Warning: Permanently added '[localhost]:9974' (ECDSA) to the list of known hosts. 2025/06/22 16:09:36 fuzzer started 2025/06/22 16:09:37 dialing manager at localhost:33119 syzkaller login: [ 98.424527] cgroup: Unknown subsys name 'net' [ 98.580136] cgroup: Unknown subsys name 'cpuset' [ 98.636230] cgroup: Unknown subsys name 'rlimit' 2025/06/22 16:09:53 syscalls: 207 2025/06/22 16:09:53 code coverage: enabled 2025/06/22 16:09:53 comparison tracing: enabled 2025/06/22 16:09:53 extra coverage: enabled 2025/06/22 16:09:53 setuid sandbox: enabled 2025/06/22 16:09:53 namespace sandbox: enabled 2025/06/22 16:09:53 Android sandbox: enabled 2025/06/22 16:09:53 fault injection: enabled 2025/06/22 16:09:53 leak checking: enabled 2025/06/22 16:09:53 net packet injection: enabled 2025/06/22 16:09:53 net device setup: enabled 2025/06/22 16:09:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/22 16:09:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/22 16:09:53 USB emulation: enabled 2025/06/22 16:09:53 hci packet injection: enabled 2025/06/22 16:09:53 wifi device emulation: enabled 2025/06/22 16:09:53 802.15.4 emulation: enabled 2025/06/22 16:09:53 fetching corpus: 0, signal 0/0 (executing program) 2025/06/22 16:09:54 starting 8 fuzzer processes 16:09:54 executing program 0: pselect6(0x40, &(0x7f0000000000)={0x200000000000, 0x7fff, 0x2, 0x3, 0x50, 0x9, 0x9, 0x14d}, &(0x7f0000000040)={0x0, 0x8, 0x81, 0x4, 0x7f, 0x2e, 0x0, 0x6}, &(0x7f0000000080)={0x6, 0xffff, 0x2, 0x100000001, 0x7fffffff, 0x91cd, 0x305, 0x3}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180)="c46f36dcac437878964800380ee61c08ca9ce23ac3b3b5e58a42cdebe99b3da28723c2e1553dd1fb028ad38c366b2c88345b6de5658c38b9e08bc2a7e5f2a24ae6285c65667f91c9e59b18bd6cd569e38ffb274b17fb24e483a5836d", 0x5c, 0xa6b5, &(0x7f0000000200)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3, 0xd3}}, './file0\x00'}) ioctl$sock_ifreq(r0, 0x8919, &(0x7f0000000280)={'ipvlan0\x00', @ifru_ivalue}) sched_rr_get_interval(0x0, &(0x7f00000002c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000440)={0x81, 0x613, 0x9, 0x9, 0x2, 0x9, 0x5, 0x7fff}, &(0x7f0000000480)={0x0, 0xffffffff7fffffff, 0x1e, 0x100, 0x6, 0x2, 0x7, 0x406}, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x8, 0x4, 0x8, 0x53, 0x6}, &(0x7f0000000540)={r1, r2+60000000}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x1]}, 0x8}) mq_timedreceive(r0, &(0x7f0000000600)=""/239, 0xef, 0xc1, &(0x7f0000000700)) ioctl$KDSETLED(r0, 0x4b32, 0x100000001) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000840)={0x1, 0x9, 0xad}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xeeab}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000009c0)) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000a00)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000b00)={'gretap0\x00', &(0x7f0000000a40)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x8, 0x1000, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x68, 0x0, 0x2, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x44, 0x7b, 0x1, 0xc, [{@broadcast, 0x5}, {@remote, 0xf907}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x6d}, {@loopback, 0x10000}, {@loopback, 0xfffffffa}, {@multicast2, 0x81}, {@broadcast, 0x94}]}, @end, @noop, @timestamp_prespec={0x44, 0x14, 0x5a, 0x3, 0xe, [{@multicast1, 0x5}, {@multicast1, 0x6}]}]}}}}}) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000b40)=0x1) ioctl$RTC_WIE_ON(r0, 0x700f) 16:09:54 executing program 1: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="dcf143e08883bacb80e7dabc2038789d64cac052d673210f8c0f4d3d97a4d9a167207d9805d6e81319f1afdea19db32c4504f67b76a28f87224f77fb59fc2bc14dc744b3571d9ea2426064e1ddbb07b8d01305a7877ceb7986d12a7f939ea733fa80aab943c16d423ccd0dfd1e02df3bce561b86c3a6e25b0e6bfb") ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000140)) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)=0x1) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0)) ioctl$KDMKTONE(r0, 0x4b30, 0x8) ioctl$TCSBRK(r0, 0x5409, 0xfffffffffffffff7) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000600)={0x1, 0x1, 0x1f, 0x13, 0x171, &(0x7f0000000200)}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xf507}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000700)={0x6, 0xff, 0x1}) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000740)=0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000780)={0x3ff, 0x4, 0x8, 0xc2e8}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000800)) 16:09:54 executing program 2: ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, 0xfffffffffffffffe, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xad0}, @CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xff11}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6e}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x20048040) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x2, 0x7, 0x404, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3d20}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x69, 0x2, {0x80, 0x0, 0x4}}, 0x14) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xf, 0x1, 'ip6gretap0\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, 0x2, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_PKTS={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc014}, 0x4080) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c850) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x2404401c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x401}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x67}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x47}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x7, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000815) write$P9_RCLUNK(r1, &(0x7f0000000b00)={0x7, 0x79, 0x1}, 0x7) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x1, 0x6, 0x3, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c4b5397141603c1}, 0x40) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x88, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_open_dev$vcsu(&(0x7f0000000ec0), 0x3, 0x149200) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c4}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x48, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0xc004) 16:09:54 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x58) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7a36c1ae9b19c9bf}, 0x4040804) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004001}, 0xc084) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x2, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff80}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040044}, 0x4040000) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x14801) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x20000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r2 = socket$inet(0x2, 0x4, 0x6bd4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000dc0)=""/201) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r3, {0x1f}}, './file0\x00'}) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0xf}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0xc0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0xf, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x8040) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x58, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x6052}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xf93d}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x835}}]}, 0x58}}, 0x20000010) [ 115.729648] audit: type=1400 audit(1750608594.637:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:09:54 executing program 5: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x81, 0x7c, 0x7}) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000040)={0xffffffff, 0x5, 0x1}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x40000000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x400902, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000300)=""/119) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x100) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x2000c800) r1 = socket(0x1e, 0x3, 0x7) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xdb63}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c884}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCEXCL(r2, 0x540c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000700)={0x5, 0x3ff, 0x8, 0x6, 0x0, "893161dd2c3dde6443948d7cf3733bc77c7ebf", 0x3ff, 0x8}) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) 16:09:54 executing program 4: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0xe24, 0x14, 0x110}) r1 = syz_open_dev$vcsu(&(0x7f0000000440), 0x8000, 0x4000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000480)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000004c0)) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000900)={0x1, 0x0, 0x20, 0x6, 0xea, &(0x7f0000000500)}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000940)={0x80000001, 0x1, 0xe66, 0x5, 0x11, "a16386d851d3a1e038b0579f4696de0dea1aba"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000009c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0xb445}}, './file0\x00'}) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000a40)={0x40, 0x6, 0x2, 0x1f, 0x7, "402c3c6ed8fcac80ecc0613e57408a02972db0", 0x8, 0xb41}) ioctl$TIOCEXCL(r3, 0x540c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000ac0)={0x4, 0x2, 0x2, 0x3, 0xff, "a222d267927d56947415108663f6fc5cae7f9b", 0x12, 0x4}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000000b40)={0x7, 0x10001, 0x6, 0x7, 0x7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$RTC_EPOCH_READ(r6, 0x8008700d, &(0x7f0000000bc0)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@dev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000d00)=0xe8) ioctl$TIOCEXCL(r0, 0x540c) 16:09:54 executing program 6: r0 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, r0}}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000080), 0xff, 0x280002) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r5, r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0xdf}}, './file0\x00'}) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000280)=""/8) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f00000002c0)={0x101, 0xffff, 0x5e69, 0x9, 0x200, 0x3, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0xda6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x12084000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xab}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xed1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd4e0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7b41b05}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r12, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r9, {0x372b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x81}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r13, {0xad3a, 0xffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r11, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {r7}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {r15, r2}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r14, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, r16, {0x6}}, './file1\x00'}) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000680)) 16:09:54 executing program 7: mq_unlink(&(0x7f0000000000)='\xdb%&+}$\'\x00') mq_unlink(&(0x7f0000000040)='\x00') sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x6040044}, 0x4040800) mq_unlink(&(0x7f0000000180)='$@^/,\x00') mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19}) mq_unlink(&(0x7f0000000200)='\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000280)={{0x2, 0x8}, {0x0, 0x6}, 0x9}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, 0x1, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x11) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, 0x3, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffff}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x7, 0x3, 0x8, 0xfca8]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}, @CTA_TUPLE_REPLY={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x88014}, 0x20000000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x2, 0x2, 0x700, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000001) pipe2$9p(&(0x7f0000000780), 0x4000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @private, @empty}, &(0x7f0000000800)=0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000840), 0x2c6102, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x9) r2 = syz_open_dev$rtc(&(0x7f0000000880), 0x784, 0x26202) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x9) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000008c0)={0x1, 0x0, {0x34, 0x1f, 0xe, 0x14, 0xa, 0x8, 0x5, 0x49}}) ioctl$RTC_WIE_OFF(r2, 0x7010) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004084) [ 117.226045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.228900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.230666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.236915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.243208] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.288844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.294958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.304104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.312260] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.321707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.323841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.326526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.331722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.346565] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.361531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.369722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.369719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.378183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.387959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.389094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.393795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.399866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.404996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.411055] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.428091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.429909] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.430946] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.434231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 117.435962] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 117.450399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.459533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.460379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.461195] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 117.474141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 117.475747] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.497955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.499942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.503893] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.506595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 117.546559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.321014] Bluetooth: hci0: command tx timeout [ 119.382694] Bluetooth: hci1: command tx timeout [ 119.447678] Bluetooth: hci5: command tx timeout [ 119.448281] Bluetooth: hci2: command tx timeout [ 119.510719] Bluetooth: hci6: command tx timeout [ 119.575696] Bluetooth: hci7: command tx timeout [ 119.638754] Bluetooth: hci4: command tx timeout [ 119.639388] Bluetooth: hci3: command tx timeout [ 121.368658] Bluetooth: hci0: command tx timeout [ 121.430714] Bluetooth: hci1: command tx timeout [ 121.494823] Bluetooth: hci2: command tx timeout [ 121.495306] Bluetooth: hci5: command tx timeout [ 121.558686] Bluetooth: hci6: command tx timeout [ 121.622717] Bluetooth: hci7: command tx timeout [ 121.686873] Bluetooth: hci3: command tx timeout [ 121.687427] Bluetooth: hci4: command tx timeout [ 123.414988] Bluetooth: hci0: command tx timeout [ 123.478975] Bluetooth: hci1: command tx timeout [ 123.543106] Bluetooth: hci2: command tx timeout [ 123.543587] Bluetooth: hci5: command tx timeout [ 123.607923] Bluetooth: hci6: command tx timeout [ 123.670838] Bluetooth: hci7: command tx timeout [ 123.734770] Bluetooth: hci4: command tx timeout [ 123.735271] Bluetooth: hci3: command tx timeout [ 125.463800] Bluetooth: hci0: command tx timeout [ 125.527007] Bluetooth: hci1: command tx timeout [ 125.591352] Bluetooth: hci5: command tx timeout [ 125.592587] Bluetooth: hci2: command tx timeout [ 125.655281] Bluetooth: hci6: command tx timeout [ 125.718753] Bluetooth: hci7: command tx timeout [ 125.783710] Bluetooth: hci3: command tx timeout [ 125.784518] Bluetooth: hci4: command tx timeout [ 179.559647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.561383] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.562862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.569027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.571369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.785837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.789641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.795809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.810967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.816875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.842503] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.852321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.858499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.870018] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.880147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.979459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.985321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.994860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.015233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.025886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.028793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.040349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.049209] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.074047] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.082487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.164260] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.175776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.194478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.195551] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.204186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.208047] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.210571] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.214008] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.215304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.216548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.231982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 180.274995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.285633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.317834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.360283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.655812] Bluetooth: hci0: command tx timeout [ 181.847678] Bluetooth: hci1: command tx timeout [ 182.103355] Bluetooth: hci2: command tx timeout [ 182.104414] Bluetooth: hci3: command tx timeout [ 182.167680] Bluetooth: hci6: command tx timeout [ 182.424016] Bluetooth: hci4: command tx timeout [ 182.551949] Bluetooth: hci5: command tx timeout [ 182.552778] Bluetooth: hci7: command tx timeout [ 183.702783] Bluetooth: hci0: command tx timeout [ 183.895529] Bluetooth: hci1: command tx timeout [ 184.151396] Bluetooth: hci2: command tx timeout [ 184.152520] Bluetooth: hci3: command tx timeout [ 184.215334] Bluetooth: hci6: command tx timeout [ 184.472153] Bluetooth: hci4: command tx timeout [ 184.599935] Bluetooth: hci7: command tx timeout [ 184.601254] Bluetooth: hci5: command tx timeout [ 185.750782] Bluetooth: hci0: command tx timeout [ 185.943032] Bluetooth: hci1: command tx timeout [ 186.200697] Bluetooth: hci3: command tx timeout [ 186.201531] Bluetooth: hci2: command tx timeout [ 186.262817] Bluetooth: hci6: command tx timeout [ 186.519142] Bluetooth: hci4: command tx timeout [ 186.646760] Bluetooth: hci7: command tx timeout [ 186.647485] Bluetooth: hci5: command tx timeout [ 187.798750] Bluetooth: hci0: command tx timeout [ 187.991718] Bluetooth: hci1: command tx timeout [ 188.247738] Bluetooth: hci2: command tx timeout [ 188.248222] Bluetooth: hci3: command tx timeout [ 188.310835] Bluetooth: hci6: command tx timeout [ 188.567793] Bluetooth: hci4: command tx timeout [ 188.697053] Bluetooth: hci7: command tx timeout [ 188.697522] Bluetooth: hci5: command tx timeout [ 241.956030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.964275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.969123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.976329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.981988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.039999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.045039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.048142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.058381] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.066432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.157835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.165272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.180446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.201963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.213223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.231857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.234843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.237975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.243116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.246414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.325554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.328271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.332114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.337846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.341719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.420301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.427155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.448390] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 242.457048] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 242.467045] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.475322] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 242.488696] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.489387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.500654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.521816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.536696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 242.541216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.584731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.607357] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.625115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 244.054760] Bluetooth: hci0: command tx timeout [ 244.118787] Bluetooth: hci1: command tx timeout [ 244.310772] Bluetooth: hci3: command tx timeout [ 244.310829] Bluetooth: hci2: command tx timeout [ 244.438715] Bluetooth: hci4: command tx timeout [ 244.694725] Bluetooth: hci6: command tx timeout [ 244.695419] Bluetooth: hci5: command tx timeout [ 244.695988] Bluetooth: hci7: command tx timeout [ 246.104039] Bluetooth: hci0: command tx timeout [ 246.168653] Bluetooth: hci1: command tx timeout [ 246.359734] Bluetooth: hci3: command tx timeout [ 246.359920] Bluetooth: hci2: command tx timeout [ 246.486718] Bluetooth: hci4: command tx timeout [ 246.742772] Bluetooth: hci7: command tx timeout [ 246.743248] Bluetooth: hci6: command tx timeout [ 246.743706] Bluetooth: hci5: command tx timeout [ 248.152047] Bluetooth: hci0: command tx timeout [ 248.215175] Bluetooth: hci1: command tx timeout [ 248.407007] Bluetooth: hci3: command tx timeout [ 248.407049] Bluetooth: hci2: command tx timeout [ 248.535670] Bluetooth: hci4: command tx timeout [ 248.790810] Bluetooth: hci5: command tx timeout [ 248.790860] Bluetooth: hci6: command tx timeout [ 248.791285] Bluetooth: hci7: command tx timeout [ 250.199866] Bluetooth: hci0: command tx timeout [ 250.262811] Bluetooth: hci1: command tx timeout [ 250.454697] Bluetooth: hci2: command tx timeout [ 250.455169] Bluetooth: hci3: command tx timeout [ 250.582711] Bluetooth: hci4: command tx timeout [ 250.838771] Bluetooth: hci6: command tx timeout [ 250.839292] Bluetooth: hci5: command tx timeout [ 250.840044] Bluetooth: hci7: command tx timeout [ 304.184950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.194412] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.199822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.214442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.221800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.322224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.325395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.330297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.339171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.349095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.396373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.399375] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.401412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.408229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.411843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.499740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.521093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.525171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.539412] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.567253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.572040] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.575199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.581335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.583831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.588051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.709069] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.711425] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 304.729497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.732430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 304.735845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 304.773237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 304.777116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 304.784923] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.785821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 304.803700] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 304.813715] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 304.814566] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.843185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.852905] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.853172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.262700] Bluetooth: hci0: command tx timeout [ 306.391002] Bluetooth: hci1: command tx timeout [ 306.455669] Bluetooth: hci2: command tx timeout [ 306.710858] Bluetooth: hci3: command tx timeout [ 306.711513] Bluetooth: hci4: command tx timeout [ 306.967106] Bluetooth: hci6: command tx timeout [ 306.968530] Bluetooth: hci5: command tx timeout [ 306.969149] Bluetooth: hci7: command tx timeout [ 308.310695] Bluetooth: hci0: command tx timeout [ 308.438882] Bluetooth: hci1: command tx timeout [ 308.503966] Bluetooth: hci2: command tx timeout [ 308.758684] Bluetooth: hci3: command tx timeout [ 308.759161] Bluetooth: hci4: command tx timeout [ 309.016946] Bluetooth: hci5: command tx timeout [ 309.017400] Bluetooth: hci6: command tx timeout [ 309.018667] Bluetooth: hci7: command tx timeout [ 310.358925] Bluetooth: hci0: command tx timeout [ 310.486984] Bluetooth: hci1: command tx timeout [ 310.551818] Bluetooth: hci2: command tx timeout [ 310.806963] Bluetooth: hci3: command tx timeout [ 310.807457] Bluetooth: hci4: command tx timeout [ 311.063633] Bluetooth: hci7: command tx timeout [ 311.064115] Bluetooth: hci6: command tx timeout [ 311.064541] Bluetooth: hci5: command tx timeout [ 312.406675] Bluetooth: hci0: command tx timeout [ 312.534704] Bluetooth: hci1: command tx timeout [ 312.598674] Bluetooth: hci2: command tx timeout [ 312.855723] Bluetooth: hci3: command tx timeout [ 312.856144] Bluetooth: hci4: command tx timeout [ 313.110943] Bluetooth: hci5: command tx timeout [ 313.111438] Bluetooth: hci6: command tx timeout [ 313.112375] Bluetooth: hci7: command tx timeout [ 366.766634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.769569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.782044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.794679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.799260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.023707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.028279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.030548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.038168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.046160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.059694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.067386] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.071668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.100378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.106088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.163310] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.168311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.173195] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.180209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.187029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.305940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.312110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.312734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.318175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.331709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.337897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.361178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.372155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.402076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.424158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.614922] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 367.623923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 367.636258] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 367.672524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 367.728988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 367.735208] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 367.742560] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 367.755068] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 367.759894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.771151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.855013] Bluetooth: hci0: command tx timeout [ 369.110737] Bluetooth: hci1: command tx timeout [ 369.174794] Bluetooth: hci2: command tx timeout [ 369.239741] Bluetooth: hci3: command tx timeout [ 369.558782] Bluetooth: hci5: command tx timeout [ 369.559938] Bluetooth: hci4: command tx timeout [ 369.878973] Bluetooth: hci6: command tx timeout [ 369.879011] Bluetooth: hci7: command tx timeout [ 370.904009] Bluetooth: hci0: command tx timeout [ 371.158837] Bluetooth: hci1: command tx timeout [ 371.222869] Bluetooth: hci2: command tx timeout [ 371.286868] Bluetooth: hci3: command tx timeout [ 371.606682] Bluetooth: hci4: command tx timeout [ 371.606779] Bluetooth: hci5: command tx timeout [ 371.927264] Bluetooth: hci6: command tx timeout [ 371.927785] Bluetooth: hci7: command tx timeout [ 372.950966] Bluetooth: hci0: command tx timeout [ 373.206844] Bluetooth: hci1: command tx timeout [ 373.271865] Bluetooth: hci2: command tx timeout [ 373.334962] Bluetooth: hci3: command tx timeout [ 373.654811] Bluetooth: hci4: command tx timeout [ 373.655301] Bluetooth: hci5: command tx timeout [ 373.974876] Bluetooth: hci7: command tx timeout [ 373.975055] Bluetooth: hci6: command tx timeout [ 374.998746] Bluetooth: hci0: command tx timeout [ 375.254667] Bluetooth: hci1: command tx timeout [ 375.320931] Bluetooth: hci2: command tx timeout [ 375.382898] Bluetooth: hci3: command tx timeout [ 375.704645] Bluetooth: hci4: command tx timeout [ 375.704676] Bluetooth: hci5: command tx timeout [ 376.022672] Bluetooth: hci7: command tx timeout [ 376.023922] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:14:55 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88803515d280 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88803515dd00 RDI=ffff88803515d280 RBP=ffff88803515dcd8 RSP=ffff88802aac7310 R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000 R12=ffff88803515dd00 R13=0000000000000001 R14=0000000000000000 R15=0000000000000004 RIP=ffffffff81519034 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f72bcce4540 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564cccfe74c8 CR3=000000000d47d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880135af9f0 RCX=0000000000000001 RDX=1ffff110026b5f40 RSI=ffff8880135afd48 RDI=ffff8880135afa00 RBP=ffff8880135afd48 RSP=ffff8880135af948 R8 =0000000000000001 R9 =ffff8880135afa30 R10=000000000003b53d R11=0000000000024a7e R12=0000000000000008 R13=ffff8880135a8000 R14=ffff8880135afd48 R15=ffff8880135af9f0 RIP=ffffffff81353af8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb40f2f7540 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe4c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe87236bc48 CR3=000000002c882000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000