Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:16671' (ECDSA) to the list of known hosts. 2025/06/16 13:52:30 fuzzer started 2025/06/16 13:52:30 dialing manager at localhost:42061 syzkaller login: [ 114.914825] cgroup: Unknown subsys name 'net' [ 115.059511] cgroup: Unknown subsys name 'cpuset' [ 115.107926] cgroup: Unknown subsys name 'rlimit' 2025/06/16 13:52:47 syscalls: 203 2025/06/16 13:52:47 code coverage: enabled 2025/06/16 13:52:47 comparison tracing: enabled 2025/06/16 13:52:47 extra coverage: enabled 2025/06/16 13:52:47 setuid sandbox: enabled 2025/06/16 13:52:47 namespace sandbox: enabled 2025/06/16 13:52:47 Android sandbox: enabled 2025/06/16 13:52:47 fault injection: enabled 2025/06/16 13:52:47 leak checking: enabled 2025/06/16 13:52:47 net packet injection: enabled 2025/06/16 13:52:47 net device setup: enabled 2025/06/16 13:52:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/16 13:52:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/16 13:52:47 USB emulation: enabled 2025/06/16 13:52:47 hci packet injection: enabled 2025/06/16 13:52:47 wifi device emulation: enabled 2025/06/16 13:52:47 802.15.4 emulation: enabled 2025/06/16 13:52:47 fetching corpus: 0, signal 0/0 (executing program) 2025/06/16 13:52:49 starting 8 fuzzer processes 13:52:49 executing program 0: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) r1 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) recvfrom$unix(r1, &(0x7f0000000180)=""/71, 0x47, 0x40000000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r4 = accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) write$cgroup_devices(r3, &(0x7f0000000380)={'c', ' *:* ', 'rw\x00'}, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) statx(r2, &(0x7f0000000400)='./file0\x00', 0x100, 0x4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {r5, r6}}, './file0\x00'}) getpeername$unix(r4, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r9, {0x194, 0xffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000700)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r12}, './file0\x00'}) getpeername$unix(r9, &(0x7f0000000780), &(0x7f0000000800)=0x6e) recvfrom$unix(r0, &(0x7f0000000840)=""/4096, 0x1000, 0x12002, &(0x7f0000001840)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r14 = io_uring_setup(0x2f26, &(0x7f0000001900)={0x0, 0x36a6, 0x10, 0x2, 0x15e, 0x0, r11}) ioctl$AUTOFS_DEV_IOCTL_READY(r13, 0xc0189376, &(0x7f0000001980)={{0x1, 0x1, 0x18, r14, {0x2}}, './file0\x00'}) 13:52:49 executing program 1: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "bfe05087888d9518", "b5177ef1a6aca6154c1725062f22c5d1", "d2b00f40", "b735bf9fb6fd08df"}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @window={0x3, 0x6, 0x5}], 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x8000, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) r5 = accept$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000002c0)=@ccm_128={{0x304}, "351863aa850f7376", "e9fc71cca6b6333c6a3b31adec4c6678", "28169f49", "991704d6cd972c9b"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) accept$unix(r6, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) bind$unix(r6, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'}) statx(r7, &(0x7f00000004c0)='./file0\x00', 0x400, 0x400, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {r2}}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x200, 0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r11, {0x1f}}, './file1\x00'}) 13:52:49 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040)=r0, 0x1) r1 = accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xa7b0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r0}, {0x8, 0x1, r10}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}]}, 0x94}, 0x1, 0x0, 0x0, 0x2404c404}, 0x8) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r3, 0x510, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbbd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x64000000) r11 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x2, 0x3f, 0x20, 0x6, 0x0, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x766}, 0x60, 0x81, 0x3222, 0x9, 0x74, 0x4, 0x8, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r6, {r11}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)) getsockname$unix(r6, &(0x7f0000000b80), &(0x7f0000000c00)=0x6e) clock_getres(0x0, &(0x7f0000000c40)) r12 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r12, {0x10001}}, './file0\x00'}) [ 133.249018] audit: type=1400 audit(1750081969.338:7): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:52:49 executing program 3: mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x10000) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r1 = accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000140)="4d7dbf93bf935f5d73d1570fe931c940c9f445cd6298abfd61a0919b6d14829aec249401bfa428c60e9f7b7abbe3169e7d24dd6a4392be630413329550c7eed990955493b44a405da6a8eb13e86cb5b38226b8dc511afbba1f49151b1b0c9e566630be1c3cfcb6dfa984f2ac3d370ee05cfc1a2191e1a95825783eefa18c3a6a970961e4d1ca7183c9270546a3eb5fd486d35b21860231c16cb2bac81c37f67441ab24cf35c1843b35fb4bc6e67b98a491a1ea7516dd0102afdaa2bf79d5b2d28a92b9ada5988cd7b3dd26159dd15085bfc0ff3682cfeb337e5359d96600350bfc38e01b9a69c1e9a2", 0xe9) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x1010, r3, 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0/../file0\x00'}) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0/../file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x0, 0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0/../file0\x00'}) linkat(r8, &(0x7f00000003c0)='./file0/../file0\x00', r3, &(0x7f0000000400)='./file0/../file0/file0\x00', 0x1000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) recvmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/80, 0x50}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/89, 0x59}, {&(0x7f0000000640)=""/150, 0x96}], 0x5, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40000002) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0xee01, r9}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f0000000880)={{0x2, 0x3, 0x800, 0x3, 0x92}, 0x6, 0x1}) 13:52:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x1) write$cgroup_devices(r2, &(0x7f0000000200)={'c', ' *:* ', 'wm\x00'}, 0x9) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) getsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockname$unix(r6, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) r7 = syz_io_uring_setup(0x63a6, &(0x7f0000000500)={0x0, 0xe661, 0x4, 0x1, 0xe6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000680)={0x200, 0x0, &(0x7f0000000640)=[r8, r6, r6, 0xffffffffffffffff, r4, r3]}, 0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f00000006c0)={0x3}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r8, @out_args}, './file1\x00'}) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000740)={0x0, @local, @initdev}, &(0x7f0000000780)=0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000007c0), 0x4) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x800) 13:52:49 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x10000000) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x8001, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1f}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x314, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MEDIA={0x124, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x606}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28000}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe5}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x25}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x963a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9b3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x40081}, 0x48800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40040) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/148, 0x94}], 0x4) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x2004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r9, 0x6, 0xe, &(0x7f0000000b40)=""/240, &(0x7f0000000c40)=0xf0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x13, r10, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7, r8}}, './file0\x00'}) 13:52:49 executing program 6: syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), 0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) statx(r0, &(0x7f0000000100)='./file0/file0\x00', 0x7500, 0x75d, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0/file0\x00'}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000280)={@id={0x2, 0x0, @d}, 0x40, 0x0, '\x00', @b}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x10dc80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0/file0\x00'}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x860) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r6) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4000040) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa4, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x6, 0x80000001, 0x6]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xffffffff, 0x558, 0x241, 0x0, 0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8a, 0xfff, 0x1856]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_io_uring_setup(0x503, &(0x7f0000000940)={0x0, 0x5184, 0x8, 0x3, 0x14}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000a40), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000a80)='NET_DM\x00') io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 13:52:49 executing program 7: ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x80, 0x1, 0x1}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x44}}, 0x80) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7424}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000003a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000003b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x3c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x15}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40044050) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000003b80)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x40, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x20040401}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d00)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044002}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000003e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000003fc0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003e80)={0xd0, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff7}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000880}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000004000)) bind$unix(0xffffffffffffffff, &(0x7f0000004040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) [ 134.693440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.714404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.716108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.719704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.722492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.770568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.772991] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.774246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.777486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.781228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.787300] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.795145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.797103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.799077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.804119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.806098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.809034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.824512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 134.827175] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 134.828287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.829749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.833596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.844431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.848943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.854516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.857822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 134.858092] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.860170] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.861369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 134.861910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.870494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 134.882137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.897024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.898382] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.900293] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.902168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.903856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.904147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.916496] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.918441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.816199] Bluetooth: hci0: command tx timeout [ 136.880008] Bluetooth: hci1: command tx timeout [ 136.880593] Bluetooth: hci2: command tx timeout [ 136.943337] Bluetooth: hci4: command tx timeout [ 136.943956] Bluetooth: hci7: command tx timeout [ 136.944507] Bluetooth: hci3: command tx timeout [ 137.006858] Bluetooth: hci5: command tx timeout [ 137.007439] Bluetooth: hci6: command tx timeout [ 138.863779] Bluetooth: hci0: command tx timeout [ 138.926903] Bluetooth: hci2: command tx timeout [ 138.927384] Bluetooth: hci1: command tx timeout [ 138.991900] Bluetooth: hci3: command tx timeout [ 138.992429] Bluetooth: hci7: command tx timeout [ 138.992982] Bluetooth: hci4: command tx timeout [ 139.055804] Bluetooth: hci6: command tx timeout [ 139.056320] Bluetooth: hci5: command tx timeout [ 140.912752] Bluetooth: hci0: command tx timeout [ 140.975084] Bluetooth: hci1: command tx timeout [ 140.975563] Bluetooth: hci2: command tx timeout [ 141.038954] Bluetooth: hci7: command tx timeout [ 141.039437] Bluetooth: hci4: command tx timeout [ 141.040415] Bluetooth: hci3: command tx timeout [ 141.103069] Bluetooth: hci6: command tx timeout [ 141.103561] Bluetooth: hci5: command tx timeout [ 142.958809] Bluetooth: hci0: command tx timeout [ 143.022916] Bluetooth: hci2: command tx timeout [ 143.023401] Bluetooth: hci1: command tx timeout [ 143.087960] Bluetooth: hci4: command tx timeout [ 143.088439] Bluetooth: hci3: command tx timeout [ 143.089405] Bluetooth: hci7: command tx timeout [ 143.152332] Bluetooth: hci5: command tx timeout [ 143.152999] Bluetooth: hci6: command tx timeout [ 197.185434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.187412] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.188977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.196436] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.201124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.438981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.441888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.450621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.455584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.458302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.512274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.518581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.520195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.524979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.533115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.541354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.547100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.550524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.552823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.558367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.561213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.563282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.564535] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.570076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.579488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.586369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.589475] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.594169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.601257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.606412] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.634410] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.647281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.677906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.694280] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.698181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.725097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 197.771095] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 197.784965] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 197.804075] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 197.824140] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.279917] Bluetooth: hci0: command tx timeout [ 199.535134] Bluetooth: hci1: command tx timeout [ 199.663858] Bluetooth: hci2: command tx timeout [ 199.664478] Bluetooth: hci3: command tx timeout [ 199.665080] Bluetooth: hci5: command tx timeout [ 199.665623] Bluetooth: hci4: command tx timeout [ 199.791798] Bluetooth: hci6: command tx timeout [ 199.918991] Bluetooth: hci7: command tx timeout [ 201.327052] Bluetooth: hci0: command tx timeout [ 201.583766] Bluetooth: hci1: command tx timeout [ 201.711866] Bluetooth: hci4: command tx timeout [ 201.711975] Bluetooth: hci2: command tx timeout [ 201.712488] Bluetooth: hci5: command tx timeout [ 201.712988] Bluetooth: hci3: command tx timeout [ 201.838785] Bluetooth: hci6: command tx timeout [ 201.967209] Bluetooth: hci7: command tx timeout [ 203.374847] Bluetooth: hci0: command tx timeout [ 203.630951] Bluetooth: hci1: command tx timeout [ 203.759052] Bluetooth: hci5: command tx timeout [ 203.760163] Bluetooth: hci3: command tx timeout [ 203.760657] Bluetooth: hci4: command tx timeout [ 203.761088] Bluetooth: hci2: command tx timeout [ 203.886784] Bluetooth: hci6: command tx timeout [ 204.014937] Bluetooth: hci7: command tx timeout [ 205.423080] Bluetooth: hci0: command tx timeout [ 205.678774] Bluetooth: hci1: command tx timeout [ 205.807980] Bluetooth: hci2: command tx timeout [ 205.808118] Bluetooth: hci4: command tx timeout [ 205.808511] Bluetooth: hci3: command tx timeout [ 205.809118] Bluetooth: hci5: command tx timeout [ 205.934793] Bluetooth: hci6: command tx timeout [ 206.063810] Bluetooth: hci7: command tx timeout [ 259.956345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.967109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.973162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.985061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.000646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.094000] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.096997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.098544] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.102912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.105354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.162339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.167496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.169122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.174357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.177043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.235528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.282870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.288222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.296166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.312866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.353995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.358002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.367246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.377312] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.387715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.503229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.506821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.510096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.517656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.522849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.619169] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 260.620841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 260.622863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 260.627462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 260.631338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 260.647405] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.657370] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.672533] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.682345] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.685550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.062789] Bluetooth: hci0: command tx timeout [ 262.190808] Bluetooth: hci1: command tx timeout [ 262.254917] Bluetooth: hci2: command tx timeout [ 262.384391] Bluetooth: hci3: command tx timeout [ 262.660310] Bluetooth: hci4: command tx timeout [ 262.661082] Bluetooth: hci5: command tx timeout [ 262.766919] Bluetooth: hci7: command tx timeout [ 262.767122] Bluetooth: hci6: command tx timeout [ 264.111128] Bluetooth: hci0: command tx timeout [ 264.239967] Bluetooth: hci1: command tx timeout [ 264.302990] Bluetooth: hci2: command tx timeout [ 264.431123] Bluetooth: hci3: command tx timeout [ 264.687317] Bluetooth: hci5: command tx timeout [ 264.687389] Bluetooth: hci4: command tx timeout [ 264.814986] Bluetooth: hci6: command tx timeout [ 264.815876] Bluetooth: hci7: command tx timeout [ 266.159103] Bluetooth: hci0: command tx timeout [ 266.288752] Bluetooth: hci1: command tx timeout [ 266.351267] Bluetooth: hci2: command tx timeout [ 266.479118] Bluetooth: hci3: command tx timeout [ 266.734846] Bluetooth: hci5: command tx timeout [ 266.736396] Bluetooth: hci4: command tx timeout [ 266.864210] Bluetooth: hci7: command tx timeout [ 266.864231] Bluetooth: hci6: command tx timeout [ 268.207044] Bluetooth: hci0: command tx timeout [ 268.335760] Bluetooth: hci1: command tx timeout [ 268.400189] Bluetooth: hci2: command tx timeout [ 268.529725] Bluetooth: hci3: command tx timeout [ 268.782844] Bluetooth: hci5: command tx timeout [ 268.782945] Bluetooth: hci4: command tx timeout [ 268.910832] Bluetooth: hci7: command tx timeout [ 268.911345] Bluetooth: hci6: command tx timeout [ 322.973379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.977503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.978907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.002946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.014056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.021285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.023187] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.024469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.027248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.029824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.032213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.038637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.040380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.041615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.044111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.149311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.153086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.169652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.193849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.210056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.232497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.241840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.248071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.257574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.270731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.272614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.276898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.277339] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.279567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.283776] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.294712] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.296396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.302873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.317592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.330560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.334772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.336955] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.345769] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.347633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.376579] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.103826] Bluetooth: hci0: command tx timeout [ 325.103948] Bluetooth: hci2: command tx timeout [ 325.169267] Bluetooth: hci1: command tx timeout [ 325.294905] Bluetooth: hci3: command tx timeout [ 325.358787] Bluetooth: hci4: command tx timeout [ 325.422866] Bluetooth: hci7: command tx timeout [ 325.424189] Bluetooth: hci6: command tx timeout [ 325.486772] Bluetooth: hci5: command tx timeout [ 327.151089] Bluetooth: hci2: command tx timeout [ 327.151175] Bluetooth: hci0: command tx timeout [ 327.215097] Bluetooth: hci1: command tx timeout [ 327.342771] Bluetooth: hci3: command tx timeout [ 327.406859] Bluetooth: hci4: command tx timeout [ 327.471821] Bluetooth: hci6: command tx timeout [ 327.472299] Bluetooth: hci7: command tx timeout [ 327.535011] Bluetooth: hci5: command tx timeout [ 329.200985] Bluetooth: hci0: command tx timeout [ 329.201520] Bluetooth: hci2: command tx timeout [ 329.263032] Bluetooth: hci1: command tx timeout [ 329.393874] Bluetooth: hci3: command tx timeout [ 329.455163] Bluetooth: hci4: command tx timeout [ 329.519379] Bluetooth: hci7: command tx timeout [ 329.520444] Bluetooth: hci6: command tx timeout [ 329.583024] Bluetooth: hci5: command tx timeout [ 331.248717] Bluetooth: hci0: command tx timeout [ 331.249252] Bluetooth: hci2: command tx timeout [ 331.310922] Bluetooth: hci1: command tx timeout [ 331.438778] Bluetooth: hci3: command tx timeout [ 331.502780] Bluetooth: hci4: command tx timeout [ 331.567181] Bluetooth: hci6: command tx timeout [ 331.567657] Bluetooth: hci7: command tx timeout [ 331.630853] Bluetooth: hci5: command tx timeout [ 385.424808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.426505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.429080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.433349] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.437239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.609713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.611449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.614566] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.619152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.621604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.716761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.720801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.727188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.771263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.778039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.823333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.833440] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.838152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.856418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.863863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.865237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.867757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.870407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.896028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.918346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.941921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.944254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.959875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 385.998183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.003572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.006060] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.008534] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.018727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.050321] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.051292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.055048] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.102113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.107320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.122874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.145108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.503035] Bluetooth: hci0: command tx timeout [ 387.695172] Bluetooth: hci1: command tx timeout [ 387.823041] Bluetooth: hci2: command tx timeout [ 387.886866] Bluetooth: hci3: command tx timeout [ 388.078830] Bluetooth: hci4: command tx timeout [ 388.079658] Bluetooth: hci5: command tx timeout [ 388.207837] Bluetooth: hci7: command tx timeout [ 388.209230] Bluetooth: hci6: command tx timeout [ 389.550777] Bluetooth: hci0: command tx timeout [ 389.744054] Bluetooth: hci1: command tx timeout [ 389.870765] Bluetooth: hci2: command tx timeout [ 389.934965] Bluetooth: hci3: command tx timeout [ 390.127265] Bluetooth: hci4: command tx timeout [ 390.127957] Bluetooth: hci5: command tx timeout [ 390.254830] Bluetooth: hci7: command tx timeout [ 390.255363] Bluetooth: hci6: command tx timeout [ 391.598764] Bluetooth: hci0: command tx timeout [ 391.791827] Bluetooth: hci1: command tx timeout [ 391.919709] Bluetooth: hci2: command tx timeout [ 391.982772] Bluetooth: hci3: command tx timeout [ 392.174820] Bluetooth: hci5: command tx timeout [ 392.175353] Bluetooth: hci4: command tx timeout [ 392.303934] Bluetooth: hci6: command tx timeout [ 392.304460] Bluetooth: hci7: command tx timeout [ 393.648012] Bluetooth: hci0: command tx timeout [ 393.839811] Bluetooth: hci1: command tx timeout [ 393.967084] Bluetooth: hci2: command tx timeout [ 394.031310] Bluetooth: hci3: command tx timeout [ 394.222997] Bluetooth: hci4: command tx timeout [ 394.223528] Bluetooth: hci5: command tx timeout [ 394.350909] Bluetooth: hci6: command tx timeout [ 394.351454] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 13:58:00 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800ca84648 RCX=ffffffff81369070 RDX=ffff888031c8b700 RSI=ffffffff81368e70 RDI=0000000080000000 RBP=ffff88806ce08e58 RSP=ffff88806ce08d90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888008c7f140 R13=ffffea000057f380 R14=0000000000000000 R15=ffff888015fcf400 RIP=ffffffff81aeb122 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555567733400 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f29c1686368 CR3=000000000c443000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000ff000000000000ff00000000 XMM02=ff0000000000ff00000000000000ff00 XMM03=000000000000000000ff000000000000 XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff86c27258 RBX=0000000000000001 RCX=ffffffff84b1d2be RDX=0000000000000000 RSI=ffffffff86c2724c RDI=ffffffff86765bb0 RBP=ffff888034967600 RSP=ffff888034967520 R8 =ffffffff86c2724c R9 =0000000000000000 R10=000000000003b4ed R11=00000000000c441c R12=ffff888034967608 R13=ffff8880349675f0 R14=0000000000000002 R15=dffffc0000000000 RIP=ffffffff8135335d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffca8efbc70 CR3=000000000d1ed000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000