Warning: Permanently added '[localhost]:46332' (ECDSA) to the list of known hosts. 2025/06/25 23:32:27 fuzzer started 2025/06/25 23:32:27 dialing manager at localhost:41253 syzkaller login: [ 101.807092] cgroup: Unknown subsys name 'net' [ 101.955477] cgroup: Unknown subsys name 'cpuset' [ 101.999024] cgroup: Unknown subsys name 'rlimit' 2025/06/25 23:32:49 syscalls: 221 2025/06/25 23:32:49 code coverage: enabled 2025/06/25 23:32:49 comparison tracing: enabled 2025/06/25 23:32:49 extra coverage: enabled 2025/06/25 23:32:49 setuid sandbox: enabled 2025/06/25 23:32:49 namespace sandbox: enabled 2025/06/25 23:32:49 Android sandbox: enabled 2025/06/25 23:32:49 fault injection: enabled 2025/06/25 23:32:49 leak checking: enabled 2025/06/25 23:32:49 net packet injection: enabled 2025/06/25 23:32:49 net device setup: enabled 2025/06/25 23:32:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 23:32:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 23:32:49 USB emulation: enabled 2025/06/25 23:32:49 hci packet injection: enabled 2025/06/25 23:32:49 wifi device emulation: enabled 2025/06/25 23:32:49 802.15.4 emulation: enabled 2025/06/25 23:32:49 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 23:32:51 starting 8 fuzzer processes 23:32:51 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x87, 0x29, 0x1, {0xd6, [{{0x4, 0x0, 0x1}, 0x4, 0x15, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0x1ff, 0x6, 0x7, './file0'}, {{0x8, 0x0, 0x7}, 0x6, 0x40, 0x7, './file0'}, {{0x10, 0x0, 0x3}, 0xff, 0x5, 0x7, './file0'}]}}, 0x87) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x900, &(0x7f0000000100)={0x100073, 0x6, 0x80000}, 0x20) r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffff, 0x200) mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x900, &(0x7f00000001c0)={0x100000, 0x2, 0xc0000, {r0}}, 0x20) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0xc9) r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x21a, 0x8000) mount_setattr(r1, &(0x7f0000000340)='./file0\x00', 0x100, &(0x7f0000000380)={0x1, 0x7c, 0x0, {r0}}, 0x20) r2 = socket(0x9, 0x1, 0x2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xfc, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008000) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xc46) r3 = socket(0x23, 0x1, 0x1) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/module/pata_sch', 0x40200, 0x80) mount_setattr(r4, &(0x7f00000006c0)='./file0\x00', 0x4100, &(0x7f0000000700)={0x84, 0x71, 0x80000, {r1}}, 0x20) getpid() r5 = syz_open_dev$vcsn(&(0x7f0000000740), 0x1000, 0x17d0c0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000780)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000007c0)=0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000d40)={0xec, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @fda={0x66646185, 0x7, 0x2, 0x23}, @fda={0x66646185, 0x7, 0x2, 0x6}}, &(0x7f0000000880)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/88, 0x58, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x0, 0x1d}}, &(0x7f00000009c0)={0x0, 0x18, 0x40}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000ac0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0xb, 0x3}, @fd}, &(0x7f0000000b40)={0x0, 0x18, 0x30}}, 0x400}], 0xbf, 0x0, &(0x7f0000000c80)="9932b2f2f5f179920ccf42e20f929c99c24199763a405ffc3da4d3aef9e9c4f7c2a6b63e1e1dbcc6600e61a8a72edd4a7f7e4d55d3c4430a647e98f8e1d473ccdc0645f28afa0a652dc26e7ed251768d760ecb79602e5f65f1cfcea260aed028be08482fe226d22dcd87c175da73baf257fbc2ad4aa9d3c4e19bf887da06c57e7e8cd7c53ac463a2c617b326e4fd5a475f989b78d2b0eb2f5dbf0e19e81e791d7e6095837aea4d35668ecc737000e419d4e12ed7ad62d41615cb06f944ddef"}) 23:32:51 executing program 1: sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']$\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x400d1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']$\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']$\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000081) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x434, 0x3f3, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2, 0x2, 0x1, [0x10001, 0x1d5, 0x9, 0xc414, 0x1f, 0x2, 0x6, 0x6, 0x8, 0x1000, 0x8, 0x1, 0x2, 0x4, 0x4, 0xa23a, 0x6, 0x6, 0x1, 0x1ff, 0x239, 0x2, 0x424, 0x9, 0x41, 0x0, 0xebce, 0x7fffffff, 0x96a, 0x400, 0x5, 0x1ff, 0x6, 0xf727, 0x2, 0x0, 0x4, 0x577, 0x0, 0x401, 0x8, 0x7ff, 0x0, 0x8, 0x4, 0x100, 0x8, 0x3f, 0x16, 0x7, 0x800, 0x0, 0x8001, 0x1, 0x3, 0x6, 0x4, 0x0, 0x1, 0x3, 0xfffffffa, 0x6, 0x8, 0x200], [0xf027, 0xaa3f, 0x6, 0x0, 0x200, 0x3f, 0xf612, 0x162b, 0x3ac6, 0x6, 0xfffffff9, 0xfff, 0x3, 0x5, 0x1, 0x1, 0x4a966700, 0x0, 0x2, 0x5, 0x22, 0x1000, 0x1, 0x30, 0x1f, 0x2, 0x6, 0x4c, 0x7, 0x5, 0x2, 0x7fffffff, 0x3, 0x3, 0xaa8e, 0x0, 0x8b3, 0x9, 0x2, 0x5, 0x3f, 0x5, 0x2, 0x3, 0x6, 0x9c, 0x4, 0x7, 0x200, 0x4, 0x1, 0x8001, 0x5, 0x8, 0x5, 0x4, 0x2d, 0xe2, 0xdd08, 0x80000001, 0xfffffeff, 0x0, 0x2a], [0x10000, 0x0, 0x9, 0x7a7, 0x7, 0x180, 0x0, 0x80000001, 0x80000001, 0x2856, 0x5, 0x3f, 0x5, 0x3, 0xddc, 0x1, 0xfc, 0x10000, 0x100, 0x9, 0x9f7, 0x1e, 0x2, 0x9, 0x5, 0x3f, 0xa8b, 0x56a, 0x6, 0x1, 0x0, 0x7f, 0x4, 0x6, 0x6, 0xfff, 0x3, 0xf9, 0xe7, 0x2f0b, 0x7, 0xec, 0x400, 0x1, 0x40, 0x80, 0x80, 0x1, 0xfffffff7, 0x0, 0x6, 0x3, 0x5, 0x3, 0x3, 0xa74c, 0x40000000, 0x2, 0xfffffff7, 0x3f, 0x9, 0x2, 0x7, 0x7], [0x8001, 0xff, 0xb62, 0x80000000, 0x7ff, 0x4, 0x8, 0x8, 0x517, 0x8, 0x18, 0x1000, 0x3, 0x3, 0x8, 0x401, 0xfffffffb, 0x4, 0x2, 0xfffffbff, 0x3, 0x0, 0x8, 0x10001, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x3f8, 0x7, 0x9, 0x0, 0x1, 0x7, 0x400, 0x80, 0x8, 0x3, 0x7fffffff, 0xe92, 0x8, 0x858d, 0x3, 0x33, 0x61c8, 0x4, 0x8000, 0x5, 0x6, 0x80000001, 0x1, 0x809, 0x38, 0x191a379a, 0x4391, 0x32c2, 0x40, 0x1f8, 0x401, 0x2, 0x9, 0x35e], 0x14, ['\x00', ']][@!%)*\x00', ']$\x00', ':}:\x00', ']\x00', '\x00']}, ["", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) bind(r1, &(0x7f0000000800)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}, 0x4}}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '^-^\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000014}, 0x50) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x10, 0x3f2, 0x8, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000d40)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', ']\x00', 0x20, 0x1ff, 0x20, [0x65, 0x63]}, 0x31, 0xfffffffffffffff9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x59) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x78, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x48000) 23:32:51 executing program 2: r0 = getpgrp(0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x37, 0x2, {0x2, 0xf4, 0x80000000, r0, 0x2, '[^'}}, 0x20) clock_gettime(0x0, &(0x7f0000000040)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc4, 0x3ed, 0x100, 0x70bd2d, 0x25dfdbfe, "31b2b10f0542e0ffcb1771761ecb3ef051e4607a63e64fe919d1dbe9b5806f0285d3d49bf1530223457e6bebada1574fef2d5e66ac64a782d24f4bcc981976a2791cb4ea13ccc24300cb7653d0567b3047fecd5238235463e1291ea18dd7c16ea796f2b0a9895a9ea79ca3cd21227c4204295850ae998f4776bd0e82c5626de45eb45b571e6f65439a4f1e372b49b43baf14d72503ca59316d99bf56c691357d7f9bff17ac4382e0d8953283498b3b65655f", ["", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x2000c051}, 0x800) syz_open_dev$vcsa(&(0x7f0000000240), 0x5, 0xf0800) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f00000002c0)={r0, 0x1}) syz_open_dev$vcsn(&(0x7f0000000300), 0x80000001, 0x100) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='\x00', 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0x0, 0x1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000480)) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000004c0)={r4, 0x33, 0xf7}, &(0x7f0000000500)={'enc=', 'oaep', ' hash=', {'blake2b-512-generic\x00'}}, &(0x7f0000000580)="85cbfbf80ae0e6d70a1ccfae30a43adf02e6109ce935f85cde4310b04cea2153182ddab2905106823308269a15eb579c4d1e73", &(0x7f00000005c0)=""/247) r5 = request_key(&(0x7f00000006c0)='id_resolver\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='/dev/vcs#\x00', r4) keyctl$negate(0xd, r5, 0xff, r3) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, r4) eventfd(0x1) r6 = add_key(&(0x7f0000000800)='ceph\x00', &(0x7f0000000840)={'syz', 0x0}, &(0x7f0000000880)="f3195dd38f8a542cd8521e13364cb1124f933a66a3891c273cf8856ef0e49f146561314b875422383c712a5b8ad98086df66b3e163799ccce3c62cc1bf1e5771b007bc5c4774ae57a68f22295823c008855668ed088689c7d8551b35c82107ea73ba85375be935e7471e663343b2419eb3dab983d769ed9e9a9fd8632529fb9839cecc64b9bd9ef55c820c5fef0a65cb9e419d722795d0ebd7df12aefc1a8daf586241e3", 0xa4, r5) keyctl$negate(0xd, r4, 0xffffffff, r6) [ 125.353185] audit: type=1400 audit(1750894371.637:7): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:32:51 executing program 3: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000080), 0xd2d, 0x20200) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000000c0)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1000, 0x101000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000180)) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x424, 0x3f4, 0x200, 0x70bd28, 0x25dfdbff, {0x5, 0x1, 0x36, [0x3, 0x0, 0x1, 0x2, 0xfff, 0x0, 0x3, 0x4, 0x401, 0x5, 0x6401, 0x1f, 0x9, 0x3ff, 0x80, 0x8000, 0x7, 0x3, 0x9, 0xffffffff, 0xfff, 0x262e, 0x81, 0x6, 0x26ba, 0x1f, 0x0, 0x5, 0x2, 0x9, 0x1, 0x4, 0x3f, 0x800, 0x8, 0x5, 0x9, 0x0, 0x2, 0x4, 0x9, 0x40, 0x7f, 0x475, 0x8, 0xade, 0x5, 0x9, 0x7985, 0xd9de, 0x4, 0x2, 0x1, 0x6, 0x3ff, 0xaa, 0x2, 0x1, 0x6, 0xf372, 0x4, 0xb44, 0x1, 0x5], [0x1ea, 0x4, 0x5, 0xffffffc0, 0xf86, 0xffffffff, 0x7, 0x7, 0x4, 0x1, 0x6, 0x4, 0x2800, 0x1, 0x68068445, 0x5, 0x7fffffff, 0x7, 0x9, 0xfffffffd, 0x1ff, 0x1ff, 0x3, 0x7, 0x8, 0x81, 0x3627, 0x3, 0xff, 0x3, 0xffffffff, 0x2, 0x2, 0x200, 0x8, 0xfff, 0x100, 0x0, 0x2, 0x1a, 0x7, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x4, 0x2, 0x0, 0x7, 0x68, 0x5, 0x4, 0x9, 0x0, 0x20, 0xf817, 0x2, 0x3f, 0x1, 0x80000001, 0x3, 0x100, 0x4], [0x1, 0x4, 0x7, 0x2, 0xd2, 0x3ff, 0x101, 0x20, 0x5, 0x5, 0x8000, 0x6, 0x4, 0x9, 0x9, 0x3, 0x2, 0xffffffcf, 0xc64, 0x5, 0x7, 0xfb74, 0x6, 0x40, 0x7f, 0x200, 0x8, 0x2, 0x81, 0x8, 0x1, 0x9, 0x4, 0x3f69, 0x1, 0x7, 0x5, 0x4, 0xfff, 0x5, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x0, 0x200, 0xffff, 0xffff, 0x4, 0x3f, 0x40, 0xc0e0, 0xfffffff9, 0xfffffffa, 0x0, 0x4, 0xfffffffa, 0x4, 0x80000001, 0x80000001, 0x7ff, 0x20], [0x8, 0x0, 0x1, 0x6, 0x4, 0x7, 0x5, 0xeea3, 0x0, 0x9, 0x413, 0x53, 0x75d3, 0x4, 0x0, 0x9, 0xffffffff, 0x6, 0x296, 0x0, 0x7fffffff, 0x9, 0x6, 0x98c, 0xbd, 0x7f, 0x53c6fcac, 0x7fffffff, 0x3d, 0xfffffff8, 0x3fc, 0x8001, 0x101, 0x8, 0x7ed, 0x7fffffff, 0x9, 0x0, 0x8000000, 0x1, 0x0, 0x4, 0x2, 0x8, 0x2, 0x5, 0x9, 0x1, 0x1, 0x9, 0x3d, 0x2, 0xfffffffd, 0x200, 0x7f, 0x15ba, 0x7, 0x101, 0x3, 0x81, 0x92, 0x5, 0x0, 0x7], 0x4, ['!-,\x00']}, ["", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = request_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='(*}:\x00', 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r2, r3) r4 = syz_open_dev$vcsn(&(0x7f0000000800), 0x0, 0x401) openat$cgroup_freezer_state(r4, &(0x7f0000000840), 0x2, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001980)={0x53, 0xfffffffffffffffb, 0x21, 0x71, @buffer={0x0, 0x1000, &(0x7f0000000880)=""/4096}, &(0x7f0000001880)="e2c40d9f88d43be4ebdd62d32e41217dc268e7d0fdd6b5a2bb2129b885fc36b8a2", &(0x7f00000018c0)=""/71, 0x7, 0x12, 0x1000, &(0x7f0000001940)}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/forcedeth', 0x600, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000001a40)={0x92, 0x1, 0x3, "145a6d91b0208d997e27261fc6e8f8ecafe15bdf2a7f2506fa358f72aca8f5d6ccd38bd145f27c611de76c2ffa32729a78092956f3eeaaa64bd8b426321f573bd02c75a22cc3c1fcdfae4267abfa783cf59fee4d5fc84899764a58d08b7e73c11b5595f9d1b17cf0b0a78f1f733a6ba8e1254429f908a75bfb81f5155705b18457b9e0ec2368781767ed7a526c244aabd2fc"}) r6 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x9, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001b00), r6) syz_genetlink_get_family_id$gtp(&(0x7f0000001b80), r1) 23:32:51 executing program 4: r0 = syz_io_uring_setup(0x15ad, &(0x7f0000000000)={0x0, 0x9a8c, 0x0, 0x3, 0x225}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/bluetooth', 0xb0200, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x90, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/123, 0x7b, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r0}, @fd}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x40}, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @register_looper, @request_death, @dead_binder_done, @free_buffer], 0xde, 0x0, &(0x7f0000000340)="f8e469be200682ad36c6f5536aeeadd546585f389d981366d2874def7a323c3e994846e152435230c4667d11d47e7b3e377d97ad86d81b36f687276c93b63d3e32139f962828274759b1e8822c2e779569deca629c6015167b524a8d20d6d052faf8af0301f218633451f35e6e01fc0b22ac973d6365da8c8d1d0e52dde189b6a41f37906a62aae565515ac131dad92b622796ad81893094dca4d9964c7577116e5518514bf7db2fa128ee4f7a8d7ec75a8531a13f0f12e23bfc1115fa0a0eed074beb1f5000e5e26389386cdefed48f5f9ead737d9c0becccf4b2f54026"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/virtio', 0x200680, 0x8) r3 = syz_io_uring_setup(0x2ba0, &(0x7f00000004c0)={0x0, 0x934e, 0x2, 0x0, 0x57, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8a011, 0xffffffffffffffff, 0x8000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/class/dmi', 0x80, 0x3) mount_setattr(r4, &(0x7f0000000600)='./file0\x00', 0x8800, &(0x7f0000000640)={0x7c, 0x100000, 0x0, {r2}}, 0x20) r5 = io_uring_setup(0xfa4, &(0x7f0000000680)={0x0, 0xafc5, 0x0, 0x2, 0x1eb, 0x0, r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r5, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0, 0x8010, r0, 0x10000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/devices/software', 0x1, 0x130) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000740), 0xd22e, 0x8000) r8 = syz_open_dev$usbmon(&(0x7f0000000780), 0x7fff, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000800)={0x1, 0x0, &(0x7f00000007c0)=[r7, r1, r0, r8, r6, r0]}, 0x6) r9 = syz_io_uring_setup(0x6fa9, &(0x7f0000000840)={0x0, 0x313f, 0x4, 0x1, 0x1d, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x7, &(0x7f0000000940)=r4, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) 23:32:51 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='.\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x2, 0x80, 0x7f, 0xfc, 0x3, 0x45, 0x0, 0xfffffffffffffffc, 0x48020, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x2, 0x9}, 0x1108c, 0xffff, 0x7, 0x3, 0x101, 0x3b, 0x10b, 0x0, 0x101, 0x0, 0x80000001}) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x100, 0x440040) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x200, 0x3, 0x81}, 0x7, 0xffff, 'id0\x00', 'timer1\x00', 0x0, 0x100, 0x7, 0x6, 0xfb2}) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x8800) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1501}, {0x6, 0x11, 0x7}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000050}, 0x18) r3 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x0, {0x2, 0x0, 0x4}, 0x0, 0xee00, r3, 0x80000000, 0x4, 0x3dee, 0x261, 0x2, 0x5, 0x1ff, 0x8000, 0x80000000, 0x0, 0x8f9, 0x8, 0x100000000, 0x0, 0x7}}, 0xa0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000540)={0x1, 0x0, [0x0]}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000580)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000005c0)={{0xffffffffffffffff, 0x3, 0x8, 0x2, 0x8}, 0xffff, 0x20, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x800, 0x9, 0xfff}) io_setup(0xbce3, &(0x7f00000006c0)=0x0) r5 = io_uring_setup(0x5d85, &(0x7f0000000700)={0x0, 0xd194, 0x1, 0x3, 0x380, 0x0, r1}) io_cancel(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x200, r5, &(0x7f0000000780)="cc00ba2d9726f26ff8c6217583caa6222cd86b193d45999dc407c6e4e72f897e90c530c237be809111656ff88f0d0a089cadc3162927375d9f43f167a3391b3880641b81aacb26d378d9296e0e6d226bcea53557be6942b7474cf1ed5c59d2f856b85a475d776ae6a730171b6dbe4ad6a236fe901c4721916a4c1704e422fc56f7dee9fe94", 0x85, 0x2, 0x0, 0x3, r0}, &(0x7f0000000880)) write$P9_RREMOVE(r0, &(0x7f00000008c0)={0x7, 0x7b, 0x1}, 0x7) 23:32:51 executing program 6: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x3f, 0x40, 0xfa, 0x4, 0x0, 0xac, 0x80138, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x8, 0x1}, 0x10010, 0x8006, 0xffffffff, 0x5, 0x1e8, 0x7, 0x3, 0x0, 0xffffefb2, 0x0, 0x454e6789}) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0x2, 0x9, 0x4, 0x0, 0x7, 0x800, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x14005, 0x1, 0x7c, 0x8, 0x4, 0xffff423e, 0x8, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={0x0, 0x39, 0xcb}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'cmac-aes-ce\x00'}}, &(0x7f0000000200)="4c6939b82bf4da859b9384244a7ca667bfd5c2fdda0769a301fe3b49b275db3192a9f5330714157d38bff6c488a6ee42bcb2bceba63df8c1e3", &(0x7f0000000240)="2ea0fce18d51d78cc85a6fc03745b70ef05d0360e572a388b6e71c00bef0c803bc9c4c4aa9017ebbe0b7f00c2e39e4deb0867a447fbd8e070d4383b473117becc144eed213dadc1f58cad6425c37a538a858fef172d6211991febc1e47fb63fd98d0578b16a9651d2122dc55344757484bc317bea99060e3d7783b1f41c10cf29a8005c1fbd373f71689b68ced45ac723536c85ca6eee2510b572904fe02ec8c4347329218ec61cf6852b983c302f13e4c8a90f1b38a7aaabcf1a0f69a4194450211007857ccb5e4f2b17a") r1 = syz_open_dev$vcsa(&(0x7f0000000400), 0x20, 0x200) r2 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x2, 0x6, 0x8, 0x0, 0x3, 0x12962, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000340)}, 0x100, 0x200, 0xb4, 0x6, 0x8, 0xfffffff9, 0x6, 0x0, 0x8000, 0x0, 0x10000}, 0x0, 0xb, r1, 0x8) r3 = perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x1, 0x4, 0x1, 0x6, 0x0, 0x10000, 0x845c1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x100000000, 0x5}, 0xf70f63500aaa765, 0x6, 0x7, 0x2, 0x7, 0xfffffffa, 0x2, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xc, r2, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000500)={0x5, 0x80, 0x6, 0xf8, 0x8e, 0x9, 0x0, 0xfff, 0x10800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x83, 0x200, 0x3, 0x7, 0x842, 0x8, 0x0, 0x800, 0x0, 0x80000000000}) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x7, 0x7, 0xf9, 0x0, 0xea9, 0x20, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x8001}, 0x0, 0x0, 0x3632, 0x8, 0x8, 0x81, 0x3f, 0x0, 0x2}, 0x0, 0xd, r0, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000600)={0x5, 0x80, 0x4, 0x3f, 0x32, 0x7, 0x0, 0x3, 0x18001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8001, 0x2}, 0x740, 0x9, 0x5, 0x2, 0x7a, 0xffff, 0xd4, 0x0, 0x7, 0x0, 0xffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000680)=' hash=') inotify_init() r5 = perf_event_open$cgroup(&(0x7f0000000740)={0x2, 0x80, 0x0, 0x1f, 0x80, 0x80, 0x0, 0x2, 0x8, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x5}, 0x2, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x40, 0x0, 0x7, 0x0, 0x9}, r1, 0xf, 0xffffffffffffffff, 0x5) perf_event_open$cgroup(&(0x7f00000006c0)={0x1, 0x80, 0xc6, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x1, 0x3}, 0x200, 0x3f, 0xff, 0x0, 0x40, 0x40, 0xfff7, 0x0, 0x7, 0x0, 0xfff}, r1, 0x9, r5, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000007c0)={0x2, 0x80, 0xe0, 0x81, 0xe1, 0x5, 0x0, 0x400, 0x91040, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x7, 0x8000}, 0x200, 0x5, 0x5, 0x5cb170355e64d681, 0x100000000, 0x1f, 0x401, 0x0, 0xffffffff, 0x0, 0xf}, r1, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000840)) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000880)='ns/mnt\x00') io_submit(0x0, 0x1, &(0x7f00000009c0)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0xfff, r7, &(0x7f00000008c0)="154d8ed9578c1e4ac516fdc70607bc7a60d09da13e7dc6889ca2e82e35ef1d701d571e7bf8cbd0876526ad84e19882b951ebda8e212a351c8906825eb02c6b9329527533f44c6e6b0cd7227bfe27dfaafb71f314a2270d0fd0fe37f9bf2a40dda26a7d17dafd15d725b99531a1156f71b7a15d3ee857654904925eac278d54634242bf1f2a68017d6991bbf33959e2ca6a252053f012c6b34b2d80e75a67d7359503cf173523", 0xa6, 0x200, 0x0, 0x2, r1}]) io_uring_enter(r1, 0x41ba, 0xd2af, 0x2, &(0x7f0000000a00)={[0x3]}, 0x8) 23:32:51 executing program 7: bind(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000580)={0x0, 0xfffffffffffffffd, 0xc7, 0x2, @scatter={0x4, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/125, 0x7d}]}, &(0x7f0000000340)="177d5784b2ced0a68dac6538c8baac8cdd3fc47df6570adee6d0f6fd06502f18b55deaa992accd20aeee5d6cffeac4a00371677982b37e7a388e97c4b29fa3d1178e227b6ae2c6576060b3ffb99c4d80ed376ffdfa422c1a1b5919447ecad4231b1da79625aaf698060e74a5db97720ace3486331d642d43fbfeeeec1878c3ff0453cea0a501ce0a43d7abbfa741fd978c4dc455ab71dc355782a46d29d4b381d7c84d390fde9f1ba7bf99cdc8e55961397e1e6678bf983cf97b0a901ed52131ca8819717413f3", &(0x7f0000000440)=""/221, 0x4, 0x6, 0x0, &(0x7f0000000540)}) r0 = socket(0x3, 0xa, 0x1) r1 = socket$inet6(0xa, 0x5, 0x9) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000640)=@req={0x28, &(0x7f0000000600)={'macsec0\x00', @ifru_map}}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000409c}, 0x84) sendmsg$AUDIT_GET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3e8, 0x1, 0x70bd27, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = syz_open_dev$vcsa(&(0x7f0000000880), 0x2, 0x5112c0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000008c0)=0x1) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x1000000000000, 0x412200) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000009c0)={&(0x7f0000000940), &(0x7f0000000980)=""/8, 0x8}) read$usbmon(r2, &(0x7f0000000a00)=""/121, 0x79) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/devices/uprobe', 0x8400, 0x84) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000ac0), 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000b00)={0x7, 0x21, 0x2}, 0x7) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000b40)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b80)=""/140, 0x8c}, {&(0x7f0000000c40)=""/138, 0x8a}, {&(0x7f0000000d00)=""/2, 0x2}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000e00)=""/67, 0x43}, {&(0x7f0000000e80)=""/196, 0xc4}], 0x6) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000001000)) [ 126.724503] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.729667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.733101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.739132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.745454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.862857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.867246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.870093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.878262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.884322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.937823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.948265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.948641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.953242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.961058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.986960] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.005629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.008200] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.023674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.024492] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.034892] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.044975] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.049258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.063998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.077610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.080421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.099983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.103062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.105989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.113593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.118294] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.127261] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.130252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.153086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.155080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.173172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.174658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.179288] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.191134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.201186] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.812663] Bluetooth: hci0: command tx timeout [ 128.939705] Bluetooth: hci1: command tx timeout [ 129.131593] Bluetooth: hci3: command tx timeout [ 129.195965] Bluetooth: hci2: command tx timeout [ 129.198169] Bluetooth: hci4: command tx timeout [ 129.198466] Bluetooth: hci5: command tx timeout [ 129.323471] Bluetooth: hci7: command tx timeout [ 129.323665] Bluetooth: hci6: command tx timeout [ 130.860590] Bluetooth: hci0: command tx timeout [ 130.988692] Bluetooth: hci1: command tx timeout [ 131.179716] Bluetooth: hci3: command tx timeout [ 131.243800] Bluetooth: hci5: command tx timeout [ 131.245018] Bluetooth: hci4: command tx timeout [ 131.245048] Bluetooth: hci2: command tx timeout [ 131.371451] Bluetooth: hci7: command tx timeout [ 131.373785] Bluetooth: hci6: command tx timeout [ 132.909444] Bluetooth: hci0: command tx timeout [ 133.036599] Bluetooth: hci1: command tx timeout [ 133.228498] Bluetooth: hci3: command tx timeout [ 133.291663] Bluetooth: hci2: command tx timeout [ 133.294449] Bluetooth: hci4: command tx timeout [ 133.294507] Bluetooth: hci5: command tx timeout [ 133.419502] Bluetooth: hci6: command tx timeout [ 133.419907] Bluetooth: hci7: command tx timeout [ 134.955536] Bluetooth: hci0: command tx timeout [ 135.083994] Bluetooth: hci1: command tx timeout [ 135.276237] Bluetooth: hci3: command tx timeout [ 135.340685] Bluetooth: hci4: command tx timeout [ 135.341332] Bluetooth: hci2: command tx timeout [ 135.342449] Bluetooth: hci5: command tx timeout [ 135.467565] Bluetooth: hci7: command tx timeout [ 135.470648] Bluetooth: hci6: command tx timeout [ 186.751730] syz-executor.7 (297) used greatest stack depth: 24784 bytes left [ 189.443144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.448959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.454014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.464056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.469881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.610711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.624307] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.634503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.639963] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.644052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.647888] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.651750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.657996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.662936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.665612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.667907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.684944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.686527] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.696144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.698146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.718316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.727504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.742297] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.754944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.766391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.779987] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.792021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.795939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.810397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.857879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.872698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.876863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.882231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.884121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.889722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.928581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.945532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.957908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.031925] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.037354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.531577] Bluetooth: hci0: command tx timeout [ 191.788437] Bluetooth: hci3: command tx timeout [ 191.851667] Bluetooth: hci2: command tx timeout [ 191.853206] Bluetooth: hci1: command tx timeout [ 191.915582] Bluetooth: hci6: command tx timeout [ 191.916201] Bluetooth: hci4: command tx timeout [ 192.107454] Bluetooth: hci5: command tx timeout [ 192.172483] Bluetooth: hci7: command tx timeout [ 193.579537] Bluetooth: hci0: command tx timeout [ 193.835474] Bluetooth: hci3: command tx timeout [ 193.900623] Bluetooth: hci1: command tx timeout [ 193.901087] Bluetooth: hci2: command tx timeout [ 193.964755] Bluetooth: hci4: command tx timeout [ 193.965222] Bluetooth: hci6: command tx timeout [ 194.156463] Bluetooth: hci5: command tx timeout [ 194.220397] Bluetooth: hci7: command tx timeout [ 195.627636] Bluetooth: hci0: command tx timeout [ 195.883937] Bluetooth: hci3: command tx timeout [ 195.948636] Bluetooth: hci2: command tx timeout [ 195.949096] Bluetooth: hci1: command tx timeout [ 196.012460] Bluetooth: hci6: command tx timeout [ 196.012947] Bluetooth: hci4: command tx timeout [ 196.204406] Bluetooth: hci5: command tx timeout [ 196.267417] Bluetooth: hci7: command tx timeout [ 197.675980] Bluetooth: hci0: command tx timeout [ 197.931854] Bluetooth: hci3: command tx timeout [ 197.995531] Bluetooth: hci1: command tx timeout [ 197.996302] Bluetooth: hci2: command tx timeout [ 198.059973] Bluetooth: hci4: command tx timeout [ 198.061346] Bluetooth: hci6: command tx timeout [ 198.251469] Bluetooth: hci5: command tx timeout [ 198.315574] Bluetooth: hci7: command tx timeout [ 251.325566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.335676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.347128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.357873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.368213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.577656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.582040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.585160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.592219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.603275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.863970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.875534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.877578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.880218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.900669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.906099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.911834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.914652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.938472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.961455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.963659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.995564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.004013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.008033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.014216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.021039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.022155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.023799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.033462] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.036949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.039745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.052195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.081319] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.092168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.105886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.113129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.127334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.141621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.162971] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.178245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.419455] Bluetooth: hci0: command tx timeout [ 253.676441] Bluetooth: hci1: command tx timeout [ 254.060506] Bluetooth: hci2: command tx timeout [ 254.123601] Bluetooth: hci3: command tx timeout [ 254.187530] Bluetooth: hci4: command tx timeout [ 254.252432] Bluetooth: hci5: command tx timeout [ 254.571503] Bluetooth: hci6: command tx timeout [ 254.700634] Bluetooth: hci7: command tx timeout [ 255.468715] Bluetooth: hci0: command tx timeout [ 255.724434] Bluetooth: hci1: command tx timeout [ 256.107502] Bluetooth: hci2: command tx timeout [ 256.171551] Bluetooth: hci3: command tx timeout [ 256.236419] Bluetooth: hci4: command tx timeout [ 256.299443] Bluetooth: hci5: command tx timeout [ 256.619618] Bluetooth: hci6: command tx timeout [ 256.749717] Bluetooth: hci7: command tx timeout [ 257.515898] Bluetooth: hci0: command tx timeout [ 257.771433] Bluetooth: hci1: command tx timeout [ 258.156832] Bluetooth: hci2: command tx timeout [ 258.220432] Bluetooth: hci3: command tx timeout [ 258.284514] Bluetooth: hci4: command tx timeout [ 258.347802] Bluetooth: hci5: command tx timeout [ 258.668406] Bluetooth: hci6: command tx timeout [ 258.796692] Bluetooth: hci7: command tx timeout [ 259.563569] Bluetooth: hci0: command tx timeout [ 259.820448] Bluetooth: hci1: command tx timeout [ 260.204402] Bluetooth: hci2: command tx timeout [ 260.268692] Bluetooth: hci3: command tx timeout [ 260.333049] Bluetooth: hci4: command tx timeout [ 260.395546] Bluetooth: hci5: command tx timeout [ 260.715736] Bluetooth: hci6: command tx timeout [ 260.844656] Bluetooth: hci7: command tx timeout [ 313.855537] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.859050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.865003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.882122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.891227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.171838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.176948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.179354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.185913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.193828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.322245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.328806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.334028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.361913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.370559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.450838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.462961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.478847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.486431] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.486630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.490212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.507211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.510797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.513029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.520920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.525585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.546909] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.548133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.556338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.614192] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.670913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.694904] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.696795] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.744939] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.773142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.778003] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.804102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.817069] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 314.854831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.918065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.947840] Bluetooth: hci0: command tx timeout [ 316.267731] Bluetooth: hci1: command tx timeout [ 316.459462] Bluetooth: hci2: command tx timeout [ 316.588004] Bluetooth: hci6: command tx timeout [ 316.715461] Bluetooth: hci4: command tx timeout [ 316.716133] Bluetooth: hci3: command tx timeout [ 316.908415] Bluetooth: hci7: command tx timeout [ 317.035453] Bluetooth: hci5: command tx timeout [ 317.995549] Bluetooth: hci0: command tx timeout [ 318.315600] Bluetooth: hci1: command tx timeout [ 318.507561] Bluetooth: hci2: command tx timeout [ 318.635680] Bluetooth: hci6: command tx timeout [ 318.763587] Bluetooth: hci4: command tx timeout [ 318.764551] Bluetooth: hci3: command tx timeout [ 318.957424] Bluetooth: hci7: command tx timeout [ 319.083458] Bluetooth: hci5: command tx timeout [ 320.043611] Bluetooth: hci0: command tx timeout [ 320.363451] Bluetooth: hci1: command tx timeout [ 320.555462] Bluetooth: hci2: command tx timeout [ 320.684432] Bluetooth: hci6: command tx timeout [ 320.812808] Bluetooth: hci4: command tx timeout [ 320.813279] Bluetooth: hci3: command tx timeout [ 321.004660] Bluetooth: hci7: command tx timeout [ 321.133440] Bluetooth: hci5: command tx timeout [ 322.091662] Bluetooth: hci0: command tx timeout [ 322.412432] Bluetooth: hci1: command tx timeout [ 322.604434] Bluetooth: hci2: command tx timeout [ 322.731426] Bluetooth: hci6: command tx timeout [ 322.861159] Bluetooth: hci3: command tx timeout [ 322.861645] Bluetooth: hci4: command tx timeout [ 323.052418] Bluetooth: hci7: command tx timeout [ 323.181707] Bluetooth: hci5: command tx timeout [ 376.386791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.395270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.400000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.412281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.420101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.453756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.457473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.460225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.470148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.478037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.650964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.655869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.659884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.665791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.671258] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.732111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.736987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.765234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.791916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.842639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.845272] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.848667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 376.852151] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 376.853882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.862042] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 376.868554] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.871126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.875184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.879492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.886834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.891532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 376.952218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.956923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.014068] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.053282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.059054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.088201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.100146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.172951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.186989] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.475530] Bluetooth: hci0: command tx timeout [ 378.539860] Bluetooth: hci1: command tx timeout [ 378.731574] Bluetooth: hci2: command tx timeout [ 378.923816] Bluetooth: hci7: command tx timeout [ 378.987670] Bluetooth: hci3: command tx timeout [ 378.989077] Bluetooth: hci5: command tx timeout [ 379.243493] Bluetooth: hci4: command tx timeout [ 379.371493] Bluetooth: hci6: command tx timeout [ 380.526034] Bluetooth: hci0: command tx timeout [ 380.589380] Bluetooth: hci1: command tx timeout [ 380.780528] Bluetooth: hci2: command tx timeout [ 380.973469] Bluetooth: hci7: command tx timeout [ 381.036495] Bluetooth: hci5: command tx timeout [ 381.036576] Bluetooth: hci3: command tx timeout [ 381.292555] Bluetooth: hci4: command tx timeout [ 381.421318] Bluetooth: hci6: command tx timeout [ 382.572527] Bluetooth: hci0: command tx timeout [ 382.636431] Bluetooth: hci1: command tx timeout [ 382.827616] Bluetooth: hci2: command tx timeout [ 383.019456] Bluetooth: hci7: command tx timeout [ 383.084472] Bluetooth: hci3: command tx timeout [ 383.085088] Bluetooth: hci5: command tx timeout [ 383.339489] Bluetooth: hci4: command tx timeout [ 383.468231] Bluetooth: hci6: command tx timeout [ 384.620563] Bluetooth: hci0: command tx timeout [ 384.684477] Bluetooth: hci1: command tx timeout [ 384.875591] Bluetooth: hci2: command tx timeout [ 385.069591] Bluetooth: hci7: command tx timeout [ 385.132045] Bluetooth: hci5: command tx timeout [ 385.133268] Bluetooth: hci3: command tx timeout [ 385.389281] Bluetooth: hci4: command tx timeout [ 385.517413] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:37:56 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff888028395280 RCX=1ffffffff0c82150 RDX=0000000000000000 RSI=ffffffff81209640 RDI=ffff88802839567c RBP=00007f184d363d82 RSP=ffff8880178e6fe8 R8 =ffffffff8678c6ea R9 =0000000000000000 R10=00007f184d363000 R11=0000000000000003 R12=ffff8880178e7120 R13=0000000000000000 R14=ffff888028395280 R15=0000000000092cc0 RIP=ffffffff815abe0a RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000563c65367080 CR3=00000000361bb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=000000000000002f RCX=ffffffff81b896ac RDX=ffff888035685280 RSI=ffffffff81b897e3 RDI=0000000000000001 RBP=0000000000000003 RSP=ffff8880373cfa58 R8 =0000000000000000 R9 =00000001fdffffff R10=000000000000002f R11=0000000000000001 R12=0000000000727375 R13=ffff8880373cfc48 R14=ffff8880373cfc38 R15=ffff888009159c6b RIP=ffffffff81b897e3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007faf4507e008 CR3=000000002db71000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000