Warning: Permanently added '[localhost]:52657' (ECDSA) to the list of known hosts. 2025/06/22 10:07:42 fuzzer started 2025/06/22 10:07:42 dialing manager at localhost:33119 syzkaller login: [ 98.086664] cgroup: Unknown subsys name 'net' [ 98.243187] cgroup: Unknown subsys name 'cpuset' [ 98.288025] cgroup: Unknown subsys name 'rlimit' 2025/06/22 10:07:57 syscalls: 200 2025/06/22 10:07:57 code coverage: enabled 2025/06/22 10:07:57 comparison tracing: enabled 2025/06/22 10:07:57 extra coverage: enabled 2025/06/22 10:07:57 setuid sandbox: enabled 2025/06/22 10:07:57 namespace sandbox: enabled 2025/06/22 10:07:57 Android sandbox: enabled 2025/06/22 10:07:57 fault injection: enabled 2025/06/22 10:07:57 leak checking: enabled 2025/06/22 10:07:57 net packet injection: enabled 2025/06/22 10:07:57 net device setup: enabled 2025/06/22 10:07:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 10:07:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 10:07:57 USB emulation: enabled 2025/06/22 10:07:57 hci packet injection: enabled 2025/06/22 10:07:57 wifi device emulation: enabled 2025/06/22 10:07:57 802.15.4 emulation: enabled 2025/06/22 10:07:57 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 10:07:59 starting 8 fuzzer processes 10:07:59 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x40000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff]}, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe3}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0/../file0\x00'}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0xc0, 0x0) r9 = inotify_init() ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r9}, './file0/../file0\x00'}) inotify_rm_watch(r9, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r13 = openat$cgroup_subtree(r6, &(0x7f0000000400), 0x2, 0x0) r14 = socket(0x3, 0x4, 0x3c) io_uring_register$IORING_REGISTER_FILES(r11, 0x2, &(0x7f0000000440)=[r8, r10, r4, r7, r12, r13, r14, r9, r3], 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000540)={0x0, 0x2, r12, 0x3, 0x80000}) 10:07:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0xff, 0x2, 0x2e, 0x11, @mcast1, @loopback, 0x20, 0x40, 0x5, 0x7fffffff}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff42be}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4004) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xec, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x65}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x18}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd19a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20046011}, 0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008}, 0x8000) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x150, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x12}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x21}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000940)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008084}, 0x1bf5cb8a087ffff1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe9c5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x95}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x74}}, 0x8040) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x124, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4444}, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f00)={'ip6_vti0\x00', &(0x7f0000000e80)={'ip6gre0\x00', r1, 0x4, 0x4, 0x8e, 0x9, 0x1, @local, @loopback, 0x40, 0x20, 0x719e, 0x1}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x845}, 0x8800) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x114, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x24000804) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20044085) 10:07:59 executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r0, 0x4, 0x8, 0x81, 0x1, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, 0x20, 0x10, 0x200, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x2, 0x1, 0x97, 0x10, @remote, @private0, 0x40, 0x20, 0x3f, 0xff}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair(0x2a, 0xa, 0x5, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x77a, 0x2}, 0xe) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x200048c4) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000380)={0x1f}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcdd9}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000440)=0x18, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xfc, 0x57, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x0, 0x7, 0x4, 0x5}}) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000600)={'wg1', 0x32, 0x30}, 0x6) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000640), 0x4800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008081}, 0x8) 10:07:59 executing program 3: timer_create(0x5, &(0x7f0000000140)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000000)="69e1514e", &(0x7f0000000040)="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"}}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1f, 0x1}, &(0x7f0000000280)=0x0) timer_getoverrun(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x9) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r3, r4+10000000}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000003c0)={0x6}, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x80800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000500)=""/200, &(0x7f0000000600)=0xc8) socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000640)={{0x1, 0x1, 0x18, r8, {0xfffffffc, 0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, &(0x7f00000006c0)={0x0, 0xffff, 0x753}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000740)={{0x77359400}, {r10, r11+10000000}}, &(0x7f0000000780)) [ 115.045464] audit: type=1400 audit(1750586879.750:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:07:59 executing program 4: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x180000) r3 = socket(0x2c, 0x2, 0xfffffffb) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000180)={0x2, 0x8, 0xf12e, 0x40, 0x67, 0x1f, 0xe091}, 0xc) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0x3, 0x0, "296104", 0x6, 0x3}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r8 = syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0xac000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, r8, 0x10000000) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7d}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x53b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044010}, 0x40091) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r9, {0x7ff}}, './file0\x00'}) 10:07:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1000, @none, 0x3ff, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xe) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000000c0)=0x61, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0xa60, 0xffff, 0xe22, 0x4, 0x3, 0x1, 0x5}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000280)=0x20, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x8, 0x2a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x80, 0x40, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x0, 0x1, 0x1, 0xffffffff, 0x23, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x10, 0x7, 0x5, 0x2}}) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000480)={'custom1\x00'}) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4db}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5ce8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x211}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x88}, 0x1, 0x0, 0x0, 0xc880}, 0x48000) io_uring_setup(0x56cb, &(0x7f0000000880)={0x0, 0x78f1, 0x8, 0x3, 0x2, 0x0, r2}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 10:07:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r3 = io_uring_setup(0x19f8, &(0x7f0000000400)={0x0, 0xafae, 0x2, 0x1, 0x145}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x100, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/172, 0xac, 0x0, 0x17}, @fda={0x66646185, 0x6, 0x0, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/179, 0xb3, 0x1, 0x1a}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/131, 0x83, 0x0, 0x2f}, @fda={0x66646185, 0x9, 0x0, 0x2f}, @fda={0x66646185, 0x5, 0x2, 0x3e}}, &(0x7f00000003c0)={0x0, 0x28, 0x48}}, 0x40}, @acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x9, 0x2, 0x3a}, @fda={0x66646185, 0x5, 0x2, 0x33}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x20, 0x40}}}, @release={0x40046306, 0x1}], 0x1, 0x0, &(0x7f0000000640)="ae"}) r4 = syz_open_dev$vcsu(&(0x7f00000006c0), 0x0, 0x100) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3, {r1, r2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r11, {0x7}}, '.\x00'}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000980)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r12, {0x80000000, 0x7}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000a00)) ioctl$AUTOFS_DEV_IOCTL_READY(r14, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdeb2}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r15, 0xc018937b, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r11, {r10}}, './file0\x00'}) 10:07:59 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000002) inotify_rm_watch(r0, r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x3, 0x400}}, './file1\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x200, 0x0, &(0x7f0000000140)=[r2, r2]}, 0x2) r5 = gettid() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x9, 0x2, 0x2, 0x401, 0x80000000, r5}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x100) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0xffffffff}}, './file1\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {0x1}}, './file1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x71, 0x1, 0x8, @private2, @mcast1, 0x7800, 0x700, 0x4, 0x7fffffff}}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x3f}}, './file1\x00'}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) [ 116.492330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.498463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.501155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.510022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.520377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.562960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.568312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.571906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.577413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.589278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.624721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.641784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.648320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.650389] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.652471] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.657740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.665864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.669960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.674868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.684526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.687042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.694999] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.700073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.703763] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.707253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.709797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.719103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.729515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.757356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.760303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.765487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.774342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.790394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.803152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.829152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.840471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.846678] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.866022] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.905530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.922135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.563369] Bluetooth: hci0: command tx timeout [ 118.691181] Bluetooth: hci1: command tx timeout [ 118.755906] Bluetooth: hci3: command tx timeout [ 118.819051] Bluetooth: hci2: command tx timeout [ 118.883152] Bluetooth: hci6: command tx timeout [ 118.947904] Bluetooth: hci5: command tx timeout [ 118.948500] Bluetooth: hci4: command tx timeout [ 119.010926] Bluetooth: hci7: command tx timeout [ 120.611043] Bluetooth: hci0: command tx timeout [ 120.740268] Bluetooth: hci1: command tx timeout [ 120.803228] Bluetooth: hci3: command tx timeout [ 120.867836] Bluetooth: hci2: command tx timeout [ 120.931493] Bluetooth: hci6: command tx timeout [ 120.996134] Bluetooth: hci5: command tx timeout [ 120.996566] Bluetooth: hci4: command tx timeout [ 121.059096] Bluetooth: hci7: command tx timeout [ 122.659878] Bluetooth: hci0: command tx timeout [ 122.787108] Bluetooth: hci1: command tx timeout [ 122.851877] Bluetooth: hci3: command tx timeout [ 122.914876] Bluetooth: hci2: command tx timeout [ 122.979217] Bluetooth: hci6: command tx timeout [ 123.043142] Bluetooth: hci4: command tx timeout [ 123.043576] Bluetooth: hci5: command tx timeout [ 123.108208] Bluetooth: hci7: command tx timeout [ 124.706859] Bluetooth: hci0: command tx timeout [ 124.836038] Bluetooth: hci1: command tx timeout [ 124.898931] Bluetooth: hci3: command tx timeout [ 124.963186] Bluetooth: hci2: command tx timeout [ 125.029830] Bluetooth: hci6: command tx timeout [ 125.091695] Bluetooth: hci5: command tx timeout [ 125.092966] Bluetooth: hci4: command tx timeout [ 125.156845] Bluetooth: hci7: command tx timeout [ 179.769027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.770611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.772751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.782358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.785292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.828257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.833388] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.837235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.839371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.842175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.844255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.851047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.852780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.858583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.860554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.916777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.929166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.937436] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.969198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.975080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.980288] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 179.993401] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.996244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.006210] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.006359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.010594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.024174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.044696] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.052181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.056487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.060060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.060250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.073324] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.080155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.104452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.120129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.123744] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.128585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.168030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.178698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.859934] Bluetooth: hci0: command tx timeout [ 181.923358] Bluetooth: hci2: command tx timeout [ 181.924785] Bluetooth: hci1: command tx timeout [ 182.116040] Bluetooth: hci3: command tx timeout [ 182.243058] Bluetooth: hci6: command tx timeout [ 182.244081] Bluetooth: hci5: command tx timeout [ 182.306958] Bluetooth: hci4: command tx timeout [ 182.306987] Bluetooth: hci7: command tx timeout [ 183.908304] Bluetooth: hci0: command tx timeout [ 183.971233] Bluetooth: hci2: command tx timeout [ 183.972096] Bluetooth: hci1: command tx timeout [ 184.163931] Bluetooth: hci3: command tx timeout [ 184.293227] Bluetooth: hci5: command tx timeout [ 184.293413] Bluetooth: hci6: command tx timeout [ 184.354892] Bluetooth: hci4: command tx timeout [ 184.355397] Bluetooth: hci7: command tx timeout [ 185.955164] Bluetooth: hci0: command tx timeout [ 186.020877] Bluetooth: hci2: command tx timeout [ 186.021337] Bluetooth: hci1: command tx timeout [ 186.210893] Bluetooth: hci3: command tx timeout [ 186.340967] Bluetooth: hci5: command tx timeout [ 186.341012] Bluetooth: hci6: command tx timeout [ 186.403153] Bluetooth: hci4: command tx timeout [ 186.403234] Bluetooth: hci7: command tx timeout [ 188.004088] Bluetooth: hci0: command tx timeout [ 188.066940] Bluetooth: hci1: command tx timeout [ 188.068024] Bluetooth: hci2: command tx timeout [ 188.261214] Bluetooth: hci3: command tx timeout [ 188.387913] Bluetooth: hci6: command tx timeout [ 188.388383] Bluetooth: hci5: command tx timeout [ 188.451357] Bluetooth: hci7: command tx timeout [ 188.451549] Bluetooth: hci4: command tx timeout [ 241.967267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.970037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.971681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.978409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.981433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.037291] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.045314] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.050455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.052488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.059141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.063048] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.064317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.066427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.081717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.090037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.261150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.267943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.271018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.280755] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.297431] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.309559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.327522] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.331279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.346168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.348142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.356352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.360352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.390083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.414701] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.438735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.466954] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.471968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.472964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.501181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.501978] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.537747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.563036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.566740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.582648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.584905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.067018] Bluetooth: hci0: command tx timeout [ 244.131255] Bluetooth: hci1: command tx timeout [ 244.196033] Bluetooth: hci2: command tx timeout [ 244.387183] Bluetooth: hci5: command tx timeout [ 244.450895] Bluetooth: hci3: command tx timeout [ 244.580103] Bluetooth: hci4: command tx timeout [ 244.707879] Bluetooth: hci7: command tx timeout [ 244.708713] Bluetooth: hci6: command tx timeout [ 246.114915] Bluetooth: hci0: command tx timeout [ 246.178840] Bluetooth: hci1: command tx timeout [ 246.243860] Bluetooth: hci2: command tx timeout [ 246.434965] Bluetooth: hci5: command tx timeout [ 246.499071] Bluetooth: hci3: command tx timeout [ 246.628243] Bluetooth: hci4: command tx timeout [ 246.755063] Bluetooth: hci6: command tx timeout [ 246.755456] Bluetooth: hci7: command tx timeout [ 248.162873] Bluetooth: hci0: command tx timeout [ 248.227986] Bluetooth: hci1: command tx timeout [ 248.292081] Bluetooth: hci2: command tx timeout [ 248.484821] Bluetooth: hci5: command tx timeout [ 248.546998] Bluetooth: hci3: command tx timeout [ 248.674916] Bluetooth: hci4: command tx timeout [ 248.803264] Bluetooth: hci7: command tx timeout [ 248.803418] Bluetooth: hci6: command tx timeout [ 250.210958] Bluetooth: hci0: command tx timeout [ 250.277269] Bluetooth: hci1: command tx timeout [ 250.339206] Bluetooth: hci2: command tx timeout [ 250.531644] Bluetooth: hci5: command tx timeout [ 250.595266] Bluetooth: hci3: command tx timeout [ 250.723591] Bluetooth: hci4: command tx timeout [ 250.851464] Bluetooth: hci6: command tx timeout [ 250.852595] Bluetooth: hci7: command tx timeout [ 304.439123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.445723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.448922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.458753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.463474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.521103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.525662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.527951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.533940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.540372] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.699196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.703549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.708280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.719147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.724779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.844286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.858385] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.879359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.899439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.905640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.056286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.096285] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.098175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.113074] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.119496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.127116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.144431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.149236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.158504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.166378] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.184397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.199624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.204155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.207237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.212388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.215727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.217825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.225052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.230070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.231440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.530924] Bluetooth: hci0: command tx timeout [ 306.596944] Bluetooth: hci1: command tx timeout [ 306.787898] Bluetooth: hci2: command tx timeout [ 306.979079] Bluetooth: hci3: command tx timeout [ 307.299926] Bluetooth: hci7: command tx timeout [ 307.363412] Bluetooth: hci5: command tx timeout [ 307.365169] Bluetooth: hci4: command tx timeout [ 307.366451] Bluetooth: hci6: command tx timeout [ 308.578934] Bluetooth: hci0: command tx timeout [ 308.643321] Bluetooth: hci1: command tx timeout [ 308.835933] Bluetooth: hci2: command tx timeout [ 309.027568] Bluetooth: hci3: command tx timeout [ 309.348247] Bluetooth: hci7: command tx timeout [ 309.412220] Bluetooth: hci4: command tx timeout [ 309.412678] Bluetooth: hci6: command tx timeout [ 309.413501] Bluetooth: hci5: command tx timeout [ 310.627189] Bluetooth: hci0: command tx timeout [ 310.691127] Bluetooth: hci1: command tx timeout [ 310.884821] Bluetooth: hci2: command tx timeout [ 311.075820] Bluetooth: hci3: command tx timeout [ 311.394872] Bluetooth: hci7: command tx timeout [ 311.458925] Bluetooth: hci5: command tx timeout [ 311.459369] Bluetooth: hci6: command tx timeout [ 311.459823] Bluetooth: hci4: command tx timeout [ 312.675085] Bluetooth: hci0: command tx timeout [ 312.740037] Bluetooth: hci1: command tx timeout [ 312.931826] Bluetooth: hci2: command tx timeout [ 313.122946] Bluetooth: hci3: command tx timeout [ 313.442854] Bluetooth: hci7: command tx timeout [ 313.507017] Bluetooth: hci4: command tx timeout [ 313.507464] Bluetooth: hci6: command tx timeout [ 313.508465] Bluetooth: hci5: command tx timeout [ 366.853573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.859577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.862497] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.868729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.871097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.877728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.892184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.894065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.901032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.905384] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.119549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.121758] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.124314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.150770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.160979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.249835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.255522] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.265869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.279363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.292301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.349653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.353993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.356354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.359316] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.360968] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.366660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.366955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.370614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.373361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.374334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.375347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.381338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.381689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.402950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.425614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.426072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.429024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.431861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.447246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.453017] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.931020] Bluetooth: hci0: command tx timeout [ 368.994872] Bluetooth: hci1: command tx timeout [ 369.251004] Bluetooth: hci2: command tx timeout [ 369.315179] Bluetooth: hci3: command tx timeout [ 369.507271] Bluetooth: hci4: command tx timeout [ 369.571536] Bluetooth: hci7: command tx timeout [ 369.571679] Bluetooth: hci6: command tx timeout [ 369.572975] Bluetooth: hci5: command tx timeout [ 370.980066] Bluetooth: hci0: command tx timeout [ 371.042891] Bluetooth: hci1: command tx timeout [ 371.298885] Bluetooth: hci2: command tx timeout [ 371.363958] Bluetooth: hci3: command tx timeout [ 371.555882] Bluetooth: hci4: command tx timeout [ 371.618913] Bluetooth: hci7: command tx timeout [ 371.618948] Bluetooth: hci6: command tx timeout [ 371.619320] Bluetooth: hci5: command tx timeout [ 373.026998] Bluetooth: hci0: command tx timeout [ 373.092970] Bluetooth: hci1: command tx timeout [ 373.350096] Bluetooth: hci2: command tx timeout [ 373.411165] Bluetooth: hci3: command tx timeout [ 373.602883] Bluetooth: hci4: command tx timeout [ 373.667115] Bluetooth: hci5: command tx timeout [ 373.667564] Bluetooth: hci6: command tx timeout [ 373.668896] Bluetooth: hci7: command tx timeout [ 375.074858] Bluetooth: hci0: command tx timeout [ 375.138960] Bluetooth: hci1: command tx timeout [ 375.397833] Bluetooth: hci2: command tx timeout [ 375.460067] Bluetooth: hci3: command tx timeout [ 375.650849] Bluetooth: hci4: command tx timeout [ 375.717093] Bluetooth: hci7: command tx timeout [ 375.717429] Bluetooth: hci6: command tx timeout [ 375.717565] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 10:13:01 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff8131e85a RDX=0000000000000000 RSI=ffffffff8131ea23 RDI=0000000000000000 RBP=ffff88806ce08ec8 RSP=ffff88806ce08e98 R8 =0000000000000000 R9 =fffffbfff0c828ca R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8131ea2a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f58bb70e368 CR3=000000002e322000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a40508 RBX=ffff8880096eb700 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff8880096ec180 RDI=ffff8880096ec180 RBP=ffff8880096ec158 RSP=ffff888009747680 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880096ec180 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81519268 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f31efc166f4 CR3=00000000348fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f31efc2547000007f31efc24f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000