Warning: Permanently added '[localhost]:28898' (ECDSA) to the list of known hosts.
2025/05/31 03:01:49 fuzzer started
2025/05/31 03:01:49 dialing manager at localhost:34361
syzkaller login: [  101.378173] cgroup: Unknown subsys name 'net'
[  101.527879] cgroup: Unknown subsys name 'cpuset'
[  101.565799] cgroup: Unknown subsys name 'rlimit'
2025/05/31 03:02:13 syscalls: 200
2025/05/31 03:02:13 code coverage: enabled
2025/05/31 03:02:13 comparison tracing: enabled
2025/05/31 03:02:13 extra coverage: enabled
2025/05/31 03:02:13 setuid sandbox: enabled
2025/05/31 03:02:13 namespace sandbox: enabled
2025/05/31 03:02:13 Android sandbox: enabled
2025/05/31 03:02:13 fault injection: enabled
2025/05/31 03:02:13 leak checking: enabled
2025/05/31 03:02:13 net packet injection: enabled
2025/05/31 03:02:13 net device setup: enabled
2025/05/31 03:02:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/31 03:02:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/31 03:02:13 USB emulation: enabled
2025/05/31 03:02:13 hci packet injection: enabled
2025/05/31 03:02:13 wifi device emulation: enabled
2025/05/31 03:02:13 802.15.4 emulation: enabled
2025/05/31 03:02:13 fetching corpus: 0, signal 0/0 (executing program)
2025/05/31 03:02:14 starting 8 fuzzer processes
03:02:14 executing program 0:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x31a, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0x88, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000085}, 0x8851)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x6004c094}, 0x2)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x3, 0x70bd25, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x1e, 0x9, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000)
r2 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@x25={0x9, @remote}, &(0x7f0000000640)=0x80)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'bridge_slave_0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000940)={0x9, 0x50, '\x00', 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
renameat(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r4=>r2, {<r5=>r2}}, './file0\x00'})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2)
sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x0, 0x80, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000cc0), 0x81, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa0, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x33, 0x18}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48000}, 0x44000)

03:02:14 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf8af}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc800}, 0x20000080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x754}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x842)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000540), 0x200020, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x240508d0}, 0x40)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x40002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r6=>r3, {r3}}, './file0\x00'})
r7 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x32004f00}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40c1)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000840)={@desc={0x1, 0x0, @desc3}})
openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vcan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000940)={'gretap0\x00', <r9=>r8, 0x7800, 0x7802, 0xffffffff, 0x7, {{0x27, 0x4, 0x1, 0x8, 0x9c, 0x66, 0x0, 0x7f, 0x29, 0x0, @private=0xa010102, @empty, {[@end, @noop, @lsrr={0x83, 0x1b, 0x11, [@loopback, @private=0xa010101, @rand_addr=0x64010102, @multicast2, @remote, @multicast1]}, @timestamp={0x44, 0x10, 0x84, 0x0, 0x6, [0x7, 0x2, 0x1b7]}, @generic={0x7, 0xf, "2820a315df91773db247b17902"}, @rr={0x7, 0xf, 0x51, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0xe2, 0x1, 0x2, [{@multicast1, 0x1}, {@multicast1, 0xff}, {@broadcast, 0x202d}, {@private=0xa010100, 0x3d666b3}, {@rand_addr=0x64010101, 0x6}]}, @lsrr={0x83, 0xf, 0x9f, [@dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @remote]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a40)={'ip_vti0\x00', r9, 0x7, 0x10, 0x4, 0x5, {{0x1a, 0x4, 0x2, 0x3a, 0x68, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp={0x44, 0x24, 0x6b, 0x0, 0x9, [0x0, 0x1000, 0x4b7c, 0x80000000, 0x80000000, 0x80, 0x2, 0x6]}, @rr={0x7, 0xf, 0xe4, [@rand_addr=0x64010102, @empty, @loopback]}, @end, @lsrr={0x83, 0x1f, 0x4f, [@empty, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @remote, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}})

03:02:14 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={0x2})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0)
faccessat(r3, &(0x7f0000000200)='./file0\x00', 0x106)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
lremovexattr(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)=@known='trusted.overlay.opaque\x00')
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r7 = syz_mount_image$nfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000580)=[{&(0x7f0000000400)="3262b1a7e0c1ab5c9f438c2f001c0fff995b805bf2495ace319ac64f65f795adcf7dc4b1b525885cdeda1a144a2649697cdb42200c0eaab6f32657aa3ff413b5908bc157b33d35", 0x47, 0xff}, {&(0x7f0000000480)="5b6448733ecb152a98d757cdb2a8c6195cb7236b1772c0367c315ea89c21a09efef3298d8ac1f3c01f6170a62f28580534d21d62582dc97d28e78b21dcc3c9a1e3b2e595cf4862b22f92b25f6748469b4f389db34596a10c416980a1caa3981eaead2a3df254a85257daea4d9d4e72fbbcc9053bc9d032f600d8a1ed8d50f7a9232e1a051e117e04e3e40cd644b2e095edfa96b033a1cfbf7567755a98042f3462242f5acdd7a9684dc0d8018664da06686bbbde1ea9630feb46d3bee90f41ff0279c5b7b7152ab27fc6ad78192bf9ab63b613282e52d57fb125a69f4a87928ae80e170767e88089356425218ca23c2d", 0xf0, 0x7}], 0x20000, &(0x7f00000005c0)={[{'./cgroup.cpu/syz0\x00'}, {'/proc/asound/timers\x00'}, {'/proc/asound/timers\x00'}, {'trusted.overlay.opaque\x00'}, {'IPVS\x00'}], [{@subj_user={'subj_user', 0x3d, './cgroup.cpu/syz0\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, '#+(]-'}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r8=>r7}, './file0/file0\x00'})
mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='afs\x00', 0x0, &(0x7f0000000780)='*!\x00')
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000800)={{0x1, 0x1, 0x18, r5}, './file0/file1\x00'})
symlinkat(&(0x7f0000000840)='./file0/file0\x00', r8, &(0x7f0000000880)='./file0\x00')
r10 = geteuid()
fchownat(r7, &(0x7f00000008c0)='./file0/file1\x00', r10, 0x0, 0x1000)

03:02:14 executing program 3:
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '])^\x00'})
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x40)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='qnx4\x00', 0x220804, &(0x7f0000000200)='\x00')
removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', '])^\x00'})
r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x80000)
getpeername$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e)
faccessat(r0, &(0x7f0000000440)='./file0\x00', 0x20)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r3=>0x0})
sendmsg(r2, &(0x7f0000000840)={&(0x7f0000000500)=@can={0x1d, r3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="6167562c337ae553c2b9e93680e770b63a243add46445ff7020036e6aaad2a599e6159f84bd4dbf65f9ba23b279f5c00fce8f2b8d6b8aa49c27628bcfa88f9c5ffb3a80108e41698e12d3d5cbd32e65d97e8038a8a3402411c729fe3cbd9df9e0ada69bf2d85a9b13f637866a69c8e5623808bd948abb8eaf90e41d410b491288904e3721b27c02b35d5795a7a8ccc1195c528333699c6bc7df0bef4", 0x9c}, {&(0x7f0000000640)="a9627581af290ca48874da741a493112b6215c2384215edf4775616b", 0x1c}, {&(0x7f0000000680)="837a2e65dbe40d3c7a68a3d65f0b34e10c07204457b4527ed47b29def72d67153299ad23ce92d9bb614fe63de08be80e8d8d68d587c57d4fb891ee0886e9e64439fc69ce8137f2480693ca0d411586d27602d97ac5ea5bff7749", 0x5a}, {&(0x7f0000000700)="8be72c1e107778c3c1fcab35657c29428f54d4ee0625fb2777b12d803d75d1d95abd1bdd8c0a789d0d0a55a7dafdf0d5a25ce938cdb57d189d2bba612dbeae1755ecacf5d9ac7773ecc22794b73b38a7186716cb6c591139bf5f0ec690b9af230cf1362d3398b47467bc502865ed77803ce8def991f97c42f7e6cf6af06c31f8a13248828a04f8846496d30861b0bc5b9a7e5c745a7bb0237bb3e89b37946b60ea1ace3bc32cefca7061da7cd8671f1273d72ba3a50e9fed2a11e60f0f6dac7d684c78e55ea4254f94747393a5388ee4709845f02a0d3e3e4a3d401f8f7207dd77195973d608f0e518e001aa", 0xec}], 0x4}, 0x20000080)
fchmodat(r1, &(0x7f0000000880)='./file0\x00', 0x100)
timerfd_gettime(r0, &(0x7f00000008c0))
r4 = accept4$unix(r1, &(0x7f0000000900)=@abs, &(0x7f0000000980)=0x6e, 0x800)
accept4$unix(r4, &(0x7f00000009c0)=@abs, &(0x7f0000000a40)=0x6e, 0x80800)
statx(r2, &(0x7f0000000a80)='./file0\x00', 0x1000, 0x40, &(0x7f0000000ac0))
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000bc0)={@desc={0x1, 0x0, @auto="c5e1a4f945a17d4a"}})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), &(0x7f0000000e00)={0x0, 0xfb, 0x15, 0x5, 0x0, "0777c0491f0f3a1d6d4544ec7f580ac5"}, 0x15, 0x2)

03:02:14 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x30)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x3, '\x00', @a})
faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x180)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>r0}}, './file0\x00'})
r3 = getuid()
fchownat(r1, &(0x7f0000000140)='./file0\x00', r3, 0xee01, 0x1000)
r4 = accept4(r2, &(0x7f0000000180)=@caif=@rfm, &(0x7f0000000200)=0x80, 0x80800)
r5 = io_uring_setup(0x2897, &(0x7f0000000240)={0x0, 0x2127, 0x2, 0x0, 0x3bc, 0x0, r0})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {<r6=>r5}}, './file0\x00'})
openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x101200, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101040, 0x0)
r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x10200, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000440)={r9, 0x0, r2, 0x800})
name_to_handle_at(r7, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@xfs_parent={0x1c, 0x82, {0xfffffffffffffff8, 0x6, 0x10001, 0x80000000}}, &(0x7f0000000500), 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {<r10=>r5}}, './file0\x00'})
readlinkat(r10, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=""/21, 0x15)
getsockopt$sock_timeval(r8, 0x1, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0x10)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xdc, 0x2, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x930e2bb8ee2ca22c}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x36e00}}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004850)

[  125.993927] audit: type=1400 audit(1748660534.769:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:02:14 executing program 5:
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffe1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0xf1)
getresuid(&(0x7f00000002c0)=<r0=>0x0, &(0x7f0000000300), &(0x7f0000000340))
fchownat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', r0, 0xee00, 0x1000)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xfff}, {0x9, 0xa5}], r0}, 0x18, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40044}, 0x40080)
r1 = socket$netlink(0x10, 0x3, 0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000500)=0x1ff, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept4(r2, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x200)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000640))
statx(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x800, 0x40, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0/../file0\x00', 0x1, 0x1, &(0x7f0000000800)=[{&(0x7f0000000700)="03bed89ae4dc5e287ecfa3b1e6a89a2dc23ecfec520100811592ad6eb1b38ae620497df3a5d03f62085b4b83127c8c2763a17112d8ab5eb089a58cd647b16d4524fff2d384624390dc12c40e27c62679c794095e80f55b083ec108a3d9f5e19fad555eb0117d3c8414a31803ca35f65c6d0d6cb6c3f3a71ab2b6df16fc9eb37575d60621980cd7ec491c9bca2be22fe6ae3a33c2a8a22d38c6003921d8eea3ea76a6cba146236e82cacaf5a8d7e457fbfc098c18981bc6618033b0f4e2dc1e3ac5ab03ba3eda8202f1945f5d14ac13287e89b1459fe902", 0xd7, 0x1ff}], 0x20000, &(0x7f0000000980)={[{@gid={'gid', 0x3d, r4}}, {@huge_never}, {@size={'size', 0x3d, [0x37]}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x36, 0x0, 0x36, 0x36, 0x37]}}}}, {@huge_within_size}, {@size={'size', 0x3d, [0x37, 0x34, 0x32, 0x39, 0x30, 0x38, 0x30, 0x67]}}, {@huge_never}, {@huge_never}, {@size={'size', 0x3d, [0x67, 0x70, 0x67, 0x38, 0x30]}}], [{@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x33, 0x65, 0x35, 0x31, 0x38, 0x61], 0x2d, [0x31, 0x39, 0x65, 0x63], 0x2d, [0x61, 0x64, 0x72cbaa937a55876e, 0x37], 0x2d, [0x64, 0x30, 0x31, 0x36], 0x2d, [0x63, 0x38, 0x30, 0x62, 0x37, 0x31, 0x33, 0x38]}}}, {@appraise_type}, {@dont_hash}]})
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x101000, 0x0)
mknodat(r5, &(0x7f0000000ac0)='./file0\x00', 0xc000, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000b00)=0x4, 0x4)
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

03:02:14 executing program 6:
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>r0}}, './file0\x00'})
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
open$dir(&(0x7f0000000240)='./file0\x00', 0x200000, 0x100)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {<r5=>r4}}, './file0\x00'})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc2}})
lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'user.', '\x00'})
r6 = open$dir(&(0x7f0000000380)='./file0/file0\x00', 0x580000, 0x129)
readlinkat(r6, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/166, 0xa6)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r2)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r7, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x46a, @bearer=@udp='udp:syz1\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040044}, 0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0xee01, 0xee00, 0x100)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd0a}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1ff}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40001a0)
r9 = accept(r2, &(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000840)=0x80)
sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc0000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
utimensat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={{0x0, 0x2710}, {0x77359400}}, 0x100)

03:02:14 executing program 7:
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000000)
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8001, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008880)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x0, 0x0)
r3 = accept(r0, &(0x7f0000000300)=@can, &(0x7f0000000380)=0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x520d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x804)
r4 = accept4(r0, &(0x7f00000004c0)=@nfc, &(0x7f0000000540)=0x80, 0x800)
sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000808}, 0x4000001)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r5=>r3, {<r6=>r1}}, './file0\x00'})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4020)
r9 = accept(r8, &(0x7f0000000940)=@hci, &(0x7f00000009c0)=0x80)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000010)
statx(r2, &(0x7f0000000b40)='./file0\x00', 0x6500, 0x200, &(0x7f0000000b80))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r6, {<r10=>r5}}, './file0\x00'})
sendmsg$IPVS_CMD_DEL_DEST(r10, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd8, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x554}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x17}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8800)

[  127.530168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.540020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.542762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.555964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.563742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.673873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  127.684000] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  127.688769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  127.691908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  127.696949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  127.706849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  127.713966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  127.730610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  127.734035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  127.739972] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  127.755552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  127.786571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  127.788549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  127.795005] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  127.802026] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  127.822188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  127.823229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  127.826769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  127.879994] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  127.909756] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  127.914882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  127.915996] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  127.932930] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  127.939753] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  127.943716] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  127.960053] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  127.975787] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  127.976997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  127.981149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.005738] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.020987] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.025120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.047237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.048911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.062914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  129.614263] Bluetooth: hci0: command tx timeout
[  129.870848] Bluetooth: hci1: command tx timeout
[  129.870908] Bluetooth: hci2: command tx timeout
[  129.933742] Bluetooth: hci3: command tx timeout
[  129.998549] Bluetooth: hci4: command tx timeout
[  130.125933] Bluetooth: hci6: command tx timeout
[  130.126818] Bluetooth: hci7: command tx timeout
[  130.190950] Bluetooth: hci5: command tx timeout
[  131.662532] Bluetooth: hci0: command tx timeout
[  131.917567] Bluetooth: hci2: command tx timeout
[  131.917644] Bluetooth: hci1: command tx timeout
[  131.982867] Bluetooth: hci3: command tx timeout
[  132.045597] Bluetooth: hci4: command tx timeout
[  132.173666] Bluetooth: hci7: command tx timeout
[  132.173893] Bluetooth: hci6: command tx timeout
[  132.237559] Bluetooth: hci5: command tx timeout
[  133.709831] Bluetooth: hci0: command tx timeout
[  133.967527] Bluetooth: hci2: command tx timeout
[  133.967582] Bluetooth: hci1: command tx timeout
[  134.029946] Bluetooth: hci3: command tx timeout
[  134.096519] Bluetooth: hci4: command tx timeout
[  134.221947] Bluetooth: hci6: command tx timeout
[  134.224576] Bluetooth: hci7: command tx timeout
[  134.286555] Bluetooth: hci5: command tx timeout
[  135.757567] Bluetooth: hci0: command tx timeout
[  136.013580] Bluetooth: hci1: command tx timeout
[  136.014670] Bluetooth: hci2: command tx timeout
[  136.078503] Bluetooth: hci3: command tx timeout
[  136.142250] Bluetooth: hci4: command tx timeout
[  136.269721] Bluetooth: hci7: command tx timeout
[  136.269824] Bluetooth: hci6: command tx timeout
[  136.335771] Bluetooth: hci5: command tx timeout
[  189.866098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.872353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.876955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.884994] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.894229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.013103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.029289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.046119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.051251] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.055003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.057729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.067928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.076875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.079245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.086302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.149367] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.166931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  190.175189] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.178404] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.191199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  190.215747] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  190.233026] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.237749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  190.246974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  190.250251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  190.262138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  190.268397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  190.269051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  190.277597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  190.281923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  190.292179] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  190.296068] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  190.298807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  190.300642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  190.338016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  190.344091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  190.355625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  190.361318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  190.367340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  190.433049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.950567] Bluetooth: hci0: command tx timeout
[  192.141774] Bluetooth: hci2: command tx timeout
[  192.207707] Bluetooth: hci1: command tx timeout
[  192.334932] Bluetooth: hci4: command tx timeout
[  192.335951] Bluetooth: hci3: command tx timeout
[  192.397880] Bluetooth: hci5: command tx timeout
[  192.525675] Bluetooth: hci7: command tx timeout
[  192.526427] Bluetooth: hci6: command tx timeout
[  193.997730] Bluetooth: hci0: command tx timeout
[  194.190523] Bluetooth: hci2: command tx timeout
[  194.255762] Bluetooth: hci1: command tx timeout
[  194.384532] Bluetooth: hci4: command tx timeout
[  194.384962] Bluetooth: hci3: command tx timeout
[  194.446553] Bluetooth: hci5: command tx timeout
[  194.574700] Bluetooth: hci7: command tx timeout
[  194.575130] Bluetooth: hci6: command tx timeout
[  196.046677] Bluetooth: hci0: command tx timeout
[  196.237695] Bluetooth: hci2: command tx timeout
[  196.303497] Bluetooth: hci1: command tx timeout
[  196.429720] Bluetooth: hci3: command tx timeout
[  196.430178] Bluetooth: hci4: command tx timeout
[  196.493760] Bluetooth: hci5: command tx timeout
[  196.621689] Bluetooth: hci7: command tx timeout
[  196.622157] Bluetooth: hci6: command tx timeout
[  198.093592] Bluetooth: hci0: command tx timeout
[  198.287688] Bluetooth: hci2: command tx timeout
[  198.350572] Bluetooth: hci1: command tx timeout
[  198.477658] Bluetooth: hci4: command tx timeout
[  198.478096] Bluetooth: hci3: command tx timeout
[  198.542680] Bluetooth: hci5: command tx timeout
[  198.670758] Bluetooth: hci6: command tx timeout
[  198.671184] Bluetooth: hci7: command tx timeout
[  252.130017] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.132763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.140093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.155114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.159864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  252.162898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.178003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  252.181063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  252.188114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  252.203985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.331556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  252.347083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  252.360119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  252.373530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  252.385821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.573908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  252.579165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  252.583107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.585547] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  252.594976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.597395] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  252.601298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.607129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  252.612917] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  252.615833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  252.619207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.626243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  252.633285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  252.641700] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  252.687104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.688997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  252.727731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.746855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.781908] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.787859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.791741] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.841000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.842837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.853567] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.859814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.222721] Bluetooth: hci0: command tx timeout
[  254.285573] Bluetooth: hci1: command tx timeout
[  254.477613] Bluetooth: hci2: command tx timeout
[  254.733687] Bluetooth: hci5: command tx timeout
[  254.861732] Bluetooth: hci3: command tx timeout
[  254.989676] Bluetooth: hci6: command tx timeout
[  255.053597] Bluetooth: hci4: command tx timeout
[  255.053624] Bluetooth: hci7: command tx timeout
[  256.269536] Bluetooth: hci0: command tx timeout
[  256.334573] Bluetooth: hci1: command tx timeout
[  256.525533] Bluetooth: hci2: command tx timeout
[  256.783841] Bluetooth: hci5: command tx timeout
[  256.910732] Bluetooth: hci3: command tx timeout
[  257.037850] Bluetooth: hci6: command tx timeout
[  257.102093] Bluetooth: hci4: command tx timeout
[  257.102614] Bluetooth: hci7: command tx timeout
[  258.319499] Bluetooth: hci0: command tx timeout
[  258.382512] Bluetooth: hci1: command tx timeout
[  258.573719] Bluetooth: hci2: command tx timeout
[  258.829767] Bluetooth: hci5: command tx timeout
[  258.957600] Bluetooth: hci3: command tx timeout
[  259.085827] Bluetooth: hci6: command tx timeout
[  259.150564] Bluetooth: hci4: command tx timeout
[  259.150592] Bluetooth: hci7: command tx timeout
[  260.365748] Bluetooth: hci0: command tx timeout
[  260.429825] Bluetooth: hci1: command tx timeout
[  260.621711] Bluetooth: hci2: command tx timeout
[  260.877557] Bluetooth: hci5: command tx timeout
[  261.008544] Bluetooth: hci3: command tx timeout
[  261.133794] Bluetooth: hci6: command tx timeout
[  261.197575] Bluetooth: hci4: command tx timeout
[  261.197646] Bluetooth: hci7: command tx timeout
[  314.403233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.410821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.414317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.428369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.439067] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.526239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.530958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.533380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.541226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.544816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.716028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.722046] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.724446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.736443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.740806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.798918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.806117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.813532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.822223] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.825973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.830748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.835447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.842978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.884020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.895240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.912129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.917350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.921079] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.925769] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.927917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.931933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.957022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.962430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.963023] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.988421] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.992581] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  315.009792] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  315.009830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  315.018029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  315.022865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.494565] Bluetooth: hci0: command tx timeout
[  316.622920] Bluetooth: hci1: command tx timeout
[  316.880741] Bluetooth: hci2: command tx timeout
[  316.941571] Bluetooth: hci3: command tx timeout
[  317.005708] Bluetooth: hci4: command tx timeout
[  317.069687] Bluetooth: hci5: command tx timeout
[  317.070336] Bluetooth: hci7: command tx timeout
[  317.134591] Bluetooth: hci6: command tx timeout
[  318.541747] Bluetooth: hci0: command tx timeout
[  318.669738] Bluetooth: hci1: command tx timeout
[  318.925604] Bluetooth: hci2: command tx timeout
[  318.990367] Bluetooth: hci3: command tx timeout
[  319.054485] Bluetooth: hci4: command tx timeout
[  319.117687] Bluetooth: hci5: command tx timeout
[  319.118144] Bluetooth: hci7: command tx timeout
[  319.181583] Bluetooth: hci6: command tx timeout
[  320.589770] Bluetooth: hci0: command tx timeout
[  320.717648] Bluetooth: hci1: command tx timeout
[  320.973778] Bluetooth: hci2: command tx timeout
[  321.039584] Bluetooth: hci3: command tx timeout
[  321.101982] Bluetooth: hci4: command tx timeout
[  321.165574] Bluetooth: hci5: command tx timeout
[  321.166019] Bluetooth: hci7: command tx timeout
[  321.229531] Bluetooth: hci6: command tx timeout
[  322.637766] Bluetooth: hci0: command tx timeout
[  322.767631] Bluetooth: hci1: command tx timeout
[  323.021536] Bluetooth: hci2: command tx timeout
[  323.085703] Bluetooth: hci3: command tx timeout
[  323.149730] Bluetooth: hci4: command tx timeout
[  323.214522] Bluetooth: hci7: command tx timeout
[  323.214959] Bluetooth: hci5: command tx timeout
[  323.277690] Bluetooth: hci6: command tx timeout
[  376.870888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.877783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.890053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.912166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.923719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.943767] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.949910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.955536] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.969932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.986373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.005962] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.011092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.015507] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.021437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.026385] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.221790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.225944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.240169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.242179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.245184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.250075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.250989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.255045] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.259942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.268926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.277191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.283187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.296595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.306009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.337707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.353144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.369349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.373653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.388052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.394165] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.471174] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.476117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.491126] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.516017] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.521043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  379.021786] Bluetooth: hci0: command tx timeout
[  379.086606] Bluetooth: hci1: command tx timeout
[  379.213673] Bluetooth: hci2: command tx timeout
[  379.405967] Bluetooth: hci5: command tx timeout
[  379.406017] Bluetooth: hci3: command tx timeout
[  379.407001] Bluetooth: hci4: command tx timeout
[  379.469623] Bluetooth: hci6: command tx timeout
[  379.597600] Bluetooth: hci7: command tx timeout
[  381.069582] Bluetooth: hci0: command tx timeout
[  381.135778] Bluetooth: hci1: command tx timeout
[  381.261861] Bluetooth: hci2: command tx timeout
[  381.453710] Bluetooth: hci3: command tx timeout
[  381.454738] Bluetooth: hci4: command tx timeout
[  381.455949] Bluetooth: hci5: command tx timeout
[  381.517594] Bluetooth: hci6: command tx timeout
[  381.645612] Bluetooth: hci7: command tx timeout
[  383.119778] Bluetooth: hci0: command tx timeout
[  383.183556] Bluetooth: hci1: command tx timeout
[  383.309567] Bluetooth: hci2: command tx timeout
[  383.501782] Bluetooth: hci4: command tx timeout
[  383.502395] Bluetooth: hci5: command tx timeout
[  383.502771] Bluetooth: hci3: command tx timeout
[  383.566824] Bluetooth: hci6: command tx timeout
[  383.694491] Bluetooth: hci7: command tx timeout
[  385.165587] Bluetooth: hci0: command tx timeout
[  385.229546] Bluetooth: hci1: command tx timeout
[  385.358447] Bluetooth: hci2: command tx timeout
[  385.549763] Bluetooth: hci3: command tx timeout
[  385.549814] Bluetooth: hci4: command tx timeout
[  385.550291] Bluetooth: hci5: command tx timeout
[  385.613528] Bluetooth: hci6: command tx timeout
[  385.741885] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
03:07:18  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800ed92c80 RCX=ffffffff81a4625e RDX=ffff888017080000
RSI=00007f7c60a93fff RDI=0000000000000006 RBP=ffff88801696f3c0 RSP=ffff88803164f6c8
R8 =0000000000000001 R9 =ffffed1002d2de88 R10=00007f7c60a91000 R11=ffff888025c0e331
R12=00007f7c60a91000 R13=ffff88803164f8d0 R14=00007f7c60a91000 R15=0000000000000000
RIP=ffffffff84b66c40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c60a95368 CR3=000000003376e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802d6ffcf0 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81354102 RDI=ffffffff85c1d1c0 RBP=ffff88802d6f8000 RSP=ffff88802d6ff070
R8 =0000000000000001 R9 =ffff88802d6ff128 R10=000000000003b6bd R11=0000000000021b1c
R12=ffff88802d6ff101 R13=ffff88802d6ff130 R14=ffff88802d6ffcc0 R15=ffff88802d6ff0e8
RIP=ffffffff8151ad90 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055dd0282e080 CR3=0000000029d3f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000