Warning: Permanently added '[localhost]:37337' (ECDSA) to the list of known hosts. 2023/08/17 02:02:19 fuzzer started 2023/08/17 02:02:20 dialing manager at localhost:43643 syzkaller login: [ 108.887473] cgroup: Unknown subsys name 'net' [ 109.098045] cgroup: Unknown subsys name 'rlimit' [ 121.137589] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2023/08/17 02:02:33 syscalls: 214 2023/08/17 02:02:33 code coverage: enabled 2023/08/17 02:02:33 comparison tracing: enabled 2023/08/17 02:02:33 extra coverage: enabled 2023/08/17 02:02:33 setuid sandbox: enabled 2023/08/17 02:02:33 namespace sandbox: enabled 2023/08/17 02:02:33 Android sandbox: enabled 2023/08/17 02:02:33 fault injection: enabled 2023/08/17 02:02:33 leak checking: enabled 2023/08/17 02:02:33 net packet injection: enabled 2023/08/17 02:02:33 net device setup: enabled 2023/08/17 02:02:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/17 02:02:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/17 02:02:33 USB emulation: enabled 2023/08/17 02:02:33 hci packet injection: enabled 2023/08/17 02:02:33 wifi device emulation: enabled 2023/08/17 02:02:33 802.15.4 emulation: enabled 2023/08/17 02:02:33 fetching corpus: 0, signal 0/0 (executing program) 2023/08/17 02:02:35 starting 8 fuzzer processes 02:02:35 executing program 0: pkey_alloc(0x0, 0x2) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x1, &(0x7f0000000040)) r0 = gettid() wait4(r0, &(0x7f0000000100), 0x8, &(0x7f0000000140)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x4, 0xa0000) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f00000002c0)={0x7fffffff, 0x8000}) r2 = fork() move_pages(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000340), 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000840}, 0x10) ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f0000000540)) r4 = perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x27, 0x2, 0x6, 0xfa, 0x0, 0x4, 0xc8006, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7dc1, 0x0, @perf_bp={&(0x7f0000000fc0), 0x8}, 0x4, 0x200, 0x7, 0x9, 0x4, 0x8, 0x4b, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000001080)={0x5, 0x80, 0x5, 0x6, 0x9, 0x0, 0x0, 0x4c4, 0x400, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc7c3, 0x1, @perf_config_ext={0xc8, 0x8001}, 0x45818, 0x200, 0x9, 0x0, 0x3, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8000}, r0, 0x3, r3, 0x9) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000001100), 0x2000, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x110, r5, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000001140)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001180)={{{@in=@multicast2, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000001280)=0xe8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0xffffffffffffffff) 02:02:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$CDROMSTOP(r1, 0x5307) ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x1) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x450420, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000140)={@lba=0x853b, 0x0, 0x23, &(0x7f0000000100)=""/35}) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000180)) ioctl$CDROM_LOCKDOOR(r1, 0x5329, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000c40)={0x4, &(0x7f0000000c00)=[{0x5, 0x0, 0x20, 0x7}, {0x3f, 0x1f, 0x8, 0xae88}, {0x1, 0x3f, 0x0, 0x9}, {0x8001, 0x1, 0x70, 0x3}]}) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000000c80)={0xe1, 0xff, 0x7f, 0x80}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000d40)={0x1, &(0x7f0000000d00)=[{0x61e, 0x20, 0x20, 0x1}]}) ioctl$CDROMREADCOOKED(r3, 0x5315, &(0x7f0000000d80)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), r4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, r5, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x4) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000019c0)=[0xffff0c07, 0x8]) ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301) 02:02:35 executing program 2: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x10140, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200088c4}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x0, 0x800, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x72f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x5c}}, 0x20000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000580)=@ll={0x11, 0x9, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x0, 0x0, 0x1}, 0x2) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004080}, 0x4801) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r3) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044819}, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r3) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24) 02:02:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x80000000}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) timerfd_gettime(r0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x8}}, './file1\x00'}) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x9, 0x400) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000a, 0x8010, r6, 0x6aecd000) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8e9, 0x40000000000, 0x0, 0x3, 0xe, 0x11, "463ab1796e55df404a0770aa972786d38977657bd2d28059b537f8a9eff4290203dd66fea14529f1da7912ac37c48417fd71c5f7d8e7651d90fa48c52c6b4f19", "deb3011f184564095cfe2ddfdae693896ebc394cef663cc865a4240b7642f08c9e6aa8449a3713be9eb62902e4859652e24dabaa1a2489c27af8557dff5b2462", "20a56a2fa5a9ac58d0b494a0616c19ca92ebb59e08fb48d1eea392a28d58b8a7", [0x1]}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r3) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x180, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x69}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40001}, 0x20048090) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000540)=""/184) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r5) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2200c010}, 0x20048051) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000780)="9643a8997c36383de737fff5bfffbca3d7b3659b9621dcc19a962447dd1071d893a4bca07e426536b93fc87b793fa847c2dfac6297b1e5c59bf6d02aa73f8f228bb854d92c93a55d23d71f3e83a52f940da5430750e066990d9fd6bf049d1a0a2e4332eff055ff9930c83b2d2e878df5c1b9a89efd90a01d7c05d76ae0eb77d2c7cbd1658d67fe47d2963305e3030d2202a15c934d2ef8ff5fc57d7f8cd95afec14b74e65e9c0f4eda619ab2abf6c101c479a51e9b1f83e9cd281c06a985db76e441a8bec37bb58be652", 0xca, r8}, 0x68) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) [ 123.113231] audit: type=1400 audit(1692237755.361:6): avc: denied { execmem } for pid=270 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:02:35 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfd0d}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8044}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r4, 0x502, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3d0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x24c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x80c0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r4, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x11}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000090}, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000b80), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000012c0)={&(0x7f0000000b40), 0xc, &(0x7f0000001280)={&(0x7f0000000e00)={0x470, r6, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x783}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x934f, 0x3, 0x1, 0x20}, {0x1, 0x9, 0x1, 0x2}, {0x3, 0x9, 0xff, 0x7}, {0x9, 0x2, 0x25}, {0x7ff, 0x6, 0x81, 0x7}, {0x401, 0x7d, 0x40, 0x9}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x4880}, 0x4000001) 02:02:35 executing program 5: setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x10, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x1, 0x7, 0x0, 0x6, 0x2, 0x1}, 0xc4) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, r0) socketpair(0x29, 0x4, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4041000}, 0x20008081) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0xdba8}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9405}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000013}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r3, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c040}, 0x20000894) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x3, &(0x7f00000006c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x200, r6, &(0x7f0000000500)="22c184955f24e1d96a96b3b61d54a6099e3d69db29b3acda39edb5e3e578ee6a85d3c048057fe1794d78d62205c5ffc336585a7516c51442c793d024db5c96f63b93a2bc3adc329aba6a57dff0571ac6642ea2961c9d0c0d663d6f5922da025049c20f315fa943ed923bcbd1b98d6395", 0x70, 0x8}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x5, r7, &(0x7f00000005c0)="9912aa98b644922a23f9af23d5758023b93d6b078d5c1b705ab0cfc4cc", 0x1d, 0x40, 0x0, 0x3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x7f, r4, &(0x7f0000000640)="f925941dcd21bc734be879248d34075682b735f1f68614117bb9f74ad55a9d258b6cb11670969d9d5dfedca81a", 0x2d, 0x1, 0x0, 0x3}]) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r1) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r8, 0x22, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4040084) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) write$tun(r9, &(0x7f0000000880)={@val={0x0, 0xd}, @val={0x2, 0x4, 0x6, 0x4, 0x80, 0x400}, @x25={0x0, 0x1f, 0x27, "9f2c4eee06"}}, 0x16) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x400}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c00}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)) 02:02:35 executing program 6: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x4000010, 0xffffffffffffffff, 0x8000000) move_pages(0x0, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0x6, 0x81, 0xffffffff, 0x8001, 0x1, 0x6, 0x8, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/200) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x100000000, &(0x7f0000ffe000/0x2000)=nil, 0x4) shmget(0x3, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, r0, 0x760f9000) syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10, 0x10, r1, 0x7f) shmget(0x2, 0x4000, 0xf0000100, &(0x7f0000ffc000/0x4000)=nil) r2 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ff9000/0x2000)=nil, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x30, r3, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x85aab754}}, './file0\x00'}) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd1c3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004081}, 0x20008000) 02:02:35 executing program 7: ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x4, 0xfffffff9]) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800, 0x48000) r1 = getpid() move_pages(r1, 0x9, &(0x7f0000000080)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000100)=[0x5], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r2 = gettid() wait4(r2, 0x0, 0x1, &(0x7f0000000180)) wait4(r2, &(0x7f0000000240), 0x2, &(0x7f0000000280)) wait4(r2, 0x0, 0x1, &(0x7f0000000340)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000400)="83db1b2636bead4d69bd9fdb70164838215c34bb2fd4f5e9e12b57d43ad8e05d513fd4bf70617147d30dfa662e73d03b9f4d7a7d98ce323a5bc412b40eca3c06b349a294d26693b0ee9a6e1507fc00eae93e076c0cd1f070fbbe3d60001a896f57c17f493a735711c5cb4f11ec573486db1556eff615174b04054535f305277bc466a4527cf1b0d74947298b49a43f838d6a46e8097609c15cf506d471203eb33eb59a8a8e0188d97ff22b1e7b5f28579677d5739abd2c2dd7f7b4470ba10b3869ca8e3096", 0xc5, r0}, 0x68) r3 = fork() wait4(r3, &(0x7f0000000580), 0x8, 0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) r4 = io_uring_setup(0x47c0, &(0x7f0000000680)={0x0, 0x5f97, 0x4, 0x2, 0x172}) r5 = syz_open_dev$evdev(&(0x7f0000000700), 0x1, 0x82142) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000840)={0x15, 0xdd, &(0x7f0000000740)="da659ca5e41110cf1c6a22b152b9fe078f31c0276c710aa3c495aa677ba7384bb20e5f5a003cb65434298d587901cbc48bed8428861caf107a449134d47634947e07209fe1f24a7d78e1a1ddf899d64a1691e65c577bca2794a1967dcfe2592d0c0d8e0fdfdbf5c424b3c42a576a5ee71622279be184d42c2c09833603196e65de9f33753bef0ffc8807c7633fd8d7620846199dfa796be5eb23d6376fb038514b79e9dd5bfc95e1ea68172315eb48ea98d4c0ec0ba60bbb1ef90c24eeebb609f37655d2c2f0cd0c68d68f9fe0822b4ca9c859da4bc3ff754063234757"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000880)="c930a58c6ddf35c63d7f29e40c4c7aba0cceccc3b063681fa8f840855710f02d1586df974dc13c25fd3558358183de844b8030824ef4cc62b0427c64f3a65847b4e855279a2ea8b0a941d5f6c590d223958c80bbd64e65fefc7d8ace1d3bf6dead221bebd7b4", 0x66, r4}, 0x68) openat$autofs(0xffffffffffffff9c, &(0x7f0000000980), 0x4280, 0x0) move_pages(r1, 0x4, &(0x7f00000009c0)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000f5a000/0x2000)=nil], &(0x7f0000000a00)=[0x80000000], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) syz_open_dev$loop(&(0x7f0000000a80), 0x8, 0x130c00) [ 124.622751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.627395] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.629869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.631509] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.634548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.637638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.644733] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.645179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.649627] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.651954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.664100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.672243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.681393] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.686377] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.688810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.724296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.732244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.740726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.742237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.743115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.743856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.747581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.758273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.760379] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.761807] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.762765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.768222] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.769133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.770164] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.770913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.784043] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.785937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.786817] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.788887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.790789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 124.796157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.701398] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 126.702932] Bluetooth: hci1: command 0x0409 tx timeout [ 126.764938] Bluetooth: hci0: command 0x0409 tx timeout [ 126.766030] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 126.829783] Bluetooth: hci7: command 0x0409 tx timeout [ 126.830836] Bluetooth: hci5: command 0x0409 tx timeout [ 126.831783] Bluetooth: hci3: command 0x0409 tx timeout [ 126.892225] Bluetooth: hci6: command 0x0409 tx timeout [ 128.748469] Bluetooth: hci1: command 0x041b tx timeout [ 128.817755] Bluetooth: hci0: command 0x041b tx timeout [ 128.876423] Bluetooth: hci5: command 0x041b tx timeout [ 128.877707] Bluetooth: hci7: command 0x041b tx timeout [ 128.878303] Bluetooth: hci3: command 0x041b tx timeout [ 128.940119] Bluetooth: hci6: command 0x041b tx timeout [ 130.797756] Bluetooth: hci1: command 0x040f tx timeout [ 130.860183] Bluetooth: hci0: command 0x040f tx timeout [ 130.923700] Bluetooth: hci3: command 0x040f tx timeout [ 130.924071] Bluetooth: hci7: command 0x040f tx timeout [ 130.924431] Bluetooth: hci5: command 0x040f tx timeout [ 130.987715] Bluetooth: hci6: command 0x040f tx timeout [ 132.523755] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 132.525139] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 132.843767] Bluetooth: hci1: command 0x0419 tx timeout [ 132.909749] Bluetooth: hci0: command 0x0419 tx timeout [ 132.971813] Bluetooth: hci5: command 0x0419 tx timeout [ 132.972267] Bluetooth: hci7: command 0x0419 tx timeout [ 132.972621] Bluetooth: hci3: command 0x0419 tx timeout [ 133.035777] Bluetooth: hci6: command 0x0419 tx timeout [ 135.712766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.722554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.724517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.743820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.746170] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.747313] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.068326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.076103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.081379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.106626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.131173] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.132749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.837761] Bluetooth: hci2: command 0x0409 tx timeout [ 138.219970] Bluetooth: hci4: command 0x0409 tx timeout [ 139.883973] Bluetooth: hci2: command 0x041b tx timeout [ 140.268722] Bluetooth: hci4: command 0x041b tx timeout [ 141.933038] Bluetooth: hci2: command 0x040f tx timeout [ 142.315702] Bluetooth: hci4: command 0x040f tx timeout [ 143.979755] Bluetooth: hci2: command 0x0419 tx timeout [ 144.363705] Bluetooth: hci4: command 0x0419 tx timeout [ 187.458717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.460321] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.463024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.484450] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.492477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.496850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.669364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.674796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.677108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.702037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.706479] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.708243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.869388] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.881229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.884625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.901342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.904206] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 187.906061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.356153] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 189.549740] Bluetooth: hci1: command 0x0409 tx timeout [ 189.805510] Bluetooth: hci3: command 0x0409 tx timeout [ 189.995735] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 189.997025] Bluetooth: hci5: command 0x0409 tx timeout [ 190.062710] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 191.595962] Bluetooth: hci1: command 0x041b tx timeout [ 191.851787] Bluetooth: hci3: command 0x041b tx timeout [ 192.043757] Bluetooth: hci5: command 0x041b tx timeout [ 193.254440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.265361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.273839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.291037] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.318329] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 193.332983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.356486] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.358953] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.361612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.445089] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.459210] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 193.470054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.644955] Bluetooth: hci1: command 0x040f tx timeout [ 193.901066] Bluetooth: hci3: command 0x040f tx timeout [ 194.029209] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 194.092173] Bluetooth: hci5: command 0x040f tx timeout [ 195.372089] Bluetooth: hci6: command 0x0409 tx timeout [ 195.627813] Bluetooth: hci7: command 0x0409 tx timeout [ 195.699763] Bluetooth: hci1: command 0x0419 tx timeout [ 195.948228] Bluetooth: hci3: command 0x0419 tx timeout [ 196.140700] Bluetooth: hci5: command 0x0419 tx timeout [ 197.420691] Bluetooth: hci6: command 0x041b tx timeout [ 197.648288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.658046] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.662028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.671492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.676019] Bluetooth: hci7: command 0x041b tx timeout [ 197.681511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.695894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.097188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.103903] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.129973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.167091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.178475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.187252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.272905] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.280268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.290374] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.313684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.326600] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.337485] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.468683] Bluetooth: hci6: command 0x040f tx timeout [ 199.725058] Bluetooth: hci7: command 0x040f tx timeout [ 199.788766] Bluetooth: hci0: command 0x0409 tx timeout [ 200.366705] Bluetooth: hci2: command 0x0409 tx timeout [ 200.428733] Bluetooth: hci4: command 0x0409 tx timeout [ 201.516888] Bluetooth: hci6: command 0x0419 tx timeout [ 201.771980] Bluetooth: hci7: command 0x0419 tx timeout [ 201.838718] Bluetooth: hci0: command 0x041b tx timeout [ 202.413075] Bluetooth: hci2: command 0x041b tx timeout [ 202.477054] Bluetooth: hci4: command 0x041b tx timeout [ 203.886718] Bluetooth: hci0: command 0x040f tx timeout [ 204.460782] Bluetooth: hci2: command 0x040f tx timeout [ 204.524719] Bluetooth: hci4: command 0x040f tx timeout [ 205.933546] Bluetooth: hci0: command 0x0419 tx timeout [ 206.508690] Bluetooth: hci2: command 0x0419 tx timeout [ 206.572721] Bluetooth: hci4: command 0x0419 tx timeout [ 249.863383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.886038] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.889989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.919041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.935188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 249.940384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.629864] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 252.011783] Bluetooth: hci3: command 0x0409 tx timeout [ 252.268104] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 254.060716] Bluetooth: hci3: command 0x041b tx timeout [ 255.428209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.434075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.436264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.444904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.448372] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.449844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.644502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.675574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.689913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.717957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.719528] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 255.728981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.107684] Bluetooth: hci3: command 0x040f tx timeout [ 257.452851] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 257.516706] Bluetooth: hci1: command 0x0409 tx timeout [ 257.793506] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 257.837559] Bluetooth: hci6: command 0x0409 tx timeout [ 258.155756] Bluetooth: hci3: command 0x0419 tx timeout [ 259.563741] Bluetooth: hci1: command 0x041b tx timeout [ 259.883995] Bluetooth: hci6: command 0x041b tx timeout [ 259.970812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.976734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.984406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.993887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.996970] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.000357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.785844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.787551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.789684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.805850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.809809] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 260.826101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.612633] Bluetooth: hci1: command 0x040f tx timeout [ 261.931738] Bluetooth: hci6: command 0x040f tx timeout [ 262.060070] Bluetooth: hci0: command 0x0409 tx timeout [ 262.443738] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 262.508748] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 262.572115] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 262.956971] Bluetooth: hci7: command 0x0409 tx timeout [ 263.662679] Bluetooth: hci1: command 0x0419 tx timeout [ 263.979813] Bluetooth: hci6: command 0x0419 tx timeout [ 264.109706] Bluetooth: hci0: command 0x041b tx timeout [ 265.004374] Bluetooth: hci7: command 0x041b tx timeout [ 266.157098] Bluetooth: hci0: command 0x040f tx timeout [ 267.051781] Bluetooth: hci7: command 0x040f tx timeout [ 267.372736] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 267.755705] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 267.757786] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 268.205226] Bluetooth: hci0: command 0x0419 tx timeout [ 269.100782] Bluetooth: hci7: command 0x0419 tx timeout [ 269.958571] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.978946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.982924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.008943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.029957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.031316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.107723] Bluetooth: hci2: command 0x0409 tx timeout [ 272.811736] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 272.813597] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 274.156607] Bluetooth: hci2: command 0x041b tx timeout [ 276.204518] Bluetooth: hci2: command 0x040f tx timeout [ 278.251689] Bluetooth: hci2: command 0x0419 tx timeout [ 278.381717] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 278.445687] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 281.492886] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.499044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.502918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.546080] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.553959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.581264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.563732] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 283.757726] Bluetooth: hci4: command 0x0409 tx timeout [ 285.804234] Bluetooth: hci4: command 0x041b tx timeout [ 287.852323] Bluetooth: hci4: command 0x040f tx timeout [ 288.300711] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 289.901681] Bluetooth: hci4: command 0x0419 tx timeout [ 291.216261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.228309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.237290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.269188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.293386] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.305939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.355750] Bluetooth: hci5: command 0x0409 tx timeout [ 295.405522] Bluetooth: hci5: command 0x041b tx timeout [ 297.451727] Bluetooth: hci5: command 0x040f tx timeout [ 299.500190] Bluetooth: hci5: command 0x0419 tx timeout [ 311.957295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.980023] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.003744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.031095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.056075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 312.073415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.155766] Bluetooth: hci3: command 0x0409 tx timeout [ 316.204613] Bluetooth: hci3: command 0x041b tx timeout [ 316.556940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.560620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 316.562528] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 316.589449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 316.622871] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 316.628796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.712358] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.739450] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.740439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.753462] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.833240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 316.834499] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.251921] Bluetooth: hci3: command 0x040f tx timeout [ 318.699759] Bluetooth: hci1: command 0x0409 tx timeout [ 318.955729] Bluetooth: hci6: command 0x0409 tx timeout [ 320.301688] Bluetooth: hci3: command 0x0419 tx timeout [ 320.747871] Bluetooth: hci1: command 0x041b tx timeout [ 321.003703] Bluetooth: hci6: command 0x041b tx timeout [ 322.796235] Bluetooth: hci1: command 0x040f tx timeout [ 323.052244] Bluetooth: hci6: command 0x040f tx timeout [ 323.179709] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 324.205714] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 324.843692] Bluetooth: hci1: command 0x0419 tx timeout [ 325.099732] Bluetooth: hci6: command 0x0419 tx timeout [ 327.980360] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 328.939757] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 333.036330] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 333.997834] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 334.252765] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 337.238536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.246431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.248305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.296145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.301246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.335153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.963712] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 339.373453] Bluetooth: hci2: command 0x0409 tx timeout [ 339.628160] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 340.853301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.865086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.867183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.876625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.879586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.881923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.419926] Bluetooth: hci2: command 0x041b tx timeout [ 342.955763] Bluetooth: hci0: command 0x0409 tx timeout [ 343.199337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.201801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.221532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.230175] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.252171] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.257361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.467704] Bluetooth: hci2: command 0x040f tx timeout [ 345.003879] Bluetooth: hci0: command 0x041b tx timeout [ 345.324960] Bluetooth: hci4: command 0x0409 tx timeout [ 345.516462] Bluetooth: hci2: command 0x0419 tx timeout [ 345.708219] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 347.052150] Bluetooth: hci0: command 0x040f tx timeout [ 347.371740] Bluetooth: hci4: command 0x041b tx timeout [ 348.696427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 348.705919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 348.711100] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 348.732217] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 348.744615] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 348.769981] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 349.099716] Bluetooth: hci0: command 0x0419 tx timeout [ 349.419699] Bluetooth: hci4: command 0x040f tx timeout [ 350.829698] Bluetooth: hci7: command 0x0409 tx timeout [ 351.467694] Bluetooth: hci4: command 0x0419 tx timeout [ 352.876784] Bluetooth: hci7: command 0x041b tx timeout [ 354.795871] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 354.923690] Bluetooth: hci7: command 0x040f tx timeout 2023/08/17 02:06:27 executor 0 failed 11 times: executor 0: exit status 67 SYZFAIL: wrong response packet (errno 2: No such file or directory) loop exited with status 67 VM DIAGNOSIS: 02:06:27 Registers: info registers vcpu 0 RAX=1ffff11000d502d5 RBX=ffff888006a81698 RCX=0000000000000000 RDX=ffff8880189b1b40 RSI=ffffffff8170620b RDI=ffff888006a816a0 RBP=dffffc0000000000 RSP=ffff888034087b48 R8 =0000000000000007 R9 =0000000000000000 R10=ffff888006a81698 R11=0000000000000001 R12=ffff888006a81698 R13=0000000000000000 R14=ffff88800d507128 R15=0000000000000000 RIP=ffffffff8170622b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f06adfb9368 CR3=000000002c018000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000101 RBX=0000000000000006 RCX=ffffffff8113bcda RDX=0000000000000005 RSI=0000000000000007 RDI=0000000000000001 RBP=ffffffff84854440 RSP=ffff888008e57888 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000005 R11=0000000000000001 R12=0000000000000005 R13=0000000000000001 R14=0000000000000008 R15=ffffffff860fbbb6 RIP=ffffffff814d9670 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d57efcefa8 CR3=000000000e50e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000