Warning: Permanently added '[localhost]:9678' (ECDSA) to the list of known hosts. 2025/06/25 13:51:08 fuzzer started 2025/06/25 13:51:08 dialing manager at localhost:42423 syzkaller login: [ 109.661768] cgroup: Unknown subsys name 'net' [ 109.807885] cgroup: Unknown subsys name 'cpuset' [ 109.843120] cgroup: Unknown subsys name 'rlimit' 2025/06/25 13:51:27 syscalls: 204 2025/06/25 13:51:27 code coverage: enabled 2025/06/25 13:51:27 comparison tracing: enabled 2025/06/25 13:51:27 extra coverage: enabled 2025/06/25 13:51:27 setuid sandbox: enabled 2025/06/25 13:51:27 namespace sandbox: enabled 2025/06/25 13:51:27 Android sandbox: enabled 2025/06/25 13:51:27 fault injection: enabled 2025/06/25 13:51:27 leak checking: enabled 2025/06/25 13:51:27 net packet injection: enabled 2025/06/25 13:51:27 net device setup: enabled 2025/06/25 13:51:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 13:51:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 13:51:27 USB emulation: enabled 2025/06/25 13:51:27 hci packet injection: enabled 2025/06/25 13:51:27 wifi device emulation: enabled 2025/06/25 13:51:27 802.15.4 emulation: enabled 2025/06/25 13:51:27 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 13:51:29 starting 8 fuzzer processes 13:51:29 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x95}}, './file0\x00'}) read$rfkill(r0, &(0x7f0000000040), 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@private=0xa010102, @in=@private=0xa010102, 0x4e23, 0xe8, 0x4e21, 0x0, 0x2, 0xa0, 0xa0, 0x2f, r1, 0xffffffffffffffff}, {0x1f, 0x10000, 0x2, 0x8c, 0x8, 0x8001, 0x33d, 0x9}, {0xfff, 0x8, 0x6, 0x8}, 0x3, 0x6e6bb5, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3504, 0x4, 0x3, 0x7f, 0x8, 0x20, 0x1}}, 0xe8) r3 = syz_io_uring_complete(0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x2e, r1, r2}, {0xfffc000000000000, 0x1000, 0x80000001, 0x5, 0xfffffffffffff000, 0x80, 0xb8, 0x8}, {0x7ff, 0xffff, 0x0, 0x20}, 0x2, 0x6e6bbf, 0x0, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x4d5, 0x2b}, 0xa, @in=@multicast1, 0x3503, 0x1, 0x3, 0x1, 0xfffffff9, 0x6, 0x9}}, 0xe8) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@rand_addr=0x64010102, @rand_addr=0x64010100, r1}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x400901, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x1) syz_open_dev$loop(&(0x7f00000004c0), 0x5, 0x0) r6 = socket$inet(0x2, 0x1, 0x8000) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in=@private=0xa010101, @in=@private=0xa010102, 0x4e22, 0x1, 0x4e22, 0x81, 0xa, 0x80, 0x80, 0x88, r1, r2}, {0x5, 0x40, 0x401, 0x3, 0x4, 0x6, 0x7, 0xff}, {0x7ff, 0x5ad7, 0x3, 0x9}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x3, 0x1, 0x1, 0x8, 0x4667, 0x9}}, 0xe8) fsetxattr$security_selinux(r0, &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x29, 0x3, 0x1f, 0x0, 0x8, @mcast2, @private0, 0x40, 0x8, 0x8000, 0x1000}}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, r7}, 0xc) 13:51:29 executing program 1: clock_getres(0x8, &(0x7f0000000000)) clock_getres(0x0, &(0x7f0000000040)) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x4146, &(0x7f0000000080)={0x0, 0x7f4d, 0x1, 0x1, 0x328}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x50}}, 0x7) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffff001}}, './file0\x00'}) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000200)=@gcm_256={{0x303}, "c6f32f8f81761e8e", "f31358e4148c15b95026c0639527cb6dac1998197a16fd69b272d278bf46a4eb", "8c55f62f", "5b9cc47abe58d967"}, 0x38) r4 = io_uring_setup(0xda6, &(0x7f0000000240)={0x0, 0x89a5, 0x1, 0x2, 0x1d9, 0x0, r3}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, r4, 0x10000000) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000002c0)={{0x2b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'lblcr\x00', 0x2, 0x100, 0x12}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e24, 0x3, 0x1, 0x1, 0x80000000}}, 0x44) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/pid_for_children\x00') ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x6) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000380)) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000003c0)={'nat\x00', 0x0, [0x8, 0x39, 0x80000000, 0x4, 0x5]}, &(0x7f0000000440)=0x54) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x0, 0x37, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x20, 0x5, 0xfffffffd}}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000540)={@rand_addr=0x64010100, @multicast2, r7}, 0xc) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) syz_io_uring_submit(r8, r5, &(0x7f0000000600)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f00000005c0)={r9, r10+60000000}, 0x1, 0x1}, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000640)) 13:51:29 executing program 2: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x13, 0x4, 0x70bd29, 0x25dfdbfe, {0x9, 0x8, 0x1, 0x0, {0x4e22, 0x4e21, [0x5, 0x9, 0xfffff000], [0x6, 0x6, 0x0, 0x1ff], 0x0, [0x30, 0xffff]}, 0x5, 0x5ac8f5ed}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "c5333968b82b2fbd87292a5d00a8cca5d9f490e3cd863b04bbdf5d05fc7539c74b1c7479574a871406b1e87785cf2c7ed9e5a33c708249743314b8ef46606b0db00c54396c1318cedbc9e9b6c1f6f84a07202c967d87a5fe3d81680e5941b765b566eb90ccfa"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0xe) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1a4, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb850}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4672}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x871e4f4cbeced760}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8de0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf1e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xc}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x30}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x57}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}]}, 0x1a4}}, 0x4000001) r2 = getgid() r3 = syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000000600)="adfe89f4b9c90b1f53e4e3e44cfd46e5ccc0249a8400e22e26ae28bf4a0eba7507", 0x21, 0x4}, {&(0x7f0000000640)="c34d7a003a0c805ab1fc1ea683f51fd9c97dd0d9f9885fe674de30068fda0c114380bfc212b12faf10ff82f623f76eeaef5725c46dd3b2e1a37cbea1d22a7c02168f35405ad5090397f3d7f1584ea2e8228c2afe87ebe0400a1e63c80d8ab3695653311500d50f60ce3faba0636d4746ba41e5e1533f602e1b51da85125bcb542953dd7454c04c348dd074684946026c0516b65576bfa6d77fb68d3568cd873261c8b5260ebcaff921863faf7af419a7bfee04258e4987599d33bedb62ed26cc4aec528cd8bc10fd5cd0e55453c94d9c527e33b95f9c1cb53853afad1ddaa52e76ffda9331440ee28435", 0xea, 0x6}, {&(0x7f0000000740)="7a08c4ae5e16c89d87bbe20c8bbef3e167", 0x11, 0x7}], 0x2010002, &(0x7f00000008c0)={[{@uid={'uid', 0x3d, 0xee00}}, {@huge_within_size}, {@gid={'gid', 0x3d, r2}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x4}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x35, 0x0, 0x6b, 0x25, 0x74]}}], [{@obj_role={'obj_role', 0x3d, '-@#\xac{$^\'#@@-:-$}{&.{}$'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@appraise}, {@dont_hash}, {@permit_directio}]}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000a00)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x0, 0x0, 0x4, &(0x7f00000009c0)='wg0\x00', 0x1, 0xfffffffffffffffe, 0x4}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x4, 0x70bd2c, 0x2, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40810) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$smc(&(0x7f0000001000), r0) r4 = syz_open_dev$vcsn(&(0x7f0000001040), 0x27, 0x216900) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001080)={0x6, 0x6, 0x4, 0xb3, 0x8}, 0x14) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4054) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001200)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000001300)=0xe8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001340), 0x20040, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x12, r6, 0x8000000) [ 129.833074] audit: type=1400 audit(1750859489.342:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:51:29 executing program 3: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "ef312fda7f0c65a3", "d7cee1eb6cc80d81c969e24bf34a81ae", "2d75de87", "151f85c72ae0dd96"}, 0x28) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x80000000, 0xa, 0x13, 0x15, "dc0a75f2a762b44f252bd02ae264ea6dadb653fa1bf2e5ef71e02204ffbf6b3d5e3c59a49328c9a8804eda87dc5857d11e18b88cc76bcdb314ac671144fef176", "a02d1294c5593b9f74c9d0508a96c4d848cedbcda7d8a745e41149addc908417", [0x800, 0x1]}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000140), 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) syz_extract_tcp_res(&(0x7f0000000280), 0x20, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000002c0)=r0, 0x1) read(0xffffffffffffffff, &(0x7f0000000300)=""/206, 0xce) r1 = syz_io_uring_complete(0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x8000, 0xffffffffffffb78b, 0x0, 0x10001, 0x1]}, &(0x7f0000000480)=0x78) io_cancel(0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f00000004c0)="db94fb28e40d062f53e8edba29481e0afb8c6e68a9931718e7df98a9546f41f8ba7a74f93927d0c9b39bbf00921a2a0913dad217a92547584488870d4f1ff0b5df1293d810bf4c86db69074f32b8890b5dab40c94e279ec230d90d3d9fbce153bf2a847018dc2ed017e03b2c561fa82fcec474c6c9a7d13fe58a10d8a128e05a0cf1fbaf188f72248ee06280b56107f70a867f0bf4544120b373b1bbefb087b7c005fd5a4f587748435dcd", 0xab, 0x8, 0x0, 0x3, r1}, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x200000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}], [{@fowner_gt={'fowner>', r3}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, ')%'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r4}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) syz_extract_tcp_res$synack(&(0x7f00000008c0), 0x1, 0x0) ioctl(0xffffffffffffffff, 0x6, &(0x7f0000000a00)="0ee384e37b8711ec4f81871e86c008532ee7ed5f30ec17793a50c5e65327e49b9a2631fd218e4c73c85ad6475e54208b2cc45e64273ffe2ada8856a00847f8bcb9a577215c4629b434c6a70fc915b635725dcbed542dc65fd9deb26a8ce40c7fdc84503eb7141093f5d478bdfa7f8168b216ff4e036e") 13:51:29 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x32, 0x66, 0x0, 0x64, 0x66, 0x65, 0x64, 0x35, 0x38, 0x34, 0x33, 0x37, 0x34, 0x64, 0x66, 0x35]}, &(0x7f0000000080)={0x0, "5e217b2812cfb507b560d15a0bc40d88f4cb68819a707573f3d698c5fc8d267d3f2710dbe6310da0e3206cd96de5504541e75b5862797b86ab717d6b6277f517", 0x27}, 0x48, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff7}}, './file0\x00'}) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$reject(0x13, r0, 0x9, 0x23, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r1, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r1, 0x10000000) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300), 0x0, r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000340)) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0x10000000) add_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r3) r4 = add_key(&(0x7f0000000400)='.dead\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="664a1ffde202a3e7c2b3e3014bdd57ef1d6d038e5ee51095319a73f7423326440d2e32bd0511d325e1236015ed549cd508033a729fe4424dbd3dd537947ae0360582e77566a63a2affd0b565584147070b8157badc325a8e50", 0x59, r3) r5 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r4, &(0x7f0000000500)='trusted\x00', &(0x7f0000000540)={'syz', 0x2}, r5) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000600)={0xff, @empty, 0x4e23, 0x3, 'dh\x00', 0x64, 0xb17, 0x2f}, 0x2c) 13:51:29 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c044}, 0x10000001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x8, 0x7f, 0x10, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x0, 0x68c, 0x7}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000480)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500), r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid}, {@cache_none}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000980)=0xe8) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000700)='./file1\x00', 0x81e9, 0x2, &(0x7f0000000840)=[{&(0x7f0000000740)="f6b7ab1c2a3587356f50e7c31e5f58fe01edf208f8393768abe5091723884882e6e826d4cc14c389b6baa52660e7ab61c3e3840bdc0f1ea3c8ac76bf3695feaacf4a1a12ca68a37bf9f69db111ee51f5ab40d3", 0x53}, {&(0x7f00000007c0)="24b88fe5a73acc66d8be165b7e35ba729c77cdfe156a886fcf0a15e9758c11835c6f5e2f23bb1dec29d08ca308ad7ac02a151ac717c38070cf8b64eb3772771c3962ff7be3fcdf6ce2ce4020a4bb7c31dde4cd7ab578b550", 0x58, 0x243e}], 0x9010, &(0x7f00000009c0)={[{@utf8no}], [{@appraise_type}, {@context={'context', 0x3d, 'system_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@euid_lt={'euid<', 0xee00}}]}) r6 = getpgid(0x0) r7 = syz_open_procfs$namespace(r6, &(0x7f0000000a40)='ns/user\x00') ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000a80)={0x7f}) r8 = socket(0x5, 0x80000, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x20004090) fcntl$getown(r7, 0x9) 13:51:29 executing program 6: io_destroy(0x0) io_getevents(0x0, 0x3, 0x1, &(0x7f0000000000)=[{}], 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0x7, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1f]}, 0x8}) r1 = eventfd(0x3) keyctl$clear(0x7, 0xfffffffffffffffc) keyctl$reject(0x13, 0x0, 0x69d, 0x101, 0x0) clock_getres(0x2, &(0x7f0000000180)) read$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = eventfd(0x7fffffff) io_submit(0x0, 0x3, &(0x7f0000000540)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000200)="fc826f40674624890e7bf94ebedf9c94e879d91d32d4642acd1317c5af4dbe5b7e2e118ed9a19eec63587196d047d54b4a213665dc5e1fb6f1ff6b158cc14d3fd78304622e2dead11e7d72fcaeb02973c7c3c198637c8d98fcfd8d2cced51ea2a545a273da70f9e73e72fcd684e20a7cbd9c7710e949bacc7e4d5eaa09374d530163771ccd9556865bffaf24dce60fe852e0bd94cc759c01428f2a60520bd3d28a4e7481f3c1e7d7c70137049e876ed9551d48ae05761b6f51becd47fd53c5ae62cd", 0xc2, 0x6, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000340)="2f90cf3099e346d49893b8d13e8da02cf15e221a82857707b52d7f2d382bc2a1d6900565121644c8b67e9a7a78392222798917beca715bb34bf857ebc973be0ac3829e57c514b9f41c1844ac73cd4139bcd97308e7856cf0d585c8f4bf5cc70e18921f867689f316176d1e6c79e1a78f388ac2034333ee69a22f8596027da066dccda5a7f5ec323482b60c3fa70af932ea87e676aacee65aa09175fb097c3a6f6327ce46a26b63721a7e86e1664fdd3fbca568afec", 0xb5, 0x92c, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000440)="bdbc51646f6e9ec235bace68ec10ff0811e993162a8e5dfd85127bb3329aa173319ebc4a28f1e248cc7c25c168c193f9e99dbcced45776791a8d78fc70d32a1880d024904906150c15979fc769f5eab6712f8f7367a31cefd833fa4b4b0afdb91c87e498e6958c7abae4faf42ddb698418c8d43cd20a10363f4f4b15581ddfbc71f32478b375ed5b27c1df901a9b18b38409301beee9210fd65c14d17e3c81ac493fc46e10dc9bd23a41f772ba0db1e28140128b6db899d3d3887449", 0xbc, 0x5, 0x0, 0x3, r1}]) r3 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x3674, r3) read$eventfd(r2, &(0x7f0000000600), 0x8) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0xace, 0x1000, 0x0, 0x4, 0xb6c, 0x80, 0x1, 0x2}, &(0x7f0000000680)={0x1, 0xa3bf, 0x6, 0x7ff, 0x1, 0x10001, 0x5, 0xffffffff80000000}, &(0x7f00000006c0)={0x2, 0x8000, 0x1000, 0x9, 0x7, 0x1, 0x5, 0x8}, &(0x7f0000000740)={r4, r5+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0xfffffffffffff800]}, 0x8}) io_setup(0x200, &(0x7f0000000800)) io_setup(0x6, &(0x7f0000000840)=0x0) io_getevents(r6, 0x5, 0x4, &(0x7f0000000880)=[{}, {}, {}, {}], &(0x7f0000000900)) keyctl$negate(0xd, 0x0, 0x3f, 0x0) 13:51:29 executing program 7: timer_delete(0x0) timer_delete(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x9, 0x4) getresuid(&(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x9, 0x7, &(0x7f0000000680)=[{&(0x7f0000000180)="ab88daa6b78b0586e040aef5e06193f5ed361bd4b18d9689ca5e4be1f3dfc6fa07acbfe83bb508b831a23ff5e9b3507afedb670720368e0e92759cbfd156a0fa94bde91dd2bc407f52a289460fea14215c1b44c047be7f026475d7ec6b0e26dac8738fe9ba542aec6abd8dbff20b8e13990cf2d5e953b9314637abe2379cc3e7b321cfe7ac0ccfd1e1f28baf37eab324b37fd5866bbcc1bc43b4b501fd8b86bee79fe857d9801e02a81a67502fdc13e3b74c2e155f6e2959daa834907d0e46ca8554153adc", 0xc5, 0x16f4}, {&(0x7f0000000280)="422574b549efe4f7e3790e13924e0b1cd89c81861e21a7590cb1d1bf5414f658d25ac8b4747a6a8a63b747d6dac5c25eec77634ce08bd3a5d4059b1b6f9f8fa468f7ddb12af5d2f74632001c36725b6eb91c1bbb12b8fdfe7f7cdd8e5b804c25617d1829dc5f4511ba4b997aab", 0x6d, 0x8}, {&(0x7f0000000300)="58fc1a6cdca4d6f557c5a9445752132f1dda562e8bd22a3e81e2a7983dd7d3d64fda9b5051a19ca9c2a87a2795cb59bc6d02a3ca7572da904505c526c876325af8f660704cef417ca000e72b2405e76ad8cb62daa4f749c5f65c", 0x5a, 0x8001}, {&(0x7f0000000380)="f454956e91fc3327499355317d524e421c73155ec6eb35242b220f537f8776287e3d83853df2470102b331d2902f4f827bd8012e5c4a958f87bb3eead3d5d53020586142474185dc0ba437ce849cc6e1c6d21bf232a165887ee4ae716513beafb4c01649773b711d5414e9c9678559bdc22690d33cbdc1afc5c29af2222ce8009a4f0aa427a6957370ced90ad8a8b7540e739437a3def7452c16c72d27a9f29b5aaea2dac13a5c83d22f0e81955bfde8a65fa87c00fb0f8a54cd32f9cbba23", 0xbf, 0x8a}, {&(0x7f0000000440)="94cf59ac8463e66365ae9c828f8988a381d455b3957175bbd46db568c4449580c302307d52908605f3e6e9ae13d240fb7ce90e22ba26194ab47c2e3e58af0b7d1a8a4afd50d6ad3a24692b82da9f230eefbd233febd17d3aacda01d450d27a49bd3815e53dd340a86fb5e966bcdab62fb42383197e9cfe21646e64b06646fdba430691c5568f979173d40d6340d3c744c3ab8d8fa804bbc88ae03a6c210eb5483fcb12c3d0d33d17895cf5a7c785813ca3a92a24a51f282a1cb24de0e56f672ef2ea374f3c1211e0e4135e1d3776b2b14b0c4f6028fa4f11", 0xd8, 0xd89b}, {&(0x7f0000000540)="7ba2a2137dfe11f678b487fcbb704a935b62202ea2bcabfac4ec9f8ab3f34cabe324c18d1aa7696f56fd7dfa8492b0eb14bf3d60e5e3e18c2bde10d6ad04feed7e90f4b787751f062f13e8287c8f93aa8bd64eabf2e197bddf06d97c8552cffd3d40947d48d586a66cbf3b56a3bbf25e214d2b71fd8cc506d544831a4aa3ba17dfacee7547b01eb591195697a012336a70de3334b1f45ef76506bdc2e254ba0bedf249fed8c55cb72aa7c2056cc0800faaf38e4f8be609439e5f73fa11d819dd0ae1f747d83b9f3f00585733e16b4f1e924a46fcbb550ce2339a0e8683efd4", 0xdf, 0x6}, {&(0x7f0000000640)="1de1aa", 0x3, 0x4f3}], 0x0, &(0x7f0000000840)={[{@huge_within_size}, {@gid}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x2d, 0x32, 0x32]}}}}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '=static', @void}}}, {@uid={'uid', 0x3d, r3}}], [{@dont_appraise}, {@pcr={'pcr', 0x3d, 0x2b}}]}) r4 = syz_open_dev$vcsn(&(0x7f0000000980), 0x81, 0x90400) r5 = socket$unix(0x1, 0x5, 0x0) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x204000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_any}, {@cache_none}, {@aname={'aname', 0x3d, '/}'}}], [{@subj_user={'subj_user', 0x3d, '\'$/-$-&\x82:'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r6}}]}}) syz_mount_image$msdos(&(0x7f0000000a80), &(0x7f0000000ac0)='./file1\x00', 0xfff, 0x1, &(0x7f0000000b40)=[{&(0x7f0000000b00)="3ba773edfa565117061268cd48f0283542f57cf62c9abca3b60645a995782601166ae31284d8b8b666f71ee9d486ab397f1e478bc818cb79db2434bd22f2", 0x3e, 0xffffffffffffff00}], 0x10aa000, &(0x7f0000000b80)={[{@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@dots}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@dots}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@hash}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'permit_directio'}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r1}}]}) timer_delete(0x0) fgetxattr(r5, &(0x7f0000000c40)=@known='com.apple.system.Security\x00', &(0x7f0000000c80)=""/154, 0x9a) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000d40)={{0x8, @rand_addr=0x64010101, 0x4e22, 0x1, 'ovf\x00', 0x1, 0x96, 0x59}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x4, 0x0, 0x1, 0xfffffffb}}, 0x44) r7 = syz_open_dev$vcsn(&(0x7f0000000e40), 0x0, 0x80040) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000003480)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}}}, &(0x7f0000003580)=0xe8) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x80000, &(0x7f00000035c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@cache_fscache}, {@cache_mmap}, {@access_uid={'access', 0x3d, r9}}, {@loose}, {@noextend}, {@access_uid={'access', 0x3d, r1}}, {@version_u}, {@afid={'afid', 0x3d, 0x91}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, 'quiet'}}, {@measure}, {@subj_type={'subj_type', 0x3d, 'smackfsdef'}}, {@dont_appraise}, {@fowner_gt={'fowner>', r2}}, {@dont_appraise}]}}) [ 131.240925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.254746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.299594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.343964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.350826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.362125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.369402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.373683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.375449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.378315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.382131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.385187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.387986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.400141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.402149] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.414810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.415797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.418186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.425295] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.427750] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.433301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.434249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.443086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.461164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.463002] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.468891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.480713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.482815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.485644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.495450] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.497528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.499152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.500593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.502755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.504165] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.505038] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.510748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.518080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.524329] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 131.533311] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 133.509382] Bluetooth: hci1: command tx timeout [ 133.510100] Bluetooth: hci2: command tx timeout [ 133.511621] Bluetooth: hci0: command tx timeout [ 133.573307] Bluetooth: hci4: command tx timeout [ 133.575149] Bluetooth: hci5: command tx timeout [ 133.582483] Bluetooth: hci7: command tx timeout [ 133.583903] Bluetooth: hci3: command tx timeout [ 133.636342] Bluetooth: hci6: command tx timeout [ 135.556050] Bluetooth: hci0: command tx timeout [ 135.557844] Bluetooth: hci2: command tx timeout [ 135.559962] Bluetooth: hci1: command tx timeout [ 135.621308] Bluetooth: hci5: command tx timeout [ 135.622999] Bluetooth: hci3: command tx timeout [ 135.624890] Bluetooth: hci7: command tx timeout [ 135.626282] Bluetooth: hci4: command tx timeout [ 135.683685] Bluetooth: hci6: command tx timeout [ 137.603397] Bluetooth: hci0: command tx timeout [ 137.603921] Bluetooth: hci2: command tx timeout [ 137.604416] Bluetooth: hci1: command tx timeout [ 137.669332] Bluetooth: hci5: command tx timeout [ 137.669636] Bluetooth: hci7: command tx timeout [ 137.670269] Bluetooth: hci4: command tx timeout [ 137.671188] Bluetooth: hci3: command tx timeout [ 137.733706] Bluetooth: hci6: command tx timeout [ 139.651409] Bluetooth: hci1: command tx timeout [ 139.651455] Bluetooth: hci2: command tx timeout [ 139.651966] Bluetooth: hci0: command tx timeout [ 139.715789] Bluetooth: hci4: command tx timeout [ 139.715835] Bluetooth: hci7: command tx timeout [ 139.716815] Bluetooth: hci3: command tx timeout [ 139.716968] Bluetooth: hci5: command tx timeout [ 139.780253] Bluetooth: hci6: command tx timeout [ 191.750255] syz-executor.4 (289) used greatest stack depth: 24784 bytes left [ 194.328095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.333581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.336875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.340542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.343993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.350777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.351559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.356007] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.357651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.361777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.406931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.410010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.414570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.415965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.421982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.424517] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.428157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.430123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.437590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.437810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.461077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.463621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.477934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.478927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.482691] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.488818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.491548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.500202] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.503369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.513751] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.656933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.661465] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.672446] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.673974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.699758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.699815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.707902] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.733000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.737715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.746788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.419704] Bluetooth: hci1: command tx timeout [ 196.421601] Bluetooth: hci0: command tx timeout [ 196.483343] Bluetooth: hci3: command tx timeout [ 196.547463] Bluetooth: hci5: command tx timeout [ 196.548426] Bluetooth: hci4: command tx timeout [ 196.611624] Bluetooth: hci2: command tx timeout [ 196.867386] Bluetooth: hci7: command tx timeout [ 196.868410] Bluetooth: hci6: command tx timeout [ 198.467374] Bluetooth: hci1: command tx timeout [ 198.468840] Bluetooth: hci0: command tx timeout [ 198.532319] Bluetooth: hci3: command tx timeout [ 198.596476] Bluetooth: hci5: command tx timeout [ 198.597017] Bluetooth: hci4: command tx timeout [ 198.659507] Bluetooth: hci2: command tx timeout [ 198.916061] Bluetooth: hci7: command tx timeout [ 198.916651] Bluetooth: hci6: command tx timeout [ 200.517294] Bluetooth: hci1: command tx timeout [ 200.517850] Bluetooth: hci0: command tx timeout [ 200.580329] Bluetooth: hci3: command tx timeout [ 200.644445] Bluetooth: hci4: command tx timeout [ 200.646073] Bluetooth: hci5: command tx timeout [ 200.708823] Bluetooth: hci2: command tx timeout [ 200.963332] Bluetooth: hci6: command tx timeout [ 200.964758] Bluetooth: hci7: command tx timeout [ 202.566625] Bluetooth: hci0: command tx timeout [ 202.568376] Bluetooth: hci1: command tx timeout [ 202.627381] Bluetooth: hci3: command tx timeout [ 202.692800] Bluetooth: hci4: command tx timeout [ 202.694323] Bluetooth: hci5: command tx timeout [ 202.756308] Bluetooth: hci2: command tx timeout [ 203.012394] Bluetooth: hci6: command tx timeout [ 203.013824] Bluetooth: hci7: command tx timeout [ 256.836787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.838467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.839795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.842645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.853170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.878008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.881544] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.883828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.888024] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.890931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.008027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.013259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.018083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.022776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.024011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.025400] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.027008] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.029548] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.031860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.056733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.104742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.135561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.141101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.167767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.169974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.170960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.177719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.196511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.240828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.243930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.245999] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.247941] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.272437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.292620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.292712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.313164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.326016] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.327001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.341293] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.352857] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.886625] Bluetooth: hci0: command tx timeout [ 258.949280] Bluetooth: hci1: command tx timeout [ 259.139794] Bluetooth: hci3: command tx timeout [ 259.141614] Bluetooth: hci2: command tx timeout [ 259.203340] Bluetooth: hci4: command tx timeout [ 259.339406] Bluetooth: hci5: command tx timeout [ 259.459383] Bluetooth: hci7: command tx timeout [ 259.459998] Bluetooth: hci6: command tx timeout [ 260.932830] Bluetooth: hci0: command tx timeout [ 260.995322] Bluetooth: hci1: command tx timeout [ 261.187500] Bluetooth: hci2: command tx timeout [ 261.188167] Bluetooth: hci3: command tx timeout [ 261.251773] Bluetooth: hci4: command tx timeout [ 261.380279] Bluetooth: hci5: command tx timeout [ 261.508259] Bluetooth: hci7: command tx timeout [ 261.508740] Bluetooth: hci6: command tx timeout [ 262.979381] Bluetooth: hci0: command tx timeout [ 263.044370] Bluetooth: hci1: command tx timeout [ 263.235704] Bluetooth: hci2: command tx timeout [ 263.236196] Bluetooth: hci3: command tx timeout [ 263.300452] Bluetooth: hci4: command tx timeout [ 263.427284] Bluetooth: hci5: command tx timeout [ 263.555754] Bluetooth: hci6: command tx timeout [ 263.556270] Bluetooth: hci7: command tx timeout [ 265.029245] Bluetooth: hci0: command tx timeout [ 265.091306] Bluetooth: hci1: command tx timeout [ 265.283389] Bluetooth: hci3: command tx timeout [ 265.283887] Bluetooth: hci2: command tx timeout [ 265.347575] Bluetooth: hci4: command tx timeout [ 265.475459] Bluetooth: hci5: command tx timeout [ 265.603326] Bluetooth: hci6: command tx timeout [ 265.604658] Bluetooth: hci7: command tx timeout [ 319.968877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.970587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.971807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.974782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.976668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.152945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.162690] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.164492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.168710] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.171679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.212745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 320.218139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 320.221378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 320.233800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 320.242663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 320.295303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.298171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.301825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.308699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.340534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.377546] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.382049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.396794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.410992] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.422601] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.445477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.445629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.455671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.465658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.467706] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.471558] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.497374] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.531433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.532841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.535818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 320.545776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.548179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.588728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.640142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.644153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 322.051708] Bluetooth: hci0: command tx timeout [ 322.243553] Bluetooth: hci1: command tx timeout [ 322.308112] Bluetooth: hci2: command tx timeout [ 322.436268] Bluetooth: hci3: command tx timeout [ 322.627381] Bluetooth: hci7: command tx timeout [ 322.627491] Bluetooth: hci5: command tx timeout [ 322.691327] Bluetooth: hci4: command tx timeout [ 322.691414] Bluetooth: hci6: command tx timeout [ 324.099337] Bluetooth: hci0: command tx timeout [ 324.291439] Bluetooth: hci1: command tx timeout [ 324.355804] Bluetooth: hci2: command tx timeout [ 324.483284] Bluetooth: hci3: command tx timeout [ 324.675837] Bluetooth: hci5: command tx timeout [ 324.676783] Bluetooth: hci7: command tx timeout [ 324.739480] Bluetooth: hci4: command tx timeout [ 324.739939] Bluetooth: hci6: command tx timeout [ 326.147329] Bluetooth: hci0: command tx timeout [ 326.339315] Bluetooth: hci1: command tx timeout [ 326.403659] Bluetooth: hci2: command tx timeout [ 326.531663] Bluetooth: hci3: command tx timeout [ 326.723537] Bluetooth: hci7: command tx timeout [ 326.723692] Bluetooth: hci5: command tx timeout [ 326.787958] Bluetooth: hci4: command tx timeout [ 326.788527] Bluetooth: hci6: command tx timeout [ 328.195299] Bluetooth: hci0: command tx timeout [ 328.389240] Bluetooth: hci1: command tx timeout [ 328.451310] Bluetooth: hci2: command tx timeout [ 328.580281] Bluetooth: hci3: command tx timeout [ 328.771358] Bluetooth: hci7: command tx timeout [ 328.772819] Bluetooth: hci5: command tx timeout [ 328.835551] Bluetooth: hci4: command tx timeout [ 328.835798] Bluetooth: hci6: command tx timeout [ 382.681355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.686715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.688666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.696035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.698385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.930914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.936813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.938070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.952457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.955948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.958744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.961455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.965536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.974513] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.978564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 383.081858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.086589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 383.089448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.093629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.094983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.099720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 383.105498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 383.112375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.117609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.135951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.140539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.145039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 383.149732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 383.152773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.157708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.159549] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.159948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 383.208617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.219560] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 383.224756] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 383.245062] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 383.249314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 383.260093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 383.269304] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 383.286786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.710766] Bluetooth: hci0: command tx timeout [ 385.028966] Bluetooth: hci1: command tx timeout [ 385.030636] Bluetooth: hci2: command tx timeout [ 385.220506] Bluetooth: hci3: command tx timeout [ 385.225490] Bluetooth: hci5: command tx timeout [ 385.347364] Bluetooth: hci6: command tx timeout [ 385.349100] Bluetooth: hci7: command tx timeout [ 385.349668] Bluetooth: hci4: command tx timeout [ 386.755388] Bluetooth: hci0: command tx timeout [ 387.076649] Bluetooth: hci1: command tx timeout [ 387.076705] Bluetooth: hci2: command tx timeout [ 387.267769] Bluetooth: hci3: command tx timeout [ 387.268008] Bluetooth: hci5: command tx timeout [ 387.395331] Bluetooth: hci4: command tx timeout [ 387.395372] Bluetooth: hci6: command tx timeout [ 387.396910] Bluetooth: hci7: command tx timeout [ 388.806241] Bluetooth: hci0: command tx timeout [ 389.123732] Bluetooth: hci1: command tx timeout [ 389.124552] Bluetooth: hci2: command tx timeout [ 389.316261] Bluetooth: hci3: command tx timeout [ 389.316782] Bluetooth: hci5: command tx timeout [ 389.443393] Bluetooth: hci6: command tx timeout [ 389.446269] Bluetooth: hci7: command tx timeout [ 389.446748] Bluetooth: hci4: command tx timeout [ 390.851314] Bluetooth: hci0: command tx timeout [ 391.171386] Bluetooth: hci1: command tx timeout [ 391.171928] Bluetooth: hci2: command tx timeout [ 391.363370] Bluetooth: hci3: command tx timeout [ 391.363885] Bluetooth: hci5: command tx timeout [ 391.491525] Bluetooth: hci4: command tx timeout [ 391.492289] Bluetooth: hci7: command tx timeout [ 391.492763] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 13:56:38 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888036d0f878 RCX=ffff888036d0f53c RDX=0000000000000000 RSI=ffffffff85c1cc40 RDI=ffff88800a851f7c RBP=ffff888036d08000 RSP=ffff888036d0f568 R8 =0000000000000001 R9 =ffff888036d0f628 R10=000000000003b53d R11=00000000000231b3 R12=ffff888036d0f601 R13=ffff888036d0f630 R14=ffff888036d0f868 R15=ffff888036d0f5e8 RIP=ffffffff84b4ec40 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e75cc34a1 CR3=000000002827d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000000000000000ff00 XMM02=0000000000ff000000000000ff000000 XMM03=0000000000ff00000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88803040ef01 RBX=ffff88803040ef38 RCX=0000000000000001 RDX=ffff888030410001 RSI=ffff88803040ef08 RDI=ffff88803040ef48 RBP=ffff888030408000 RSP=ffff88803040ee78 R8 =0000000000000001 R9 =ffff88803040ef78 R10=000000000003b53d R11=0000000000006bd3 R12=ffff88803040ef01 R13=ffff88803040ef80 R14=ffff88803040ef08 R15=ffff88803040ef38 RIP=ffffffff81355461 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe16c919710 CR3=0000000027e37000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000