Warning: Permanently added '[localhost]:50726' (ECDSA) to the list of known hosts. 2025/06/01 17:50:45 fuzzer started 2025/06/01 17:50:45 dialing manager at localhost:34361 syzkaller login: [ 105.072088] cgroup: Unknown subsys name 'net' [ 105.214155] cgroup: Unknown subsys name 'cpuset' [ 105.255688] cgroup: Unknown subsys name 'rlimit' 2025/06/01 17:51:01 syscalls: 210 2025/06/01 17:51:01 code coverage: enabled 2025/06/01 17:51:01 comparison tracing: enabled 2025/06/01 17:51:01 extra coverage: enabled 2025/06/01 17:51:01 setuid sandbox: enabled 2025/06/01 17:51:01 namespace sandbox: enabled 2025/06/01 17:51:01 Android sandbox: enabled 2025/06/01 17:51:01 fault injection: enabled 2025/06/01 17:51:01 leak checking: enabled 2025/06/01 17:51:01 net packet injection: enabled 2025/06/01 17:51:01 net device setup: enabled 2025/06/01 17:51:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 17:51:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 17:51:01 USB emulation: enabled 2025/06/01 17:51:01 hci packet injection: enabled 2025/06/01 17:51:01 wifi device emulation: enabled 2025/06/01 17:51:01 802.15.4 emulation: enabled 2025/06/01 17:51:01 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 17:51:02 starting 8 fuzzer processes 17:51:02 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x101) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x9, 0x40800) write$P9_RLOCK(r3, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x2}, 0x8) r4 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "03efd470b0966e65ebbb6ea2e056d118eccb39897a0a1d4d42c63badcc522783c32896520e93780a5ab2b124367989f80362795af5e2e3aff69ce80542ba64fb", 0x1c}, 0x48, r1) keyctl$link(0x8, r4, r1) exit_group(0x6) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000002c0)=""/51) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) r6 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x2, 0x4100c2) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xfff9, r5, &(0x7f0000000340)="64dfa814b702d05a4408b1ecdda984d95c5cbb718016dde135f9bb6066bf224586d781109fc537ffeed71828864e72bb34524869ad7072ba0a516a5e5e81c1936c8d018df5d5d6fb5043ab91a90bbfc2895071ebb459ea8353e27dd0e648fea9", 0x60, 0x7, 0x0, 0x2, r6}, &(0x7f0000000440)) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000480)=0x2) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f00000004c0)) ioctl$sock_ifreq(0xffffffffffffffff, 0x8930, &(0x7f0000000500)={'tunl0\x00', @ifru_flags}) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "2fcac37704ba58d21213e96ec51a0f9926f69ede950a2572b505301aff23f15e7b025a77908be28372d650fc4d991d14b3283b3e07139c3f8a5a19b754bcb38e", 0x38}, 0x48, r4) ioctl$TUNSETLINK(r2, 0x400454cd, 0xfffe) exit_group(0x9) write$P9_RLINK(r3, &(0x7f0000000640)={0x7, 0x47, 0x1}, 0x7) 17:51:02 executing program 1: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) shmget(0x3, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) move_pages(0x0, 0x6, &(0x7f0000000000)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040)=[0x2, 0x1f, 0x58, 0x1, 0x20], &(0x7f0000000080)=[0x0], 0x2) r0 = syz_io_uring_setup(0x466c, &(0x7f00000000c0)={0x0, 0xfd01, 0x0, 0x2, 0x162}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x65) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') syz_io_uring_setup(0x60fc, &(0x7f0000000200)={0x0, 0x5407, 0x2, 0x2, 0x1a, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) io_setup(0x5, &(0x7f0000000300)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='cmdline\x00') r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) io_cancel(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x1f, r3, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x1, r4}, &(0x7f0000000440)) kexec_load(0x5, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000480), 0x0, 0x8}, {&(0x7f00000004c0)="10da42be8120e8a3310e7f3299cfbc3f241d17895144ceb38d264595ff527d42db537bb7501d35c014d4985f9c366ab1491cd99a563fd232d4278512a496654c7fc380230b5cf7640b", 0x49, 0x7, 0x1}, {&(0x7f0000000540)="cb85582bb5e0fdddb719d10169d7e1f3a57dfb7a29d115db41fd6ba43cf21fd73b3925ad1a6f7d3cf89b35a182811730d000154b8279936310169ff53aa3cda0c15e781bebbe2c9c475323f5d154c2a948eb8d9c89a9308e", 0x58, 0x3, 0x500000000000}], 0x140000) io_setup(0x8, &(0x7f0000000640)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$vcsa(&(0x7f00000006c0), 0xd0f, 0x30800) io_submit(r5, 0x1, &(0x7f0000000740)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0xba5a, r6, &(0x7f0000000680)="53e3bcd909b09baae44e4781ce0fbc8eac9c6359763077418adf1ed40b842d9d4f896876523997ea0dc52988a825abc74595111902e837", 0x37, 0x8, 0x0, 0x1, r7}]) 17:51:02 executing program 2: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)=@keyring) r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "84f9c8e67998b465af8615fe9c2b350f4edce7a9a567dc7fc7ba3fe956a62c7b6d386484fa45117b22c1451d82c8961c50e55db1abdf93fed4e8a56eb8530e9d", 0x2e}, 0x48, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) socket$inet6(0xa, 0x80000, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/209) getgroups(0x4, &(0x7f0000000280)=[0x0, 0xee00, 0x0, 0xffffffffffffffff]) getgroups(0x3, &(0x7f0000000440)=[0xee00, 0x0, 0x0]) setresgid(r2, r5, 0x0) getgroups(0x7, &(0x7f0000000480)=[r5, 0x0, 0xee01, r1, r2, r1, r1]) getgroups(0x2, &(0x7f00000004c0)=[r5, r1]) getgroups(0x8, &(0x7f0000000500)=[r4, r6, r6, r1, r8, r9, r1, r2]) getgroups(0x4, &(0x7f0000000540)=[r10, r2, r3, 0xee01]) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000580)={r0, 0x57, 0x6b}, &(0x7f00000005c0)={'enc=', 'raw', ' hash=', {'wp256\x00'}}, &(0x7f0000000640)="8a8fbc9262ce069f34a412c12acf8d131aa285ce517a41e3ee10370c3ab615cd2571858d431623d94f5931837b364d1d778a6f334ca1f6beb70efb9e229e2bbfa16ad19b39932b8a728b8017a7c43cac9ef828c536b5e3", &(0x7f00000006c0)=""/107) getgroups(0x2, &(0x7f00000008c0)=[r4, r2]) getgroups(0x5, &(0x7f0000000900)=[r13, r2, 0xffffffffffffffff, r7, r1]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000940)={0x73622a85, 0x7}) r14 = add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x36, 0x63, 0x36, 0x61, 0x61, 0x52, 0x64, 0x5a, 0x31, 0x35, 0x65, 0x64, 0x8, 0x30, 0x38, 0x65]}, &(0x7f0000000a00)={0x0, "35fdf6495a46be7ba2a01b1c7dfc45a1c60d9148b323a82916e0b5494db1edbe44975051b0a1149dcfaf97acf1aee213526b225e49011ec2da5030f66e47043a", 0x21}, 0x48, 0x0) keyctl$instantiate_iov(0x14, r14, &(0x7f0000000b40)=[{&(0x7f0000000a80)="ee2aa9b62be7d5a3602704cd2717c2282a2a1d7bb1ef842d5ecd22b2230b64f87dd262ae1b33820799c6fe38ce6482d712ff624c5b6d674b197b5675bd694fb8bc59e2a0ba071390cc8623fcf46728bda7038fac1163074eb9dcbec86f737ff35cc928e207ab8b270e29bbb4b47c101d4118fe93940bfbf64dfd14ed16d7f4637878875611988fd9f4fa8a4c23f09c0eabaac1013c9a190c", 0x98}], 0x1, r0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) getgroups(0x4, &(0x7f0000000bc0)=[r10, r11, 0x0, r12]) [ 122.144539] audit: type=1400 audit(1748800262.946:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:51:02 executing program 3: getitimer(0x1, &(0x7f0000000000)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x23f, 0x200, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)="159a906fc0d8a8e238de25c822fbdc4bce561d33a53fe434cbfb026c4b3747e94f612a", 0x23}, 0x68) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) exit(0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) getitimer(0x1, &(0x7f0000000180)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x15, &(0x7f00000001c0)="aafb2de6a6a43ab763ad44157c2950b77247dee320"}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/nf_conntrack_expect\x00') ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000280)=0x3) r2 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x214000) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000300)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x2000)=nil) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x800, 0x10000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) getsockname(r2, &(0x7f0000000a00)=@can={0x1d, 0x0}, &(0x7f0000000a80)=0x80) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000ac0)=r4) 17:51:02 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1ff, 0x2c8303) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x40000010}, r0, 0x3, 0x0, 0x1}, 0x6) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000100)=0x9) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)="23e7bb7dad072445900235a2e39136c78fb655d11e85f5ab4f9d1a1a2117b26d891eb3873ae60f74aee46c4e99da869d650798408e673ff22d55274d11df02f062bf1016b81dd21f51074d0194b3bdc9622c45dbc19d3c831e9ceecc1ae58241598b09f3eaa1b62d2f2fd73c7e638e5ad4fa29ded009bdf25d", 0x79, r1}, 0x68) clock_gettime(0x7, &(0x7f0000000280)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x101200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000300)={0x1, 0x2, 0x8, 0x2, 0x8}) r3 = geteuid() write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x808, {0x40}, 0x80, r3, 0xee00, 0x80, 0x0, 0x6, 0x4, 0xffff, 0x2, 0x7, 0x6, 0x47, 0x3, 0x2, 0x4c, 0xecf4, 0x3ff, 0x3}}, 0xa0) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000004c0)={0x29, 0x37, 0x2, {0x1, 0x2d7, 0x7f, 0xffffffffffffffff, 0xb, '/dev/vcsa#\x00'}}, 0x29) geteuid() ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000500)={{0x1, 0x3, 0x81, 0x0, 0xfffffeff}, 0x3, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x6}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='autogroup\x00') write$tun(r5, &(0x7f0000000640)={@void, @val={0x1, 0x3, 0xfffb, 0x1, 0x1ff, 0x9b16}, @llc={@snap={0xab, 0xa9, '6', "d4257e", 0x88b5, "146263cc7a1a3565739eca4e198976cf8c31280a7b3b91dba09d7f2d6c0465e36e674d639f947a3b87fadf5a26f2d2b81c718257354591066cd42d80d6c591e861dc551d0d6ce76bbad102e2ed1f19a159ddc335ede322b72f272a66d3d0f60a5bcd"}}}, 0x74) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000980)={&(0x7f00000006c0), 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x218, 0x12, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x40, 0x5, 0x5, {0x4e21, 0x4e22, [0x7, 0x1, 0x6, 0x4], [0x2, 0x40, 0x8, 0x3], 0x0, [0x0, 0x7ff]}, 0x5, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "c97740f8d2c5cd3262d84d96d4760985844ff1bdc413088b0e43"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "48b7e28857698d4671e73ef971eef5fe23efa3c4b3f3a91a9f761058ef9105ceeba9e40b16d7f2d64c58ab564e75bab6fdf8049d13bec05b8459a066856b692d7acf356c626ad8519b9cf27f350fe5c2cb18705f899192e235461dedb34efb98ae5687965562c3774fa1d55bc3ec625fe9f3c52a465d3081eec8171be669fd7e2d3267bf97b0ac2c3475c6cb12ec96bd69f0232b935cd9834f505e6f522bb0081faff9cea7ef161e59970df5161a3845fd8380b91dadda17f9b8e839527a1436399352f13621325ecf48989b70d3312154c4b3994820f6209395"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "0597bdbf016fe4568f9bfe06ee0fb5e6d62c2fb724a17e1450f09c6bb6e3bb7d0b75a3c87a5ef685c87d4397de4714172dbfb85fda30d5daaef13ad5bdbd8812c28bdc9359aee16dd0276fe8dca998c7a1236828b9b260f97547595be4aec0326b3450a567e8e33f4db7f83565e780cc90464950a2c7dd771be9b67cf5059b16ead693acf16432306262b2215396bc63e612f51b1190e9bd56aac7c72e7b08d4e141280abc4cc904ae6f9edcaccfcad9d44a3fd4a7036a7d2f1763e5e4b44673819ede074e4b8b"}]}, 0x218}, 0x1, 0x0, 0x0, 0x400800c}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000b40)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/145, 0x91, 0x0, &(0x7f0000000a80)=""/133, 0x85}, &(0x7f0000000b80)=0x40) 17:51:03 executing program 5: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_io_uring_setup(0x6d8e, &(0x7f0000000080)={0x0, 0x8b56, 0x20, 0x2, 0x36f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x6f06, &(0x7f0000000180)={0x0, 0x6caf, 0x31, 0x1, 0x3a3, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x7, 0x64, 0x37, 0x30, 0x62, 0x32, 0x39, 0x64, 0x65, 0x37, 0x32, 0x61, 0x30, 0x51, 0x37, 0x313655d9d74fb76d]}, &(0x7f0000000300)={0x0, "98654f45d25ea238a2de19f2d3109d2ed018cea37fa449d80c6adfa5b33e8387ecc7a6c3b8a1fa1460b3d87126c309e8740e08f7830790d6bb6c737b340627b5", 0x17}, 0x48, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r2, 0xab, 0xb8}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'hmac(sha1)\x00'}}, &(0x7f0000000440)="7123f67aeb904030f4c1a7777a2b8190acf9de3f70fbcb599321fc9257439e4c04e2f730b0062774efefded820c119dfa0932acf526eed90f55acc7693c0ee04f67d328290210c91b19f593c941ca141fdbacc8911efee78dfdc38bbbd36440100aec483dda164e3bc340dc4b5cd29cdc7a9fd6113cc28543cdcc75255f02f862e10d4809244a68a1d08abd692a47a2a293c69acb5bc69050b70f8123777be94f60493dcca861aaf3c83ce", &(0x7f0000000500)="4f3181dadae89b2cfcb6ca3ae69c3d20d30926e8c4be49f153a4c0366619ac25f51fb15ad4e174af70fef9581ce425d10704c12428fe7b38a485fb4607c6708e639d77ddcb866996b308190faef1b7fc7ee422b7c1e801a3c9b7ee584f60b11d5fbd61be15d25b34c00606bf9bd69bffafb24efece552b640d809ea704d696e233c2ce33411b7b270e774a297e5432b2ac173397047680e94be2cd3254e295df61ce79a2e81377b2426e42fe0c65f18466740a7def666856") r3 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc1}, &(0x7f0000000640)={0x0, "5eff82f20d0ce6d3895d295c8e927abe688619a0b5cf7c93de6cdb2395c10baa481b573591c5ccdf6391d86b1d1d6c08375ae1c8872ddf71f6aae60abffd1cfd", 0x2c}, 0x48, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) keyctl$update(0x2, r2, &(0x7f00000007c0)="f0d1b89c9eb18c251653f2a4c1ccbdf9605781df7e043fb705b4226720a07e5ef4c4159fb78600d0b3bc1140f8880627f3e0556738cacc9ebb859ab747f3ce665e8e3cf9c31301d7407bee6ef5f4adb0fc5a9e72097e3ba6bd50814ec4ce4752bb76a8aca5e44b8707550f79295252be1c81298bd3f16f1dd4a4b7", 0x7b) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "bd606133afbc9588b9ea6c9fb4155fa002ae95b4254dee60cb2ecdffb32af1532be100684e5ee0e61748906a98d4ea0ea525e2173bfabbb17125e26d21614ba4", 0x2f}, 0x48, r4) exit(0xffff) keyctl$reject(0x13, r5, 0x8173, 0xff, r0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r2) r6 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$invalidate(0x15, r6) keyctl$link(0x8, r6, r0) r7 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r7, 0x0) 17:51:03 executing program 6: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$link(0x8, r2, r2) keyctl$update(0x2, 0x0, &(0x7f0000000180)="c0f308a7e946bf159d49fa49f6b3f5a78214935d712341d5b8c92d1aaf25f5c6e01fdcf1cbb1a70f5730a7b0e3dce4842b263d9204afd8d09003fc75a85f9173b778fba74f9eb8b64461e69d6f475bc74c0634f276f5c99ec60fec39cea9b0b7ae2ad4e6c20b2bb4e2994c153110d779a5434e4f7db63348c4d22d8ef4f51aaa09261a87d66e0259bf8da874e603bdccd9301fb3d673bae393c5f4772dabc2c3e278cb84afc95c1863b54647fd8cc8fba41c886a6ea08cb62d06b80f3369b78a27181891cce4be129b047aac13b93ed6b9f15e4b36853824856dc388b44997304406e5d330ac30fb05dd1e82bb46198ac4b162ca8e412dbe", 0xf8) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x1) r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000280)) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000002c0)=0x5) r4 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "82a0f4751a24cfb002a62cee54fa8ef7dd8b2d9c1ba759d353439484c90052bcba3ee5e4d459d44b35109e36fcd3b4b9f34f3b69bc13c7d6332d690902c71103", 0x2d}, 0x48, r2) keyctl$instantiate(0xc, r4, &(0x7f0000000400)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 'keyring\x00', 0x20, 0x2, 0x20, [0x63, 0xcf, 0x64, 0x32, 0x33, 0x33]}, 0x3a, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r5, 0x0) io_pgetevents(0x0, 0x2, 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}], &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0x7]}, 0x8}) r6 = getpid() ptrace$getsig(0x4202, r6, 0x401, &(0x7f0000000600)) r7 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "40e5f90615b27f672f6aa3da08cf74b149130c79d628d7e3477a9500bf544e0d91e638aa4d1b133d1d1159dad03e6230d7c2c177cb87a006d9827bd4a8613c84", 0x3b}, 0x48, r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000780)={r7, 0x95, 0x36}, &(0x7f00000007c0)={'enc=', 'raw', ' hash=', {'tgr192-generic\x00'}}, &(0x7f0000000840)="305a95eaf27a36ce87acac8dfde87fa06147192ff78df2228064aae3cfc44795dd90f1e481efcecfee561d6cf5bd473f18ac091f2e8df8743951c21596c34c68b88eb8dc8e31c9476bb08c5038d185e91c1d10086b8a8391c098aa8822884c404a70b2abf0d1d6354d274a1da8b61000c11f61191b2df43aa5d9b367d453f79cac74d0e9cdd2ee16a065ed8b0a4eb5a688b05eac87", &(0x7f0000000900)="5352150b3546b2b822d2aa011b29a4bd197b92faea326d7002101efa938d7a275976c6ebd3c51b6ba917b69347a62da2a85f42ff0f4c") write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000940)={0xb, 0x77, 0x1, 0x6}, 0xb) 17:51:03 executing program 7: munlockall() munlockall() write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x80, 0x1, 0x6}}, 0x14) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RREAD(r0, &(0x7f0000000080)={0x63, 0x75, 0x2, {0x58, "7f7e16ac15215218203098d36b36a85deb8516a5a8eba2dab6b949c6b0736f38448ab2a67909f6d284543174bd50a8520936733897527b08053e77f9441bbfbe7c9977aa16001ca227f8b1ff4f7dbd57ba697bacc23fc315"}}, 0x63) socketpair(0x5, 0xa, 0xb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x44040) write$P9_ROPEN(r0, &(0x7f0000000240)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x3}, 0xffff0001}}, 0x18) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) write$P9_RREAD(r0, &(0x7f0000000300)={0xd2, 0x75, 0x2, {0xc7, "84259b57ad4c4c4c8cb4138cddea2dcf807e7bd16fffbd6fb0669a30d7ee188efc6e69cbc0e59bb06cb0b99af9649a0a4a20bc5cb316ef0f54530efca416e3b92ad0aeed3995057a8637ee03f09659e229827e52974e5b3edf7649095b3b451dc31e1950f1f0b45b71db291657cf4cee06f664e94e21a08fd1b0c1ee5039d9ea46862b3ff5441148639775da76afaa5a38c9750e7ab9588d1e03fe48cded894fab1e73d727ee03fc1e15f41de353f19177760e349dc3264b11e19fa99d3ca30fcac578dc0a2919"}}, 0xd2) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @void, @x25={0x3, 0x5, 0xec, "d55ddcb1ee665750c20d7163b47c1adc4c81ea1e7060e13ac06c3577cb66d1f23bdd150ceec34c23f5ba1fd6da1a797312dcfcfdc68b8cee0a94846abb05224ec20f7850700663f672c85936b8f4c9fc8fa69d48ab3a8beee87b6a0ea82ea94acab3bd5d8df61e7d8d5d3ef4b7ecbc28981246f6f1cfbf437226a5c0402b99c291d9d35c6368675a2fab6e9bb89ffd45ed6451990bad72c92ab26077406f5295781709b87aa95fcd0a2c76a3cf7226a4ac5ab68791a0e0"}}, 0xba) write$P9_RREADDIR(r0, &(0x7f00000004c0)={0x49, 0x29, 0x2, {0x5, [{{0x1, 0x2, 0x7}, 0x2, 0x9, 0x7, './file0'}, {{0x80, 0x0, 0x6}, 0xffff, 0xfe, 0x7, './file0'}]}}, 0x49) r4 = syz_open_dev$vcsa(&(0x7f0000000540), 0x2, 0x30180) write$P9_RWRITE(r4, &(0x7f0000000580)={0xb, 0x77, 0x2, 0x400}, 0xb) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd=r2, 0x7, 0x0, 0x0, 0x9, 0x1, {0x3}}, 0x70d) write$P9_RWRITE(r4, &(0x7f0000000600)={0xb, 0x77, 0x2, 0x4}, 0xb) pipe2$9p(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) getgroups(0x2, &(0x7f0000000680)=[0xee00, 0xee01]) write$P9_RGETATTR(r5, &(0x7f00000006c0)={0xa0, 0x19, 0x2, {0x80, {0x10, 0x1, 0x4}, 0x40, 0xffffffffffffffff, r6, 0x1, 0x9, 0x7fffffff, 0x100000000, 0x0, 0xffffffff, 0x2, 0x10000, 0x8, 0x6, 0x6826, 0x1, 0x1f, 0x1000, 0x1}}, 0xa0) [ 123.354603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.357411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.360558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.364962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.367687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.553274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 123.563736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 123.565727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 123.569385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 123.571187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 123.576207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.581380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.588794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.604613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.615941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.618969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.651120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.658000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.665158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.670069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.728768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 123.732671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 123.737832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 123.749161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 123.770095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.799811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 123.828998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.836740] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 123.838194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.843930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 123.859057] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.860579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 123.893094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 123.903602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.910969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 123.914294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.933810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 123.960665] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.040027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.075663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 125.446046] Bluetooth: hci0: command tx timeout [ 125.637799] Bluetooth: hci1: command tx timeout [ 125.703885] Bluetooth: hci2: command tx timeout [ 125.766627] Bluetooth: hci3: command tx timeout [ 125.829591] Bluetooth: hci4: command tx timeout [ 125.957911] Bluetooth: hci6: command tx timeout [ 126.085590] Bluetooth: hci5: command tx timeout [ 126.149691] Bluetooth: hci7: command tx timeout [ 127.494622] Bluetooth: hci0: command tx timeout [ 127.685555] Bluetooth: hci1: command tx timeout [ 127.749653] Bluetooth: hci2: command tx timeout [ 127.813819] Bluetooth: hci3: command tx timeout [ 127.877957] Bluetooth: hci4: command tx timeout [ 128.005735] Bluetooth: hci6: command tx timeout [ 128.133850] Bluetooth: hci5: command tx timeout [ 128.199053] Bluetooth: hci7: command tx timeout [ 129.541601] Bluetooth: hci0: command tx timeout [ 129.733790] Bluetooth: hci1: command tx timeout [ 129.797798] Bluetooth: hci2: command tx timeout [ 129.861578] Bluetooth: hci3: command tx timeout [ 129.925641] Bluetooth: hci4: command tx timeout [ 130.053574] Bluetooth: hci6: command tx timeout [ 130.182580] Bluetooth: hci5: command tx timeout [ 130.246930] Bluetooth: hci7: command tx timeout [ 131.589576] Bluetooth: hci0: command tx timeout [ 131.781727] Bluetooth: hci1: command tx timeout [ 131.845727] Bluetooth: hci2: command tx timeout [ 131.910529] Bluetooth: hci3: command tx timeout [ 131.974855] Bluetooth: hci4: command tx timeout [ 132.102270] Bluetooth: hci6: command tx timeout [ 132.231608] Bluetooth: hci5: command tx timeout [ 132.293623] Bluetooth: hci7: command tx timeout [ 186.143089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.149786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.154941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.166355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.172099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.204609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.207822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.209206] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.216451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.221472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.265000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.269452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 186.274419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 186.293169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 186.297246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.400265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 186.402255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.407081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.420974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.424977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.431321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.445862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.447093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.452188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.467697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.527779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.536855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.538888] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.539603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 186.541948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 186.543403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.547865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 186.552402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.552681] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 186.561254] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 186.570796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 186.572287] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 186.584832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.585749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.598389] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.229874] Bluetooth: hci0: command tx timeout [ 188.294740] Bluetooth: hci1: command tx timeout [ 188.424065] Bluetooth: hci2: command tx timeout [ 188.549675] Bluetooth: hci3: command tx timeout [ 188.550355] Bluetooth: hci4: command tx timeout [ 188.677668] Bluetooth: hci5: command tx timeout [ 188.678409] Bluetooth: hci7: command tx timeout [ 188.678964] Bluetooth: hci6: command tx timeout [ 190.277579] Bluetooth: hci0: command tx timeout [ 190.341716] Bluetooth: hci1: command tx timeout [ 190.469702] Bluetooth: hci2: command tx timeout [ 190.598539] Bluetooth: hci3: command tx timeout [ 190.598757] Bluetooth: hci4: command tx timeout [ 190.725906] Bluetooth: hci5: command tx timeout [ 190.725969] Bluetooth: hci7: command tx timeout [ 190.727096] Bluetooth: hci6: command tx timeout [ 192.325619] Bluetooth: hci0: command tx timeout [ 192.389643] Bluetooth: hci1: command tx timeout [ 192.517574] Bluetooth: hci2: command tx timeout [ 192.645786] Bluetooth: hci4: command tx timeout [ 192.645813] Bluetooth: hci3: command tx timeout [ 192.773649] Bluetooth: hci6: command tx timeout [ 192.773690] Bluetooth: hci5: command tx timeout [ 192.774086] Bluetooth: hci7: command tx timeout [ 194.373778] Bluetooth: hci0: command tx timeout [ 194.437876] Bluetooth: hci1: command tx timeout [ 194.565737] Bluetooth: hci2: command tx timeout [ 194.693572] Bluetooth: hci3: command tx timeout [ 194.693608] Bluetooth: hci4: command tx timeout [ 194.821962] Bluetooth: hci7: command tx timeout [ 194.822421] Bluetooth: hci5: command tx timeout [ 194.822865] Bluetooth: hci6: command tx timeout [ 248.337224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.338698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.339774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.343296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.346733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.406556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.417532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.419644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.431380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.433938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.541895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.551158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.579563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.585776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.592177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.598875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.625746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.628964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.635093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.637391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.690470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.704541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.707279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.708677] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.711897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 248.727550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 248.732464] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.732528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 248.734028] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.742117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 248.757352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.766669] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.774961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.778409] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.780271] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.785004] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.786661] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.795031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.798092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.799976] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.373955] Bluetooth: hci0: command tx timeout [ 250.504454] Bluetooth: hci1: command tx timeout [ 250.695582] Bluetooth: hci2: command tx timeout [ 250.757582] Bluetooth: hci6: command tx timeout [ 250.758236] Bluetooth: hci3: command tx timeout [ 250.821596] Bluetooth: hci4: command tx timeout [ 250.885625] Bluetooth: hci5: command tx timeout [ 250.886333] Bluetooth: hci7: command tx timeout [ 252.421599] Bluetooth: hci0: command tx timeout [ 252.549795] Bluetooth: hci1: command tx timeout [ 252.741740] Bluetooth: hci2: command tx timeout [ 252.805670] Bluetooth: hci3: command tx timeout [ 252.806115] Bluetooth: hci6: command tx timeout [ 252.871575] Bluetooth: hci4: command tx timeout [ 252.933639] Bluetooth: hci7: command tx timeout [ 252.934080] Bluetooth: hci5: command tx timeout [ 254.470148] Bluetooth: hci0: command tx timeout [ 254.597666] Bluetooth: hci1: command tx timeout [ 254.789664] Bluetooth: hci2: command tx timeout [ 254.854048] Bluetooth: hci6: command tx timeout [ 254.855712] Bluetooth: hci3: command tx timeout [ 254.917948] Bluetooth: hci4: command tx timeout [ 254.983312] Bluetooth: hci7: command tx timeout [ 254.984791] Bluetooth: hci5: command tx timeout [ 256.517871] Bluetooth: hci0: command tx timeout [ 256.647364] Bluetooth: hci1: command tx timeout [ 256.837840] Bluetooth: hci2: command tx timeout [ 256.901785] Bluetooth: hci3: command tx timeout [ 256.902291] Bluetooth: hci6: command tx timeout [ 256.965584] Bluetooth: hci4: command tx timeout [ 257.029831] Bluetooth: hci5: command tx timeout [ 257.030347] Bluetooth: hci7: command tx timeout [ 310.619869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.628196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.633345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.640733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.648001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.746908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.752016] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.754430] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.761155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.765237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.895395] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.902195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.914205] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.920624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.934665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.936243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.938618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.942128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.950281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.956989] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.967108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.968185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.972798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.976221] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.980826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.027361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.033100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.036359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.050680] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.055826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.062151] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.065120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.066839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.069805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.084349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.192671] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.207218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.246893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.277122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.315244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 312.711076] Bluetooth: hci0: command tx timeout [ 312.839580] Bluetooth: hci1: command tx timeout [ 313.031651] Bluetooth: hci2: command tx timeout [ 313.093908] Bluetooth: hci3: command tx timeout [ 313.095300] Bluetooth: hci4: command tx timeout [ 313.158651] Bluetooth: hci6: command tx timeout [ 313.160129] Bluetooth: hci5: command tx timeout [ 313.414621] Bluetooth: hci7: command tx timeout [ 314.758614] Bluetooth: hci0: command tx timeout [ 314.886672] Bluetooth: hci1: command tx timeout [ 315.078766] Bluetooth: hci2: command tx timeout [ 315.142777] Bluetooth: hci4: command tx timeout [ 315.143245] Bluetooth: hci3: command tx timeout [ 315.206888] Bluetooth: hci5: command tx timeout [ 315.207344] Bluetooth: hci6: command tx timeout [ 315.461619] Bluetooth: hci7: command tx timeout [ 316.808544] Bluetooth: hci0: command tx timeout [ 316.934605] Bluetooth: hci1: command tx timeout [ 317.126657] Bluetooth: hci2: command tx timeout [ 317.189629] Bluetooth: hci4: command tx timeout [ 317.190090] Bluetooth: hci3: command tx timeout [ 317.254815] Bluetooth: hci5: command tx timeout [ 317.255288] Bluetooth: hci6: command tx timeout [ 317.510590] Bluetooth: hci7: command tx timeout [ 318.853557] Bluetooth: hci0: command tx timeout [ 318.982769] Bluetooth: hci1: command tx timeout [ 319.173751] Bluetooth: hci2: command tx timeout [ 319.238630] Bluetooth: hci4: command tx timeout [ 319.239111] Bluetooth: hci3: command tx timeout [ 319.301710] Bluetooth: hci6: command tx timeout [ 319.302188] Bluetooth: hci5: command tx timeout [ 319.559575] Bluetooth: hci7: command tx timeout [ 373.020444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.028701] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.033715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.042069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.047212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.342475] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.350129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.353207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.365217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.368900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.422156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.428424] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.442370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.463993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.471267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.554185] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 373.557070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.567082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.578781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 373.581413] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 373.584951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.601269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.612603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.644089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 373.708761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.753594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.756805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 373.761833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.769146] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 373.774219] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 373.777098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.788671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 373.808364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 373.814768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.822024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 373.847042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 373.862464] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.871407] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 373.872322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 373.886420] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.110641] Bluetooth: hci0: command tx timeout [ 375.430369] Bluetooth: hci1: command tx timeout [ 375.558954] Bluetooth: hci2: command tx timeout [ 375.813721] Bluetooth: hci3: command tx timeout [ 375.815078] Bluetooth: hci4: command tx timeout [ 375.942051] Bluetooth: hci5: command tx timeout [ 376.006466] Bluetooth: hci6: command tx timeout [ 376.009439] Bluetooth: hci7: command tx timeout [ 377.157707] Bluetooth: hci0: command tx timeout [ 377.477797] Bluetooth: hci1: command tx timeout [ 377.605596] Bluetooth: hci2: command tx timeout [ 377.861694] Bluetooth: hci4: command tx timeout [ 377.862216] Bluetooth: hci3: command tx timeout [ 377.989646] Bluetooth: hci5: command tx timeout [ 378.053615] Bluetooth: hci6: command tx timeout [ 378.054071] Bluetooth: hci7: command tx timeout [ 379.206520] Bluetooth: hci0: command tx timeout [ 379.526668] Bluetooth: hci1: command tx timeout [ 379.654901] Bluetooth: hci2: command tx timeout [ 379.909803] Bluetooth: hci3: command tx timeout [ 379.910298] Bluetooth: hci4: command tx timeout [ 380.037964] Bluetooth: hci5: command tx timeout [ 380.101918] Bluetooth: hci6: command tx timeout [ 380.102374] Bluetooth: hci7: command tx timeout [ 381.253629] Bluetooth: hci0: command tx timeout [ 381.573571] Bluetooth: hci1: command tx timeout [ 381.701616] Bluetooth: hci2: command tx timeout [ 381.958538] Bluetooth: hci4: command tx timeout [ 381.959033] Bluetooth: hci3: command tx timeout [ 382.086563] Bluetooth: hci5: command tx timeout [ 382.149608] Bluetooth: hci6: command tx timeout [ 382.150065] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:56:04 Registers: info registers vcpu 0 RAX=0000011496273990 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000114 RSI=ffff88806ce238c0 RDI=000000000004a3e1 RBP=ffff88806ce238c0 RSP=ffff88802819fe20 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000d4851 R11=0000000000000001 R12=000000000004a3e1 R13=0000000000000000 R14=0000000000000000 R15=ffff88806ce28080 RIP=ffffffff813276b5 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feded85c540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fededd35000 CR3=000000000e11a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00 XMM02=315f315f4c53534e45504f00315f315f XMM03=00000000000000000000000000766e65 XMM04=6c665f7465735f5854435f43414d4800 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800e579b80 RCX=ffffffff812c7dae RDX=ffff88800e579b80 RSI=ffffffff812c7dc4 RDI=0000000000000005 RBP=ffff88800e579b80 RSP=ffff8880289f7ed8 R8 =0000000000000000 R9 =fffffbfff0c83f6a R10=0000000000000000 R11=0000000000000001 R12=ffff88800e57b240 R13=0000556de3d8dc70 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812c7dc4 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1706a6f540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556de3d8dc70 CR3=0000000031946000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00ffffffffffffffffffffff0000ff XMM02=00666e6f6373797300657a696c616e69 XMM03=00000000000000000000000000616e69 XMM04=68637300666e6f6373797300657a696c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000