Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:14617' (ECDSA) to the list of known hosts. 2025/07/04 17:34:02 fuzzer started 2025/07/04 17:34:03 dialing manager at localhost:42083 syzkaller login: [ 43.172241] cgroup: Unknown subsys name 'net' [ 43.238457] cgroup: Unknown subsys name 'cpuset' [ 43.256105] cgroup: Unknown subsys name 'rlimit' 2025/07/04 17:34:14 syscalls: 204 2025/07/04 17:34:14 code coverage: enabled 2025/07/04 17:34:14 comparison tracing: enabled 2025/07/04 17:34:14 extra coverage: enabled 2025/07/04 17:34:14 setuid sandbox: enabled 2025/07/04 17:34:14 namespace sandbox: enabled 2025/07/04 17:34:14 Android sandbox: enabled 2025/07/04 17:34:14 fault injection: enabled 2025/07/04 17:34:14 leak checking: enabled 2025/07/04 17:34:14 net packet injection: enabled 2025/07/04 17:34:14 net device setup: enabled 2025/07/04 17:34:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/07/04 17:34:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/07/04 17:34:14 USB emulation: enabled 2025/07/04 17:34:14 hci packet injection: enabled 2025/07/04 17:34:14 wifi device emulation: enabled 2025/07/04 17:34:14 802.15.4 emulation: enabled 2025/07/04 17:34:14 fetching corpus: 0, signal 0/0 (executing program) 2025/07/04 17:34:15 starting 8 fuzzer processes 17:34:15 executing program 0: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x100}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x62, 0x64, 0x63, 0x39, 0x31, 0x32, 0x32, 0x65, 0x36, 0x39, 0x65, 0x66, 0x35, 0x35, 0xa, 0x38]}, &(0x7f0000000240)={0x0, "49337d794f2faaedd40a83d2417beda95c5e5522fecc3e9573beda3fce4c37de6d2571874f89dd2e75eb924485a58acdd88281fd282dfd32780daec4ce5569ba", 0x23}, 0x48, r2) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r3, r4) r5 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "11f69a984fa15670fdc0e5210d0cd7299505c73260d27381a5bcadf66ca5661ba12f5ecd05b93a71a966a0b9491ba19e565bbe7ad19284736eb840885bda667c", 0x38}, 0x48, r4) keyctl$reject(0x13, r5, 0x6, 0x5, r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "695a211c4dfa82386e9855be5d55b210eb6eb48afcde723d1136a985c2b11afaa88cd7d2217eb8774b5b38b5af62393eea68bc25e2f4406017e5aa4b59d9c30e", 0x12}, 0x48, r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x5bcae5a8ee0b24c0}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) keyctl$unlink(0x9, r4, r2) keyctl$clear(0x7, r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r8) keyctl$search(0xa, 0x0, &(0x7f0000000680)='logon\x00', &(0x7f00000006c0)={'syz', 0x0}, r2) keyctl$link(0x8, r4, r2) 17:34:15 executing program 4: ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x9, 0x3, 0x8, 0x9, 0x0, 0x3eb, 0x36b, 0x6, 0x0, 0x3, 0x2, 0xff, 0xae, 0xec38}}) r0 = eventfd2(0x7fffffff, 0x80801) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001000)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001040), 0x125000, 0x0) timerfd_gettime(r2, &(0x7f0000001080)) r3 = add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f0000001140)={0x0, "efbb403897bedfe28151539ae12e7b3d2999ee1349a36f2b7f7af40d9928d7a137605f12161108b605a5b9c270679a96e5ec2f15ccfe91d6238a6c80c99363b6", 0x32}, 0x48, 0xfffffffffffffffa) keyctl$reject(0x13, r3, 0x1b00000000000, 0x1ff, r3) ioctl$RTC_AIE_OFF(r1, 0x7002) r4 = pidfd_getfd(r2, r1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$CDROMPAUSE(r5, 0x5301) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000001200)) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001240), 0x200040, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) r7 = add_key$fscrypt_v1(&(0x7f00000013c0), &(0x7f0000001400)={'fscrypt:', @desc1}, &(0x7f0000001440)={0x0, "ca3f430c7e87283bd25287267b22998ad23326a188e65a1d80b1c18dc02ce7c1259ff556d6dc49290d1d97d349f508b3cae226a05bcc6495f126faf2d214acd4", 0x1a}, 0x48, 0xfffffffffffffff8) r8 = add_key$keyring(&(0x7f00000014c0), &(0x7f0000001500)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r7, r3, r8, 0x0) splice(r6, &(0x7f0000001540)=0x7ff, 0xffffffffffffffff, &(0x7f00000015c0)=0x4, 0x1, 0x0) 17:34:15 executing program 1: fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/30) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000080)) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f00000000c0)={0x1, "815ccb826409f1ca1a087d23d79df972604217b6edf8085a943256159a53c7909dafe72df3d9c246c4c43813dcb71f6de5e20b1b8b2c1633689a76065dbfadad"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @aes128}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000180)) r1 = dup3(r0, r0, 0x0) splice(r0, &(0x7f00000001c0)=0x10001, r1, &(0x7f0000000200)=0x8, 0x6, 0x8) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000240)=""/44) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0xc200, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) fstatfs(r0, &(0x7f00000002c0)=""/4096) time(&(0x7f00000012c0)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001300)={{0x0, 0x989680}}, &(0x7f0000001340)) dup3(r0, r2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x80, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000013c0), 0x200800, 0x0) r5 = pidfd_getfd(r2, r3, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001400)) 17:34:15 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x24, 0x1a, 0x10, 0x18, 0x0, 0x2, 0x2, 0x8d}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept(r1, &(0x7f00000000c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x3, 0x501200) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x19, 0x34, 0x16, 0xd, 0x7, 0x2, 0x1, 0xb, 0x1}) ioctl$RTC_PIE_ON(r0, 0x7005) r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$CDROM_SELECT_SPEED(r2, 0x5322, 0x5) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000002c0)) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 17:34:15 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x400, 0x70bd25, 0xb93d, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r4) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x4, 0x9, 0x9, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x10, 0x7, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x5, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x101, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x20, 0x400, 0x0, @mcast2, @private2, 0x10, 0x8000, 0xfd, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x7, 0x34, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x80, 0x700, 0x0, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2d0, r5, 0x31, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2d0}}, 0x4005000) eventfd(0x3) getpgid(0xffffffffffffffff) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r11, 0x8912, &(0x7f0000000b80)=@req={0x28, &(0x7f0000000b40)={'gre0\x00', @ifru_hwaddr=@local}}) 17:34:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x4004044) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000600)={0x0, 0x0, "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", "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"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001680)={'ip6gre0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x4, 0x73, 0x7, 0x7, 0x54, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0xf614edb4312d1430, 0x2, 0xffff}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), r6) vmsplice(r4, &(0x7f0000001900)=[{&(0x7f0000001700)="ba1ed580b916f29fed6b852718a71b07bcb449ce531f6636a297096eab7966df0ac43629d6a3014ba762df7fdc8056583a76fb087b9579571062966f2453dc9c998fca837e85ff6c5ef777c81246d1557c065438da555fc46fb4026a1c259f54debac1cd04b58f148a5053263108a6cbbeea486462b4f50c5e0e130bd4155782cd4acf3d930b8e6916d767d833875c5424720fd94e204781c9812a06a7d86cbea8f3f4caeb", 0xa5}, {&(0x7f00000017c0)='7', 0x1}, {&(0x7f0000001800)="9146270858396e2924e72772de8189fa0fb59a4f937b5a44f94275cfd5568be6d33dcf0c82aea6c813bd78b71763b64e7c7acb26421c6d5e12dd1688504df1d075598eb5af79d8bca81dde8a01bd37eb536919ba66bf8dffaf50af9f79c3a5e7f226b0eebb2d95b2500201c580aae3662396b2fdc2d37bb1c45cd6da3931ee08814dc107d5d8effe4df70178578479eb1b27e252536b5392dec12e6c8ed960c13b93062aa4f38c3be6181674e7b1f98efb4e5ad08f0dbeb33f14296a6b570b7b9e82c34323307663cb55d353205160fd13866222d1c0349794abd8574979e81da3dcca25915e1859d691ca", 0xeb}], 0x3, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_FD(r6, 0x4c00, r7) vmsplice(r4, &(0x7f0000001b40)=[{&(0x7f0000001940)="aa6cada6cab9f1ebec3726017a2114288371e531fb140eca152ade58e75ded6367918245dca8448b894e7559aa00222760e6419aa920a6b6559c6fdd4fa49744377f6302a6a42781306c6dc1ea000d74fc9168b7782eabccf192db536027dac89dbd34b8cb1553c9dc26a88fa1", 0x6d}, {&(0x7f00000019c0)="e1672f01474c46bbe66b8cd8973ecc036ef6d193006e606eb64edabc69d612cd84d7047c2fe3cfbb5075bf10ec38c1497a734651d9b803e06d", 0x39}, {&(0x7f0000001a00)="16551784d9dc12d3a64acc0174c6b6f40561cd08595a4c06cda07bb6ffd03c7d6adf9d99cdc9b02d0d02e9badfe80c71807864b55be2", 0x36}, {&(0x7f0000001a40)="fd28996dbbf245e5d3d53226b621cfe87455414096ed68cea69df8bcdebb6d585d9631d0e3a9ec31443d67b50fce629cd71700fef80b3c59fdee5ef8c105f1bf642be631ed5d65b43b825f7341dfa38d5e71c6b58ff64ec669a9151b2ad224aaaa57c7d9402db50558fdd0b260a44a291882a80a2a7c225b3a9488ce418baa2c47030258d86619236daa886f66d1f230832db77f2ba2225bc702d4a73f7a0d18d09d93adb6e0e5664ded45dc2a9fee728b701ea6a2a244d6233cd15b8387542bcf5c92613767e6c0dbf4eede2cc448529f38aec4d3", 0xd5}], 0x4, 0x0) [ 55.109603] audit: type=1400 audit(1751650455.787:7): avc: denied { execmem } for pid=272 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:34:15 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1800000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5b}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0xc800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x23c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048d0}, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000004c0)={{0x2, 0x3, 0x5, 0x1, 0x101}, 0xff, 0xfffffffffffff1bd, 0x2ac6}) pselect6(0x40, &(0x7f0000000540)={0x8001, 0x2, 0xffff, 0xfffffffffffff2e8, 0x8000000000000000, 0x81, 0x3, 0x8001}, &(0x7f0000000580)={0x9501, 0x81, 0x4, 0x7ff, 0x9, 0x6, 0x0, 0x3f}, &(0x7f00000005c0)={0x5, 0x7, 0x2a7, 0x1, 0x1, 0x40, 0x1, 0x5c6894ed}, &(0x7f0000000600), &(0x7f0000000680)={&(0x7f0000000640)={[0xff]}, 0x8}) syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), r1) accept(r3, &(0x7f0000000700)=@nl, &(0x7f0000000780)=0x80) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x65, &(0x7f00000007c0)=@generic={0x7, 0x0, 0x5d, "4d6f43d2", "a65a8496bba4204e97e6781b4466fdd06aa817c2c1c642917c1fc6536ee526d07cc4a6207106528396b6b592990a6fe7f71b7bb87ab2e146ea98a962fe6d77171d964860d9ce27b94691090fda139896448f0718cf225e4a8510289dbc"}) socketpair(0x26, 0x80000, 0x7, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x58242c642f9be36e, &(0x7f0000000880)={'vlan0\x00', @ifru_mtu}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) r7 = syz_open_dev$vcsu(&(0x7f0000000940), 0x4, 0x400101) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000980)={{0x1, 0x1, 0x93a, 0x1, 0x87e}, 0x4, 0x3}) 17:34:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'geneve1\x00', @ifru_data=&(0x7f0000000000)="394754542e8f3057858d425a95448c1526bbd0f3fa21024bc3fcfdd67e0d16ca"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0x2a, 0x80, 0x4, 0x3, @mcast1, @loopback, 0x7800, 0x7f8e, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r2, 0x2d, 0x0, 0x1, 0x4, 0x18, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x6, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r3, 0x4, 0x1, 0x40, 0xc3b, 0x38, @dev={0xfe, 0x80, '\x00', 0x27}, @private0, 0x10, 0x700, 0xfcf, 0xbb}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', r4, 0x2f, 0x1, 0x82, 0x6, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x7800, 0x40, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x4, 0x9, 0x20, 0x413, 0x1, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x8, 0x1000}}) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r5, 0x2f, 0x6, 0x8, 0x1, 0x1a, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x80, 0x0, 0x9}}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001bc0), r0) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001e80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)={0x204, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x40}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7a601f84810614b3897ed5c739de81bb87dd953ff5305aca8c6a13443e8ddcd2"}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x204}, 0x1, 0x0, 0x0, 0x4084800}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000001f40)={'ip6gre0\x00', &(0x7f0000001ec0)={'sit0\x00', r2, 0x29, 0x7f, 0x3, 0x4, 0x0, @empty, @private0, 0x7, 0x7, 0x7, 0x5}}) r9 = socket(0xa, 0x5, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000002000)={'ip6tnl0\x00', &(0x7f0000001f80)={'syztnl1\x00', r6, 0x4, 0x7, 0x1f, 0x6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x7, 0x8, 0x74}}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002040), 0x8000, 0x0) r10 = add_key$keyring(&(0x7f0000002080), &(0x7f00000020c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, 0x0, r10) [ 56.354716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.357147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.358961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.361202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.364495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.366428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.369949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.373114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.376441] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.378873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.427039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.433971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.433971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.437714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.438867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.440213] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.443926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.445440] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.445685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.448794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.452324] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.452698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.454965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.459850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.464585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.489236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.500338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.501308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.503837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.505803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.509906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.511465] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.514833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.516373] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.518729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.518840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.524786] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.526813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 56.541617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 56.547744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.674711] [ 56.675265] ============================= [ 56.676064] WARNING: suspicious RCU usage [ 56.676890] 6.16.0-rc4-next-20250704 #1 Not tainted [ 56.679018] ----------------------------- [ 56.680683] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 56.682877] [ 56.682877] other info that might help us debug this: [ 56.682877] [ 56.684471] [ 56.684471] rcu_scheduler_active = 2, debug_locks = 1 [ 56.685794] 3 locks held by syz-executor.4/283: [ 56.686810] #0: ffff88800f6cc400 (sb_writers#4){.+.+}-{0:0}, at: path_openat+0x1cd3/0x2880 [ 56.688490] #1: ffff88800ba86618 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: path_openat+0x1308/0x2880 [ 56.690506] #2: ffff88801c8de6b0 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xf97/0x1330 [ 56.691784] [ 56.691784] stack backtrace: [ 56.692395] CPU: 1 UID: 0 PID: 283 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250704 #1 PREEMPT(voluntary) [ 56.692420] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 56.692432] Call Trace: [ 56.692439] [ 56.692447] dump_stack_lvl+0xfa/0x120 [ 56.692472] lockdep_rcu_suspicious+0x152/0x1c0 [ 56.692498] proc_sys_compare+0x28a/0x340 [ 56.692518] ? __pfx_proc_sys_compare+0x10/0x10 [ 56.692539] d_same_name+0x229/0x2e0 [ 56.692572] d_alloc_parallel+0x7c1/0x1330 [ 56.692606] ? __pfx_d_alloc_parallel+0x10/0x10 [ 56.692638] ? __pfx_default_wake_function+0x10/0x10 [ 56.692668] ? __d_lookup+0x25f/0x490 [ 56.692698] lookup_open.isra.0+0x64f/0x1530 [ 56.692729] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 56.692770] ? mnt_get_write_access+0x81/0x2d0 [ 56.692788] ? mnt_get_write_access+0x1ea/0x2d0 [ 56.692815] path_openat+0xc26/0x2880 [ 56.692851] ? __lock_acquire+0x694/0x1b70 [ 56.692872] ? __pfx_path_openat+0x10/0x10 [ 56.692908] do_filp_open+0x1e8/0x450 [ 56.692936] ? __pfx_do_filp_open+0x10/0x10 [ 56.692974] ? find_held_lock+0x2b/0x80 [ 56.693001] ? alloc_fd+0x2c1/0x560 [ 56.693026] ? lock_release+0xc8/0x290 [ 56.693051] ? alloc_fd+0x2c1/0x560 [ 56.693085] do_sys_openat2+0x104/0x1b0 [ 56.693107] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.693132] ? __fput+0x67b/0xb50 [ 56.693158] __x64_sys_openat+0x142/0x200 [ 56.693181] ? __pfx___x64_sys_openat+0x10/0x10 [ 56.693203] ? __pfx_fput_close_sync+0x10/0x10 [ 56.693236] do_syscall_64+0xbf/0x360 [ 56.693259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.693280] RIP: 0033:0x7f03e08daa04 [ 56.693295] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 56.693314] RSP: 002b:00007fffa1f53060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 56.693332] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f03e08daa04 [ 56.693345] RDX: 0000000000080001 RSI: 00007f03e0991286 RDI: 00000000ffffff9c [ 56.693358] RBP: 00007f03e0991286 R08: 0000000000000000 R09: 00007fffa1f53050 [ 56.693370] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 [ 56.693382] R13: 00007fffa1f53100 R14: 0000000000000000 R15: 00000000000000f8 [ 56.693409] [ 58.446522] Bluetooth: hci0: command tx timeout [ 58.447792] Bluetooth: hci1: command tx timeout [ 58.509775] Bluetooth: hci4: command tx timeout [ 58.572769] Bluetooth: hci7: command tx timeout [ 58.572824] Bluetooth: hci6: command tx timeout [ 58.574101] Bluetooth: hci3: command tx timeout [ 58.576112] Bluetooth: hci2: command tx timeout [ 58.637771] Bluetooth: hci5: command tx timeout [ 60.493916] Bluetooth: hci1: command tx timeout [ 60.494916] Bluetooth: hci0: command tx timeout [ 60.557034] Bluetooth: hci4: command tx timeout [ 60.620825] Bluetooth: hci6: command tx timeout [ 60.621716] Bluetooth: hci3: command tx timeout [ 60.621761] Bluetooth: hci7: command tx timeout [ 60.622508] Bluetooth: hci2: command tx timeout [ 60.684758] Bluetooth: hci5: command tx timeout [ 62.541556] Bluetooth: hci0: command tx timeout [ 62.543268] Bluetooth: hci1: command tx timeout [ 62.604699] Bluetooth: hci4: command tx timeout [ 62.668790] Bluetooth: hci6: command tx timeout [ 62.669540] Bluetooth: hci2: command tx timeout [ 62.670514] Bluetooth: hci7: command tx timeout [ 62.671445] Bluetooth: hci3: command tx timeout [ 62.732964] Bluetooth: hci5: command tx timeout [ 64.589129] Bluetooth: hci1: command tx timeout [ 64.589571] Bluetooth: hci0: command tx timeout [ 64.652768] Bluetooth: hci4: command tx timeout [ 64.716695] Bluetooth: hci2: command tx timeout [ 64.716841] Bluetooth: hci3: command tx timeout [ 64.717147] Bluetooth: hci7: command tx timeout [ 64.717563] Bluetooth: hci6: command tx timeout [ 64.780686] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 17:34:17 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84ba2d8e RDX=ffffed100391bcd4 RSI=0000000000000004 RDI=ffff88801c8de698 RBP=ffff88801c8de698 RSP=ffff88801740f6a0 R8 =0000000000000000 R9 =ffffed100391bcd3 R10=ffff88801c8de69b R11=0000000000000001 R12=1ffff11002e81ed5 R13=0000000000000003 R14=ffffed100391bcd3 R15=ffff88801740f6d8 RIP=ffffffff84ba2f20 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557c106400 00000000 00000000 GS =0000 ffff8880e55f3000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f544249b3c0 CR3=0000000032eaa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b5a45 RDI=ffffffff8871dee0 RBP=ffffffff8871dea0 RSP=ffff888016187298 R8 =0000000000000000 R9 =ffffed1001406046 R10=0000000000000066 R11=0000000000000001 R12=0000000000000066 R13=0000000000000010 R14=ffffffff8871dea0 R15=ffffffff828b5a30 RIP=ffffffff828b5a9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558aa87400 00000000 00000000 GS =0000 ffff8880e56f3000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9f0da244a1 CR3=000000000f72a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000