Warning: Permanently added '[localhost]:40106' (ECDSA) to the list of known hosts. 2024/11/12 18:42:06 fuzzer started 2024/11/12 18:42:06 dialing manager at localhost:46317 syzkaller login: [ 78.593644] cgroup: Unknown subsys name 'net' [ 78.697178] cgroup: Unknown subsys name 'cpuset' [ 78.714187] cgroup: Unknown subsys name 'rlimit' 2024/11/12 18:42:32 syscalls: 223 2024/11/12 18:42:32 code coverage: enabled 2024/11/12 18:42:32 comparison tracing: enabled 2024/11/12 18:42:32 extra coverage: enabled 2024/11/12 18:42:32 setuid sandbox: enabled 2024/11/12 18:42:32 namespace sandbox: enabled 2024/11/12 18:42:32 Android sandbox: enabled 2024/11/12 18:42:32 fault injection: enabled 2024/11/12 18:42:32 leak checking: enabled 2024/11/12 18:42:32 net packet injection: enabled 2024/11/12 18:42:32 net device setup: enabled 2024/11/12 18:42:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/12 18:42:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/12 18:42:32 USB emulation: enabled 2024/11/12 18:42:32 hci packet injection: enabled 2024/11/12 18:42:32 wifi device emulation: enabled 2024/11/12 18:42:32 802.15.4 emulation: enabled 2024/11/12 18:42:32 fetching corpus: 0, signal 0/0 (executing program) 2024/11/12 18:42:33 starting 8 fuzzer processes 18:42:33 executing program 0: get_thread_area(&(0x7f0000000000)={0x6a1, 0x100000, 0x400, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1}) get_thread_area(&(0x7f0000000040)={0x6, 0x1000, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r0 = memfd_secret(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={@id={0x2, 0x0, @c}}) close(r0) r1 = memfd_secret(0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x3, 0x84000) renameat2(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0xd) getdents64(r1, &(0x7f00000001c0)=""/169, 0xa9) prctl$PR_SET_KEEPCAPS(0x8, 0x1) get_thread_area(&(0x7f0000000280)={0xffffffff, 0xffffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000002c0)={'binder1\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x480002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) faccessat(r0, &(0x7f0000000480)='./file0\x00', 0x154) r3 = syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x3, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="2f859caaaa20ee51b737031b77adb9c051ef4ee3908130a35bfd44d27fea1a8813400763dc67cc99120fd722ec5a89ffc092df2b74151374a0057525d4df921934604a8e74c1e0e3bf4b36c1f946b510a40237bcf3aa30f0b621434ab977571a8c3529957386efac330e919a159c155565f152a87dd0f602739ead2cda76ba155928990cf44d074ce98137ea0611a573a17416368504c84a9c9143c98d640e484eef3d05810c61010edd5f695243e75c1610", 0xb2, 0xcd0}, {&(0x7f0000000600)="384f327b6b8fc222f08c4934440cc9f374b887e2e755f98a2448c2bb1230ef03f32360c6d2986bf4711889216c0b36183143509d837a11c445f7f6f1a80419bb946b62447273948a1329bf1e8c6c7b6309c3a2f44b6952b7748c8850c4d3b96cc38eae44d8c28e667379b7e890514695462250455e73882aba65608b7e66818ec36757d51cf7abe5ce3a462fb374a871652a5317295e08fd2fed440911dbcd3581f31d8edd0f1858a7494c73e2e8c558459c5b9e32cf6a5e700d67e0eeaec6964ff82f2c6b3bd496c9ecec5b9e5394139a81320df6e0", 0xd6, 0x5}, {&(0x7f0000000700)="0ef27beeebcd25f1685baf203d1117f573a9b283ab6c36f29fbf17cce1edbb2d0ab3845a2e0b7ec3dc3ee840da1ea959faf3c15545bb6724f94dc72d1a88197d57edca3cca3cb179f832fd14e4d062d8d7e8", 0x52, 0x401}, {&(0x7f0000000780)="a07101a019e688730f114e2691cf179b35230baa2d4f8531802065c238ea7db88f34c3451fa0a3e932451afaf4d07d212462c9e6ed21c1375246889d1b6cabbede", 0x41, 0x7}], 0x2008000, &(0x7f0000000880)={[{@nocompress}, {@nojoliet}, {@gid={'gid', 0x3d, 0xee00}}], [{@obj_role={'obj_role', 0x3d, 'nl80211\x00'}}, {@obj_role={'obj_role', 0x3d, 'binder1\x00'}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x3a}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '/dev/full\x00'}}]}) name_to_handle_at(r3, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@reiserfs_5={0x14, 0x5, {0x0, 0xfff, 0x7, 0x2}}, &(0x7f00000009c0), 0x1400) name_to_handle_at(r0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@OVL_FILEID_V0={0xdf, 0xfb, {0x0, 0xfb, 0xdf, 0x1, 0x8, "c73838bd622adac6f86c1b35339dbb8d", "bfa5c921708471701584bbb936dc91470627ce38105b1490bd0542153566719ab542f4dbe23edd26902fb802dd2e6df41ba176decbdd5b0c97a6834e0173107e7950dab6f66e6537d00ea95b825bf8857825be80b39cd052fb0c6d45d9680852e89318a1b9280250ed5aa169e61edb17dd24b55bb30d5a3587601cd668153e67f8f2f4870f1418c465b99206cc083b743c50440d7a6d914700c7c98ed3cb36f5a07b98901a0727ecef7d7c3fa66e03cffa81b9d3927f8c320c92662290c07df9b8bb026793a583e26864"}}, &(0x7f0000000b40), 0x400) getdents64(0xffffffffffffffff, &(0x7f0000000bc0)=""/196, 0xc4) 18:42:33 executing program 1: ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) r0 = memfd_secret(0x80000) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000040)=""/78, 0x4e}) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/79, 0x4f}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000200), 0x5, 0x105400) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000340)={&(0x7f0000000240), &(0x7f0000000280)=""/163, 0xa3}) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffff903}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x767}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x81) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000500)=""/36) socketpair(0x15, 0x6, 0x4, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000580)) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x8, 0x8003) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000740)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/221, 0xdd}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r3, {0xee00, 0xee00}}, './file0\x00'}) read$usbmon(r4, &(0x7f00000007c0)=""/66, 0x42) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000840)={0x0, 0x2, 0x2, 0x5}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x1a1b8) ustat(0xdf6, &(0x7f0000000880)) read$hidraw(r1, &(0x7f00000008c0)=""/188, 0xbc) 18:42:33 executing program 2: sysinfo(&(0x7f0000000000)=""/143) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f00000000c0)={0x81, 0xff, 0x6, 0x1, 0x4, 0x7}) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000b40)=@type=0xa) close(0xffffffffffffffff) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000bc0)=0x6) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x202840, 0x0) ioctl$CDROMEJECT(r1, 0x5309) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000c40), 0x1, 0x0) faccessat2(r2, &(0x7f0000000c80)='./file0/file0\x00', 0x0, 0x2200) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0/file0\x00'}) ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f0000000d00)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000d40), 0xf4c87886696d7753, 0x0) ioctl$DVD_WRITE_STRUCT(r4, 0x5390, &(0x7f0000000d80)=@type=0x3) r5 = add_key$fscrypt_v1(&(0x7f00000016c0), &(0x7f0000001700)={'fscrypt:', @auto=[0x30, 0x62, 0x63, 0x38, 0x64, 0x39, 0x63, 0x37, 0x36, 0x39, 0x63, 0x61, 0x30, 0x36, 0x36, 0x63]}, &(0x7f0000001740)={0x0, "35282d8ae6d8a70c0b83cc83b2278774dd50e91b28a2fdc5037bb7034dcf1f9921a773c1e72b3f2a93541dbdd498e4c970326044c8aa6ea506da7b7a9ba285f2", 0x40}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @auto=[0x65, 0x34, 0x31, 0x64, 0x4, 0x31, 0x6b, 0x30, 0x39, 0x66, 0x5b, 0x30, 0x34, 0x39, 0x36, 0x38]}, &(0x7f0000001640)={0x0, "2af615ebc2be9fcd3dec38e60ad7621031f0b31c9831201aeeb4ca33de2be4e16de9262bf5ea3ef2497ac7bc6e11db5ab921eefa15307743f86e6822465e8d6f", 0x2b}, 0x48, r5) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000017c0)={0x0, 0x5, 0xe, 0x1, @msf={0x8, 0x6, 0x2}, 0x20}) r6 = syz_io_uring_complete(0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000001800)={0x3, 0x3f, 0xc, 0x5, 0x3, 0xfb, @msf={0x81, 0xff, 0x7}, @msf={0xe9, 0x0, 0x3}}) 18:42:33 executing program 3: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x8, 0xc, 0x7f, 0x1, 0x5, 0x1}) ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x6) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000ac0)={0x1f296b44, 0x1}) write$hidraw(0xffffffffffffffff, &(0x7f0000000b00)="ad35bc1333ea6ca296adeb3951a3fa954c03a44ef455ec4afa3ae76dce11565e7f2ecf8edb61c8afe353741661484bcadee3227cee83be4c0225e8806da0d197aa34b1d50cd9bec38d047146c39f62ce5fc2a04507ed6daf268435cd3706a99f2145f6bd352f509de2387969a543ea41edacf6c99d5971e34115dfb8c125d421ec849f491b22f02d63dabb182619065b646a30107c70417e1ef77c389e0890420bc4ba52ed4b5b7c823cbf6626ab96b32b317e29a55f819ee9219b350fb501f6824f52f49e9c08477a2e44e74f30b4053ea36c5655776651da4672c1f0cde30d91f5feda9714c5", 0xe7) r2 = syz_io_uring_setup(0x29b8, &(0x7f0000000c00)={0x0, 0x2292, 0x1, 0x0, 0x3b7, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000d00)=0x159, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r1) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffeff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7138c148}]}, 0x5c}}, 0x800) syz_io_uring_submit(r3, 0x0, &(0x7f0000000f00)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r2, 0x0, 0x0, 0x6, 0xe, 0x1, {0x0, 0x0, r0}}, 0x7) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f0000000f40)={0x2}) close(r0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000f80), 0x404140, 0x0) ioctl$CDROMGETSPINDOWN(r8, 0x531d, &(0x7f0000000fc0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, r1, {r5, r6}}, './file0/../file0\x00'}) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4208}]}]}, 0x7c}}, 0x805) ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000001180)={0x5, 0x80}) [ 105.163101] audit: type=1400 audit(1731436953.856:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:42:33 executing program 4: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1a8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3f80000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xffff7fff, @mcast2, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x6}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7fff, @loopback, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5707}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4f6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x106b}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff37}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff37f9}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x10090}, 0x4001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40) r3 = syz_open_dev$mouse(&(0x7f0000000600), 0x80000000, 0x400401) mknodat$loop(r3, &(0x7f0000000640)='./file0\x00', 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000680), 0x200002, 0x0) name_to_handle_at(r4, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@ocfs2={0xc, 0x1, {0x7fff, 0x6459ca7e, 0x9}}, &(0x7f0000000740), 0x400) getsockname(r3, &(0x7f0000000780)=@isdn, &(0x7f0000000800)=0x80) readlinkat(r4, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/44, 0x2c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x1ac, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xb}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x73}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa4}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0xc0d4}, 0x8010) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x14b000, 0x0) mknodat$loop(r6, &(0x7f0000000bc0)='./file0\x00', 0x6000, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x61000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x90, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd855}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x73}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9, 0x62}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x10000800) 18:42:33 executing program 5: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7f, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="eeb3a23579f7b896f49c3c88b22bda4b07ec45ad91bb5cae1d13830d796ec3a248bcac33924ef98dbcb9", 0x2a, 0x2d}, {&(0x7f00000000c0)="4594ea2d450908a8cb554a4e7eafc7bdbf33b4736b6fca5898452775a5a2e60086d1c590faffaacfbfa454f46885cb8a2eaaca7c727d41fcd0fe1f80b54e8557e8867e8d8534779490e617a255b6733d818808a578307e18c25321e845ffc60f680cc1be0ab67957b24d5b036cc0ac4cf0721fbdc3c2842d62f30324", 0x7c, 0x5}], 0x90, &(0x7f0000000180)={[{@overriderock}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '&\'+@{'}}, {@smackfsdef={'smackfsdef', 0x3d, '{%(:'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '/\xc8,%'}}, {@appraise_type}]}) getdents64(r0, &(0x7f0000000280)=""/193, 0xc1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0xc8280, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @adiantum, 0x2, @desc4}) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x128, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x23}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4050}, 0x4054) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000600)=@v2={0x2, @aes128, 0x0, '\x00', @a}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r1, 0x0, r1, 0x2, 0x0, 0x1}, 0x88) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r2 = openat$incfs(r1, &(0x7f0000000780)='.pending_reads\x00', 0x100, 0x4) faccessat(r2, &(0x7f00000007c0)='./file0\x00', 0x2) getdents64(r0, &(0x7f0000000800)=""/47, 0x2f) faccessat2(r0, &(0x7f0000000840)='./file0\x00', 0x18, 0x1300) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000880)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f0000000900)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000940)={@desc={0x1, 0x0, @desc3}}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x820) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, r4}}, './file0\x00'}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1b4, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x39c9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x25}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ac}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6416}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x2}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x31}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8815b03c07fdc120}, 0x40) 18:42:33 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/192) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x3, 0xee00, r3, r4, 0xffffffffffffffff, 0x100, 0x1000}, 0x1, 0x1ff, 0x7e2000, 0x3, 0x0, 0xffffffffffffffff, 0x3ff}) r7 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6, r1}}, './file0\x00'}) r10 = geteuid() r11 = getpgid(0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f00000003c0)={{0x2, r6, r9, r10, r2, 0x36, 0x20}, 0xa4ba, 0x4, 0x100000001, 0xfffffffffffffff8, 0xffffffffffffffff, r11, 0x327}) r12 = syz_io_uring_setup(0x6d, &(0x7f0000000440)={0x0, 0xf23f, 0x4, 0x3, 0x35b}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r13, &(0x7f0000000580)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, &(0x7f0000000540)="18edf380e7a268", 0x7}, 0xfffffff9) mknodat(r8, &(0x7f00000005c0)='./file0\x00', 0x2, 0x2) time(&(0x7f0000000600)) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000640)=""/243) r14 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r12, {r5, 0x0}}, './file0/file0\x00'}) r16 = geteuid() getresgid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000840)={{0x3, r14, r15, r16, r17, 0x1c8, 0x81}, 0x40000000, 0x100, 0x5a, 0x0, r11, r11, 0x238}) 18:42:34 executing program 7: r0 = syz_io_uring_setup(0x69a1, &(0x7f0000000000)={0x0, 0xaee, 0x2, 0x1, 0x1e9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x5a1e, &(0x7f0000000100)={0x0, 0xfd02, 0x0, 0x0, 0xd6, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xd6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsetxattr(r1, &(0x7f0000000280)=@random={'user.', '&)%\x00'}, &(0x7f00000002c0)='\x00', 0x1, 0x0) ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000300)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x50, r1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/dev_mcast\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) r6 = syz_io_uring_complete(r3) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r6, 0x0, &(0x7f0000000400)='./file0\x00', 0x140, 0x20000, 0x23456}, 0x5) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x604400, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r7, 0x5396, &(0x7f00000004c0)={0x7}) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x3, &(0x7f0000000740)=[{&(0x7f0000000580)="e661dfe81303ffdce30043440c17e735eff3bca2789c", 0x16, 0x20}, {&(0x7f00000005c0)="159d25559dd753c4375306a8c2bbd5b11b71c908346e0422eaa3150df38166819c6ff358f44d98d8dd11f75bd064dad437be2664ca2bf5f529169137422c550394ac77522cf9355eeab674a9c6e6611e4893dcf16177f1be926e02b8b8e2cf1529f5aae19baff61a80810546188cd5814e2d5ded83f7a650397842ee775108fdde85b0592227f30895bf8d6624c1b183efadca03676bfbcbd04fe7a942d4b695b6376c8e507c1f09ee1db6e838b50e80866429e77a52da67569878dd2b09e134f7e8809d139b19dd881c4c2261daf02870ab85d791acf24de53b94d962818f4ba4e05b3a706af3915fdfbf69ec0f70a407", 0xf1, 0x5}, {&(0x7f00000006c0)="08f69245b28424df5f02c1406e3f42ad35127a60f18879680a52fedfc37bfa821bae8402266289a737865a5a6c57ece7f3ad3d020dffa353d6dfb338eae745ac85c775b4fa2e431c89427384ef8973b584a0dcf8a1712fe90467645e5eb0076b89", 0x61, 0x5}], 0xa4, &(0x7f00000007c0)={[{@nojoliet}, {@nojoliet}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, ':[-\\n'}}]}) fcntl$addseals(r5, 0x409, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r8 = getpid() r9 = syz_io_uring_complete(r3) clone3(&(0x7f0000000b00)={0x20000080, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0xb}, &(0x7f0000000900)=""/148, 0x94, &(0x7f00000009c0)=""/199, &(0x7f0000000ac0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, r8, 0xffffffffffffffff], 0x6, {r9}}, 0x58) [ 106.505962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.507440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.508915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.516420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.518779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.519896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.560250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.564914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.566574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.575390] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.577723] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.581090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.693909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.700775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.702167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.713842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.716375] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.717870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.756668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.764120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.765774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.771902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.776953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.782977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.789528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.794877] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.796835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.797854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.802217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.803783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.804640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.808884] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.810470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.816191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.825200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.847996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.849845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.852730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.864417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.866103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.872170] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.874207] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.875447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.886865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.913943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.935911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.945857] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.952802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.598116] Bluetooth: hci0: command tx timeout [ 108.660436] Bluetooth: hci1: command tx timeout [ 108.787668] Bluetooth: hci2: command tx timeout [ 108.852686] Bluetooth: hci3: command tx timeout [ 108.916700] Bluetooth: hci7: command tx timeout [ 108.916744] Bluetooth: hci4: command tx timeout [ 108.979688] Bluetooth: hci5: command tx timeout [ 109.044883] Bluetooth: hci6: command tx timeout [ 110.643668] Bluetooth: hci0: command tx timeout [ 110.709607] Bluetooth: hci1: command tx timeout [ 110.835712] Bluetooth: hci2: command tx timeout [ 110.899677] Bluetooth: hci3: command tx timeout [ 110.963763] Bluetooth: hci4: command tx timeout [ 110.966600] Bluetooth: hci7: command tx timeout [ 111.027668] Bluetooth: hci5: command tx timeout [ 111.091655] Bluetooth: hci6: command tx timeout [ 112.691893] Bluetooth: hci0: command tx timeout [ 112.755778] Bluetooth: hci1: command tx timeout [ 112.883622] Bluetooth: hci2: command tx timeout [ 112.947699] Bluetooth: hci3: command tx timeout [ 113.011700] Bluetooth: hci7: command tx timeout [ 113.012208] Bluetooth: hci4: command tx timeout [ 113.075680] Bluetooth: hci5: command tx timeout [ 113.139632] Bluetooth: hci6: command tx timeout [ 114.739839] Bluetooth: hci0: command tx timeout [ 114.803644] Bluetooth: hci1: command tx timeout [ 114.931908] Bluetooth: hci2: command tx timeout [ 114.995698] Bluetooth: hci3: command tx timeout [ 115.060637] Bluetooth: hci4: command tx timeout [ 115.061159] Bluetooth: hci7: command tx timeout [ 115.137588] Bluetooth: hci5: command tx timeout [ 115.193628] Bluetooth: hci6: command tx timeout [ 169.285032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.286810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.287951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.296306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.298007] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.299119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.354420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.358290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.360837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.362961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.365932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.368915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.370925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.374119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.374191] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.384519] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.386403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.387849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.421193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.428234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.445306] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.459828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.466998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.468846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.470126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.470230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.477894] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.482832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.484486] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.487870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.497514] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.514882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.532372] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.533516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.539799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.546747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.551031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.557394] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.572192] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.578801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.581906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.582449] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.620818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.622289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.625736] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.626913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.631095] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.637731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.315730] Bluetooth: hci0: command tx timeout [ 171.443737] Bluetooth: hci1: command tx timeout [ 171.444778] Bluetooth: hci2: command tx timeout [ 171.572664] Bluetooth: hci4: command tx timeout [ 171.573971] Bluetooth: hci3: command tx timeout [ 171.700447] Bluetooth: hci6: command tx timeout [ 171.763732] Bluetooth: hci7: command tx timeout [ 171.764963] Bluetooth: hci5: command tx timeout [ 173.363717] Bluetooth: hci0: command tx timeout [ 173.491658] Bluetooth: hci1: command tx timeout [ 173.492237] Bluetooth: hci2: command tx timeout [ 173.619693] Bluetooth: hci3: command tx timeout [ 173.620253] Bluetooth: hci4: command tx timeout [ 173.747796] Bluetooth: hci6: command tx timeout [ 173.811727] Bluetooth: hci7: command tx timeout [ 173.812302] Bluetooth: hci5: command tx timeout [ 175.412716] Bluetooth: hci0: command tx timeout [ 175.539688] Bluetooth: hci2: command tx timeout [ 175.540254] Bluetooth: hci1: command tx timeout [ 175.667666] Bluetooth: hci4: command tx timeout [ 175.668240] Bluetooth: hci3: command tx timeout [ 175.795662] Bluetooth: hci6: command tx timeout [ 175.859811] Bluetooth: hci5: command tx timeout [ 175.860365] Bluetooth: hci7: command tx timeout [ 177.459656] Bluetooth: hci0: command tx timeout [ 177.587801] Bluetooth: hci1: command tx timeout [ 177.588342] Bluetooth: hci2: command tx timeout [ 177.715636] Bluetooth: hci3: command tx timeout [ 177.716170] Bluetooth: hci4: command tx timeout [ 177.844578] Bluetooth: hci6: command tx timeout [ 177.908086] Bluetooth: hci7: command tx timeout [ 177.908629] Bluetooth: hci5: command tx timeout [ 231.566465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.570904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.571997] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.577084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.578369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.583815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.584890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.590358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.600675] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.606758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.608536] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.609761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.680964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.683667] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.685027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.695768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.696632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.698551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.703962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.711371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.712689] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.714316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.725739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.734352] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.811113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.821115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.824980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.828925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.838198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.841054] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 231.847247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.863746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.876115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.886136] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.906894] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.911267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.917198] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.919589] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.923828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.926218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.928131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.939253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.979317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.980359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 231.981629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.023972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.032758] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.057162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.653837] Bluetooth: hci1: command tx timeout [ 233.653924] Bluetooth: hci0: command tx timeout [ 233.779800] Bluetooth: hci2: command tx timeout [ 233.780341] Bluetooth: hci3: command tx timeout [ 233.908706] Bluetooth: hci5: command tx timeout [ 234.035637] Bluetooth: hci4: command tx timeout [ 234.099642] Bluetooth: hci7: command tx timeout [ 234.100719] Bluetooth: hci6: command tx timeout [ 235.699602] Bluetooth: hci0: command tx timeout [ 235.701084] Bluetooth: hci1: command tx timeout [ 235.828410] Bluetooth: hci3: command tx timeout [ 235.829364] Bluetooth: hci2: command tx timeout [ 235.956685] Bluetooth: hci5: command tx timeout [ 236.083884] Bluetooth: hci4: command tx timeout [ 236.147615] Bluetooth: hci6: command tx timeout [ 236.148552] Bluetooth: hci7: command tx timeout [ 237.747778] Bluetooth: hci1: command tx timeout [ 237.748607] Bluetooth: hci0: command tx timeout [ 237.875767] Bluetooth: hci3: command tx timeout [ 237.877130] Bluetooth: hci2: command tx timeout [ 238.004614] Bluetooth: hci5: command tx timeout [ 238.132587] Bluetooth: hci4: command tx timeout [ 238.195883] Bluetooth: hci6: command tx timeout [ 238.195901] Bluetooth: hci7: command tx timeout [ 239.796715] Bluetooth: hci1: command tx timeout [ 239.797380] Bluetooth: hci0: command tx timeout [ 239.923745] Bluetooth: hci2: command tx timeout [ 239.924435] Bluetooth: hci3: command tx timeout [ 240.052801] Bluetooth: hci5: command tx timeout [ 240.179648] Bluetooth: hci4: command tx timeout [ 240.243600] Bluetooth: hci6: command tx timeout [ 240.243680] Bluetooth: hci7: command tx timeout [ 293.904128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.905961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.907187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.910290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.911981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.913955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.009378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.012980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.014093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.016943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.019591] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.020932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.152090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.156731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.159879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.171903] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.177786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.178572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.180753] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.182059] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.188395] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.202968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.254322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.258297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.261935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.267379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.287780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.301764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.318915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.323828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.327098] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.331175] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.336173] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.339063] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.340541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.344934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.352894] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.366458] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.367821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.368740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.378917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.382139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.384166] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.385183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.386978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.390977] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.394680] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.399838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.987650] Bluetooth: hci0: command tx timeout [ 296.051600] Bluetooth: hci1: command tx timeout [ 296.244616] Bluetooth: hci2: command tx timeout [ 296.372276] Bluetooth: hci3: command tx timeout [ 296.435659] Bluetooth: hci6: command tx timeout [ 296.436337] Bluetooth: hci5: command tx timeout [ 296.437206] Bluetooth: hci4: command tx timeout [ 296.499762] Bluetooth: hci7: command tx timeout [ 298.035961] Bluetooth: hci0: command tx timeout [ 298.099640] Bluetooth: hci1: command tx timeout [ 298.291603] Bluetooth: hci2: command tx timeout [ 298.419691] Bluetooth: hci3: command tx timeout [ 298.483676] Bluetooth: hci4: command tx timeout [ 298.484155] Bluetooth: hci6: command tx timeout [ 298.484886] Bluetooth: hci5: command tx timeout [ 298.547675] Bluetooth: hci7: command tx timeout [ 300.083602] Bluetooth: hci0: command tx timeout [ 300.147604] Bluetooth: hci1: command tx timeout [ 300.339824] Bluetooth: hci2: command tx timeout [ 300.467574] Bluetooth: hci3: command tx timeout [ 300.532559] Bluetooth: hci5: command tx timeout [ 300.533036] Bluetooth: hci6: command tx timeout [ 300.533483] Bluetooth: hci4: command tx timeout [ 300.597592] Bluetooth: hci7: command tx timeout [ 302.131684] Bluetooth: hci0: command tx timeout [ 302.195591] Bluetooth: hci1: command tx timeout [ 302.387592] Bluetooth: hci2: command tx timeout [ 302.515752] Bluetooth: hci3: command tx timeout [ 302.579654] Bluetooth: hci4: command tx timeout [ 302.580144] Bluetooth: hci6: command tx timeout [ 302.580676] Bluetooth: hci5: command tx timeout [ 302.645167] Bluetooth: hci7: command tx timeout [ 356.286795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.289774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.292405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.301688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.304677] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.309713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.348253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.351211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.355803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.363722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.370775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.377762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.432179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.435815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.437994] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.444675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.447859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.450110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.488062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.493815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.495917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.502070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.506920] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.509543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.550410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.570137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.572578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.592033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.628092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.640287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.655396] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.660342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.665765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.683837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.685244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.688036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.704750] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.728799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.762101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.765095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.766311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.769702] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.775688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.784057] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 356.785613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.786287] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 356.821904] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 356.856882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 358.387614] Bluetooth: hci0: command tx timeout [ 358.452639] Bluetooth: hci1: command tx timeout [ 358.516849] Bluetooth: hci2: command tx timeout [ 358.580546] Bluetooth: hci3: command tx timeout [ 358.708661] Bluetooth: hci4: command tx timeout [ 358.835652] Bluetooth: hci5: command tx timeout [ 358.899813] Bluetooth: hci6: command tx timeout [ 359.027889] Bluetooth: hci7: command tx timeout [ 360.437595] Bluetooth: hci0: command tx timeout [ 360.499581] Bluetooth: hci1: command tx timeout [ 360.563622] Bluetooth: hci2: command tx timeout [ 360.627581] Bluetooth: hci3: command tx timeout [ 360.755932] Bluetooth: hci4: command tx timeout [ 360.883667] Bluetooth: hci5: command tx timeout [ 360.947726] Bluetooth: hci6: command tx timeout [ 361.075582] Bluetooth: hci7: command tx timeout [ 362.484175] Bluetooth: hci0: command tx timeout [ 362.547588] Bluetooth: hci1: command tx timeout [ 362.612281] Bluetooth: hci2: command tx timeout [ 362.675594] Bluetooth: hci3: command tx timeout [ 362.804887] Bluetooth: hci4: command tx timeout [ 362.931675] Bluetooth: hci5: command tx timeout [ 362.995562] Bluetooth: hci6: command tx timeout [ 363.124019] Bluetooth: hci7: command tx timeout [ 364.532537] Bluetooth: hci0: command tx timeout [ 364.595612] Bluetooth: hci1: command tx timeout [ 364.659582] Bluetooth: hci2: command tx timeout [ 364.723841] Bluetooth: hci3: command tx timeout [ 364.851711] Bluetooth: hci4: command tx timeout [ 364.979624] Bluetooth: hci5: command tx timeout [ 365.043768] Bluetooth: hci6: command tx timeout [ 365.172779] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 18:47:35 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff11004c40f00 RCX=ffff888036040a24 RDX=0000000000000002 RSI=ffff888036040a68 RDI=ffff888036040a8a RBP=ffff888036040000 RSP=ffff8880262077d8 R8 =0000000000000001 R9 =fffffbfff0fdc5ea R10=ffffffff87ee2f57 R11=00000000000c33ea R12=0000000000000008 R13=ffff888036040a68 R14=0000000000000004 R15=ffff888036040a68 RIP=ffffffff812fa348 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc9896ab88 CR3=000000001ac9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000020000 RCX=0000000000000000 RDX=1ffff11001d264d0 RSI=0000000000000004 RDI=ffff88800e932684 RBP=ffff88800e931b80 RSP=ffff88806cf097d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000014 R11=00000000000c36d9 R12=ffffffff85c15dc0 R13=0000000000000000 R14=0000000000022000 R15=ffff88800e932660 RIP=ffffffff812fbe83 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe1c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f5fdbd260 CR3=000000003232e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000