syzkaller login: [ 58.574701] sshd (239) used greatest stack depth: 24216 bytes left Warning: Permanently added '[localhost]:48342' (ECDSA) to the list of known hosts. 2024/11/14 13:00:50 fuzzer started 2024/11/14 13:00:50 dialing manager at localhost:46317 [ 73.860897] cgroup: Unknown subsys name 'net' [ 73.940381] cgroup: Unknown subsys name 'cpuset' [ 73.989036] cgroup: Unknown subsys name 'rlimit' 2024/11/14 13:01:07 syscalls: 202 2024/11/14 13:01:07 code coverage: enabled 2024/11/14 13:01:07 comparison tracing: enabled 2024/11/14 13:01:07 extra coverage: enabled 2024/11/14 13:01:07 setuid sandbox: enabled 2024/11/14 13:01:07 namespace sandbox: enabled 2024/11/14 13:01:07 Android sandbox: enabled 2024/11/14 13:01:07 fault injection: enabled 2024/11/14 13:01:07 leak checking: enabled 2024/11/14 13:01:07 net packet injection: enabled 2024/11/14 13:01:07 net device setup: enabled 2024/11/14 13:01:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/14 13:01:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/14 13:01:07 USB emulation: enabled 2024/11/14 13:01:07 hci packet injection: enabled 2024/11/14 13:01:07 wifi device emulation: enabled 2024/11/14 13:01:07 802.15.4 emulation: enabled 2024/11/14 13:01:07 fetching corpus: 0, signal 0/0 (executing program) 2024/11/14 13:01:09 starting 8 fuzzer processes 13:01:09 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x3, 0x3, 0x5, 0x3, 0x8, 0x3}) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x10042) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100, 0x81}}, './file0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) r2 = epoll_create1(0x80000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r1, 0xf10, {0x0, r2}, 0x80000000, 0x4, 0x0, {0x0, r3}}, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000001c0)=0x6) write$sndseq(r4, &(0x7f0000000200)=[{0x40, 0x8b, 0x7, 0x3, @tick=0xfffffffd, {0x1, 0x40}, {0x86, 0x3}, @queue={0xfb, {0x5, 0x9c1}}}, {0x0, 0x0, 0x5, 0x4, @time={0x5ead, 0x7fffffff}, {0x8, 0x9}, {0x2, 0x3f}, @note={0x8, 0x14, 0x1, 0x3f, 0x6}}, {0x0, 0x7, 0x7, 0x4, @tick=0x9, {0x0, 0x7f}, {0x1, 0x8}, @note={0x4, 0x2, 0x3, 0x3, 0x4000000}}, {0x9, 0x6, 0x40, 0x2, @tick=0x8, {0x1d, 0x3}, {0x0, 0xf8}, @connect={{0x1, 0x80}, {0x80, 0x4}}}, {0x9, 0x3, 0xfa, 0xa2, @tick=0xd9, {0x4, 0x1}, {0x1, 0xb5}, @control={0x8, 0x3ff, 0x1f}}, {0x8, 0xd4, 0x5, 0x81, @time={0x3, 0x7fff}, {0x98, 0x9}, {0x4, 0x3}, @control={0x0, 0x20, 0x9}}], 0xa8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) clone3(&(0x7f0000000500)={0x8048000, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), {0x2f}, &(0x7f00000003c0)=""/152, 0x98, &(0x7f0000000480)=""/35, &(0x7f00000004c0)=[0x0], 0x1, {r1}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) r7 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x80000001, 0x4000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x50}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, @in_args={0x2}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r9) 13:01:09 executing program 1: syz_emit_ethernet(0xdf, &(0x7f0000000000)={@remote, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "1bae", "8f190d", 0x883e, "e5d22393be9b1e49ea77195b4b8216cdfc5ee42d056bc9a6ccfee46791684f6dd37e1d933c2659bdac58dd7848672c7b2303b50c47a0754c77bd9f69cd5f0489cc8637678392d4df6a24ac82221215396bc1c63ac1c67178af662f092d15f6754dfb37cbbc10936f52334dc1b5c0adca069a55f5dda4ab855d7b16f7e72209698cb205d2abade79c708c831f18cb1692e609e33755758d218328911a0925a8df9164c81ec401fca238f5039bde76ccc2f4a481410921f867c793907f7d985b7ce4b995d9"}}}}}, &(0x7f0000000100)={0x1, 0x2, [0x858, 0x22d, 0x9, 0xb74]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000140)={0x9, 0x0, 'client1\x00', 0x0, "11ac7c07d7054ea7", "16866e2c172abe0042d946e53eb8f30038cd7074da2d918953759379a467bb21", 0x8, 0xfffffffd}) syz_open_dev$loop(0xfffffffffffffffc, 0x2, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x8, 0x1, 0x7f, 0x1f, @time={0x3, 0x4}, {0x80, 0x7}, {0x73}, @time=@time={0x1ff, 0x9b}}, {0x9, 0x7a, 0x1, 0x80, @time={0x5, 0x800}, {0x80, 0x3f}, {0x6, 0x1}, @connect={{0x2, 0x1f}, {0x8d, 0x1}}}, {0x3f, 0x5, 0x57, 0x5, @time={0x4, 0x460}, {0x5, 0x20}, {0x8, 0x3}, @raw32={[0x7ff, 0x7f, 0x8]}}, {0x8, 0x81, 0xeb, 0x5, @tick=0x2, {0x1f, 0x1}, {0x1f, 0x8}, @time=@tick=0x8}], 0x70) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008894) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000380)=0x910, 0x2) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @broadcast, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "39a2034e0e541d0c153e3afea968a8aea861363397d7fd43d7a1a1cb66b4f3fabda0bc18ee3e063ac1b82844e630f94db623c329cbc5ad4d48f3fe53daee3a16"}}}}, &(0x7f0000000440)={0x0, 0x4, [0x4ce, 0x89, 0xf5a, 0x42c]}) r0 = syz_open_dev$vcsu(&(0x7f0000000480), 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0xc0, 0x9}, 'port1\x00', 0x4, 0x220050, 0x10000, 0x0, 0x9, 0x7fffffff, 0x7, 0x0, 0x0, 0x80}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa1a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x40}}, 0x4000) r4 = socket(0x2b, 0x800, 0x7fff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffb000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x743f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000005) 13:01:09 executing program 2: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9e43b4fa069d"}]}, 0x38}, 0x1, 0x0, 0x0, 0x28000}, 0x4801) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x6002}, @void, @x25={0x0, 0x50, 0x27, "9a1ddbf06648c7c45c8efe086d6adf37271168e32201ab11a7b201e7436641139f1c93e5a1065478411abb9e4f05b86a76d7fed9cc566ec9e298940415febdc0160cca3e734485bac17bb9a4048e1b2fb9e833f8c23e830450f120b1d2a326b8cd3076347b581fb3e65c661ff57a72a6812eb670d55ccfb985552b"}}, 0x82) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/file0\x00'}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) r4 = fork() clone3(&(0x7f00000006c0)={0x80000, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0, {0x24}, &(0x7f00000005c0)=""/93, 0x5d, &(0x7f0000000640)=""/11, &(0x7f0000000680), 0x0, {r3}}, 0x58) clone3(&(0x7f0000000780)={0x100, &(0x7f0000000340)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x2f}, &(0x7f0000000400)=""/121, 0x79, &(0x7f0000000480)=""/77, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], 0x8, {r2}}, 0x58) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40045) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000900)={{0x1, 0x1, 0x18, r6, {0x3, 0x4}}, './file0/file0\x00'}) r8 = getuid() getgroups(0x5, &(0x7f0000000940)=[0x0, 0xee00, 0xee00, 0x0, 0x0]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000980)={{0x1, 0x1, 0x18, r6, {r8, r9}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 91.909772] audit: type=1400 audit(1731589269.605:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:01:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9c6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x220}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x126}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x4}]}, 0x88}}, 0x24000080) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x589}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004091}, 0x40000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000700)={0x7ff, 0xfffffffa, 0x1, 'queue1\x00', 0x91a}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x70, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x408c4) 13:01:09 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0x40, 0x8}, {0x2, 0x80}, 0x3, 0x0, 0x79}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2400) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x9, 0x7, 0x4, 0x3, 0x2, 0x101}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x53b6, 0x1, 'client0\x00', 0xffffffff80000000, "a28c745f533a5684", "a0d1f4d57e60dbbf8f92d25496681c34d704c7b796f5377d766b5fb1882b7db9", 0x3ff, 0xfffffffc}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x0, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x9b}}, './file0\x00'}) write$cgroup_freezer_state(r7, &(0x7f0000000400)='FREEZING\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r9, {0x7}}, './file0\x00'}) r10 = syz_open_dev$vcsu(&(0x7f0000000500), 0x3, 0x10000) timerfd_gettime(r10, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r10, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r11, {0x51e, 0x800}}, './file0\x00'}) 13:01:09 executing program 5: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) getgid() r2 = fork() sched_getparam(r2, &(0x7f0000000180)) sched_getattr(r2, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r3 = getpgrp(r2) sched_getattr(r3, &(0x7f0000000200)={0x38}, 0x38, 0x0) r4 = getpgrp(r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200488d0}, 0x4) sched_getattr(r2, &(0x7f0000000540)={0x38}, 0x38, 0x0) clone3(&(0x7f0000000800)={0x1000000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0x9}, &(0x7f0000000640)=""/175, 0xaf, &(0x7f0000000700)=""/139, &(0x7f00000007c0)=[r3, r4, r4, r3, 0xffffffffffffffff], 0x5, {r5}}, 0x58) sched_getattr(r8, &(0x7f0000000880)={0x38}, 0x38, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:01:09 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000084) r4 = accept$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1400800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) r8 = syz_io_uring_setup(0x6af, &(0x7f0000000600)={0x0, 0xf618, 0x8, 0x0, 0x27d, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000680)=0x0, &(0x7f00000006c0)) syz_io_uring_submit(r9, 0x0, &(0x7f0000000700)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x3, 0x45a, 0x0, 0x0, 0xbc80fd234d94b394, 0x1}, 0x2) connect$bt_sco(r1, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) clone3(&(0x7f0000000980)={0x2000a0000, &(0x7f0000000780)=0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000800), {0xc}, &(0x7f0000000840)=""/63, 0x3f, &(0x7f0000000880)=""/144, &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r10, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r11, 0xc018937a, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r11, {0x95}}, './file0\x00'}) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000a80)) waitid$P_PIDFD(0x3, r3, &(0x7f0000000ac0), 0x1, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x200008c4}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000c80)=0x2e, &(0x7f0000000cc0)=0x4) 13:01:09 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) r1 = syz_io_uring_setup(0x3434, &(0x7f0000000040)={0x0, 0x869e, 0x2601808998a7c91e, 0x0, 0x2ca, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = pidfd_getfd(r0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000200)={0x7, 0x7f}, 0x2) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) r12 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000380)="7fba0a7cbca0e223d5a1e83dfd1ec30cb50fa16f230a2119dab00ee74437fe2c2db22feb63afc5d826b039fa8a0bfe9f676ad979ba47bcd2851169a1f278e7f1fe9220a4d02c11ed05de8d483ea70a4aa81617ec23162452a983c92b68cc067769cb5cca384fc77fa6a9c4b43fc20218a7a3997995b761e4d352", 0x7a, 0x80000001}, {&(0x7f0000000400)="606ca9cfff598c8b8d24ccd3dabacbfb4fc1fe5c29290c8b2d231c583537d8b716d561f4edf0", 0x26, 0x2000000000000}, {&(0x7f0000000440)="3927c849c2e8b7f01b861a6b1b90a8a7be66296ba0bb698fe649569937a02107bc8a06e00317c4e4c32dedc09f4781030506a979086f7042e1a441c3173ad070058e", 0x42, 0x1ff}, {&(0x7f00000004c0)="a2d59939fa0f0e59eff047eb5521c55122e0893cab537244533f643a44f2c08d111de7b6dd1c5e7b4e941f7522338f3678c1f771c2458dd1e11937d756c075ad8844e39a403226014ba97e6814359da3566ea9295164f3ef122850ec320b5ba48dd9fdb714484b765c83d485d46d996f942b1db785f9f328a8e70333b3211a334eb15a4d79be8a87e3740fb0085d81399eb796db3d8f7e6322f1f7675605c05f012b9f1f1196e43c807e80b1fb5a324e4d497caa1ccd7df3db1c454b8d04e03917d2ddc7d2aeeb4e9fd5a2c8e12557", 0xcf}], 0x2, &(0x7f0000000680)={[{@nodots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_gt={'fowner>', r11}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {0x6ca}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r12, {0x9}}, './file1\x00'}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r14, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0xc000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5, {r14}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r15, 0xc0189374, &(0x7f0000000900)={{0x1, 0x1, 0x18, r7, {0x401}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file1\x00'}) [ 93.313486] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.318968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.320153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.324306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.326837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.329160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.373406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.379725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.386719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.413921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.420232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.437626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.449767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.457959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.459405] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.469004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.470765] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.472938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.479772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.482035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.499281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.505683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.507201] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.513391] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.516315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.520713] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.523236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.524216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.538032] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.539951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.543652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.546863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.553026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.558551] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.559600] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.563036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.573707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.581673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.584204] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.585299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.587017] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.588128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.608929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.613571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.616668] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.624744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.649906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.652682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.344875] Bluetooth: hci0: command tx timeout [ 95.473707] Bluetooth: hci1: command tx timeout [ 95.536820] Bluetooth: hci3: command tx timeout [ 95.600576] Bluetooth: hci2: command tx timeout [ 95.601191] Bluetooth: hci5: command tx timeout [ 95.664845] Bluetooth: hci6: command tx timeout [ 95.665588] Bluetooth: hci4: command tx timeout [ 95.728494] Bluetooth: hci7: command tx timeout [ 97.393225] Bluetooth: hci0: command tx timeout [ 97.520539] Bluetooth: hci1: command tx timeout [ 97.584539] Bluetooth: hci3: command tx timeout [ 97.648641] Bluetooth: hci2: command tx timeout [ 97.649142] Bluetooth: hci5: command tx timeout [ 97.712575] Bluetooth: hci6: command tx timeout [ 97.713071] Bluetooth: hci4: command tx timeout [ 97.777498] Bluetooth: hci7: command tx timeout [ 99.442519] Bluetooth: hci0: command tx timeout [ 99.568493] Bluetooth: hci1: command tx timeout [ 99.632674] Bluetooth: hci3: command tx timeout [ 99.696641] Bluetooth: hci5: command tx timeout [ 99.697139] Bluetooth: hci2: command tx timeout [ 99.760813] Bluetooth: hci4: command tx timeout [ 99.761308] Bluetooth: hci6: command tx timeout [ 99.824476] Bluetooth: hci7: command tx timeout [ 101.488673] Bluetooth: hci0: command tx timeout [ 101.617480] Bluetooth: hci1: command tx timeout [ 101.680500] Bluetooth: hci3: command tx timeout [ 101.744675] Bluetooth: hci2: command tx timeout [ 101.745167] Bluetooth: hci5: command tx timeout [ 101.808990] Bluetooth: hci4: command tx timeout [ 101.810097] Bluetooth: hci6: command tx timeout [ 101.872542] Bluetooth: hci7: command tx timeout [ 156.310283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.316026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.321161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.321887] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.323361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.325850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.331040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.334218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.339063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.343061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.348157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.350065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.355996] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.360244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.360266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.364698] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.367298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.368683] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.369883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.371436] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.373976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.375657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.377440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.379082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.379932] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.381107] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.382935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.385816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.385866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.388540] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.389701] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.391126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.396214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.401101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.402248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.405698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.406781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.407897] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.416120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.416899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.421824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.424635] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.426324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.433719] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.435784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.439356] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.440284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.446299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.454897] Bluetooth: hci2: command tx timeout [ 158.455924] Bluetooth: hci3: command tx timeout [ 158.458892] Bluetooth: hci7: command tx timeout [ 158.512646] Bluetooth: hci0: command tx timeout [ 158.513776] Bluetooth: hci6: command tx timeout [ 158.514382] Bluetooth: hci4: command tx timeout [ 158.515364] Bluetooth: hci1: command tx timeout [ 158.577622] Bluetooth: hci5: command tx timeout [ 160.496616] Bluetooth: hci7: command tx timeout [ 160.497140] Bluetooth: hci3: command tx timeout [ 160.497656] Bluetooth: hci2: command tx timeout [ 160.561643] Bluetooth: hci4: command tx timeout [ 160.562118] Bluetooth: hci1: command tx timeout [ 160.562647] Bluetooth: hci6: command tx timeout [ 160.563108] Bluetooth: hci0: command tx timeout [ 160.624450] Bluetooth: hci5: command tx timeout [ 162.544543] Bluetooth: hci2: command tx timeout [ 162.545062] Bluetooth: hci3: command tx timeout [ 162.545744] Bluetooth: hci7: command tx timeout [ 162.609541] Bluetooth: hci0: command tx timeout [ 162.610013] Bluetooth: hci6: command tx timeout [ 162.610511] Bluetooth: hci1: command tx timeout [ 162.610959] Bluetooth: hci4: command tx timeout [ 162.672462] Bluetooth: hci5: command tx timeout [ 164.593568] Bluetooth: hci7: command tx timeout [ 164.595318] Bluetooth: hci3: command tx timeout [ 164.596667] Bluetooth: hci2: command tx timeout [ 164.669455] Bluetooth: hci4: command tx timeout [ 164.670924] Bluetooth: hci1: command tx timeout [ 164.674257] Bluetooth: hci6: command tx timeout [ 164.675551] Bluetooth: hci0: command tx timeout [ 164.723333] Bluetooth: hci5: command tx timeout [ 218.388621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.397268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.405495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.421942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.427697] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.429245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.430370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.433644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.434871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.436656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.438826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.440134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.576854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.579018] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.599118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.607298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.613797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.624487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.627124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.639024] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.640538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.649160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.652037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.653066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.653652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.655937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.659972] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.667817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.668965] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.670313] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.697099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.711358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.723444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.741549] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.749170] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.753088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.754660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.757725] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.761338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.765804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.769144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.780648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.783696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.785912] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.787149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.816077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.820740] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.821993] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.464502] Bluetooth: hci0: command tx timeout [ 220.465469] Bluetooth: hci1: command tx timeout [ 220.720539] Bluetooth: hci4: command tx timeout [ 220.720567] Bluetooth: hci2: command tx timeout [ 220.784621] Bluetooth: hci3: command tx timeout [ 220.848524] Bluetooth: hci5: command tx timeout [ 220.912561] Bluetooth: hci6: command tx timeout [ 220.912609] Bluetooth: hci7: command tx timeout [ 222.512744] Bluetooth: hci0: command tx timeout [ 222.514010] Bluetooth: hci1: command tx timeout [ 222.768503] Bluetooth: hci4: command tx timeout [ 222.768544] Bluetooth: hci2: command tx timeout [ 222.832594] Bluetooth: hci3: command tx timeout [ 222.896583] Bluetooth: hci5: command tx timeout [ 222.962117] Bluetooth: hci6: command tx timeout [ 222.962164] Bluetooth: hci7: command tx timeout [ 224.561522] Bluetooth: hci1: command tx timeout [ 224.562058] Bluetooth: hci0: command tx timeout [ 224.816576] Bluetooth: hci2: command tx timeout [ 224.816866] Bluetooth: hci4: command tx timeout [ 224.880581] Bluetooth: hci3: command tx timeout [ 224.944546] Bluetooth: hci5: command tx timeout [ 225.008507] Bluetooth: hci6: command tx timeout [ 225.009586] Bluetooth: hci7: command tx timeout [ 226.608624] Bluetooth: hci0: command tx timeout [ 226.609170] Bluetooth: hci1: command tx timeout [ 226.864496] Bluetooth: hci2: command tx timeout [ 226.865021] Bluetooth: hci4: command tx timeout [ 226.929448] Bluetooth: hci3: command tx timeout [ 226.993491] Bluetooth: hci5: command tx timeout [ 227.058445] Bluetooth: hci7: command tx timeout [ 227.058930] Bluetooth: hci6: command tx timeout [ 280.687841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.700862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.702190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.704388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.704467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.712410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.713329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.715181] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.716288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.718229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.719926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.721160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.828137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.876748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.886813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.894325] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.896079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.897176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.900740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.902639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.904843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.922970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.925635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.926842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.930856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.932749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.937670] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.938461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.943635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.944437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.947856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.965628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.967244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.971604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.982504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.989457] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.993935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.999418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.001764] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.014768] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.021611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.027615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.072683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.088672] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.130012] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.139625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.153621] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.171643] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.736463] Bluetooth: hci1: command tx timeout [ 282.737510] Bluetooth: hci0: command tx timeout [ 282.992528] Bluetooth: hci3: command tx timeout [ 283.056565] Bluetooth: hci2: command tx timeout [ 283.120673] Bluetooth: hci6: command tx timeout [ 283.122232] Bluetooth: hci4: command tx timeout [ 283.123247] Bluetooth: hci5: command tx timeout [ 283.248615] Bluetooth: hci7: command tx timeout [ 284.786460] Bluetooth: hci0: command tx timeout [ 284.788107] Bluetooth: hci1: command tx timeout [ 285.041204] Bluetooth: hci3: command tx timeout [ 285.104980] Bluetooth: hci2: command tx timeout [ 285.168897] Bluetooth: hci4: command tx timeout [ 285.170069] Bluetooth: hci5: command tx timeout [ 285.170101] Bluetooth: hci6: command tx timeout [ 285.296813] Bluetooth: hci7: command tx timeout [ 286.832483] Bluetooth: hci1: command tx timeout [ 286.833026] Bluetooth: hci0: command tx timeout [ 287.089460] Bluetooth: hci3: command tx timeout [ 287.152461] Bluetooth: hci2: command tx timeout [ 287.216783] Bluetooth: hci6: command tx timeout [ 287.216968] Bluetooth: hci4: command tx timeout [ 287.217247] Bluetooth: hci5: command tx timeout [ 287.344454] Bluetooth: hci7: command tx timeout [ 288.880474] Bluetooth: hci1: command tx timeout [ 288.881509] Bluetooth: hci0: command tx timeout [ 289.138085] Bluetooth: hci3: command tx timeout [ 289.201542] Bluetooth: hci2: command tx timeout [ 289.264640] Bluetooth: hci5: command tx timeout [ 289.264687] Bluetooth: hci4: command tx timeout [ 289.265093] Bluetooth: hci6: command tx timeout [ 289.393424] Bluetooth: hci7: command tx timeout [ 296.095834] modprobe (10865) used greatest stack depth: 23008 bytes left [ 343.006025] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.021300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.047940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.074800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.077986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.079642] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.081137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.084857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.086135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.091026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.094631] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.095684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.165960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.167614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.169574] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.172007] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.174528] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.175538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.240637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.245637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.254631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.261113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.272622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.278031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.369848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.377295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.378660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.380971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.382428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.383566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.436658] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.438202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.449711] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.454692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.471843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.482949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.486596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.488031] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.492166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.494753] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.496264] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.558261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.566632] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.573761] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.583704] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.630609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.686890] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.689638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.136629] Bluetooth: hci0: command tx timeout [ 345.136784] Bluetooth: hci1: command tx timeout [ 345.266440] Bluetooth: hci2: command tx timeout [ 345.328459] Bluetooth: hci3: command tx timeout [ 345.458076] Bluetooth: hci4: command tx timeout [ 345.585402] Bluetooth: hci6: command tx timeout [ 345.648619] Bluetooth: hci5: command tx timeout [ 345.776617] Bluetooth: hci7: command tx timeout [ 347.184452] Bluetooth: hci1: command tx timeout [ 347.184482] Bluetooth: hci0: command tx timeout [ 347.312473] Bluetooth: hci2: command tx timeout [ 347.378517] Bluetooth: hci3: command tx timeout [ 347.505469] Bluetooth: hci4: command tx timeout [ 347.633520] Bluetooth: hci6: command tx timeout [ 347.696596] Bluetooth: hci5: command tx timeout [ 347.825606] Bluetooth: hci7: command tx timeout [ 349.232444] Bluetooth: hci0: command tx timeout [ 349.233571] Bluetooth: hci1: command tx timeout [ 349.362505] Bluetooth: hci2: command tx timeout [ 349.424449] Bluetooth: hci3: command tx timeout [ 349.554396] Bluetooth: hci4: command tx timeout [ 349.680501] Bluetooth: hci6: command tx timeout [ 349.745519] Bluetooth: hci5: command tx timeout [ 349.874419] Bluetooth: hci7: command tx timeout [ 351.280444] Bluetooth: hci0: command tx timeout [ 351.282054] Bluetooth: hci1: command tx timeout [ 351.411390] Bluetooth: hci2: command tx timeout [ 351.472591] Bluetooth: hci3: command tx timeout [ 351.601431] Bluetooth: hci4: command tx timeout [ 351.730505] Bluetooth: hci6: command tx timeout [ 351.792519] Bluetooth: hci5: command tx timeout [ 351.923472] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:06:20 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff813ef450 RCX=0000000000000001 RDX=ffff88802d33f7d8 RSI=ffffffff818ee86d RDI=ffff88802d33f7d8 RBP=ffff88802d33f870 RSP=ffff88802d33f7c0 R8 =0000000000000001 R9 =ffff88802d33f818 R10=000000000003c001 R11=0000000000024dc1 R12=ffff88802d33f8a0 R13=0000000000000000 R14=ffff88800e190000 R15=ffff88802d33f7d8 RIP=ffffffff81149098 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1b481ef540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558751698008 CR3=0000000031b12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff8485042a RDX=1ffff11004fa1ef6 RSI=ffffffff81813ece RDI=ffff888027d0f7b0 RBP=ffff888027d0f790 RSP=ffff888027d0f6d0 R8 =0000000000000001 R9 =ffffed10012640cb R10=ffff88800932065f R11=00000000000c33ea R12=0000000000000000 R13=00007fbfe8631000 R14=ffff888027d0f7a0 R15=ffff888027d0f798 RIP=ffffffff81813ee7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbfe8b1e1f0 CR3=000000000e4d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000