Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15524' (ECDSA) to the list of known hosts. 2025/04/26 14:40:04 fuzzer started 2025/04/26 14:40:05 dialing manager at localhost:46629 syzkaller login: [ 93.558561] cgroup: Unknown subsys name 'net' [ 93.689021] cgroup: Unknown subsys name 'cpuset' [ 93.746382] cgroup: Unknown subsys name 'rlimit' 2025/04/26 14:40:20 syscalls: 204 2025/04/26 14:40:20 code coverage: enabled 2025/04/26 14:40:20 comparison tracing: enabled 2025/04/26 14:40:20 extra coverage: enabled 2025/04/26 14:40:20 setuid sandbox: enabled 2025/04/26 14:40:20 namespace sandbox: enabled 2025/04/26 14:40:20 Android sandbox: enabled 2025/04/26 14:40:20 fault injection: enabled 2025/04/26 14:40:20 leak checking: enabled 2025/04/26 14:40:20 net packet injection: enabled 2025/04/26 14:40:20 net device setup: enabled 2025/04/26 14:40:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/26 14:40:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/26 14:40:20 USB emulation: enabled 2025/04/26 14:40:20 hci packet injection: enabled 2025/04/26 14:40:20 wifi device emulation: enabled 2025/04/26 14:40:20 802.15.4 emulation: enabled 2025/04/26 14:40:20 fetching corpus: 0, signal 0/0 (executing program) 2025/04/26 14:40:21 starting 8 fuzzer processes 14:40:21 executing program 0: r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff, 0xffff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x50002018}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x2}) epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pidfd_send_signal(r1, 0x15, &(0x7f0000000180)={0x1c, 0x4, 0x7f}, 0x0) process_mrelease(r4, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0xfff, 0x9}}, './file0\x00'}) pidfd_send_signal(r6, 0x3a, &(0x7f0000000300)={0x1f, 0x6, 0x8}, 0x0) recvmmsg$unix(r4, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/17, 0x11}], 0x2}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/94, 0x5e}, {&(0x7f0000000780)=""/235, 0xeb}], 0x4}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000000940)=""/100, 0x64}, {&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f0000000a80)=""/253, 0xfd}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/215, 0xd7}], 0x6}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002d00)=""/84, 0x54}, {&(0x7f0000002d80)=""/31, 0x1f}, {&(0x7f0000002dc0)=""/216, 0xd8}, {&(0x7f0000002ec0)=""/208, 0xd0}, {&(0x7f0000002fc0)=""/241, 0xf1}], 0x5, &(0x7f0000003140)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/69, 0x45}], 0x1, &(0x7f0000003380)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x5, 0x10042, &(0x7f0000003580)={0x77359400}) clock_gettime(0x0, &(0x7f0000003600)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f00000035c0)=[{}, {}, {}], 0x3, &(0x7f0000003640)={r7, r8+10000000}, &(0x7f0000003680)={[0x100000001]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f00000036c0), 0x6e, &(0x7f0000003980)=[{&(0x7f0000003740)=""/58, 0x3a}, {&(0x7f0000003780)=""/244, 0xf4}, {&(0x7f0000003880)=""/213, 0xd5}], 0x3, &(0x7f00000039c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003a40)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003ac0)=""/181, 0xb5}, {&(0x7f0000003b80)=""/96, 0x60}, {&(0x7f0000003c00)=""/97, 0x61}, {&(0x7f0000003c80)=""/61, 0x3d}, {&(0x7f0000003cc0)=""/51, 0x33}], 0x5, &(0x7f0000003d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003ec0)=""/37, 0x25}], 0x1, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000004000)=@abs, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000004080)=""/167, 0xa7}, {&(0x7f0000004140)=""/85, 0x55}, {&(0x7f00000041c0)=""/106, 0x6a}, {&(0x7f0000004240)=""/114, 0x72}], 0x4, &(0x7f0000004300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x4, 0x10001, &(0x7f0000004440)={0x0, 0x989680}) 14:40:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcb}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000000, 0x13, r2, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x9, 0xcf}}, './file0\x00'}) read$char_usb(r3, &(0x7f0000000100)=""/64, 0x40) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x703000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r5 = accept4$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x7f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r7) mmap$IORING_OFF_SQES(&(0x7f0000d52000/0x2000)=nil, 0x2000, 0x2000002, 0x40a0010, r0, 0x10000000) r8 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x22d8}}, './file0\x00'}) r10 = memfd_secret(0x0) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000300)={@dev}, &(0x7f0000000340)=0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x8}}, './file1\x00'}) getsockopt$inet6_mreq(r11, 0x29, 0x15, &(0x7f00000003c0)={@local}, &(0x7f0000000400)=0x14) 14:40:21 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) read$char_usb(r0, &(0x7f0000000080)=""/248, 0xf8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) read$char_usb(0xffffffffffffffff, &(0x7f00000001c0)=""/5, 0x5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x8000, 0xffffffff}}, './file0\x00'}) write$tcp_congestion(r3, &(0x7f0000000240)='lp\x00', 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000003300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000003200)=[{{&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/40, 0x28}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000580)=""/125, 0x7d}], 0x1, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000780)=""/250, 0xfa}, {&(0x7f0000000880)=""/184, 0xb8}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/97, 0x61}, {&(0x7f00000019c0)=""/238, 0xee}, {&(0x7f0000001ac0)=""/109, 0x6d}, {&(0x7f0000001b40)=""/149, 0x95}], 0x7}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/93, 0x5d}, {&(0x7f0000001e40)=""/196, 0xc4}, {&(0x7f0000001f40)=""/13, 0xd}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/227, 0xe3}, {&(0x7f0000003080)=""/49, 0x31}, {&(0x7f00000030c0)=""/6, 0x6}], 0x8, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x4, 0x2, &(0x7f0000003340)={r6, r7+60000000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000003380)={@remote, 0x40, 0x1, 0x2, 0x4, 0x400, 0xff}, &(0x7f00000033c0)=0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000003400)={0x2, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0xb8}}}, 0x88) sendmsg$SEG6_CMD_GET_TUNSRC(r10, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRET={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20004094) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x38, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048000}, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000036c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) timerfd_gettime(r13, &(0x7f0000003700)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000003740)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) 14:40:21 executing program 2: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xe1e}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) recvmmsg$unix(r4, &(0x7f0000000980)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/132, 0x84}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)=""/229, 0xe5}], 0x1, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}], 0x3, 0x40010100, &(0x7f0000000a40)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r16, r7, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@empty, @in6=@private1}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000c00)=0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r10, {0xbd6}}, './file0\x00'}) r18 = epoll_create(0x5) ioctl$AUTOFS_DEV_IOCTL_VERSION(r17, 0xc0189371, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r15, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r12, {0x2}}, './file0\x00'}) r19 = openat$cgroup_devices(r14, &(0x7f0000000d40)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r15, 0xc0189375, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r19}, './file0\x00'}) r20 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r13, 0x0) r21 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r20, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r21, 0x0, 0x0, 0x0, 0x40000020, 0x1, {0x2}}, 0x3f) 14:40:21 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa9}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1c0}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d1}, 0x40488b5) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000140)=""/99) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40449d0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x80, 0xfffffffe, 0xfffffffa, 0xfffffff7, 0xff]}, &(0x7f0000000380)=0x54) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000003c0)=""/191) r3 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x7856}}, './file0\x00'}) inotify_rm_watch(r6, 0x0) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000004c0)=""/163) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000580)=""/144) shmctl$SHM_LOCK(r3, 0xb) [ 109.891662] audit: type=1400 audit(1745678421.710:7): avc: denied { execmem } for pid=274 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:40:21 executing program 6: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x43, 0x37f, 0x2, 0x200}) recvmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000100), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/249, 0xf9}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/192, 0xc0}], 0x3, &(0x7f0000000400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x1, 0x10100, 0x0) pidfd_send_signal(r2, 0x23, &(0x7f0000000580)={0xc, 0x1000, 0x8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {0x7fff}}, './file0\x00'}) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000640)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) recvmmsg$unix(r7, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000700)=""/241, 0xf1}], 0x2, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/130, 0x82}], 0x1, &(0x7f0000000ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000000bc0)=""/251, 0xfb}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/5, 0x5}, {&(0x7f0000001d00)=""/155, 0x9b}, {&(0x7f0000001dc0)=""/192, 0xc0}, {&(0x7f0000001e80)=""/92, 0x5c}, {&(0x7f0000001f00)=""/219, 0xdb}, {&(0x7f0000002000)=""/102, 0x66}], 0x8, &(0x7f0000002100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002180)=""/175, 0xaf}, {&(0x7f0000002240)=""/2, 0x2}, {&(0x7f0000002280)=""/252, 0xfc}, {&(0x7f0000002380)=""/7, 0x7}, {&(0x7f00000023c0)=""/91, 0x5b}, {&(0x7f0000002440)=""/64, 0x40}, {&(0x7f0000002480)=""/77, 0x4d}, {&(0x7f0000002500)=""/32, 0x20}, {&(0x7f0000002540)=""/161, 0xa1}], 0x9, &(0x7f00000026c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002840)=[{&(0x7f0000002780)=""/133, 0x85}], 0x1, &(0x7f0000002880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x5, 0x40010000, &(0x7f0000002ac0)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000002b00)={{0x1, 0x1, 0x18, r11, {r8, r12}}, './file0\x00'}) socket$inet6(0xa, 0x5, 0x4) r13 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b40)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r13, 0x4, 0x0, 0x5, 0x1, 0x1}, 0x603f) fstat(r10, &(0x7f0000002b80)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002c00)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x1, 0xff, 0x6, 0x5, 0x7ff}, &(0x7f0000002c40)=0x20) r14 = memfd_secret(0x0) setsockopt$inet6_IPV6_HOPOPTS(r14, 0x29, 0x36, &(0x7f0000002c80)={0x33, 0x1e, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x4f, 0xfff, [0x5, 0x8, 0x200, 0x6, 0x6b, 0xfffffffffffffff9, 0x5, 0x5]}}, @generic={0x0, 0x96, "040d80144eded6c46deebb1333f69311ed0b2401b3cda22fbdef29ba24081412e5dd19f56bbe50c807c53b6ea3ad080dd1b85e69a3c4eb68319f78c6e0706d151ec597b88dd46159171d72f147f14cef4477a2aa6fecc18e837baa939f3da403a6dd6d55afb6a31bf245dafb7618a84550d0edd91c9391f2889ad7b65bb0f28cb6f204eadf8c61acd524380e5223116a55a038216d30"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xfff8, [0x3f]}}]}, 0x100) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002d80)={{0x1, 0x1, 0x18}, './file0\x00'}) 14:40:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x16, 0x5}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xec}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) fstat(r0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x10a, 0x3bca1e5a}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) recvmmsg$unix(r1, &(0x7f00000042c0)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/15, 0xf}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/21, 0x15}, {&(0x7f0000001640)=""/64, 0x40}, {&(0x7f0000001680)}, {&(0x7f00000016c0)=""/194, 0xc2}], 0x6, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000001940)=""/82, 0x52}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002a80)=""/66, 0x42}, {&(0x7f0000002b00)=""/144, 0x90}, {&(0x7f0000002bc0)=""/52, 0x34}, {&(0x7f0000002c00)=""/19, 0x13}, {&(0x7f0000002c40)=""/211, 0xd3}, {&(0x7f0000002d40)=""/4, 0x4}, {&(0x7f0000002d80)=""/211, 0xd3}, {&(0x7f0000002e80)=""/172, 0xac}], 0x8, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000003400)=[{&(0x7f00000030c0)=""/180, 0xb4}, {&(0x7f0000003180)=""/72, 0x48}, {&(0x7f0000003200)=""/14, 0xe}, {&(0x7f0000003240)=""/134, 0x86}, {&(0x7f0000003300)=""/209, 0xd1}], 0x5, &(0x7f0000003480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000003540), 0x6e, &(0x7f00000039c0)=[{&(0x7f00000035c0)=""/170, 0xaa}, {&(0x7f0000003680)=""/125, 0x7d}, {&(0x7f0000003700)=""/105, 0x69}, {&(0x7f0000003780)=""/134, 0x86}, {&(0x7f0000003840)=""/149, 0x95}, {&(0x7f0000003900)=""/183, 0xb7}], 0x6, &(0x7f0000003a40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003a80), 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003b00)=""/146, 0x92}, {&(0x7f0000003bc0)=""/65, 0x41}], 0x2, &(0x7f0000003c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003e00)=""/199, 0xc7}, {&(0x7f0000003f00)=""/202, 0xca}, {&(0x7f0000004000)=""/225, 0xe1}, {&(0x7f0000004100)=""/57, 0x39}, {&(0x7f0000004140)=""/177, 0xb1}], 0x5, &(0x7f0000004280)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40000021, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f00000045c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x5c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x30000080}, 0x44) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000004640), r6) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r9, &(0x7f0000004700)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000046c0)={&(0x7f0000004680)={0x24, r11, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x96}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x364a}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000004740)={{0x1, 0x1, 0x18, r1, {r5}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000047c0), r5) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x2c, r13, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$hpet(0xffffffffffffff9c, &(0x7f00000048c0), 0xf2081, 0x0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000004940), r10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000004a00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x24, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000004a80), r8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000004b40)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004ac0)={0x2c, r15, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x20000010) r16 = accept$inet6(r9, &(0x7f0000004b80)={0xa, 0x0, 0x0, @private1}, &(0x7f0000004bc0)=0x1c) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r16, 0x89f9, &(0x7f0000004c80)={'ip6gre0\x00', &(0x7f0000004c00)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x8, 0x21b, 0x10, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x20, 0x7fff, 0x9}}) 14:40:21 executing program 7: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x820, @any, 0x9, 0x2}, 0xe) recvmmsg$unix(r1, &(0x7f00000017c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/135, 0x87}], 0x4, &(0x7f0000000440)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f0000001640)=""/74, 0x4a}, {&(0x7f00000016c0)=""/24, 0x18}], 0x2, &(0x7f0000001740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x40002163, &(0x7f0000001880)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) accept4$bt_l2cap(r13, &(0x7f0000001900)={0x1f, 0x0, @none}, &(0x7f0000001940)=0xe, 0x80000) r14 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r14, 0xc018937a, &(0x7f00000019c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff7fffffff}}, './file0\x00'}) r15 = pidfd_getfd(r10, r6, 0x0) accept4$bt_l2cap(r15, &(0x7f0000001a00), &(0x7f0000001a40)=0xe, 0x80000) inotify_rm_watch(r3, 0x0) r16 = syz_io_uring_setup(0x1c5, &(0x7f0000001a80)={0x0, 0x6ef7, 0x0, 0x2, 0x15e, 0x0, r10}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000001b00), &(0x7f0000001b40)=0x0) syz_io_uring_submit(0x0, r17, &(0x7f0000001c40)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x6, 0x0, &(0x7f0000001b80)="4ce9cdfcb8c1e77787155d391d63f5dab49a3f9a3130ae34f7ce4d24fb79e6e170493f0a2252833035251067d2c439fe40769566a2cd530f3fadaed0972142a679fbaaea5500eafbf4b4d83a43a931e743b1cb055a657050f6e4f5f99415042b97ff6baa08035006a1bf2e9ae62ca60d93a4182e59bd41a6b53c4a69d1569ec63a8a91cf64ccb2078aeb08c947e846ecf7525d9a17bd7ae55d", 0x9, 0x0, 0x1, {0x1}}, 0x5) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000001e00)={&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001c80)=""/125, 0x7d, 0x0, &(0x7f0000001d00)=""/225, 0xe1}, &(0x7f0000001e40)=0x40) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002340)={0x90, 0x0, &(0x7f0000002200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000001fc0)={@fda={0x66646185, 0x6, 0x0, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000001e80)=""/255, 0xff, 0x2, 0x38}, @ptr={0x70742a85, 0x0, &(0x7f0000001f80)=""/33, 0x21, 0x1, 0x32}}, &(0x7f0000002040)={0x0, 0x20, 0x48}}}, @enter_looper, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002140)={@ptr={0x70742a85, 0x0, &(0x7f0000002080)=""/155, 0x9b, 0x1, 0x1e}, @fd={0x66642a85, 0x0, r16}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000021c0)={0x0, 0x28, 0x40}}}], 0x67, 0x0, &(0x7f00000022c0)="6a3de1ca28a910cb04eb731a51660f2003ec8ff641670bf9414c9062ebc1e7ad57d55e1df0340ac4320009c61997c8f8e4ab23c9405c199c38a03ce8848fa2f7fb37845924c88f12f8e063496ce840ff1465e2deba0e97a1d498aacb9150f4e2359531ea584563"}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002380)={0x3f, 0x5de, 0x3, 0x3, 0x6, 0x6, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r8, {r11, r12}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r18, 0xc0189374, &(0x7f0000002400)={{0x1, 0x1, 0x18, r8, {0x9}}, './file0\x00'}) [ 111.300053] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.303069] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.315876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.320937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.322949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.326502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.344091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.346438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.349144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.361023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.410172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.421257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.431172] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.439488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.444127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.445742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.453232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.454598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.458962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.463168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.469904] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.472355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.474348] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.476328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.478461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 111.480983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 111.486253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 111.488270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.493554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.494168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 111.495354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.498444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.501525] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 111.510207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 111.515538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 111.517192] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.522940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.525036] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 111.542178] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 111.559919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.430461] Bluetooth: hci1: command tx timeout [ 113.432022] Bluetooth: hci0: command tx timeout [ 113.621928] Bluetooth: hci5: command tx timeout [ 113.623317] Bluetooth: hci4: command tx timeout [ 113.624461] Bluetooth: hci3: command tx timeout [ 113.625471] Bluetooth: hci2: command tx timeout [ 113.625824] Bluetooth: hci7: command tx timeout [ 113.685751] Bluetooth: hci6: command tx timeout [ 115.477906] Bluetooth: hci1: command tx timeout [ 115.478393] Bluetooth: hci0: command tx timeout [ 115.670051] Bluetooth: hci7: command tx timeout [ 115.670505] Bluetooth: hci2: command tx timeout [ 115.671136] Bluetooth: hci4: command tx timeout [ 115.671558] Bluetooth: hci3: command tx timeout [ 115.672750] Bluetooth: hci5: command tx timeout [ 115.735086] Bluetooth: hci6: command tx timeout [ 117.525850] Bluetooth: hci0: command tx timeout [ 117.526360] Bluetooth: hci1: command tx timeout [ 117.717774] Bluetooth: hci3: command tx timeout [ 117.718270] Bluetooth: hci2: command tx timeout [ 117.719414] Bluetooth: hci5: command tx timeout [ 117.720795] Bluetooth: hci4: command tx timeout [ 117.721226] Bluetooth: hci7: command tx timeout [ 117.782829] Bluetooth: hci6: command tx timeout [ 119.574816] Bluetooth: hci0: command tx timeout [ 119.575325] Bluetooth: hci1: command tx timeout [ 119.766813] Bluetooth: hci5: command tx timeout [ 119.767329] Bluetooth: hci7: command tx timeout [ 119.768778] Bluetooth: hci4: command tx timeout [ 119.769207] Bluetooth: hci2: command tx timeout [ 119.769660] Bluetooth: hci3: command tx timeout [ 119.830712] Bluetooth: hci6: command tx timeout [ 174.013898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.023099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.025790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.026976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.030788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.036442] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.041848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.047745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.050493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.064949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.225708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.241527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.244028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.248223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.267872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.268001] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.272051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.275052] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.286103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.300014] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.351390] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.373100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.381255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.383531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.385308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 174.392082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.393312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 174.400115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 174.403288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.406178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.408385] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.421031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.424032] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.461382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 174.530245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.616023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.718210] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.754098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.781920] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 174.804593] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.086960] Bluetooth: hci1: command tx timeout [ 176.150909] Bluetooth: hci0: command tx timeout [ 176.342750] Bluetooth: hci3: command tx timeout [ 176.405890] Bluetooth: hci2: command tx timeout [ 176.534789] Bluetooth: hci4: command tx timeout [ 176.535110] Bluetooth: hci5: command tx timeout [ 176.662858] Bluetooth: hci6: command tx timeout [ 176.917773] Bluetooth: hci7: command tx timeout [ 178.135274] Bluetooth: hci1: command tx timeout [ 178.200147] Bluetooth: hci0: command tx timeout [ 178.390929] Bluetooth: hci3: command tx timeout [ 178.454724] Bluetooth: hci2: command tx timeout [ 178.581760] Bluetooth: hci5: command tx timeout [ 178.584678] Bluetooth: hci4: command tx timeout [ 178.709830] Bluetooth: hci6: command tx timeout [ 178.966686] Bluetooth: hci7: command tx timeout [ 180.181749] Bluetooth: hci1: command tx timeout [ 180.245720] Bluetooth: hci0: command tx timeout [ 180.438437] Bluetooth: hci3: command tx timeout [ 180.501710] Bluetooth: hci2: command tx timeout [ 180.629723] Bluetooth: hci4: command tx timeout [ 180.630277] Bluetooth: hci5: command tx timeout [ 180.758700] Bluetooth: hci6: command tx timeout [ 181.016120] Bluetooth: hci7: command tx timeout [ 182.230959] Bluetooth: hci1: command tx timeout [ 182.294703] Bluetooth: hci0: command tx timeout [ 182.486751] Bluetooth: hci3: command tx timeout [ 182.550816] Bluetooth: hci2: command tx timeout [ 182.678897] Bluetooth: hci5: command tx timeout [ 182.679447] Bluetooth: hci4: command tx timeout [ 182.807669] Bluetooth: hci6: command tx timeout [ 183.062925] Bluetooth: hci7: command tx timeout [ 236.278350] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.283190] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.286125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.296049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.299868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.306405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.307952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.309540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.313826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.316478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.321921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.325763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.331999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.338475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.343660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.355321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.375341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.386593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.406136] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.407808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.479017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.486028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.493575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.513129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.520177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.524292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.539033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.541179] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.547712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.549500] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.551323] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.558291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.560567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.566786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.569402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.571182] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.572457] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.574986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.627010] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.635219] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 238.359674] Bluetooth: hci1: command tx timeout [ 238.421794] Bluetooth: hci0: command tx timeout [ 238.421848] Bluetooth: hci2: command tx timeout [ 238.486309] Bluetooth: hci3: command tx timeout [ 238.614137] Bluetooth: hci4: command tx timeout [ 238.614198] Bluetooth: hci6: command tx timeout [ 238.614957] Bluetooth: hci5: command tx timeout [ 238.677956] Bluetooth: hci7: command tx timeout [ 240.405716] Bluetooth: hci1: command tx timeout [ 240.469897] Bluetooth: hci0: command tx timeout [ 240.470332] Bluetooth: hci2: command tx timeout [ 240.533717] Bluetooth: hci3: command tx timeout [ 240.662673] Bluetooth: hci4: command tx timeout [ 240.663129] Bluetooth: hci5: command tx timeout [ 240.663556] Bluetooth: hci6: command tx timeout [ 240.727136] Bluetooth: hci7: command tx timeout [ 242.454075] Bluetooth: hci1: command tx timeout [ 242.518107] Bluetooth: hci2: command tx timeout [ 242.518561] Bluetooth: hci0: command tx timeout [ 242.581693] Bluetooth: hci3: command tx timeout [ 242.710167] Bluetooth: hci4: command tx timeout [ 242.710981] Bluetooth: hci5: command tx timeout [ 242.711742] Bluetooth: hci6: command tx timeout [ 242.773859] Bluetooth: hci7: command tx timeout [ 244.502766] Bluetooth: hci1: command tx timeout [ 244.565718] Bluetooth: hci0: command tx timeout [ 244.566151] Bluetooth: hci2: command tx timeout [ 244.629692] Bluetooth: hci3: command tx timeout [ 244.758355] Bluetooth: hci6: command tx timeout [ 244.758822] Bluetooth: hci4: command tx timeout [ 244.758983] Bluetooth: hci5: command tx timeout [ 244.821777] Bluetooth: hci7: command tx timeout [ 298.542391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.545372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.549121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.558561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.567225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.670468] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 298.677926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 298.681341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 298.696448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 298.702145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.740079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 298.766172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 298.769414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 298.776056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.779231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 298.786450] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.789924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.794757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.819546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.824828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.828454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.842133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.876751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.890040] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.896107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.981111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.984187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.994108] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.003142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.011085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.207875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.223102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.236091] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 299.280265] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.295840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 299.307837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 299.309423] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.351905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 299.354926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.374295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 300.631935] Bluetooth: hci0: command tx timeout [ 300.823010] Bluetooth: hci1: command tx timeout [ 300.886589] Bluetooth: hci3: command tx timeout [ 300.887398] Bluetooth: hci2: command tx timeout [ 301.014860] Bluetooth: hci4: command tx timeout [ 301.077697] Bluetooth: hci5: command tx timeout [ 301.461865] Bluetooth: hci7: command tx timeout [ 301.462112] Bluetooth: hci6: command tx timeout [ 302.678684] Bluetooth: hci0: command tx timeout [ 302.871211] Bluetooth: hci1: command tx timeout [ 302.933775] Bluetooth: hci3: command tx timeout [ 302.934234] Bluetooth: hci2: command tx timeout [ 303.061785] Bluetooth: hci4: command tx timeout [ 303.125788] Bluetooth: hci5: command tx timeout [ 303.509709] Bluetooth: hci7: command tx timeout [ 303.510708] Bluetooth: hci6: command tx timeout [ 304.727664] Bluetooth: hci0: command tx timeout [ 304.918004] Bluetooth: hci1: command tx timeout [ 304.981928] Bluetooth: hci2: command tx timeout [ 304.982256] Bluetooth: hci3: command tx timeout [ 305.109703] Bluetooth: hci4: command tx timeout [ 305.174193] Bluetooth: hci5: command tx timeout [ 305.558203] Bluetooth: hci6: command tx timeout [ 305.558228] Bluetooth: hci7: command tx timeout [ 306.773678] Bluetooth: hci0: command tx timeout [ 306.966069] Bluetooth: hci1: command tx timeout [ 307.029885] Bluetooth: hci2: command tx timeout [ 307.030367] Bluetooth: hci3: command tx timeout [ 307.157862] Bluetooth: hci4: command tx timeout [ 307.223745] Bluetooth: hci5: command tx timeout [ 307.605823] Bluetooth: hci7: command tx timeout [ 307.606767] Bluetooth: hci6: command tx timeout [ 361.131047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.136546] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.139873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.146401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.151548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 361.388596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.405359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.413723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 361.419776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.422253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.440909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.446502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.448240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.455814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.460234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.468469] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.471236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.475489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.480436] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.485189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.493211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.509243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 361.517944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.518209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.525693] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.536146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.538365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.539648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 361.542387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 361.557215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.576149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.584741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.605342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.627905] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 361.634882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 361.644221] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.650121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 361.695192] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 361.707028] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.744103] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 363.221748] Bluetooth: hci0: command tx timeout [ 363.605817] Bluetooth: hci4: command tx timeout [ 363.606044] Bluetooth: hci1: command tx timeout [ 363.606811] Bluetooth: hci2: command tx timeout [ 363.607549] Bluetooth: hci3: command tx timeout [ 363.669723] Bluetooth: hci5: command tx timeout [ 363.733835] Bluetooth: hci6: command tx timeout [ 363.797692] Bluetooth: hci7: command tx timeout [ 365.269702] Bluetooth: hci0: command tx timeout [ 365.653935] Bluetooth: hci3: command tx timeout [ 365.655912] Bluetooth: hci2: command tx timeout [ 365.656349] Bluetooth: hci1: command tx timeout [ 365.656951] Bluetooth: hci4: command tx timeout [ 365.719827] Bluetooth: hci5: command tx timeout [ 365.781799] Bluetooth: hci6: command tx timeout [ 365.845725] Bluetooth: hci7: command tx timeout [ 367.318653] Bluetooth: hci0: command tx timeout [ 367.701843] Bluetooth: hci2: command tx timeout [ 367.702323] Bluetooth: hci4: command tx timeout [ 367.702548] Bluetooth: hci1: command tx timeout [ 367.703419] Bluetooth: hci3: command tx timeout [ 367.765841] Bluetooth: hci5: command tx timeout [ 367.831014] Bluetooth: hci6: command tx timeout [ 367.895690] Bluetooth: hci7: command tx timeout [ 369.366800] Bluetooth: hci0: command tx timeout [ 369.751252] Bluetooth: hci3: command tx timeout [ 369.751740] Bluetooth: hci4: command tx timeout [ 369.752136] Bluetooth: hci1: command tx timeout [ 369.752551] Bluetooth: hci2: command tx timeout [ 369.815642] Bluetooth: hci5: command tx timeout [ 369.877719] Bluetooth: hci6: command tx timeout [ 369.941683] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 14:45:23 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00007f33d428f000 RCX=ffffffff84a89973 RDX=ffff88802f1b8000 RSI=0000000000000000 RDI=0000000000000006 RBP=ffff888032c67ab0 RSP=ffff888032c679a8 R8 =0000000000000001 R9 =0000000000000001 R10=00007f33d4292fff R11=0000000000000000 R12=ffff888032c67ad4 R13=00007f33d4292fff R14=ffff888032c67e8f R15=ffff888032c67e50 RIP=ffffffff84a89978 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f33d3d83540 00000000 00000000 GS =0000 ffff8880e564b000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f22db1e21f0 CR3=0000000023d00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888009708001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888009707901 RSI=ffff888009707918 RDI=ffff888009707888 RBP=ffff8880097078d0 RSP=ffff8880097077b8 R8 =ffffffff8679cf90 R9 =ffff8880097078b8 R10=000000000003b0c2 R11=00000000000043a2 R12=ffff8880097078d8 R13=ffff8880097078c0 R14=ffff888009707920 R15=ffff888009707878 RIP=ffffffff813513b8 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e574b000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2b94da56f4 CR3=000000001b27c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f2b94db447000007f2b94db3f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000