Warning: Permanently added '[localhost]:42796' (ECDSA) to the list of known hosts. 2024/10/28 17:35:07 fuzzer started 2024/10/28 17:35:07 dialing manager at localhost:45639 syzkaller login: [ 66.864438] cgroup: Unknown subsys name 'net' [ 66.975529] cgroup: Unknown subsys name 'cpuset' [ 67.016775] cgroup: Unknown subsys name 'rlimit' 2024/10/28 17:35:25 syscalls: 209 2024/10/28 17:35:25 code coverage: enabled 2024/10/28 17:35:25 comparison tracing: enabled 2024/10/28 17:35:25 extra coverage: enabled 2024/10/28 17:35:25 setuid sandbox: enabled 2024/10/28 17:35:25 namespace sandbox: enabled 2024/10/28 17:35:25 Android sandbox: enabled 2024/10/28 17:35:25 fault injection: enabled 2024/10/28 17:35:25 leak checking: enabled 2024/10/28 17:35:25 net packet injection: enabled 2024/10/28 17:35:25 net device setup: enabled 2024/10/28 17:35:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/28 17:35:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/28 17:35:25 USB emulation: enabled 2024/10/28 17:35:25 hci packet injection: enabled 2024/10/28 17:35:25 wifi device emulation: enabled 2024/10/28 17:35:25 802.15.4 emulation: enabled 2024/10/28 17:35:25 fetching corpus: 0, signal 0/0 (executing program) 2024/10/28 17:35:27 starting 8 fuzzer processes 17:35:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0xf, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000c, 0x40010, r0, 0xb62f2000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000002c0)={'\x00', 0x800, 0x1, 0x8001}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0xff800000}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f00000004c0)={{0xca, 0x7f}, {0x912a, 0x6}, 0x7ff, 0x1}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x2, 0x6, 0x8000}}) epoll_create1(0x80000) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000540)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x210, 0x0, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3605}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0xcc, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_MASTER={0x9c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x11}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000880), 0x40, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb2d}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040000) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 17:35:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x39d, 0xcf06}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x20010, r0, 0x1f45e000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x82401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getuid() r4 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file1\x00'}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000180)={0x8, "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"}) ioctl$TCFLSH(r5, 0x540b, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000400)={0x383, 0x200, 0x81, 0x6, 0x4a, "19f3e19e9aac8257efe1d0cf850aaf13cf9cbc", 0x200, 0x400}) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000440)) ioctl$TIOCSBRK(r2, 0x5427) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480), 0x88400, 0x0) write$P9_RFLUSH(r8, &(0x7f00000004c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$TIOCL_GETSHIFTSTATE(r8, 0x541c, &(0x7f0000000500)={0x6, 0x1}) 17:35:27 executing program 2: ioprio_set$uid(0x3, 0x0, 0x6000) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x800) r0 = getpgid(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xfffffffffffffffa) r2 = getpgid(r0) r3 = getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0xffffffffffffffff, r3, 0x0, 0xee01, 0x92, 0x3}, 0x2, 0xd, 0x7, 0x7f, r1, r4, 0xc9}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_macvtap\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffff8}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r8 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x2, 0xee01, r5, r7, 0xee01, 0x50, 0x9}, 0xf1f, 0x5, 0x401, 0x400, r8, r4, 0x4}) getegid() r9 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r6, {r9, r5}}, './file0\x00'}) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000004c0)=""/185) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000580)={{0x3, 0x0, r3, r9, r3, 0x0, 0x8}, 0x6e70, 0xb5, 0x80, 0x7, r4, r2, 0xca}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) 17:35:27 executing program 3: sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x320, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x21}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x13, 0xa, 0x604, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20004001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000480)=r1) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x1, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000005c0)=""/87) write$P9_RMKDIR(r2, &(0x7f0000000640)={0x14, 0x49, 0x1, {0x80, 0x3, 0x7}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4040840) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004190) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0xa84}}, './file0/file0\x00'}) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000900)={'binder1\x00'}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000a40), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000ac0)="33bd97aeedfc356597a342cdd7d840ee", 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r5, @in_args={0x4}}, './file0/file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r6, {0x14800}}, './file0/file0\x00'}) [ 85.501831] audit: type=1400 audit(1730136927.082:7): avc: denied { execmem } for pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:35:27 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x2c}}, 0x0) socketpair(0xa, 0x2, 0x80000001, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe0, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5e}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000044) write$P9_RLINK(r2, &(0x7f0000000500)={0x7, 0x47, 0x1}, 0x7) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x1b3842, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8d35289c5f85c244}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x90}}, 0x4000024) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040005) openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xbc, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39fa}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc800}, 0x4004040) socketpair(0x11, 0x800, 0x9, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000800}, 0x8127d22191b7b878) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r8, {0xee00, 0xee00}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x144, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT={0xa4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x30000, 0x0) 17:35:27 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0x81, "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"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000240)={0x2, {0x2, 0x2, 0x1, 0x98af, 0x4, 0x4}}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000280)={0x5, 0xb879, 0x200, 0x1, 0x7, "d145cb9eacd9f1583b727c716ac27d4f2d90f4", 0x1ff, 0xa5}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000300)=""/232) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x16}}, './file0\x00'}) ioctl$TCFLSH(r4, 0x540b, 0x1) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000440)) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000480)={0x3, 0x8, 0x1, 0x101, 0x5, "14bd2515e930c77f1eaf45599f13b4e2e742c7"}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x3, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xffffff7f}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x80000001}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x10001}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20080001}, 0x4005) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000700)={0x0, 0x3ff, 0x101}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x210200, 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000780)) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x6, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x40400c0) socket$nl_xfrm(0x10, 0x3, 0x6) 17:35:27 executing program 6: ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x40}}, './file0\x00'}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x80801, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x1, 0x3, 0x5, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) ioctl$TIOCSBRK(r3, 0x5427) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x521800, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000001340)) r6 = syz_open_pts(r2, 0x800) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x98, 0xa, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'virt_wifi0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x762320dcfbdae6cb}}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xf, 0x1a, '/dev/ttyS3\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x400c800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0xd28}}, './file0/file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001540)=0xffffffffffffffff, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xc8d) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000001580)="0b054d2fc885fd73e206ba18a90c893aa9dacdc15471df437ab44cb3b217b68b76fd17e8c9651cec3d00f6c40ebd0ac5a4da347fa0617400e685985eb97f3e70cad278f9d1ef9dadccd5d6fbf2a1ac4514e8c7e8e8f703cd9ae94b77a0dffabc70abca8267f53b241b9ac5f0ed1a0c035389f91d895f2adb27e6680643a810b2586f4f") ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000001640)={{0x1, 0x1, 0x18, r6, {0x7, 0xffff}}, './file0\x00'}) 17:35:27 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, r4}}, './file0\x00'}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x501, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x8001}}, './file0/file0\x00'}) ioctl$TCSBRKP(r0, 0x5425, 0x80000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r10, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0/file0\x00'}) write$P9_RVERSION(r12, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0x6, 0x1, '@\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x6, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x40088d4) getgroups(0x4, &(0x7f0000000480)=[r4, r4, r7, r4]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r6, r14}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {r3, r13}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r15, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r12, {r16, r17}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000580)=[@mss={0x2, 0x7}, @window={0x3, 0x39b, 0x4}, @mss={0x2, 0x9}], 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r11, {0x2e00000}}, './file0\x00'}) [ 86.855500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.860003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.864141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.872987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.875086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.876508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.976227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.982537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.987899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.997315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.998210] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.002863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.004948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.008348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.011329] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.013254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.016151] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.018026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.020038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.022493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.024575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.032284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.033935] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.034993] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.036077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.037662] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.041071] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.044136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.045952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.048106] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 87.050732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 87.052950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.056986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.061753] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.063822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.066313] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.072504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.076506] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.082491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.094472] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.096252] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.098238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.115062] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.117323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.122906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.168595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.184153] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.186949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.945958] Bluetooth: hci0: command tx timeout [ 89.081779] Bluetooth: hci2: command tx timeout [ 89.135772] Bluetooth: hci7: command tx timeout [ 89.200831] Bluetooth: hci4: command tx timeout [ 89.201465] Bluetooth: hci1: command tx timeout [ 89.202626] Bluetooth: hci5: command tx timeout [ 89.203251] Bluetooth: hci3: command tx timeout [ 89.391154] Bluetooth: hci6: command tx timeout [ 90.990820] Bluetooth: hci0: command tx timeout [ 91.118836] Bluetooth: hci2: command tx timeout [ 91.182787] Bluetooth: hci7: command tx timeout [ 91.247055] Bluetooth: hci4: command tx timeout [ 91.247526] Bluetooth: hci5: command tx timeout [ 91.248109] Bluetooth: hci1: command tx timeout [ 91.248558] Bluetooth: hci3: command tx timeout [ 91.439179] Bluetooth: hci6: command tx timeout [ 93.038918] Bluetooth: hci0: command tx timeout [ 93.167717] Bluetooth: hci2: command tx timeout [ 93.231202] Bluetooth: hci7: command tx timeout [ 93.295005] Bluetooth: hci3: command tx timeout [ 93.297893] Bluetooth: hci1: command tx timeout [ 93.298362] Bluetooth: hci5: command tx timeout [ 93.299032] Bluetooth: hci4: command tx timeout [ 93.486963] Bluetooth: hci6: command tx timeout [ 95.086947] Bluetooth: hci0: command tx timeout [ 95.214781] Bluetooth: hci2: command tx timeout [ 95.278781] Bluetooth: hci7: command tx timeout [ 95.342929] Bluetooth: hci4: command tx timeout [ 95.343405] Bluetooth: hci5: command tx timeout [ 95.344429] Bluetooth: hci1: command tx timeout [ 95.344971] Bluetooth: hci3: command tx timeout [ 95.534792] Bluetooth: hci6: command tx timeout [ 147.147272] syz-executor.5 (286) used greatest stack depth: 23552 bytes left [ 149.544114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.553890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.555847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.565214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.570017] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.576341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.630827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.632844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.634894] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.636171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.642862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.644492] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.650222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.654739] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.657069] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.661075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.664043] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.666041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.691425] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.697979] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.710336] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.716945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.737914] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.747285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.798934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.826377] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 149.844894] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 149.850215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 149.851402] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.859785] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 149.862899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.866904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.868711] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.869875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.888158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.889753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.890828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.893279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.894948] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.896186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.912996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 149.916012] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 149.937208] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 149.940435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 149.947177] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 149.951931] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.953830] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 149.955203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.664510] Bluetooth: hci0: command tx timeout [ 151.726934] Bluetooth: hci2: command tx timeout [ 151.727639] Bluetooth: hci1: command tx timeout [ 151.855734] Bluetooth: hci3: command tx timeout [ 151.919060] Bluetooth: hci5: command tx timeout [ 152.048729] Bluetooth: hci4: command tx timeout [ 152.175978] Bluetooth: hci6: command tx timeout [ 152.177119] Bluetooth: hci7: command tx timeout [ 153.714741] Bluetooth: hci0: command tx timeout [ 153.775036] Bluetooth: hci2: command tx timeout [ 153.775543] Bluetooth: hci1: command tx timeout [ 153.902821] Bluetooth: hci3: command tx timeout [ 153.967974] Bluetooth: hci5: command tx timeout [ 154.095819] Bluetooth: hci4: command tx timeout [ 154.223976] Bluetooth: hci6: command tx timeout [ 154.224494] Bluetooth: hci7: command tx timeout [ 155.758878] Bluetooth: hci0: command tx timeout [ 155.823801] Bluetooth: hci1: command tx timeout [ 155.824302] Bluetooth: hci2: command tx timeout [ 155.950836] Bluetooth: hci3: command tx timeout [ 156.014828] Bluetooth: hci5: command tx timeout [ 156.144796] Bluetooth: hci4: command tx timeout [ 156.271771] Bluetooth: hci7: command tx timeout [ 156.272292] Bluetooth: hci6: command tx timeout [ 157.807763] Bluetooth: hci0: command tx timeout [ 157.873756] Bluetooth: hci2: command tx timeout [ 157.874259] Bluetooth: hci1: command tx timeout [ 157.999756] Bluetooth: hci3: command tx timeout [ 158.064897] Bluetooth: hci5: command tx timeout [ 158.191727] Bluetooth: hci4: command tx timeout [ 158.318773] Bluetooth: hci6: command tx timeout [ 158.319422] Bluetooth: hci7: command tx timeout [ 212.055181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.057961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.059734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.061147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.067212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.072082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.074116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.079060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.080392] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.082428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.088353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.089946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.234292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.236181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.241753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.246594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.249889] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.251539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.296200] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.300178] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.302056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.314784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.321037] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.323310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.328917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.332991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.339912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.342809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 212.356439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.371995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.377224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 212.378243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.383279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.389538] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.396134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 212.397920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.402836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 212.407496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.413543] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 212.415309] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.416725] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 212.421981] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.621918] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.627939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.631916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.663677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.667920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 212.669901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.127019] Bluetooth: hci0: command tx timeout [ 214.127928] Bluetooth: hci1: command tx timeout [ 214.319749] Bluetooth: hci2: command tx timeout [ 214.446988] Bluetooth: hci4: command tx timeout [ 214.448923] Bluetooth: hci3: command tx timeout [ 214.574823] Bluetooth: hci6: command tx timeout [ 214.576620] Bluetooth: hci5: command tx timeout [ 214.831793] Bluetooth: hci7: command tx timeout [ 216.175829] Bluetooth: hci0: command tx timeout [ 216.176395] Bluetooth: hci1: command tx timeout [ 216.367788] Bluetooth: hci2: command tx timeout [ 216.500717] Bluetooth: hci4: command tx timeout [ 216.501270] Bluetooth: hci3: command tx timeout [ 216.624720] Bluetooth: hci6: command tx timeout [ 216.624751] Bluetooth: hci5: command tx timeout [ 216.879758] Bluetooth: hci7: command tx timeout [ 218.223704] Bluetooth: hci1: command tx timeout [ 218.224265] Bluetooth: hci0: command tx timeout [ 218.415840] Bluetooth: hci2: command tx timeout [ 218.542770] Bluetooth: hci4: command tx timeout [ 218.543333] Bluetooth: hci3: command tx timeout [ 218.670765] Bluetooth: hci5: command tx timeout [ 218.671332] Bluetooth: hci6: command tx timeout [ 218.926785] Bluetooth: hci7: command tx timeout [ 220.270989] Bluetooth: hci0: command tx timeout [ 220.271557] Bluetooth: hci1: command tx timeout [ 220.463700] Bluetooth: hci2: command tx timeout [ 220.590762] Bluetooth: hci4: command tx timeout [ 220.592238] Bluetooth: hci3: command tx timeout [ 220.718899] Bluetooth: hci5: command tx timeout [ 220.719464] Bluetooth: hci6: command tx timeout [ 220.975826] Bluetooth: hci7: command tx timeout [ 274.496610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.499555] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.503580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.508258] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.511430] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.514148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.626287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.629529] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.633070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.646984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.653071] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.656190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.697120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.702983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.709927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.718357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.724687] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.731349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.775702] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.785918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.805541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.834343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.841804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.845839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.849980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.855855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.860879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.864670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.867129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.872128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.873921] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.877422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.879068] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.880418] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.881324] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.890776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.890796] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.906007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.906927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.914357] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.926357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.934555] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 274.935716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.956863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.957284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.961256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.965373] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 274.966579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.526879] Bluetooth: hci0: command tx timeout [ 276.728775] Bluetooth: hci1: command tx timeout [ 276.791011] Bluetooth: hci2: command tx timeout [ 276.976744] Bluetooth: hci7: command tx timeout [ 276.978180] Bluetooth: hci3: command tx timeout [ 277.045884] Bluetooth: hci4: command tx timeout [ 277.046724] Bluetooth: hci6: command tx timeout [ 277.047327] Bluetooth: hci5: command tx timeout [ 278.575782] Bluetooth: hci0: command tx timeout [ 278.766722] Bluetooth: hci1: command tx timeout [ 278.831701] Bluetooth: hci2: command tx timeout [ 279.024022] Bluetooth: hci3: command tx timeout [ 279.024552] Bluetooth: hci7: command tx timeout [ 279.086994] Bluetooth: hci5: command tx timeout [ 279.087510] Bluetooth: hci6: command tx timeout [ 279.089670] Bluetooth: hci4: command tx timeout [ 280.622801] Bluetooth: hci0: command tx timeout [ 280.815729] Bluetooth: hci1: command tx timeout [ 280.879795] Bluetooth: hci2: command tx timeout [ 281.071910] Bluetooth: hci3: command tx timeout [ 281.072451] Bluetooth: hci7: command tx timeout [ 281.135650] Bluetooth: hci5: command tx timeout [ 281.136160] Bluetooth: hci4: command tx timeout [ 281.136679] Bluetooth: hci6: command tx timeout [ 282.671691] Bluetooth: hci0: command tx timeout [ 282.865707] Bluetooth: hci1: command tx timeout [ 282.927718] Bluetooth: hci2: command tx timeout [ 283.121677] Bluetooth: hci3: command tx timeout [ 283.122210] Bluetooth: hci7: command tx timeout [ 283.182849] Bluetooth: hci6: command tx timeout [ 283.183476] Bluetooth: hci4: command tx timeout [ 283.184301] Bluetooth: hci5: command tx timeout [ 337.001859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.006059] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.010019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.016197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.018228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.019392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.032594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.035905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.038825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.041481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.047725] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.052828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.147489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.150497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.154138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.157283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.159162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.160416] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.182447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.183977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.189963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.200855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.202869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.204865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.214747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.218899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.240341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.251998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.262833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.264574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.266852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.270855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.275811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.277585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.278722] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.281094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.287748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.294012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.308853] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.313559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.314933] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.329294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.333273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.335490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.336737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.341281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.343251] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.344561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 339.056803] Bluetooth: hci0: command tx timeout [ 339.118726] Bluetooth: hci1: command tx timeout [ 339.183751] Bluetooth: hci2: command tx timeout [ 339.312954] Bluetooth: hci3: command tx timeout [ 339.438758] Bluetooth: hci4: command tx timeout [ 339.439835] Bluetooth: hci6: command tx timeout [ 339.502837] Bluetooth: hci5: command tx timeout [ 339.503852] Bluetooth: hci7: command tx timeout [ 341.103665] Bluetooth: hci0: command tx timeout [ 341.166732] Bluetooth: hci1: command tx timeout [ 341.230811] Bluetooth: hci2: command tx timeout [ 341.359020] Bluetooth: hci3: command tx timeout [ 341.487933] Bluetooth: hci6: command tx timeout [ 341.488489] Bluetooth: hci4: command tx timeout [ 341.551428] Bluetooth: hci7: command tx timeout [ 341.552004] Bluetooth: hci5: command tx timeout [ 343.150785] Bluetooth: hci0: command tx timeout [ 343.214703] Bluetooth: hci1: command tx timeout [ 343.278721] Bluetooth: hci2: command tx timeout [ 343.406712] Bluetooth: hci3: command tx timeout [ 343.534727] Bluetooth: hci4: command tx timeout [ 343.535282] Bluetooth: hci6: command tx timeout [ 343.598729] Bluetooth: hci5: command tx timeout [ 343.599299] Bluetooth: hci7: command tx timeout [ 345.198745] Bluetooth: hci0: command tx timeout [ 345.262937] Bluetooth: hci1: command tx timeout [ 345.327255] Bluetooth: hci2: command tx timeout [ 345.454791] Bluetooth: hci3: command tx timeout [ 345.583870] Bluetooth: hci6: command tx timeout [ 345.585474] Bluetooth: hci4: command tx timeout [ 345.646766] Bluetooth: hci7: command tx timeout [ 345.648338] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:40:36 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800e647978 RCX=0000000000000001 RDX=1ffff11001cc8f3a RSI=ffff88800e647e58 RDI=ffff88800e647978 RBP=ffff88800e6479d0 RSP=ffff88800e647960 R8 =0000000000000001 R9 =ffff88800e6479b8 R10=000000000003c001 R11=000000000002ccee R12=ffff88800e647a40 R13=0000000000000000 R14=ffff888032461b80 R15=ffff88802bdd2700 RIP=ffffffff81148c4e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1a6daa2540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c6da45f4c8 CR3=000000002ca6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880167341da RCX=1ffffffff0fde786 RDX=0000000000000004 RSI=0000000000000100 RDI=ffffffff87ef3c30 RBP=ffff888016733700 RSP=ffff88802de6fa68 R8 =0000000000000000 R9 =fffffbfff0fda9dd R10=ffffffff87ed4eef R11=0000000000000000 R12=ffff8880167341b8 R13=0000000000000002 R14=0000000000000002 R15=0000000000000002 RIP=ffffffff812fb2ab RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3bdbb79540 CR3=00000000300f2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000