Warning: Permanently added '[localhost]:55357' (ECDSA) to the list of known hosts. 2025/01/22 07:06:24 fuzzer started 2025/01/22 07:06:24 dialing manager at localhost:44689 syzkaller login: [ 63.067349] cgroup: Unknown subsys name 'net' [ 63.172679] cgroup: Unknown subsys name 'cpuset' [ 63.210934] cgroup: Unknown subsys name 'rlimit' [ 71.335095] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 81.789842] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/22 07:06:43 syscalls: 2217 2025/01/22 07:06:43 code coverage: enabled 2025/01/22 07:06:43 comparison tracing: enabled 2025/01/22 07:06:43 extra coverage: enabled 2025/01/22 07:06:43 setuid sandbox: enabled 2025/01/22 07:06:43 namespace sandbox: enabled 2025/01/22 07:06:43 Android sandbox: enabled 2025/01/22 07:06:43 fault injection: enabled 2025/01/22 07:06:43 leak checking: enabled 2025/01/22 07:06:43 net packet injection: enabled 2025/01/22 07:06:43 net device setup: enabled 2025/01/22 07:06:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/22 07:06:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/22 07:06:43 USB emulation: enabled 2025/01/22 07:06:43 hci packet injection: enabled 2025/01/22 07:06:43 wifi device emulation: enabled 2025/01/22 07:06:43 802.15.4 emulation: enabled 2025/01/22 07:06:44 fetching corpus: 50, signal 6630/7877 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/10898 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/11904 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/12923 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/13865 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/14873 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/15856 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/16861 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/17704 (executing program) 2025/01/22 07:06:44 fetching corpus: 59, signal 8959/17704 (executing program) 2025/01/22 07:06:47 starting 8 fuzzer processes 07:06:47 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x8000000, 0x71, 0x5}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x2, 'bridge0\x00', {0x800}, 0x4a7f}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180), &(0x7f00000001c0)) r1 = inotify_init1(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000200)=0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000280)=0x3) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000002c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000300)) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)=""/55, &(0x7f0000000380)=0x37) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x3ff}}, './file0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000480)=0x2, 0x1) 07:06:47 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2c0, 0x4040) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '*'}, {0x20, '[!'}], 0xa, "4423412c55cca376b2d127503608eb5def1232ab44af014b9977d02d135eae834f737c6672abcec60fb6c8e300705a019994982172c52a197fb784128c554e3839e375dc732e2fbab939377c"}, 0x5c) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f00000000c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x78800) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x6, 0x1, 0x56}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x205000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000240)=0x81) r4 = syz_open_dev$vcsu(&(0x7f0000000280), 0x1, 0x400000) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x80000, 0xdc, 0x5}, 0x18) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000340), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f00000006c0)={0x4, &(0x7f0000000640)=[{0x81, 0xec, &(0x7f0000000380)="78de0271d1c77fc082ecd27699259497125b823c51f65a6598c60ce63cce7c21287cfcfe19b153f2a7e9f6fc9b00c58872e915ae863d536d77a7b165fe2336dd7a9356a28b6712602cce9be60357c9dc9f89533ccc0f0400bb65a591d0620ec1204919b6d6ef648eafdcd160c6dfe2f8736dd59a5a580c83cac379208fe98886cee17a50e3729a2cc53533bb32c053c5f1b5377d3f5f90566d19935d83328f7c1bf7b67696bd6e6c466b2bed7474cb1ef70f87e22dde781a9003d6989ba40496f3bfa7c65e36c33b81a7f4b340396daeba98d96be7e0e1ed2ef05bfe2a94d7ee1b6a09db93d49ac67e03ca6f", 0x1}, {0xc9e8, 0xf0, &(0x7f0000000480)="33ccd93977ce811488bdb5cc20686690d034749a8035f1073ecf267149e27b8c52c22e763c3efcc48a356b6d2e1b199daee5a88810a3d63b3864a1110a2268e4049c126b1dcd236dc1c511ae3b1ca82fa7c57b5aa3e7aea93eb5f9721299d57f1a13a775b02cde42b0446b67f12b48323cd57ff79c06496cca005aab976f7da8c6f8e4c8d734eef02df590ed93a0476d9b13232fb28ac6e876a0f364ed746bf7d05608454c306a24d5ab5e6468be688ac246d3aac63a3e7ca6aa9d7959ff1b69f919da8c7144d33e71ba73bc2a9216ba341ea7488b18ea559774780c1e76e894f6f8491edb406ef4e95409bb12aca243"}, {0xffff8cc1, 0x28, &(0x7f0000000580)="1807f3fcacf450a380924a338c5ba8d25f373643cb33b61ecd0ed64ac67aa5dcf94f3f6a0bcf1dd3", 0x1, 0x1}, {0x9, 0x79, &(0x7f00000005c0)="c1fb86f82036f600e82d9e1896b104b053582e1384346c7214738b23a004440a2604450e95a785c7ec2b6a666f2b2a886f0c382e6d917696e4c7a78744da765151a3bfa7695bb8d27d114e593b14b4f657469834051bb00e924f14875c67d4a7f5ecb7d624e82e6ac6ba1a9c2614453bda68453e489759a944"}]}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000700)={0x1, 0x2, 0xa, 0x0, 0x1f, 0x1, @lba=0xfff, @msf={0x8, 0x8, 0x1}}) r6 = syz_open_dev$mouse(&(0x7f0000000740), 0xc7a, 0x40001) ioctl$VT_WAITACTIVE(r6, 0x5607) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000780)={r4, 0x1, 0x6, 0x8}) ioctl$CDROMVOLCTRL(r7, 0x530a, &(0x7f00000007c0)={0x5, 0x0, 0x4, 0x7f}) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000800)={0x40, 0x80, 0x5, 0x16, 0x40, 0x7}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000001280)) 07:06:47 executing program 2: r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="3666c4b24ff4147956bce6395632", 0xe, 0x99d5}], 0x200000, &(0x7f0000000100)={[{'{*c(]^!k}'}, {':/(^4\']'}, {'2#'}, {'\'#:'}], [{@seclabel}]}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8000, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="8e2bb1577e4e7b5bc484b5457cd366ee5942fb8e71cdb766a18600d66609478066a93c56f81d15dc6679568c31c8b3b6369a2bda591254ab6eb5927fc05b487a77db96f8f07a5e867284d3d82c3312b77395dc1671f7e7c27f4a9b6d3c6b6720a5a3d31432d29c75dba0a0fe5111ba93c86f5c26625a4b05", 0x78, 0x6}, {&(0x7f0000000240)="edb47f2edb066e2d3d7cb9e3945b914200d47f6d401668830081c9b79dbb0dcd75bfdaa1de9eeef4b1bfe7ad9ba2e6e279f730ed9a9a88277d15bcbe7fe005d26751859601b85d9c122bb93899e72a47678a1f30590c77bb670e4ade41311a096c263c0ff8ffbb2336f47a7d7c9fdf739136037e2969b547c32a416461bb9f6c5361b27c073ed9476ea796e5900ad1ccb2f640663f3a92d0b7e2056efa8b8e576db3ba080a03a3acd8bcaa3563637d4deeb73bff6fb3e3b6e8963c6113e959fb97d3f9048c724a636e9829550d2688707f7fae21531332", 0xd7, 0x7}, {&(0x7f0000000340)="574cb7de9dc12ada68ae3a10276869abe0fe6e32d8826de0c29a95f3334c46375bb46a81b351a80a94ab43fc33a9a027eeae9d257c44f3f171478688c4d21e915a7affc8ba4aeb9b0597bf1325773c0cf0556de54e3554d441bea8cd29201accd37e66c368449623b7c68e9c41dd347dc416e3dc70b0d8272b5f5853e68c366f6d400404a5513f8f733b6db7025e5797ed0143c2597af00b77866f7bbc7e8aa660483f", 0xa3, 0xdad}], 0x1000019, &(0x7f0000000480)={[{@nojoliet}, {@utf8}, {@mode={'mode', 0x3d, 0x9}}, {@check_strict}, {@block={'block', 0x3d, 0xc00}}, {@block}, {@hide}], [{@permit_directio}]}) r1 = getuid() r2 = syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0xfffffffffffffffc, 0x5, &(0x7f0000000940)=[{&(0x7f0000000580)="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", 0xfd, 0xffffffffffffff7f}, {&(0x7f0000000680)="fb90f9f5d335694ea37a10e14133f83b62443b0406029cf74010703f327346700a6e8917bfe677f96003e32fd6a46a8bfaf773614cc1e1189f17dde35e40de343d6f5da8d70a82e5e4093900f51dced8434d9dd9f36cefe8d39b108967aecbd101c01740569f5cf08a56cfab2490bdd83d72193e93a6e242d39325442ac106aacd95b45fcde0f1", 0x87, 0x7}, {&(0x7f0000000740)="b2b9002f2c827a64f2d747a7fe3d288fdaf1a0e5550b4242b137cfcf5d816d3ed287e1aeacab0abad2480f52b70c5a9da8f56e784424f3efef9da8b4b5d2cbbf08e67d6a112b499289fe35bb79001ac294226d43e71b4a8c779eb4f2acfec9b306324f11296455e6acee0a6654e78f15fcf2ec681429d9fa814b3db0e1f9146795d3b69f08cdaf47ba7226d981b09e9e30714e576666368a83d90d89", 0x9c, 0x6}, {&(0x7f0000000800)="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", 0xfc, 0x5abb}, {&(0x7f0000000900)="467ce088e7cfbd900bc9a81e5201fc812fb89165dae743fdff154b7c84056a2c423cc6e5", 0x24, 0x8}], 0x2000, &(0x7f0000000dc0)={[{@mode={'mode', 0x3d, 0x2}}, {@huge_always}, {@mode={'mode', 0x3d, 0x8}}, {@huge_always}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\\/{\'$'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_eq={'uid', 0x3d, r1}}, {@fowner_lt={'fowner<', 0xee00}}, {@fsname={'fsname', 0x3d, '2#'}}, {@fsname={'fsname', 0x3d, 'check=strict'}}, {@obj_user={'obj_user', 0x3d, 'block'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'block'}}]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000f00), 0x6000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f40)={{{@in=@private, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001040)=0xe8) fchownat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', r1, 0xee00, 0x100) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x1, &(0x7f00000010c0)={@empty, @remote, @private}, &(0x7f0000001100)=0xc) r5 = syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x3c, 0x3, &(0x7f0000001380)=[{&(0x7f00000011c0)="09167f3f506d4d16f27baa3bee020da1342dfd05feef06e884a0217bd7da3066133f24770650a8dd23", 0x29, 0x3}, {&(0x7f0000001200)="a3931bc0169a3a777caf085189f413a3d82477135a38f836bbd76cde039962ff73d17afb228e731f31fc57717f1e11ae3fa089cf43e7a228b4e9b929ea23ca752a78f4afc94eb33870f3145289f5d6377aba4f81007de43641565f38ce2351d8970bc9d78c630f71247388a3b13ff7ce90dce5e905fb0e8a84d7f1ae619aaf939bdb40961d91d7bac107cb13f99e8c4059c74e54", 0x94, 0x100000000}, {&(0x7f00000012c0)="15c17c7056a3c221c4cc1056ae1ffde8c0fac54ea2ba51fe7e0328d7e8ccea09811260b6d114d6ab680e1a02c4ff18280ab5f883890f6875e9d7c4f14c55654627ea7a55b9e439e04c7ee770468ee7ab2ca4fccdc3f6b6acc8414868b787d9d62bf675ef99f1d7b1f8ba95a2fea838f0d80c5eb92806ebcedaae393f619b767770160fd88bfd47ac7f7e751644be3b9c93a52ba792237cf7a3", 0x99, 0x6}], 0x1209000, &(0x7f0000001400)={[{@utf8no}], [{@fsname={'fsname', 0x3d, 'smackfstransmute'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&@'}}, {@smackfshat={'smackfshat', 0x3d, 'nfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '*@&'}}]}) ioctl$FITHAW(r5, 0xc0045878) renameat(0xffffffffffffffff, &(0x7f0000001480)='./file0\x00', r5, &(0x7f00000014c0)='./file0\x00') sendto$unix(r3, &(0x7f0000001500)="448aa79367f39673cce65c312012e508a8b48fa4ace4bb26fbaa9db008dc5f795b067fe10c7a0f4a78439dbcae86f42adfbc8852a50e082a566d22b018dc5693ec9a07f35bb5c95453f4b4813a197ddf848c9c85d985b4996ec3ab63295117ed0338d972abfc19f297040c92b862e44b97428816889ff857de6b0e9328949ed9533299247b1064ceee264003ba115a3a3921081c070a9a202658ca4db5fa9571f1c07fad3ea9", 0xa6, 0x4008880, &(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = add_key$fscrypt_provisioning(&(0x7f0000001640), &(0x7f0000001680)={'syz', 0x0}, &(0x7f00000016c0)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffff9) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000001740)={@id={0x2, 0x0, @c}, 0x21, r6, '\x00', @c}) setxattr$trusted_overlay_redirect(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), &(0x7f0000001840)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000001880)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = inotify_init() ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) symlinkat(&(0x7f00000018c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001cc0)='./file1\x00') 07:06:48 executing program 3: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000000)={0x1, 0x3}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x412000, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x942}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x8]}, 0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x190, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xb8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x47}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x91) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000006c0)) r5 = accept4(r0, &(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000840)=0x80, 0x80800) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000880)={'gre0\x00', 0x81}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x4, 0x7, 0x801, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x1}, [@typed={0x8, 0x5e, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x52, 0x0, 0x0, @pid}]}, 0x24}}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x61}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10001, 0x2a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) fsetxattr$security_capability(r3, &(0x7f0000000c40), &(0x7f0000000c80)=@v3={0x3000000, [{0x0, 0x1}, {0x5, 0xcad4}]}, 0x18, 0x1) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000cc0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000d00)=0x28) [ 86.184199] audit: type=1400 audit(1737529608.020:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:06:48 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/131, 0x83, 0x10000, &(0x7f00000000c0)) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x20, 0x5, 0x9, 0x1, 0x4c367da1, 0xc000000000, 0x7fff}, &(0x7f00000001c0)={0x4, 0x20, 0x6df, 0x80000001, 0xcac, 0x93, 0x80000000, 0x106}, &(0x7f0000000200)={0x1, 0x7e, 0x4, 0x19ef, 0x4, 0x1, 0x2, 0x20000000000000}, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) r3 = signalfd(r0, &(0x7f0000000380)={[0x8]}, 0x8) r4 = signalfd4(r3, &(0x7f00000003c0)={[0x7]}, 0x8, 0x800) getsockopt$inet_buf(r4, 0x0, 0x9, &(0x7f0000000400)=""/223, &(0x7f0000000500)=0xdf) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='net/ip6_tables_targets\x00') mq_timedsend(r6, &(0x7f00000007c0)="41e5ac2804bc05be21ae8d2e1f09207b742f17beb3364436daca29a1765aff7c4f0ab2d106285d02a31fb0415358fba291e0a4b7bfae3d973d97f62e58a329c8163192cc952e390a5153aac1b42df0952699c2be11d4b314c775a39127f7dd3ed0de74a171f242bc86bff86f3a6fda31375ab7d6c11262801335cae688701ae7253f2ac6764c7ad2df5b020af22702dd7f8e82ad00fef41da5d81fd2d00b35c1f832c28f880a", 0xa6, 0x0, &(0x7f0000000880)={0x77359400}) nanosleep(&(0x7f00000008c0), 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000000900)=0x40) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x28041, 0x0) sendmsg$AUDIT_USER(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5c, 0x3ed, 0x1, 0x70bd2d, 0x25dfdbfe, "a6c328e8e490496b306effcfed33cb6615f8a3d0b79e08e53b3ab239f5f10560dcf226092d03f21f5cdfe65ca61d2f454125d3395ca00a5ee22bd1d3ced3ae173f81dfd3a436245fe47fe6c5", ["", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x35c7c8a2129b78bb}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x988}, 0x4004004) 07:06:48 executing program 5: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x784e, 0x7, 0x6, 0x0, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@ssrr={0x89, 0x17, 0xf9, [@remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010102]}, @timestamp_prespec={0x44, 0x14, 0x3f, 0x3, 0xa, [{@remote, 0x1}, {@remote, 0x5}]}, @noop]}}}}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x100, @mcast2}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000100)="8a7c52cfb083c9895891e6de0057504b0ea551c2bd6468c534648b3b8be48512c757f560f07e331478ed8adc2726b01a88b574b5b54ff5411c44c03316360ee6be7d913cc02bd3db17e92f97a3d5e2046e152fc9487d1c751c82b5409077e1647e133850016350d5b56aad61ddd9fc4d67e0c686f2ba4c9b4ae883c0781ac7413d83e89c602b68ce1f49dcd0e93621ef9e097d2b5451c7af8553d479329dd33575ee6ec34eb043d842b8e1f14d01c4bd8187c335113e2f078c1ab2709f0b00f71019939f7d476d982a146c990d473974898e257edd2b2d659cf9de0071d70fce9bc88486facf57a7f1fe65635131dd5abc4cb58e3fe9", 0xf6}, {&(0x7f0000000200)="cf6d0cba681d8d0e8620bdc9ac895824bf89c1a6deb61fca95e0e9f019d6d8920e4d209e8990e7435686081ee58cac8c5c2dd8a9a8ae5bc93485ada4f988d74bada6aa006d86119d3de53fa1a6475e5bb3fb1e5130e99d07e876edede9d3d1166ffd27ae71e265fa30b729ebb471a007020ac3c00b5b0c583ba924527c2d14cee55bc04825487c3961b1b8ded9db2253ac4b9355e0482c6ffc5c3c98965e8f151b4c9e9025c9dc0816a0ccd462a9f05a70155a04982948e026151752917cf8e92b9b9b7374caa9ff211e115bb509157f4384e53a14b6e826a439af9a", 0xdc}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="fe0303fd000156f36b0f4199da023cee470487b595fbd0ea0eb86b254882abe28b5b274bcfdf44ab9aa057c4e3c2ca88835c8d9abb395dbe33bc86e0bcaa54fdfe6f1f819deab112d822645317cbcdbba0ba1b", 0x53}, {&(0x7f0000000480)="29c868265a311e82256f84d2a8e8", 0xe}, {&(0x7f00000004c0)="a57cc2e08a41e321b327baa77de8796d96c3a3c996aedea6c0019e1fa06d584fbd31eebdabac3ca84cefc30505b68f39f109fa43a740488f053aaf1dec870fe600489154115a19000602326be73e56a1e656eafa40922b5ddc53a803c2f06d0add0f", 0x62}, {&(0x7f0000000540)="0e4f3176ac63323192b201ceee20ef26073b3d88e5766c616157d72467a961cb9dbb91dfc97dd371b12cf354e3053cc894a8b73617be57d59ebdecfc943b7e86eba7caa4004a9758dd482ec5efc84cd9303991510a93a217da5ed8d801ae854088f2720553a0b52ce3f92725d1b0b7aa5660bbb4b31ef7010e86e35de052cee196c5bfd3418255599653d3d8b611d2fec1e6c9f5726b18f5d9cb126408391d142d7cbbac1d9d04b4f76190933af2f6607d87ae9c507474", 0xb7}, {&(0x7f0000000600)="2567e7922144e31fc3636fe330095b6f18de8106bf1ce13cc8f6cedbfbd9baf4683ace5cee", 0x25}], 0x8, &(0x7f00000006c0)=[@rthdrdstopts={{0x70, 0x29, 0x37, {0x2f, 0xa, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x20, [0x1000, 0xa9ee, 0xfff, 0x7ff]}}, @ra={0x5, 0x2, 0x6}, @pad1, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x3d}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x140, 0x29, 0x37, {0x5e, 0x24, '\x00', [@hao={0xc9, 0x10, @empty}, @pad1, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x13}}, @pad1, @generic={0x6c, 0xe0, "a1833e47c7324dbe921e4b40976c71d0b96d2388639a89e719bed7447f555aed463ee7f7abac01fdd510f9f921aef1a9b6211d735f6597d85f460845e8d4933c0c2b3491b7d922481032f8dd0e30567be459246d73deee371dc1d38e65cdf40c81f101e65ad6e7aff868b0e9d47ce8e3bdd061298d0d1c8d82575756992ed7e2373fe83b6444c4acd1690ff3acd28068ae9033eb455d60ad375e2d0edb1b97d35d49c69b9dc3deb0846e2fbf11f19a85ab2f166d4e88a96d7fa14fa220fcfa481f9174c66c7a091f1d63c9ddee51d057b5a6429dc0310bac01a261939b32abd7"}, @jumbo={0xc2, 0x4, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7cc}}, @flowinfo={{0x14, 0x29, 0xb, 0xd91}}], 0x230}}], 0x1, 0x70b4b282b324204e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x8, 0x7, 0x3, 0x9, {{0x11, 0x4, 0x3, 0x3c, 0x44, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0x2a, [@remote, @private=0xa010102, @rand_addr=0x20, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @noop, @ssrr={0x89, 0xb, 0x5f, [@multicast1, @broadcast]}, @end]}}}}}) r2 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x401, 0x200200) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000a40)=0x1, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000a80), 0x5, 0x101400) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', r1, 0x29, 0x4, 0x1, 0xffff7fff, 0x40, @remote, @mcast1, 0x40, 0x700, 0x3, 0x1ff}}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x30201, 0x0) r5 = accept4$inet6(r4, 0x0, &(0x7f0000000bc0), 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r5, {0xfffffff9}}, './file0\x00'}) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r2) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x4, 0x7, 0x3, 0x9, 0x40, 0x4, 0x5, 0x7fff, 0x80, 0x264]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4c081) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000010c0), 0x8900, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) io_cancel(0x0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0x2, r8, &(0x7f0000001100)="096b077c0b21af5070f3c2cca3868408c516efb61aa30f5dfceeab10bec1c00e539136a994a11ff6f610e9653d8d134ac4ea8a80a7369cb23109bca6b760d1e1d7746132d16b52ff91948d00ce4672aa30ea3c22516a6ae9fd49c3e854ee0988ee2768ed1cf2140e9b47de412fbc5bf612d43d0ed643c7fb9b6811e7ea02391cc64059eafee8bafaf077967f244e45f7f6cd", 0x92, 0x2af, 0x0, 0x0, r9}, &(0x7f0000001240)) execveat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', &(0x7f0000001340)=[&(0x7f00000012c0)='}\'\\]\'\x00', &(0x7f0000001300)='\x00'], &(0x7f0000001540)=[&(0x7f0000001380)='\x00', &(0x7f00000013c0)='\x00', &(0x7f0000001400)='/dev/vcsu#\x00', &(0x7f0000001440)='\x00', &(0x7f0000001480)='/dev/vcsu#\x00', &(0x7f00000014c0)=']\x00', &(0x7f0000001500)='sit0\x00'], 0x400) 07:06:48 executing program 6: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x7fff, 0x9, 0x7fff, 0x80000001, 0x5, 0x2}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capget(&(0x7f0000000080)={0x399f1316, r0}, &(0x7f00000000c0)={0xe1, 0x20, 0x53, 0x5, 0xfffffffe, 0x81}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) capget(&(0x7f0000000140)={0x20080522, r1}, &(0x7f0000000180)={0x8001, 0x6, 0x80, 0x6, 0x80000001, 0xfffff30d}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000001c0)) clone3(&(0x7f0000000440)={0x2080, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, {0x39}, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/229, &(0x7f0000000400)=[r0, r0], 0x2}, 0x58) capget(&(0x7f00000004c0)={0x19980330, r5}, &(0x7f0000000500)={0x1, 0xfc, 0x2, 0x40, 0xa993, 0x3}) capset(&(0x7f0000000540)={0x20080522, r1}, &(0x7f0000000580)={0xffff, 0x9, 0x3f, 0x5, 0xffffffff, 0x1ff}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000006c0)=""/38, 0x26}, {&(0x7f0000000700)=""/137, 0x89}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000000800)=""/90, 0x5a}, {&(0x7f0000000880)=""/43, 0x2b}], 0x6, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000a00)=""/100, 0x64}, {&(0x7f0000000a80)=""/90, 0x5a}, {&(0x7f0000000b00)=""/182, 0xb6}, {&(0x7f0000000bc0)=""/220, 0xdc}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000000d40)=""/103, 0x67}, {&(0x7f0000000dc0)=""/145, 0x91}, {&(0x7f0000000e80)=""/94, 0x5e}, {&(0x7f0000000f00)=""/7, 0x7}], 0x9}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/234, 0xea}], 0x2}}, {{&(0x7f0000001240), 0x6e, &(0x7f0000001640)=[{&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/114, 0x72}, {&(0x7f0000001480)=""/91, 0x5b}, {&(0x7f0000001500)=""/221, 0xdd}, {&(0x7f0000001600)}], 0x6, &(0x7f00000016c0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x100, 0x0) capset(&(0x7f0000001800)={0x20071026, r6}, &(0x7f0000001840)={0x4, 0x7, 0xffff, 0x5bd6, 0x9, 0x1}) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001880), 0x802, 0x0) capset(&(0x7f00000018c0)={0x20071026, r4}, &(0x7f0000001900)={0xff, 0x2000000, 0x9, 0x9, 0x6, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001980)={r2, 0x10001, 0x80000000, 0x7fffffff}) io_cancel(0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0xd82, r3, &(0x7f0000001940)="36b1342c084b9eaedf228d974c0ceb8e303d606ce5ee26a6fdcfc2e89d", 0x1d, 0x4, 0x0, 0x2, r8}, &(0x7f0000001a00)) r9 = perf_event_open$cgroup(&(0x7f0000001a40)={0x5, 0x80, 0x2, 0x71, 0x0, 0x7, 0x0, 0x80000001, 0x10420, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf976, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x1000}, 0x1, 0x7fa4, 0x5, 0x4, 0x1, 0x6, 0x9, 0x0, 0x8, 0x0, 0x10001}, r8, 0x7, r8, 0x8) r10 = dup2(r8, r3) ppoll(&(0x7f0000001ac0)=[{r9, 0x1000}, {r10, 0x4000}], 0x2, &(0x7f0000001b00)={0x0, 0x3938700}, &(0x7f0000001b40)={[0xfffffffffffffff7]}, 0x8) capset(&(0x7f0000001b80)={0x20071026, r4}, &(0x7f0000001bc0)={0x80000000, 0xfffffff3, 0xc86, 0x0, 0xffff, 0x5}) 07:06:48 executing program 7: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x7a, 0x83}, 0x0, &(0x7f0000000040)="16a20fc08804ace78372d6b94ca3e4f824fe3b77346d616945e710b06079db2dce1cdbdf41b5561de7317d89e6640715b341ac31eb05b9abbfecb3015decc3d31c9584cc597150c544cc738afb7226f94410d733db5ffe7c91e01f1b834da970d4cf9541cffd8cec3033fdc6e7a62caedb14a6f529f42ab5052d", &(0x7f00000000c0)=""/131) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)=@chain) r1 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffa) keyctl$read(0xb, r1, &(0x7f0000000340)=""/253, 0xfd) keyctl$search(0xa, r0, &(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000004c0)={r0, 0x11, 0xc3}, 0x0, &(0x7f0000000500)="9df618d9d56052c6dc42d27c910747b56a", &(0x7f0000000540)="19926a71ea56f39d7ced6384afbc9ed69577678646c0f1b3579559451416fe0577306562dcd4c19ef6559f1f2e83ebdfa8210b09471d874bd2108e36fa49b5160af5b07af570e1e4845b71980246dd392f4c5f53a303a0c4231a071a1dd64bba148c6941c920f2b19d25114c88923020ce3dcded48d331153f27029bcf223e83f8905878c37d5fa981a9698774fd8ea731ffe784c577705202d2d13952bc53e3ae0cb3a61daf9551a18861a27f32ec699d5e28e54a43b2bdf1efba058fb02bab656c02") r2 = add_key(&(0x7f0000000640)='syzkaller\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)="85c180973918cdc7b8528e52925f83b21d6d0e3bdd083cbc2670b1619c67abe280439196ed72c0ff0d33aa357c037ca76b818a4845bce61795979fe8b8eda5affbd4638092d1ddc11199e2e1fb29fad5bb134d2de396b04ac1329f3b8bed5aff36f4b6674e297453a856fd73299a36c8af512a2431b937ec8b8df754bf5693a887ea9f0ec5dac91f45e289b8e7b824bf68e1e4d486620827e600a379377e6a9bf72b6de6eceba2e05f6cc84035d2d58d3f17a341", 0xb4, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r1, 0x2, r3) r4 = memfd_secret(0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000800)={@desc={0x1, 0x0, @auto="245876fea39abfb4"}, 0x10, r2, '\x00', @d}) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000880)={0x2, 0x5be}) r5 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$search(0xa, r3, &(0x7f00000008c0)='dns_resolver\x00', &(0x7f0000000900)={'syz', 0x0}, r5) r6 = request_key(&(0x7f0000000a80)='.request_key_auth\x00', &(0x7f0000000ac0)={'syz', 0x3}, &(0x7f0000000b00)='\x00', r3) add_key$fscrypt_provisioning(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000a40)={0x2, 0x0, @d}, 0x18, r6) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x1) r7 = geteuid() keyctl$get_persistent(0x16, r7, r0) [ 87.532149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.539942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.542377] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.549145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.555933] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.558868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.732151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.736770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.739762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.741743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.744052] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.748385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.751101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.754496] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.756961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.770392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.776888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.778922] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.842859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.850639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.866867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.891335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.901948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.903918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.939030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.939991] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.945045] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.959405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.965925] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.971002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.976027] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.980981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.985863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.990286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.999024] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.011366] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.021164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.026380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.029569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.033166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.038949] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.041708] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.053925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.061756] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.063366] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.073351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.110324] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.123973] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.618929] Bluetooth: hci0: command tx timeout [ 89.812122] Bluetooth: hci2: command tx timeout [ 89.875128] Bluetooth: hci1: command tx timeout [ 90.003533] Bluetooth: hci3: command tx timeout [ 90.133545] Bluetooth: hci6: command tx timeout [ 90.134349] Bluetooth: hci4: command tx timeout [ 90.195644] Bluetooth: hci5: command tx timeout [ 90.259701] Bluetooth: hci7: command tx timeout [ 91.666576] Bluetooth: hci0: command tx timeout [ 91.859716] Bluetooth: hci2: command tx timeout [ 91.923965] Bluetooth: hci1: command tx timeout [ 92.051567] Bluetooth: hci3: command tx timeout [ 92.178772] Bluetooth: hci4: command tx timeout [ 92.181502] Bluetooth: hci6: command tx timeout [ 92.243686] Bluetooth: hci5: command tx timeout [ 92.307521] Bluetooth: hci7: command tx timeout [ 93.715648] Bluetooth: hci0: command tx timeout [ 93.907525] Bluetooth: hci2: command tx timeout [ 93.971795] Bluetooth: hci1: command tx timeout [ 94.099567] Bluetooth: hci3: command tx timeout [ 94.227527] Bluetooth: hci6: command tx timeout [ 94.227629] Bluetooth: hci4: command tx timeout [ 94.291561] Bluetooth: hci5: command tx timeout [ 94.354547] Bluetooth: hci7: command tx timeout [ 95.763096] Bluetooth: hci0: command tx timeout [ 95.954752] Bluetooth: hci2: command tx timeout [ 96.018677] Bluetooth: hci1: command tx timeout [ 96.146586] Bluetooth: hci3: command tx timeout [ 96.282563] Bluetooth: hci4: command tx timeout [ 96.282727] Bluetooth: hci6: command tx timeout [ 96.338560] Bluetooth: hci5: command tx timeout [ 96.403118] Bluetooth: hci7: command tx timeout [ 147.286683] syz-executor.0 (280) used greatest stack depth: 23552 bytes left [ 150.370711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.373181] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.377051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.378126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.379876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.389338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.394122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.399335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.401000] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.402621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.405080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.406181] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.480905] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.489997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.491460] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.491998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 150.509098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 150.515025] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 150.523640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.540310] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.550954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.554365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.559741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.561833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.565396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.567985] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 150.570755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.584956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 150.588712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.590622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.592232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.594299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 150.595196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 150.599283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.612686] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 150.617162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.681023] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 150.696277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 150.698779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 150.734799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 150.737833] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 150.741223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 150.932279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.966114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.990264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.014654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.034662] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.054319] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.466557] Bluetooth: hci0: command tx timeout [ 152.466858] Bluetooth: hci1: command tx timeout [ 152.658588] Bluetooth: hci4: command tx timeout [ 152.659522] Bluetooth: hci2: command tx timeout [ 152.723568] Bluetooth: hci6: command tx timeout [ 152.787707] Bluetooth: hci3: command tx timeout [ 153.170593] Bluetooth: hci5: command tx timeout [ 153.171083] Bluetooth: hci7: command tx timeout [ 154.515021] Bluetooth: hci1: command tx timeout [ 154.515207] Bluetooth: hci0: command tx timeout [ 154.706973] Bluetooth: hci2: command tx timeout [ 154.708244] Bluetooth: hci4: command tx timeout [ 154.771761] Bluetooth: hci6: command tx timeout [ 154.834572] Bluetooth: hci3: command tx timeout [ 155.218693] Bluetooth: hci5: command tx timeout [ 155.218863] Bluetooth: hci7: command tx timeout [ 156.562521] Bluetooth: hci1: command tx timeout [ 156.562637] Bluetooth: hci0: command tx timeout [ 156.754748] Bluetooth: hci2: command tx timeout [ 156.755484] Bluetooth: hci4: command tx timeout [ 156.818863] Bluetooth: hci6: command tx timeout [ 156.883565] Bluetooth: hci3: command tx timeout [ 157.267608] Bluetooth: hci5: command tx timeout [ 157.267968] Bluetooth: hci7: command tx timeout [ 158.611709] Bluetooth: hci0: command tx timeout [ 158.612019] Bluetooth: hci1: command tx timeout [ 158.802788] Bluetooth: hci2: command tx timeout [ 158.802824] Bluetooth: hci4: command tx timeout [ 158.866553] Bluetooth: hci6: command tx timeout [ 158.931499] Bluetooth: hci3: command tx timeout [ 159.314528] Bluetooth: hci7: command tx timeout [ 159.314625] Bluetooth: hci5: command tx timeout [ 212.644600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.647113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.649881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.661899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.665132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.667075] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.719327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.722246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.731974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.742159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.747927] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.750368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.846839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.851846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.854377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.859687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.865075] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.867263] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.054292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.094796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.097898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.109057] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.110966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.115261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.122219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.125913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.130662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.132912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.136244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.151113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.170545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.179005] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.180907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.184862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.187698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.196223] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.202171] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 213.206895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.215093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.223157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.248815] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 213.261590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.307002] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.311834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.315002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.330311] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.386801] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.418101] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.739723] Bluetooth: hci0: command tx timeout [ 214.803006] Bluetooth: hci1: command tx timeout [ 214.930560] Bluetooth: hci2: command tx timeout [ 215.250578] Bluetooth: hci3: command tx timeout [ 215.251059] Bluetooth: hci4: command tx timeout [ 215.251139] Bluetooth: hci5: command tx timeout [ 215.314533] Bluetooth: hci6: command tx timeout [ 215.570669] Bluetooth: hci7: command tx timeout [ 216.788484] Bluetooth: hci0: command tx timeout [ 216.850515] Bluetooth: hci1: command tx timeout [ 216.978495] Bluetooth: hci2: command tx timeout [ 217.298574] Bluetooth: hci3: command tx timeout [ 217.299130] Bluetooth: hci5: command tx timeout [ 217.299206] Bluetooth: hci4: command tx timeout [ 217.362479] Bluetooth: hci6: command tx timeout [ 217.618512] Bluetooth: hci7: command tx timeout [ 218.834968] Bluetooth: hci0: command tx timeout [ 218.900584] Bluetooth: hci1: command tx timeout [ 219.026893] Bluetooth: hci2: command tx timeout [ 219.346600] Bluetooth: hci3: command tx timeout [ 219.346765] Bluetooth: hci5: command tx timeout [ 219.348998] Bluetooth: hci4: command tx timeout [ 219.410544] Bluetooth: hci6: command tx timeout [ 219.666527] Bluetooth: hci7: command tx timeout [ 220.882534] Bluetooth: hci0: command tx timeout [ 220.947472] Bluetooth: hci1: command tx timeout [ 221.075464] Bluetooth: hci2: command tx timeout [ 221.394760] Bluetooth: hci4: command tx timeout [ 221.395278] Bluetooth: hci5: command tx timeout [ 221.395369] Bluetooth: hci3: command tx timeout [ 221.458504] Bluetooth: hci6: command tx timeout [ 221.714591] Bluetooth: hci7: command tx timeout [ 274.659867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.667047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.676556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.684519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.688306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 274.693754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.801117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.804236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.807108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.816657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.820525] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 274.824680] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.917249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.924227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.926167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.943929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.949850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 274.958120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.023768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.084210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.089088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.090671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.091953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.097133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.099901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.106838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.114279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.140740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.166814] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.167782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.174858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.190795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.223532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.238796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.239219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.239595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.252812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.253167] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.253533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.274176] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.280699] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.289053] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 275.298592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 275.298950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 275.302678] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.303308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.311628] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 275.317840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 276.754530] Bluetooth: hci0: command tx timeout [ 276.883433] Bluetooth: hci1: command tx timeout [ 277.010473] Bluetooth: hci2: command tx timeout [ 277.202596] Bluetooth: hci4: command tx timeout [ 277.267452] Bluetooth: hci3: command tx timeout [ 277.330584] Bluetooth: hci6: command tx timeout [ 277.332110] Bluetooth: hci5: command tx timeout [ 277.395483] Bluetooth: hci7: command tx timeout [ 278.803562] Bluetooth: hci0: command tx timeout [ 278.932450] Bluetooth: hci1: command tx timeout [ 279.060439] Bluetooth: hci2: command tx timeout [ 279.251571] Bluetooth: hci4: command tx timeout [ 279.314462] Bluetooth: hci3: command tx timeout [ 279.378615] Bluetooth: hci5: command tx timeout [ 279.379304] Bluetooth: hci6: command tx timeout [ 279.443493] Bluetooth: hci7: command tx timeout [ 280.851635] Bluetooth: hci0: command tx timeout [ 280.978679] Bluetooth: hci1: command tx timeout [ 281.106961] Bluetooth: hci2: command tx timeout [ 281.300617] Bluetooth: hci4: command tx timeout [ 281.362579] Bluetooth: hci3: command tx timeout [ 281.427678] Bluetooth: hci5: command tx timeout [ 281.427831] Bluetooth: hci6: command tx timeout [ 281.490583] Bluetooth: hci7: command tx timeout [ 282.898928] Bluetooth: hci0: command tx timeout [ 283.026744] Bluetooth: hci1: command tx timeout [ 283.155489] Bluetooth: hci2: command tx timeout [ 283.347443] Bluetooth: hci4: command tx timeout [ 283.410837] Bluetooth: hci3: command tx timeout [ 283.475681] Bluetooth: hci6: command tx timeout [ 283.475836] Bluetooth: hci5: command tx timeout [ 283.538537] Bluetooth: hci7: command tx timeout [ 337.323302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.326871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.329718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.336900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.339761] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.344088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.394974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.398738] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.403827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.407760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.411047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.413523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.416804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.420902] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.423143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.423828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.444829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.447296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.449796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.454255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.461994] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.486171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.489360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.493749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.541483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.552752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.556666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.574837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.578948] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.581107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.677588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.681754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.688507] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.691101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.696822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.719197] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.723870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.725161] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.728864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.748808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.762996] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 337.768112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.768952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.777225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.781794] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 337.793832] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 337.800838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.811611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.410612] Bluetooth: hci0: command tx timeout [ 339.474514] Bluetooth: hci2: command tx timeout [ 339.540779] Bluetooth: hci1: command tx timeout [ 339.602741] Bluetooth: hci4: command tx timeout [ 339.603701] Bluetooth: hci3: command tx timeout [ 339.859613] Bluetooth: hci5: command tx timeout [ 339.923539] Bluetooth: hci7: command tx timeout [ 339.988741] Bluetooth: hci6: command tx timeout [ 341.458572] Bluetooth: hci0: command tx timeout [ 341.522861] Bluetooth: hci2: command tx timeout [ 341.586475] Bluetooth: hci1: command tx timeout [ 341.650524] Bluetooth: hci4: command tx timeout [ 341.650717] Bluetooth: hci3: command tx timeout [ 341.906566] Bluetooth: hci5: command tx timeout [ 341.971519] Bluetooth: hci7: command tx timeout [ 342.034608] Bluetooth: hci6: command tx timeout [ 343.506446] Bluetooth: hci0: command tx timeout [ 343.570466] Bluetooth: hci2: command tx timeout [ 343.635500] Bluetooth: hci1: command tx timeout [ 343.698602] Bluetooth: hci4: command tx timeout [ 343.698677] Bluetooth: hci3: command tx timeout [ 343.954574] Bluetooth: hci5: command tx timeout [ 344.018551] Bluetooth: hci7: command tx timeout [ 344.082576] Bluetooth: hci6: command tx timeout [ 345.556411] Bluetooth: hci0: command tx timeout [ 345.618574] Bluetooth: hci2: command tx timeout [ 345.682586] Bluetooth: hci1: command tx timeout [ 345.746517] Bluetooth: hci3: command tx timeout [ 345.746630] Bluetooth: hci4: command tx timeout [ 346.003590] Bluetooth: hci5: command tx timeout [ 346.068403] Bluetooth: hci7: command tx timeout [ 346.131195] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 07:11:53 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff8683ab6a RDX=1ffff11006749ea0 RSI=1ffff11006749ea2 RDI=1ffff11006749ea2 RBP=ffff888033a4f510 RSP=ffff888033a4f448 R8 =ffffffff8683ab6e R9 =ffff888033a4f4f8 R10=000000000003ab7c R11=0000000000021189 R12=ffff888033a4f518 R13=ffff888033a4f500 R14=ffff888033a4ff30 R15=ffff888033a4f4b8 RIP=ffffffff81349933 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fda843be540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fda845a9620 CR3=0000000033430000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=1ffff1100d9e132a RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff85c18d00 RDI=ffff8880167d4242 RBP=ffff8880167d4220 RSP=ffff88806cf09940 R8 =0000000000000001 R9 =ffff8880167d41c8 R10=ffffffff864057d7 R11=0000000000000000 R12=ffffffff85c18d00 R13=ffffffff81722886 R14=0000000000000003 R15=ffff8880167d3780 RIP=ffffffff81502612 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f742147f000 CR3=0000000031142000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000