13aa28a58d34babe9121d50503e5a9066115d479ad26f278cdbcc265c90096cbf49ce6414c469e7e", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000040)="5889a73b98478af7053ec363882e119ac014b9") bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x400, 0x1}, 0x6) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000180)=""/171) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c1800"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c1800"], 0x5) (async) 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80852d7b8d22e5ff6440de0a1d0ebb8f5a1f7f71ec13aa28a58d34babe9121d50503e5a9066115d479ad26f278cdbcc265c90096cbf49ce6414c469e7e", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80852d7b8d22e5ff6440de0a1d0ebb8f5a1f7f71ec13aa28a58d34babe9121d50503e5a9066115d479ad26f278cdbcc265c90096cbf49ce6414c469e7e", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) 12:29:23 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/133) (async, rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (rerun: 64) [ 1519.943748] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}]}, 0x40}}, 0xc0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="10750c0100e811b00e1640f23d05cc9651d02ef13fa2c2f5ade24657d363b62f4af1cead7c25669203ece5235a2c3cd66712e374a7ba261457b61214bd6cb3d17470195042bc6961874b4c690226e90100d92fb4251a4366e6c22d869977657763476e173cd3b2c8b128ab78d564f77cf3d335a68edb73fee6e7f5667578cbbf0568b177a99d9fdf00ec0dff302d26a814b0b37b04cd1ca4e50063561553b910"], 0x5) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10010, r1, 0xe8504000) 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80852d7b8d22e5ff6440de0a1d0ebb8f5a1f7f71ec13aa28a58d34babe9121d50503e5a9066115d479ad26f278cdbcc265c90096cbf49ce6414c469e7e", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="80852d7b8d22e5ff6440de0a1d0ebb8f5a1f7f71ec13aa28a58d34babe9121d50503e5a9066115d479ad26f278cdbcc265c90096cbf49ce6414c469e7e", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x800, 0x0) (async) 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f1596002", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="10750c0100e811b00e1640f23d05cc9651d02ef13fa2c2f5ade24657d363b62f4af1cead7c25669203ece5235a2c3cd66712e374a7ba261457b61214bd6cb3d17470195042bc6961874b4c690226e90100d92fb4251a4366e6c22d869977657763476e173cd3b2c8b128ab78d564f77cf3d335a68edb73fee6e7f5667578cbbf0568b177a99d9fdf00ec0dff302d26a814b0b37b04cd1ca4e50063561553b910"], 0x5) (async) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10010, r1, 0xe8504000) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000040)="5889a73b98478af7053ec363882e119ac014b9") bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x400, 0x1}, 0x6) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000180)=""/171) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:23 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/133) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f00000001c0)=""/133) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f1596002", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="10750c0100e811b00e1640f23d05cc9651d02ef13fa2c2f5ade24657d363b62f4af1cead7c25669203ece5235a2c3cd66712e374a7ba261457b61214bd6cb3d17470195042bc6961874b4c690226e90100d92fb4251a4366e6c22d869977657763476e173cd3b2c8b128ab78d564f77cf3d335a68edb73fee6e7f5667578cbbf0568b177a99d9fdf00ec0dff302d26a814b0b37b04cd1ca4e50063561553b910"], 0x5) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10010, r1, 0xe8504000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="10750c0100e811b00e1640f23d05cc9651d02ef13fa2c2f5ade24657d363b62f4af1cead7c25669203ece5235a2c3cd66712e374a7ba261457b61214bd6cb3d17470195042bc6961874b4c690226e90100d92fb4251a4366e6c22d869977657763476e173cd3b2c8b128ab78d564f77cf3d335a68edb73fee6e7f5667578cbbf0568b177a99d9fdf00ec0dff302d26a814b0b37b04cd1ca4e50063561553b910"], 0x5) (async) accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000003, 0x10010, r1, 0xe8504000) (async) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000040)="5889a73b98478af7053ec363882e119ac014b9") (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x400, 0x1}, 0x6) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000180)=""/171) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) [ 1520.162584] Bluetooth: hci4 command 0x0401 tx timeout 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) 12:29:23 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x8000005, 0x8]) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x100, 0xfffffffffffffd3d) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000000c0)="9a9f85d9cffa24ed7594ce09769103e65f58bd2e44d7076ab54bf8cc0b2880730b86c914186d04aad70e4b1d767e4241eb6ebd07eed487529fdb029e0c05c48929bd5a1a4a07fe") 12:29:23 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f1596002", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) [ 1520.186215] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:23 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x8000005, 0x8]) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x100, 0xfffffffffffffd3d) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 64) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000000c0)="9a9f85d9cffa24ed7594ce09769103e65f58bd2e44d7076ab54bf8cc0b2880730b86c914186d04aad70e4b1d767e4241eb6ebd07eed487529fdb029e0c05c48929bd5a1a4a07fe") 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "28163f", 0x36, 0xff}) r2 = getpgid(0x0) getpgid(r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={r2, 0x0, 0x5083}) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={r2}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 12:29:23 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x8000005, 0x8]) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x100, 0xfffffffffffffd3d) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f00000000c0)="9a9f85d9cffa24ed7594ce09769103e65f58bd2e44d7076ab54bf8cc0b2880730b86c914186d04aad70e4b1d767e4241eb6ebd07eed487529fdb029e0c05c48929bd5a1a4a07fe") 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "28163f", 0x36, 0xff}) r2 = getpgid(0x0) getpgid(r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={r2, 0x0, 0x5083}) [ 1520.309306] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={r2}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={r2}) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 12:29:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "28163f", 0x36, 0xff}) r2 = getpgid(0x0) getpgid(r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={r2, 0x0, 0x5083}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x6, "28163f", 0x36, 0xff}) (async) getpgid(0x0) (async) getpgid(r2) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={r2, 0x0, 0x5083}) (async) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x44}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/218) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000000)=0x81) 12:29:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x5, 0x2}}}, 0xe) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) 12:29:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 12:29:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x44}, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/218) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000000)=0x81) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x44}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/218) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000000)=0x81) (async) 12:29:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d83701001900fca23d5514597691fee2be6b1f715ac14bff89e033", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) [ 1520.456170] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x5, 0x2}}}, 0xe) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x5, 0x2}}}, 0xe) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) (async) 12:29:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={r2}) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:23 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d83701001900fca23d5514597691fee2be6b1f715ac14bff89e033", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x400) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x44}, 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000180)=""/218) (async) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000000)=0x81) 12:29:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100000000, 0x101080) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xffffffffffffd410, 0x100) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x3, 0x54], 0xffff}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfd64, 0xc00) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0x1, 0x4) r7 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/38, 0x26, 0x10002, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) 12:29:24 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x50004) 12:29:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x5, 0x2}}}, 0xe) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x5, 0x2}}}, 0xe) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) (async) 12:29:24 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d83701001900fca23d5514597691fee2be6b1f715ac14bff89e033", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000180)={{0x8, 0x8}, 'port1\x00', 0x10, 0x40000, 0x8, 0xff, 0x4476, 0x200, 0x46b1, 0x0, 0x4, 0xf9}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x5, 0x1, 0xffffffff, 0x8, 0x2, 0x400}) 12:29:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000000)=0x400) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40000) 12:29:24 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x50004) 12:29:24 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000006ac0)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a40)={0x14, r0, 0xc, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000006980), 0x7, 0x200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000069c0)) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000006940)={&(0x7f0000006800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006840)={0xa0, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x7, &(0x7f0000000280)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003480)=""/170, 0xaa}, {&(0x7f0000003540)=""/177, 0xb1}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x3, &(0x7f0000004640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004740), 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/237, 0xed}, {&(0x7f0000004900)=""/48, 0x30}, {&(0x7f0000004940)=""/137, 0x89}, {&(0x7f0000004a00)=""/168, 0xa8}], 0x5, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004c00)=""/31, 0x1f}, {&(0x7f0000004c40)=""/121, 0x79}, {&(0x7f0000004cc0)=""/239, 0xef}, {&(0x7f0000004dc0)=""/174, 0xae}, {&(0x7f0000004e80)=""/243, 0xf3}, {&(0x7f0000004f80)=""/51, 0x33}], 0x6, &(0x7f0000005040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000050c0), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000005140)=""/201, 0xc9}, {&(0x7f0000005240)=""/109, 0x6d}, {&(0x7f00000052c0)=""/170, 0xaa}, {&(0x7f0000005380)=""/1, 0x1}, {&(0x7f00000053c0)=""/158, 0x9e}, {&(0x7f0000005480)=""/61, 0x3d}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/239, 0xef}], 0x8, &(0x7f0000006640)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40, &(0x7f00000067c0)={0x77359400}) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) r2 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000180)={{0x8, 0x8}, 'port1\x00', 0x10, 0x40000, 0x8, 0xff, 0x4476, 0x200, 0x46b1, 0x0, 0x4, 0xf9}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x5, 0x1, 0xffffffff, 0x8, 0x2, 0x400}) 12:29:24 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 12:29:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40000) (async) [ 1520.738338] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:24 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x50004) 12:29:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100000000, 0x101080) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xffffffffffffd410, 0x100) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x3, 0x54], 0xffff}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfd64, 0xc00) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0x1, 0x4) r7 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/38, 0x26, 0x10002, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100000000, 0x101080) (async) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xffffffffffffd410, 0x100) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x3, 0x54], 0xffff}, 0x10) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfd64, 0xc00) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0x1, 0x4) (async) socket$unix(0x1, 0x2, 0x0) (async) recvfrom$unix(r7, &(0x7f0000000140)=""/38, 0x26, 0x10002, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) (async) 12:29:24 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000006ac0)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a40)={0x14, r0, 0xc, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_open_dev$sndpcmc(&(0x7f0000006980), 0x7, 0x200) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000069c0)) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000006940)={&(0x7f0000006800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006840)={0xa0, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x7, &(0x7f0000000280)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003480)=""/170, 0xaa}, {&(0x7f0000003540)=""/177, 0xb1}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x3, &(0x7f0000004640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004740), 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/237, 0xed}, {&(0x7f0000004900)=""/48, 0x30}, {&(0x7f0000004940)=""/137, 0x89}, {&(0x7f0000004a00)=""/168, 0xa8}], 0x5, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004c00)=""/31, 0x1f}, {&(0x7f0000004c40)=""/121, 0x79}, {&(0x7f0000004cc0)=""/239, 0xef}, {&(0x7f0000004dc0)=""/174, 0xae}, {&(0x7f0000004e80)=""/243, 0xf3}, {&(0x7f0000004f80)=""/51, 0x33}], 0x6, &(0x7f0000005040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000050c0), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000005140)=""/201, 0xc9}, {&(0x7f0000005240)=""/109, 0x6d}, {&(0x7f00000052c0)=""/170, 0xaa}, {&(0x7f0000005380)=""/1, 0x1}, {&(0x7f00000053c0)=""/158, 0x9e}, {&(0x7f0000005480)=""/61, 0x3d}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/239, 0xef}], 0x8, &(0x7f0000006640)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40, &(0x7f00000067c0)={0x77359400}) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000180)={{0x8, 0x8}, 'port1\x00', 0x10, 0x40000, 0x8, 0xff, 0x4476, 0x200, 0x46b1, 0x0, 0x4, 0xf9}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000000)={0x5, 0x1, 0xffffffff, 0x8, 0x2, 0x400}) 12:29:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x40000) (async) 12:29:24 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5) 12:29:24 executing program 0: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01342e12035af06150ca43bbfac3c7898ac29849450dcb6670e8eac3f428638f1f5a9d5de117a1d501003677508376dda305000000ca2d905600000000b109a1d2c050ea1613fad14881a97756d141850817a91930fd5a8e4bd97eb9a4864959ec4fb64c853bcc35a2ec6c3635f218597b5fd897c2292fba4455f2b946eef86dd34505c9e887e10000000000000000000000000000cfc9a775b209be71d7a48b9997378ff557187534809103ee1f02b2729e9bf7c9aec259fc163f42227428eb74994be5f29a19ced99b553869cc94b0eaf567db2919d4fd66052f8b8bb08bf7878cb38fbbb252122894dc5050e03e6a4e139d6e550a783c75a1a8e6c55755d8fa573fdc6f9e4cef3ac5317fbbd72d13ce59d51ae3724eafbd65f1dd800d1ea41ec385b8be6595842e13edc7edc1154c33984fb43b33682d7f4d09a527140f623b5e7ce0645b05c52880459dd171bcc08d18465513c6efec7ea43d282d1ee17afb2dd30c26"], 0x5) 12:29:24 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x1b, 0x0, &(0x7f0000000040)="31cbb53ae30313c722aaa022221b5f389f6b4367b87c8d22450976"}) sysfs$1(0x1, &(0x7f00000000c0)='./binderfs/binder1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fcdbdf25d07eef6936d575d204"], 0xd8}}, 0x0) 12:29:24 executing program 0: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:25 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x1b, 0x0, &(0x7f0000000040)="31cbb53ae30313c722aaa022221b5f389f6b4367b87c8d22450976"}) (async, rerun: 64) sysfs$1(0x1, &(0x7f00000000c0)='./binderfs/binder1\x00') (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fcdbdf25d07eef6936d575d204"], 0xd8}}, 0x0) 12:29:25 executing program 0: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 1521.594152] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1521.620147] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:25 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000006ac0)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a40)={0x14, r0, 0xc, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000006980), 0x7, 0x200) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000069c0)) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000006940)={&(0x7f0000006800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006840)={0xa0, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x7, &(0x7f0000000280)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003480)=""/170, 0xaa}, {&(0x7f0000003540)=""/177, 0xb1}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x3, &(0x7f0000004640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004740), 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/237, 0xed}, {&(0x7f0000004900)=""/48, 0x30}, {&(0x7f0000004940)=""/137, 0x89}, {&(0x7f0000004a00)=""/168, 0xa8}], 0x5, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004c00)=""/31, 0x1f}, {&(0x7f0000004c40)=""/121, 0x79}, {&(0x7f0000004cc0)=""/239, 0xef}, {&(0x7f0000004dc0)=""/174, 0xae}, {&(0x7f0000004e80)=""/243, 0xf3}, {&(0x7f0000004f80)=""/51, 0x33}], 0x6, &(0x7f0000005040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000050c0), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000005140)=""/201, 0xc9}, {&(0x7f0000005240)=""/109, 0x6d}, {&(0x7f00000052c0)=""/170, 0xaa}, {&(0x7f0000005380)=""/1, 0x1}, {&(0x7f00000053c0)=""/158, 0x9e}, {&(0x7f0000005480)=""/61, 0x3d}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/239, 0xef}], 0x8, &(0x7f0000006640)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40, &(0x7f00000067c0)={0x77359400}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000006ac0)={&(0x7f0000006a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a40)={0x14, r0, 0xc, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndpcmc(&(0x7f0000006980), 0x7, 0x200) (async) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f00000069c0)) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000006940)={&(0x7f0000006800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006900)={&(0x7f0000006840)={0xa0, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/146, 0x92}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000001380)=""/208, 0xd0}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x7, &(0x7f0000000280)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003480)=""/170, 0xaa}, {&(0x7f0000003540)=""/177, 0xb1}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x3, &(0x7f0000004640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004740), 0x6e, &(0x7f0000004ac0)=[{&(0x7f00000047c0)=""/42, 0x2a}, {&(0x7f0000004800)=""/237, 0xed}, {&(0x7f0000004900)=""/48, 0x30}, {&(0x7f0000004940)=""/137, 0x89}, {&(0x7f0000004a00)=""/168, 0xa8}], 0x5, &(0x7f0000004b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004c00)=""/31, 0x1f}, {&(0x7f0000004c40)=""/121, 0x79}, {&(0x7f0000004cc0)=""/239, 0xef}, {&(0x7f0000004dc0)=""/174, 0xae}, {&(0x7f0000004e80)=""/243, 0xf3}, {&(0x7f0000004f80)=""/51, 0x33}], 0x6, &(0x7f0000005040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x60}}, {{&(0x7f00000050c0), 0x6e, &(0x7f00000065c0)=[{&(0x7f0000005140)=""/201, 0xc9}, {&(0x7f0000005240)=""/109, 0x6d}, {&(0x7f00000052c0)=""/170, 0xaa}, {&(0x7f0000005380)=""/1, 0x1}, {&(0x7f00000053c0)=""/158, 0x9e}, {&(0x7f0000005480)=""/61, 0x3d}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/239, 0xef}], 0x8, &(0x7f0000006640)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x40, &(0x7f00000067c0)={0x77359400}) (async) 12:29:25 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) 12:29:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5) 12:29:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x100000000, 0x101080) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0xffffffffffffd410, 0x100) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x3, 0x54], 0xffff}, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000040)) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) (async) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xfd64, 0xc00) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180)=0x1, 0x4) r7 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/38, 0x26, 0x10002, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) 12:29:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/73, 0x49, 0x0, &(0x7f00000000c0)=""/227, 0xe3}, &(0x7f0000000200)=0x40) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 1521.652604] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1521.662218] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.5'. 12:29:25 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) (rerun: 32) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x1b, 0x0, &(0x7f0000000040)="31cbb53ae30313c722aaa022221b5f389f6b4367b87c8d22450976"}) sysfs$1(0x1, &(0x7f00000000c0)='./binderfs/binder1\x00') (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fcdbdf25d07eef6936d575d204"], 0xd8}}, 0x0) 12:29:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0175010100697a752333ffb20f5b0519fab045ea7e226fa78e41170c635604be809e7cdf0778"], 0x5) 12:29:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/73, 0x49, 0x0, &(0x7f00000000c0)=""/227, 0xe3}, &(0x7f0000000200)=0x40) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:25 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x577080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) 12:29:25 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 12:29:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0175010100697a752333ffb20f5b0519fab045ea7e226fa78e41170c635604be809e7cdf0778"], 0x5) 12:29:25 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x577080, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) 12:29:25 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) 12:29:25 executing program 3: geteuid() r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x78, r0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x320, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x804) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/73, 0x49, 0x0, &(0x7f00000000c0)=""/227, 0xe3}, &(0x7f0000000200)=0x40) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/73, 0x49, 0x0, &(0x7f00000000c0)=""/227, 0xe3}, &(0x7f0000000200)=0x40) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) [ 1521.842494] Bluetooth: hci2 command 0x0401 tx timeout [ 1522.242393] Bluetooth: hci4 command 0x0401 tx timeout [ 1522.322376] Bluetooth: hci1 command 0x0c75 tx timeout 12:29:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0xc849) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000003ff47fb281f72beae9e1a5744e60e1869181f3e713b2b8c77c218047dda0a39f1259ed2e34a01cca034cb7fe917c0ad8fca527a87568d5e0f8b6076f81c02a01d6cafa007c4f30c3da989622e21c3c57d9860cf4a65bb72b6da34ba4785db2801a13526109e02968f8cadc87a9c1da9fbc3ae2b62cc077eeeae280b518cbfd76c2a9dc14c13cadef5ae7b738e8ea8ecdecdad1968c4932acf2c8772191e440ed567acacaf0e9befa921e68523e28a33b706c924a27319e365015ea525d3968059e5faf41a1e2a71dd6b82f73afd3e1189ad79db017eaa47e5160b14a645d03068da8", @ANYRES32=r0, @ANYBLOB="00032abd7000ffe8df250d000000280002800800030000000000060002004e200000140001000a01010200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0175010100697a752333ffb20f5b0519fab045ea7e226fa78e41170c635604be809e7cdf0778"], 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0175010100697a752333ffb20f5b0519fab045ea7e226fa78e41170c635604be809e7cdf0778"], 0x5) (async) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYRES32=r0], 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 12:29:26 executing program 1: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x577080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x577080, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) (async) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:26 executing program 3: geteuid() (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x78, r0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x320, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x804) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044001}, 0x200400d4) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x81, 0x2, 'client1\x00', 0x0, "f236dd4f5d9357ba", "b36c389b7443dce756515cbf5c7b6362f867b6d8440588f2fac4e6b49f349589", 0x7, 0x6}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0xc849) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000003ff47fb281f72beae9e1a5744e60e1869181f3e713b2b8c77c218047dda0a39f1259ed2e34a01cca034cb7fe917c0ad8fca527a87568d5e0f8b6076f81c02a01d6cafa007c4f30c3da989622e21c3c57d9860cf4a65bb72b6da34ba4785db2801a13526109e02968f8cadc87a9c1da9fbc3ae2b62cc077eeeae280b518cbfd76c2a9dc14c13cadef5ae7b738e8ea8ecdecdad1968c4932acf2c8772191e440ed567acacaf0e9befa921e68523e28a33b706c924a27319e365015ea525d3968059e5faf41a1e2a71dd6b82f73afd3e1189ad79db017eaa47e5160b14a645d03068da8", @ANYRES32=r0, @ANYBLOB="00032abd7000ffe8df250d000000280002800800030000000000060002004e200000140001000a01010200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) 12:29:26 executing program 3: geteuid() r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x78, r0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x320, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x804) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x81, 0x2, 'client1\x00', 0x0, "f236dd4f5d9357ba", "b36c389b7443dce756515cbf5c7b6362f867b6d8440588f2fac4e6b49f349589", 0x7, 0x6}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x81, 0x2, 'client1\x00', 0x0, "f236dd4f5d9357ba", "b36c389b7443dce756515cbf5c7b6362f867b6d8440588f2fac4e6b49f349589", 0x7, 0x6}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:26 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0xc849) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000003ff47fb281f72beae9e1a5744e60e1869181f3e713b2b8c77c218047dda0a39f1259ed2e34a01cca034cb7fe917c0ad8fca527a87568d5e0f8b6076f81c02a01d6cafa007c4f30c3da989622e21c3c57d9860cf4a65bb72b6da34ba4785db2801a13526109e02968f8cadc87a9c1da9fbc3ae2b62cc077eeeae280b518cbfd76c2a9dc14c13cadef5ae7b738e8ea8ecdecdad1968c4932acf2c8772191e440ed567acacaf0e9befa921e68523e28a33b706c924a27319e365015ea525d3968059e5faf41a1e2a71dd6b82f73afd3e1189ad79db017eaa47e5160b14a645d03068da8", @ANYRES32=r0, @ANYBLOB="00032abd7000ffe8df250d000000280002800800030000000000060002004e200000140001000a01010200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004840}, 0xc849) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000003ff47fb281f72beae9e1a5744e60e1869181f3e713b2b8c77c218047dda0a39f1259ed2e34a01cca034cb7fe917c0ad8fca527a87568d5e0f8b6076f81c02a01d6cafa007c4f30c3da989622e21c3c57d9860cf4a65bb72b6da34ba4785db2801a13526109e02968f8cadc87a9c1da9fbc3ae2b62cc077eeeae280b518cbfd76c2a9dc14c13cadef5ae7b738e8ea8ecdecdad1968c4932acf2c8772191e440ed567acacaf0e9befa921e68523e28a33b706c924a27319e365015ea525d3968059e5faf41a1e2a71dd6b82f73afd3e1189ad79db017eaa47e5160b14a645d03068da8", @ANYRES32=r0, @ANYBLOB="00032abd7000ffe8df250d000000280002800800030000000000060002004e200000140001000a01010200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) (async) 12:29:26 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044001}, 0x200400d4) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 12:29:26 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2201) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000480)={0xda, 0xd48, 0x401, 0x3f, 0x8, 0x3}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8080) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/138) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff300000", @ANYRESOCT=r1, @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x5, 0x5d, 0x0, 0x6, 0x158, 0x1}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x433e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000440)='blkio.reset_stats\x00', 0x2, 0x0) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x81, 0x2, 'client1\x00', 0x0, "f236dd4f5d9357ba", "b36c389b7443dce756515cbf5c7b6362f867b6d8440588f2fac4e6b49f349589", 0x7, 0x6}) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x81, 0x2, 'client1\x00', 0x0, "f236dd4f5d9357ba", "b36c389b7443dce756515cbf5c7b6362f867b6d8440588f2fac4e6b49f349589", 0x7, 0x6}) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x1, &(0x7f0000000000)=""/169, 0xa9}, &(0x7f0000000100)=0x40) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfea, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:26 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044001}, 0x200400d4) 12:29:26 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2201) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000480)={0xda, 0xd48, 0x401, 0x3f, 0x8, 0x3}) (async) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8080) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/138) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff300000", @ANYRESOCT=r1, @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x5, 0x5d, 0x0, 0x6, 0x158, 0x1}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x433e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000440)='blkio.reset_stats\x00', 0x2, 0x0) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x1, &(0x7f0000000000)=""/169, 0xa9}, &(0x7f0000000100)=0x40) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfea, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x1, &(0x7f0000000000)=""/169, 0xa9}, &(0x7f0000000100)=0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/4096, 0x1000, 0x1, &(0x7f0000000000)=""/169, 0xa9}, &(0x7f0000000100)=0x40) (async) 12:29:26 executing program 2: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000180)=""/245) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0xea4d, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @acquire_done={0x40106309, 0x2}], 0x1e, 0x0, &(0x7f0000000040)="751d57cbe44c992bd9dc557fa6ceb4e9a0b7682f1b070701f5b5e7893da8"}) 12:29:26 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x2201) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000480)={0xda, 0xd48, 0x401, 0x3f, 0x8, 0x3}) (async, rerun: 32) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8080) (rerun: 32) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/138) (async) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff300000", @ANYRESOCT=r1, @ANYRESDEC], 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x5, 0x5d, 0x0, 0x6, 0x158, 0x1}) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x433e}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000440)='blkio.reset_stats\x00', 0x2, 0x0) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xfea, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @acquire_done={0x40106309, 0x2}], 0x1e, 0x0, &(0x7f0000000040)="751d57cbe44c992bd9dc557fa6ceb4e9a0b7682f1b070701f5b5e7893da8"}) 12:29:26 executing program 2: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000180)=""/245) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0xea4d, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f00000000c0)="1a5ea29e7e182e579f39e1f476951339f64bf3f445c1ab9c01b5f32e46065f78c33751b7381a52bc7ef381ed796fc18cad5f79b1d3cbfa293b74b880aa562f8e104a9578c0e941447b49d42424a3686e3331dc87b94520c97de20ee9861b328a6b23b92ccbfe1b4e62c3876272a383d94259591a75545d67e082bd519b49139aa9bb229892d10ff703ed819f117707c848995e75b456399236052a40c220bffd162b8f2635fa4a319f46f29597a563ed768a80dda074c60f2822afa1ab9124ce7d988ce3030b664b652b03beb40eade6bb6d03bd080dc82695b73a5a136f653b97a3198c5e36c11eda86d1d9a79830b50f59a678eb70067bd1") sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:26 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="01002dbd8200fcdbdf250484f829c6531548ca9137d403bfdc2eaa3dc31c41f7279dda2f1d274d644760d03ca722886a8742f76d8915edc61cd03af060baf03d3c332ff4a71ee2505f1f3342cadd548843a8ae63a79a1ba84a38adbff90ecc6730b27fbce03aacada4b88e2ddadf4277ecd46f78e7eba4b88295cca3b79f6e5d8dfa21b32c90815c77775f3db4febb0495ec8de595c6a4767841718bd1a3fac83ec2a0252cd68ae40c25b1db7777ae7e9bc7d436e129bbb4fbe60bff06f55df98c622d3a5716f5cb87a5b4a7150e7678fbd9f827"], 0xd8}}, 0x0) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @acquire_done={0x40106309, 0x2}], 0x1e, 0x0, &(0x7f0000000040)="751d57cbe44c992bd9dc557fa6ceb4e9a0b7682f1b070701f5b5e7893da8"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @acquire_done={0x40106309, 0x2}], 0x1e, 0x0, &(0x7f0000000040)="751d57cbe44c992bd9dc557fa6ceb4e9a0b7682f1b070701f5b5e7893da8"}) (async) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0xffffffffffffffec) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f00000000c0)="1a5ea29e7e182e579f39e1f476951339f64bf3f445c1ab9c01b5f32e46065f78c33751b7381a52bc7ef381ed796fc18cad5f79b1d3cbfa293b74b880aa562f8e104a9578c0e941447b49d42424a3686e3331dc87b94520c97de20ee9861b328a6b23b92ccbfe1b4e62c3876272a383d94259591a75545d67e082bd519b49139aa9bb229892d10ff703ed819f117707c848995e75b456399236052a40c220bffd162b8f2635fa4a319f46f29597a563ed768a80dda074c60f2822afa1ab9124ce7d988ce3030b664b652b03beb40eade6bb6d03bd080dc82695b73a5a136f653b97a3198c5e36c11eda86d1d9a79830b50f59a678eb70067bd1") sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:26 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="01002dbd8200fcdbdf250484f829c6531548ca9137d403bfdc2eaa3dc31c41f7279dda2f1d274d644760d03ca722886a8742f76d8915edc61cd03af060baf03d3c332ff4a71ee2505f1f3342cadd548843a8ae63a79a1ba84a38adbff90ecc6730b27fbce03aacada4b88e2ddadf4277ecd46f78e7eba4b88295cca3b79f6e5d8dfa21b32c90815c77775f3db4febb0495ec8de595c6a4767841718bd1a3fac83ec2a0252cd68ae40c25b1db7777ae7e9bc7d436e129bbb4fbe60bff06f55df98c622d3a5716f5cb87a5b4a7150e7678fbd9f827"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="01002dbd8200fcdbdf250484f829c6531548ca9137d403bfdc2eaa3dc31c41f7279dda2f1d274d644760d03ca722886a8742f76d8915edc61cd03af060baf03d3c332ff4a71ee2505f1f3342cadd548843a8ae63a79a1ba84a38adbff90ecc6730b27fbce03aacada4b88e2ddadf4277ecd46f78e7eba4b88295cca3b79f6e5d8dfa21b32c90815c77775f3db4febb0495ec8de595c6a4767841718bd1a3fac83ec2a0252cd68ae40c25b1db7777ae7e9bc7d436e129bbb4fbe60bff06f55df98c622d3a5716f5cb87a5b4a7150e7678fbd9f827"], 0xd8}}, 0x0) (async) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0xffffffffffffffec) 12:29:26 executing program 1: accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 2: ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000180)=""/245) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0xea4d, 0x4) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000180)=""/245) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0xea4d, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000d66c1ef337b7439dfc22a5cf40c2fae538ee7227b02eace3d304908342ce0a1bc2dd631c510cb1572ae6fae9378905ab1bfc3855f3ecfc22638da64625ffbbbe913b351f626883f72843ef12a700e249475632", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async, rerun: 32) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000040)=""/49, &(0x7f0000000080)=0x31) (rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f00000000c0)="1a5ea29e7e182e579f39e1f476951339f64bf3f445c1ab9c01b5f32e46065f78c33751b7381a52bc7ef381ed796fc18cad5f79b1d3cbfa293b74b880aa562f8e104a9578c0e941447b49d42424a3686e3331dc87b94520c97de20ee9861b328a6b23b92ccbfe1b4e62c3876272a383d94259591a75545d67e082bd519b49139aa9bb229892d10ff703ed819f117707c848995e75b456399236052a40c220bffd162b8f2635fa4a319f46f29597a563ed768a80dda074c60f2822afa1ab9124ce7d988ce3030b664b652b03beb40eade6bb6d03bd080dc82695b73a5a136f653b97a3198c5e36c11eda86d1d9a79830b50f59a678eb70067bd1") (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:26 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="01002dbd8200fcdbdf250484f829c6531548ca9137d403bfdc2eaa3dc31c41f7279dda2f1d274d644760d03ca722886a8742f76d8915edc61cd03af060baf03d3c332ff4a71ee2505f1f3342cadd548843a8ae63a79a1ba84a38adbff90ecc6730b27fbce03aacada4b88e2ddadf4277ecd46f78e7eba4b88295cca3b79f6e5d8dfa21b32c90815c77775f3db4febb0495ec8de595c6a4767841718bd1a3fac83ec2a0252cd68ae40c25b1db7777ae7e9bc7d436e129bbb4fbe60bff06f55df98c622d3a5716f5cb87a5b4a7150e7678fbd9f827"], 0xd8}}, 0x0) 12:29:26 executing program 1: accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0xffffffffffffffec) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r2 = getpgid(0x0) getpgid(r2) r3 = geteuid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="52747dfdd84bb5737a641c", 0xb}, {&(0x7f0000000180)="c81e5739ce5e4b727680ea80c4d23003da19613f77685d89546e90d0a99cd8d7df6ecd380d02de551868ddc3a0d785285380f53846070264813c3b644c6cecf9478b9f350de8011637092a92b9535eae848cce18e515296c84ee3375ee8022d800352f797125ad3087a67aad2712a297577d31305e02c836d2ccc9722936cbf561d7e6aa0afc0a5b7dfc6da65d6fc1ac4b2c7b", 0x93}, {&(0x7f0000000240)="1e66d4b175f287e194874f901e33deca0a7552061d265554a4b016dc2c231c5ac7b6a5d86fdc8a36943d24fee01eca3e96987876d8d47e7a3b1147cfed220113fbadfb80bb7026d7db772b4d8f4103b14c8ccc62e0a8a7bd4ede5aa92f83adbd5fe2cc5080376e0b290e85ba79009729c587cb228b344e279aa01e18c7ae23d707303c9987e2", 0x86}, {&(0x7f0000000300)="eff927698e714d1643e584cbd0df", 0xe}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}], 0x20}, 0xc0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000d66c1ef337b7439dfc22a5cf40c2fae538ee7227b02eace3d304908342ce0a1bc2dd631c510cb1572ae6fae9378905ab1bfc3855f3ecfc22638da64625ffbbbe913b351f626883f72843ef12a700e249475632", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000d66c1ef337b7439dfc22a5cf40c2fae538ee7227b02eace3d304908342ce0a1bc2dd631c510cb1572ae6fae9378905ab1bfc3855f3ecfc22638da64625ffbbbe913b351f626883f72843ef12a700e249475632", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a725959ee2f61be2f0c75dc11a0829f50780f91d75721c8196ff4d4f62c1b5ab16ca1e0542c67be558035f0a80f5ed28b65bf7b876c23fb33dbcd9b0b4bd9b5ceb9f1a90e2e973e1971838fbc0c9c3a4595faf49a1798ff58bd02c6d053d3b0d5e545507da0e4051512a513f6912ddc05932b2c36085fa35b674ad27d9f89bf7d5ca532ecb85c88a6d6c162fd89f5ee60ff76cf2c8e949c11", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000c0000000000"], 0x1c}}, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/86) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xe6cc3, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0xfff]) 12:29:26 executing program 1: accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x80000) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) r2 = getpgid(0x0) getpgid(r2) (async) r3 = geteuid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="52747dfdd84bb5737a641c", 0xb}, {&(0x7f0000000180)="c81e5739ce5e4b727680ea80c4d23003da19613f77685d89546e90d0a99cd8d7df6ecd380d02de551868ddc3a0d785285380f53846070264813c3b644c6cecf9478b9f350de8011637092a92b9535eae848cce18e515296c84ee3375ee8022d800352f797125ad3087a67aad2712a297577d31305e02c836d2ccc9722936cbf561d7e6aa0afc0a5b7dfc6da65d6fc1ac4b2c7b", 0x93}, {&(0x7f0000000240)="1e66d4b175f287e194874f901e33deca0a7552061d265554a4b016dc2c231c5ac7b6a5d86fdc8a36943d24fee01eca3e96987876d8d47e7a3b1147cfed220113fbadfb80bb7026d7db772b4d8f4103b14c8ccc62e0a8a7bd4ede5aa92f83adbd5fe2cc5080376e0b290e85ba79009729c587cb228b344e279aa01e18c7ae23d707303c9987e2", 0x86}, {&(0x7f0000000300)="eff927698e714d1643e584cbd0df", 0xe}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}], 0x20}, 0xc0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:26 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x100, 0x70bd2d, 0xa5dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x815) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000d66c1ef337b7439dfc22a5cf40c2fae538ee7227b02eace3d304908342ce0a1bc2dd631c510cb1572ae6fae9378905ab1bfc3855f3ecfc22638da64625ffbbbe913b351f626883f72843ef12a700e249475632", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a725959ee2f61be2f0c75dc11a0829f50780f91d75721c8196ff4d4f62c1b5ab16ca1e0542c67be558035f0a80f5ed28b65bf7b876c23fb33dbcd9b0b4bd9b5ceb9f1a90e2e973e1971838fbc0c9c3a4595faf49a1798ff58bd02c6d053d3b0d5e545507da0e4051512a513f6912ddc05932b2c36085fa35b674ad27d9f89bf7d5ca532ecb85c88a6d6c162fd89f5ee60ff76cf2c8e949c11", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000c0000000000"], 0x1c}}, 0x0) (async) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/86) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xe6cc3, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0xfff]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xe6cc3, 0x0) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0xfff]) (async) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x79, 0x4) r1 = inotify_init1(0x80800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80) 12:29:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) (async) r2 = getpgid(0x0) getpgid(r2) (async) r3 = geteuid() sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="52747dfdd84bb5737a641c", 0xb}, {&(0x7f0000000180)="c81e5739ce5e4b727680ea80c4d23003da19613f77685d89546e90d0a99cd8d7df6ecd380d02de551868ddc3a0d785285380f53846070264813c3b644c6cecf9478b9f350de8011637092a92b9535eae848cce18e515296c84ee3375ee8022d800352f797125ad3087a67aad2712a297577d31305e02c836d2ccc9722936cbf561d7e6aa0afc0a5b7dfc6da65d6fc1ac4b2c7b", 0x93}, {&(0x7f0000000240)="1e66d4b175f287e194874f901e33deca0a7552061d265554a4b016dc2c231c5ac7b6a5d86fdc8a36943d24fee01eca3e96987876d8d47e7a3b1147cfed220113fbadfb80bb7026d7db772b4d8f4103b14c8ccc62e0a8a7bd4ede5aa92f83adbd5fe2cc5080376e0b290e85ba79009729c587cb228b344e279aa01e18c7ae23d707303c9987e2", 0x86}, {&(0x7f0000000300)="eff927698e714d1643e584cbd0df", 0xe}], 0x4, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}], 0x20}, 0xc0) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (rerun: 32) 12:29:26 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x100, 0x70bd2d, 0xa5dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x815) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x100, 0x70bd2d, 0xa5dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x815) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a725959ee2f61be2f0c75dc11a0829f50780f91d75721c8196ff4d4f62c1b5ab16ca1e0542c67be558035f0a80f5ed28b65bf7b876c23fb33dbcd9b0b4bd9b5ceb9f1a90e2e973e1971838fbc0c9c3a4595faf49a1798ff58bd02c6d053d3b0d5e545507da0e4051512a513f6912ddc05932b2c36085fa35b674ad27d9f89bf7d5ca532ecb85c88a6d6c162fd89f5ee60ff76cf2c8e949c11", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000c0000000000"], 0x1c}}, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/86) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6a725959ee2f61be2f0c75dc11a0829f50780f91d75721c8196ff4d4f62c1b5ab16ca1e0542c67be558035f0a80f5ed28b65bf7b876c23fb33dbcd9b0b4bd9b5ceb9f1a90e2e973e1971838fbc0c9c3a4595faf49a1798ff58bd02c6d053d3b0d5e545507da0e4051512a513f6912ddc05932b2c36085fa35b674ad27d9f89bf7d5ca532ecb85c88a6d6c162fd89f5ee60ff76cf2c8e949c11", @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000c0000000000"], 0x1c}}, 0x0) (async) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/86) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) (async) 12:29:26 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="144c712931000120", @ANYRES16=r2, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) 12:29:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0xe6cc3, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x3, 0xfff]) 12:29:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x79, 0x4) r1 = inotify_init1(0x80800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="144c712931000120", @ANYRES16=r2, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="144c712931000120", @ANYRES16=r2, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) (async) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x100, 0x70bd2d, 0xa5dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x815) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x100, 0x70bd2d, 0xa5dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x815) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x80000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000280)) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x9) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/184, 0xb8, 0x2, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r9}], 0xab, 0x0, &(0x7f0000000500)="f80f1b2889e64c38ffb09944704b7d2ed056c385bde8ebff6fc0bcc21f53856284ae84e7ac9c6f70b3d2ce85b257afab1736c109dbccdf55eac53f01f916de527a5673b61e9cd568362036298b778f60e252463a9d217cb25ae6502304245a70e4e8f2c49513a01dbf25bfa3b4ad2dcbd76996f0460d2f11110109f2423024daeadc13135e4cd62ba36d0eeb2869644a4b169f8ad0eddc393f30d1f5b3f93e7ced736a258e13fa0a613504"}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x2000c849) 12:29:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x5) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x79, 0x4) r1 = inotify_init1(0x80800) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x5) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x79, 0x4) (async) inotify_init1(0x80800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80) (async) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="144c712931000120", @ANYRES16=r2, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="144c712931000120", @ANYRES16=r2, @ANYBLOB="010000000000000000000b000000"], 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) (async) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800b2b200ca", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff05}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33a4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) 12:29:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x80000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000280)) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) r9 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x9) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/184, 0xb8, 0x2, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r9}], 0xab, 0x0, &(0x7f0000000500)="f80f1b2889e64c38ffb09944704b7d2ed056c385bde8ebff6fc0bcc21f53856284ae84e7ac9c6f70b3d2ce85b257afab1736c109dbccdf55eac53f01f916de527a5673b61e9cd568362036298b778f60e252463a9d217cb25ae6502304245a70e4e8f2c49513a01dbf25bfa3b4ad2dcbd76996f0460d2f11110109f2423024daeadc13135e4cd62ba36d0eeb2869644a4b169f8ad0eddc393f30d1f5b3f93e7ced736a258e13fa0a613504"}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x2000c849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x80000) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000280)) (async) openat$cgroup_ro(r6, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x9) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/184, 0xb8, 0x2, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r9}], 0xab, 0x0, &(0x7f0000000500)="f80f1b2889e64c38ffb09944704b7d2ed056c385bde8ebff6fc0bcc21f53856284ae84e7ac9c6f70b3d2ce85b257afab1736c109dbccdf55eac53f01f916de527a5673b61e9cd568362036298b778f60e252463a9d217cb25ae6502304245a70e4e8f2c49513a01dbf25bfa3b4ad2dcbd76996f0460d2f11110109f2423024daeadc13135e4cd62ba36d0eeb2869644a4b169f8ad0eddc393f30d1f5b3f93e7ced736a258e13fa0a613504"}) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x2000c849) (async) 12:29:27 executing program 1: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c0180"], 0x5) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:27 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800b2b200ca", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff05}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33a4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) 12:29:27 executing program 1: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c0180"], 0x5) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c0180"], 0x5) (async) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 12:29:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x80000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(r4, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000280)) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r7, 0x806c4120, &(0x7f0000000100)) (async, rerun: 64) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) (rerun: 64) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) (async, rerun: 32) r9 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x9) (rerun: 32) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f00000003c0)=[@acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x2}, @register_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x1, 0x5}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/184, 0xb8, 0x2, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r9}], 0xab, 0x0, &(0x7f0000000500)="f80f1b2889e64c38ffb09944704b7d2ed056c385bde8ebff6fc0bcc21f53856284ae84e7ac9c6f70b3d2ce85b257afab1736c109dbccdf55eac53f01f916de527a5673b61e9cd568362036298b778f60e252463a9d217cb25ae6502304245a70e4e8f2c49513a01dbf25bfa3b4ad2dcbd76996f0460d2f11110109f2423024daeadc13135e4cd62ba36d0eeb2869644a4b169f8ad0eddc393f30d1f5b3f93e7ced736a258e13fa0a613504"}) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x2000c849) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800b2b200ca", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff05}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33a4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8080) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800b2b200ca", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff05}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33a4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8080) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) (async) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x5}}}, 0xb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x43925000) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:27 executing program 1: getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01750c0180"], 0x5) 12:29:27 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xd8}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) [ 1523.922321] Bluetooth: hci2 command 0x0401 tx timeout 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x5}}}, 0xb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x43925000) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x5}}}, 0xb) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x43925000) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x4}}}, 0x7) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/192) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x2, 0x6], 0x532d}, 0x10) 12:29:27 executing program 5: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 12:29:27 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x45fb291869560a5f}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x5}}}, 0xb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x43925000) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0x5}}}, 0xb) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x50, r2, 0x43925000) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 12:29:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x4}}}, 0x7) (async, rerun: 64) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/192) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x2, 0x6], 0x532d}, 0x10) 12:29:27 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x20040) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x380, [0x3, 0x101], [{0x3221, 0x9b36, 0x1, 0x0, 0x1}, {0x4, 0xfffffffb, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xbe0c, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}, {0x40, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xff, 0x8e, 0x1, 0x1, 0x1}, {0x0, 0x757, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x17e, 0x400}], 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x45fb291869560a5f}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x45fb291869560a5f}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400) inotify_rm_watch(0xffffffffffffffff, r1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x20040) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x380, [0x3, 0x101], [{0x3221, 0x9b36, 0x1, 0x0, 0x1}, {0x4, 0xfffffffb, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xbe0c, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}, {0x40, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xff, 0x8e, 0x1, 0x1, 0x1}, {0x0, 0x757, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x17e, 0x400}], 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) 12:29:27 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xb7fe, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000180)={0x7, [0x7fff, 0x4, 0x2], [{0x6, 0x7, 0x1, 0x1, 0x1}, {0xffe00000, 0xacc3, 0x1, 0x0, 0x1, 0x1}, {0x401, 0x10000}, {0x100, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0x3, 0x1, 0x1}, {0x7, 0x1ff, 0x1, 0x0, 0x1, 0x1}, {0x81, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x1}, {0x70, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1, 0x1, 0x1}, {0x6, 0x200, 0x1, 0x0, 0x1, 0x1}], 0x7}) 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x45fb291869560a5f}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeff}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x45fb291869560a5f}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xffff, 0x4) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x20040) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x380, [0x3, 0x101], [{0x3221, 0x9b36, 0x1, 0x0, 0x1}, {0x4, 0xfffffffb, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xbe0c, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}, {0x40, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xff, 0x8e, 0x1, 0x1, 0x1}, {0x0, 0x757, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x17e, 0x400}], 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x20040) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000040)={0x380, [0x3, 0x101], [{0x3221, 0x9b36, 0x1, 0x0, 0x1}, {0x4, 0xfffffffb, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xbe0c, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x1}, {0x40, 0x101, 0x0, 0x1, 0x1, 0x1}, {0xff, 0x8e, 0x1, 0x1, 0x1}, {0x0, 0x757, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xfffffff8, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x17e, 0x400}], 0x7fffffff}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) 12:29:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x4}}}, 0x7) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/192) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x2, 0x6], 0x532d}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000140), 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9, 0x4}}}, 0x7) (async) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000040)=""/192) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0x8, [0x2, 0x6], 0x532d}, 0x10) (async) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async, rerun: 32) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xb7fe, 0x2) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000180)={0x7, [0x7fff, 0x4, 0x2], [{0x6, 0x7, 0x1, 0x1, 0x1}, {0xffe00000, 0xacc3, 0x1, 0x0, 0x1, 0x1}, {0x401, 0x10000}, {0x100, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0x3, 0x1, 0x1}, {0x7, 0x1ff, 0x1, 0x0, 0x1, 0x1}, {0x81, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x1}, {0x70, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1, 0x1, 0x1}, {0x6, 0x200, 0x1, 0x0, 0x1, 0x1}], 0x7}) [ 1524.322350] Bluetooth: hci4 command 0x0401 tx timeout 12:29:27 executing program 3: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8000000", @ANYRESOCT=r1, @ANYBLOB="01002dbd7000fcdbdf250408ba57c1bf5ec93429795914fbc9a2cc75806ac84d7858db8f6b06007f93d492f12d46d6a0aef0b74de0d3cacab85e3a040d6950a45f6ab18098398c64fa75e8d05947e07cbf9442772f5679b3c7ce6fd6aa8787bf271b52bcd662059ed07c7d8cfcb46a45ed4dc13095a6b7911d834e483184711fb302c7938e548a2d6d3f8dd29349dd5e2d837cdd031c9a"], 0xd8}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x118, r0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xab}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcec1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xca9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 12:29:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xffff, 0x4) 12:29:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004}, 0x62000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xb7fe, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000180)={0x7, [0x7fff, 0x4, 0x2], [{0x6, 0x7, 0x1, 0x1, 0x1}, {0xffe00000, 0xacc3, 0x1, 0x0, 0x1, 0x1}, {0x401, 0x10000}, {0x100, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x10000, 0x3, 0x1, 0x1}, {0x7, 0x1ff, 0x1, 0x0, 0x1, 0x1}, {0x81, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x1, 0x1}, {0x8, 0x9, 0x1, 0x1}, {0x70, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1, 0x1, 0x1}, {0x6, 0x200, 0x1, 0x0, 0x1, 0x1}], 0x7}) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) [ 1524.412281] Bluetooth: hci1 command 0x0c75 tx timeout [ 1524.434837] ------------[ cut here ]------------ [ 1524.439732] WARNING: CPU: 1 PID: 17097 at kernel/workqueue.c:1386 __queue_work+0xaaa/0xf70 [ 1524.448132] Kernel panic - not syncing: panic_on_warn set ... [ 1524.448132] 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x6, "d56548", 0x2, 0x1}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) 12:29:27 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x4) (async) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYBLOB="01002dbd7000fcdbdf2504"], 0xd8}}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) [ 1524.455503] CPU: 1 PID: 17097 Comm: syz-executor.1 Not tainted 4.14.295-syzkaller #0 [ 1524.463377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 1524.472749] Call Trace: [ 1524.472764] dump_stack+0x1b2/0x281 [ 1524.478973] panic+0x1f9/0x42d [ 1524.482167] ? add_taint.cold+0x16/0x16 [ 1524.486147] ? __queue_work+0xaaa/0xf70 [ 1524.490129] ? __queue_work+0xaaa/0xf70 [ 1524.494108] __warn.cold+0x20/0x44 [ 1524.497654] ? ist_end_non_atomic+0x10/0x10 [ 1524.501975] ? __queue_work+0xaaa/0xf70 [ 1524.505947] report_bug+0x208/0x250 12:29:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004}, 0x62000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x11}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44004}, 0x62000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc849) (async) 12:29:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x6, "d56548", 0x2, 0x1}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x6, "d56548", 0x2, 0x1}) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) (async) [ 1524.509584] do_error_trap+0x195/0x2d0 [ 1524.513476] ? math_error+0x2d0/0x2d0 [ 1524.517277] ? trace_hardirqs_on+0x10/0x10 [ 1524.521512] ? memset+0x20/0x40 [ 1524.524787] ? __alloc_skb+0x3dc/0x510 [ 1524.528676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1524.533535] invalid_op+0x1b/0x40 [ 1524.537004] RIP: 0010:__queue_work+0xaaa/0xf70 [ 1524.541586] RSP: 0018:ffff88809ef17ab8 EFLAGS: 00010097 [ 1524.546941] RAX: ffff88809d2f00c0 RBX: ffff88809d2f00c0 RCX: 0000000000000000 [ 1524.554218] RDX: 0000000000000000 RSI: ffff88809c705d40 RDI: ffff88809d2f00e4 12:29:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events.local\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x6, "d56548", 0x2, 0x1}) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}}}, 0x5) [ 1524.554225] RBP: 0000000000000008 R08: ffffffff8b9cb380 R09: 0000000000000000 [ 1524.568749] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880a24966c0 [ 1524.576011] R13: ffff8880a24966c0 R14: 0000000000000000 R15: ffff88809c705d40 [ 1524.583299] ? __queue_work+0xaaa/0xf70 [ 1524.587276] ? mark_held_locks+0xa6/0xf0 [ 1524.591337] queue_work_on+0x159/0x1d0 [ 1524.595221] hci_sock_sendmsg+0x106b/0x1d00 [ 1524.599541] ? futex_wake+0x116/0x3c0 [ 1524.603339] ? aa_file_perm+0x2dd/0xab0 [ 1524.607313] ? hci_send_to_channel+0x200/0x200 [ 1524.611901] ? lock_acquire+0x170/0x3f0 [ 1524.615874] ? security_socket_sendmsg+0x83/0xb0 [ 1524.620630] ? hci_send_to_channel+0x200/0x200 [ 1524.625213] sock_sendmsg+0xb5/0x100 [ 1524.628921] sock_write_iter+0x22c/0x370 [ 1524.632984] ? sock_sendmsg+0x100/0x100 [ 1524.637054] ? iov_iter_init+0xa6/0x1c0 [ 1524.641044] __vfs_write+0x44c/0x630 [ 1524.641055] ? kernel_read+0x110/0x110 [ 1524.641074] ? rw_verify_area+0xe1/0x2a0 [ 1524.641083] vfs_write+0x17f/0x4d0 [ 1524.641093] SyS_write+0xf2/0x210 [ 1524.641101] ? SyS_read+0x210/0x210 [ 1524.641111] ? do_syscall_64+0x4c/0x640 [ 1524.641118] ? SyS_read+0x210/0x210 [ 1524.641126] do_syscall_64+0x1d5/0x640 [ 1524.641140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1524.641147] RIP: 0033:0x7f428a2d45a9 [ 1524.641151] RSP: 002b:00007f4288c47168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1524.641161] RAX: ffffffffffffffda RBX: 00007f428a3f4f80 RCX: 00007f428a2d45a9 [ 1524.641165] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 1524.641169] RBP: 00007f428a32f580 R08: 0000000000000000 R09: 0000000000000000 [ 1524.641174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.641178] R13: 00007fffca8ca64f R14: 00007f4288c47300 R15: 0000000000022000 [ 1524.645182] Kernel Offset: disabled [ 1524.731342] Rebooting in 86400 seconds..