Warning: Permanently added '[localhost]:43952' (ECDSA) to the list of known hosts. 2024/10/31 09:43:13 fuzzer started 2024/10/31 09:43:13 dialing manager at localhost:45639 syzkaller login: [ 65.280604] cgroup: Unknown subsys name 'net' [ 65.386904] cgroup: Unknown subsys name 'cpuset' [ 65.418977] cgroup: Unknown subsys name 'rlimit' 2024/10/31 09:43:30 syscalls: 206 2024/10/31 09:43:30 code coverage: enabled 2024/10/31 09:43:30 comparison tracing: enabled 2024/10/31 09:43:30 extra coverage: enabled 2024/10/31 09:43:30 setuid sandbox: enabled 2024/10/31 09:43:30 namespace sandbox: enabled 2024/10/31 09:43:30 Android sandbox: enabled 2024/10/31 09:43:30 fault injection: enabled 2024/10/31 09:43:30 leak checking: enabled 2024/10/31 09:43:30 net packet injection: enabled 2024/10/31 09:43:30 net device setup: enabled 2024/10/31 09:43:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/31 09:43:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/31 09:43:30 USB emulation: enabled 2024/10/31 09:43:30 hci packet injection: enabled 2024/10/31 09:43:30 wifi device emulation: enabled 2024/10/31 09:43:30 802.15.4 emulation: enabled 2024/10/31 09:43:30 fetching corpus: 0, signal 0/0 (executing program) 2024/10/31 09:43:32 starting 8 fuzzer processes 09:43:32 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x63692d0b07e714e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8040800) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tzdata_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x4800) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc9fcc48a06ae63aa}, 0x10008001) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:udev_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc000}, 0x18014) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan1\x00', <r6=>0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000844) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24060000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000c80), r5) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040884}, 0x80000) 09:43:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x30040020}, 0x9080) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r5=>0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r6=>0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c100}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x57e6af673f96f023}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x50) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lvm_control_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r4) 09:43:32 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r2, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffc01}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="e9340fb834e3b9555b32d0cce73d86fa96668d7da63d740d3c90493dfc43ef8958f578bf0799dbb956c9398d6c77889a70d08b321d763e4c5e353f4bf7993db0d6bc64502ac76224cd564e8d72cfcf08eeb70c57aa8ed5011c418cd1ca507267f25afc48160d503833d63ddd78e107", 0x6f}, {&(0x7f0000000180)="3aaac0cd0c20ecd9ea54cb8cd597dc241af3feff7500be0531c9ca24d9ea1b049228d6fde4280577b6047419c4152ef2e07923ff0e2a3e4e052659ef2f702beeb47a303daafb176bef701216c6b775833f157e814bcb73cb8d", 0x59}], 0x2, &(0x7f0000000240)=[@rthdr={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x1, 0x0, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdrdstopts={{0x118, 0x29, 0x37, {0x2c, 0x1f, '\x00', [@ra={0x5, 0x2, 0xfff8}, @generic={0x80, 0xab, "7bf2a94fb073f94fb5ab7d98176cafd423a74969f876aff89910ecd4b8405b465a72cb0c8167e36c5be713fada2bb1a29bb88641319537f44e6b9bb5bdfb2c2a1820d8f44b46df0fcb71276f8b8a96810caca5d27717b736347382967c6cfa445de6741c72f59ce4c170c623e64cf5ba746708726124e3954a4581a9c3ab8bdf14ba9937fa2a6f7c8c54a4208a9bc4b7767c62c59589edbe8a2c74083d36999ba5fe703ea8fda404d1caca"}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x80, 0x8, [0xff, 0x3e]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x4, [0x7f, 0x5]}}, @enc_lim={0x4, 0x1, 0x1a}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x73, 0xa, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, @private1, @local, @private1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x81}}], 0x1d0}, 0x20000001) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x6, 0xfa, 0x40, 0x23, @empty, @mcast1, 0x80, 0x8000, 0x8, 0x2}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc5b0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x64008080}, 0x81) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000680)={0xfff}, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000006c0)) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000700)) writev(r2, &(0x7f0000000b40)=[{&(0x7f0000000740)="81944dee4cae17ce9adc12bd1b019918912213dd056f43d38473ad99a6115fb962e3c6208c525209748b6ba4c18056ece5184cf59738f7a8edd69545df019efabfff101931eb3df98827014aeb0e3798de352cb7fd3924818d7a87da8112c1711f7b1641e6bb54e2302b528822b16ae70a05d0d7e30d8290406ec944cb6b7683861973eef2bf4ceaf49ae1db6182bceb9cd3157399d6532c51f25b66e8eb84d08a892544b9f5a7df21c70fb7e1ff31d66d10713a9b3b9972bc5eb0559c2e859667166823788eacb1b68fe4275afc7a5a6c3bc74c89cf3e1def692517899370d305e0da424d2584583059aa2654e3b0359f6cff425249d841a1", 0xf9}, {&(0x7f0000000840)="94129b968906f11237b52d094b25973d84251cf2b6f1ee8a1d7d8625d78d0184dfc18d38766221dfdb99d598b8ca85073461ed78d2188ed59b948f2230dab57d20edf0106b3c63", 0x47}, {&(0x7f00000008c0)="6c6fc32face3a4ec1566cf52c28ced732a4d547dc628219de41f8110bea950820d2335d76bedbca25e37896be4c04a8637699fdc53c2f239de42d8b94297047e7af14319f2e3cfcb5049e3fdafa5a4ab17deb54a37847744a3f7ec28b82ebf261988d51ca8fcffeb7e75504b6435f3c9afbb7a73b54da0338dcaac019598481009129f1c68ac04fccd52149b93c166f12222affca622639cd5a2e400c0e4067e260609d9c6bcf83a935e349322538767b0c27a2ab17de421148a0d3e633c6b865d384ef1929b02c987bf7734575fb0dc81a3f74d4b0cc988d5", 0xd9}, {&(0x7f00000009c0)="686f223bdcce5fce34a1253e1215ee3f2290bceff5f2632051addf4f689403b75b9c38ebe91e1f9437371ddb435c9754e81311e3154c0c99af31364de597fb1c400f3a0542c429673be229bab6754295edc31994569196e27011fe1c5cc01a4f8b70129d8fabf50b8114434825c35b25aedad0fc2668c7d85fd1e46dc50f49f416e191e1a49f06b7952292afdd822d18e0b668e3a8a6035df7290fc15d9ef0668c4bf147ace0e6cdfbd7fe0a1a98d07dd978a6caa14a81686034187a80536b87", 0xc0}, {&(0x7f0000000a80)="b3db16bc90d707a420887275fa735abb5aab77f9643faea77c0a1ee85ad8dc482f46d28a89e2937c15f8829a7f78ff7804f91a97ff462fc9885fefd5e057d0ee5d8d3732db75a50844e3414c420df13f6058cc3885e6be34951217f5c9826fb64148264c0e47a6918f85070003faaee5112d8ae456dccb4ab871cd6388661fc83e", 0x81}], 0x5) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400000, 0x0) ioctl$FICLONE(r2, 0x40049409, r5) r6 = syz_open_dev$evdev(&(0x7f0000000c00), 0x8, 0x0) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f0000000c40)={0x4, 0x5, 0x2ff4, 0x7, 0xed1, 0x2}) r7 = syz_open_dev$evdev(&(0x7f0000000c80), 0x10001, 0x202240) fsync(r7) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) [ 83.303357] audit: type=1400 audit(1730367812.480:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:43:32 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi_x86', 0x200100, 0x110) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9ae7113c658ad2f7}, 0x40810) r2 = memfd_secret(0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r3=>0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r4=>0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="04bea819edfc"}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000084) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f00000004c0)="cb148e953c18b885bf7820efce722f7c1b7e85ea75137d0a2a5092d6301abdbb98e9d7ef0dab68cbcab9af1091aee608b8c5dcc0f9ff2e7d8f90fccd78d607de82f3119f59e0c1ca098835a8c10f2edcb88f28a96aacae0598b5da80524bed530ffdb061c045a305d9a1338f192ae04cad7231db681cde64325e301d51f52dcf901248d3f880b1738dcf72898785c3ba9d41fd4bc6387e4c2e382fde3a678c6f0f26793e244def965128d50afad98cd9", 0xb0}], 0x1, 0x2) recvfrom(r2, &(0x7f00000005c0)=""/184, 0xb8, 0x10000, &(0x7f0000000680)=@rc={0x1f, @none, 0x2}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x4, 0x3f, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f2b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x811}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000880)) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f00000008c0)=""/48) r6 = syz_open_dev$vcsn(&(0x7f0000000900), 0xe7, 0x800) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000a00)={&(0x7f0000000940), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x881) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000b80)) pwrite64(0xffffffffffffffff, &(0x7f0000000bc0)="c18d136a93ed4507b1793476847cbdcd79989608ce34ed82efe0f29a25fc9c0335a54b087fd6b210c7e3512d79947b0237a03acfd1dc145456eb9f2d29e15204d7625606fa49fccce424038bf55fecb2a6c0e4249ad0d553551ecbbbfd35fb92af01dcf6e3793b88fb3522fcd13e97a515582b971bd8aa44ee6c09985a9c1b20779b7845e6f57de2db735dd9ceee3a1c72adeecc0d4310bdccf564a0ef02773c1e1cd9c25ca5660e19ead9f1075bcceabf713a06096e2de1a74aa0d218b8cef01bbf3323e05e14b98859e3d8b938e4f6470efe36e4f28ccd6782e354784bb9c1902642177990", 0xe6, 0xfffffffffffffffa) 09:43:32 executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000001) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000002c0)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={<r3=>r2, 0x3, 0x93e1, 0x10001}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6gre0\x00', <r5=>r1, 0x2f, 0x0, 0xd0, 0xedd, 0x28, @remote, @mcast2, 0x1, 0x10, 0x6, 0x5}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x58}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000680)) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x24000014) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000740)={0x0, 0x2, r3, 0xfffffffd, 0x80000}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00'}) 09:43:32 executing program 5: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000, 0x7f}) fcntl$setpipe(r0, 0x407, 0x200) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001040)=0x1) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000001080), &(0x7f00000010c0)={'U+', 0x5}, 0x16, 0x1) pipe(&(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$getown(r3, 0x9) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001140)={0x0, @nfc={0x27, 0x1, 0x0, 0x1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf5}, @l2tp={0x2, 0x0, @local}, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x100, 0x5}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x4c71c052a1a5dd91}}, './file0\x00'}) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x8001) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000001240)={&(0x7f0000001200)=""/34, 0x22, 0x2, 0x3}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000001280)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000012c0)) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000013c0)={r2, 0x3, 0x2, 0x16e7}) fcntl$setstatus(r1, 0x4, 0x44c00) r6 = memfd_secret(0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x2e}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 09:43:32 executing program 6: ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/206) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/79) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000500)=""/243, 0xf3}], 0x8, &(0x7f0000000680)=""/66, 0x42}, 0x10040) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000740)) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000940)=""/88) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000009c0)={<r1=>r0, 0x1000, 0x100, 0x3}) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x561280, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000a40)=""/35) r3 = syz_open_dev$evdev(&(0x7f0000000a80), 0x5, 0x107680) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000ac0)=""/180) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000b80)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000bc0)) accept(r4, &(0x7f0000000c00)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000c80)=0x80) pipe2(&(0x7f0000000cc0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000d00)=""/204) r7 = socket$inet(0x2, 0x3, 0x4) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000e00), &(0x7f0000000e40), 0x2, 0x3) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000f00)={0x8, 0x0, 0x7, 0x0, 0x0, [{{}, 0x7}, {{r2}, 0x100000000}, {{r0}, 0x6}, {{}, 0x655}, {{r0}, 0x5}, {{r6}, 0x8}, {{r7}, 0x8000}]}) 09:43:32 executing program 7: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="d835cb49980e39bf9843087cb1956c0675261d3fd6eeb9632263dd643a17197ac7d66ef9f3b308f90b8e0cfc8d1520958719db4d53ac71b13e747528b84aeaa640457ee9d16aafe14a2aae8e1b616144170d279a995d16e45792bb9b47", 0x5d}, 0x68) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)='*-:&\x00', 0x5, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000240)={0x2, 0x3, 0x1}) sync_file_range(r0, 0x3f, 0x4, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000280)={{<r2=>0x0, 0x8001, 0x93f5, 0x7fff, 0x2dc, 0x100000001, 0x6, 0x831c, 0xf9, 0x4, 0x6, 0x80000000, 0x0, 0x6, 0x1}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000340)={{r2, 0x2d5123b1, 0x3, 0x98, 0x1000, 0x10001, 0xed, 0x7, 0x4, 0x7, 0x0, 0xffffffff, 0x101, 0x38c00, 0x8096}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000400)) r3 = syz_open_dev$vcsn(&(0x7f0000000440), 0x7b1, 0x20401) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/163) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000580)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000540)="d88ef2c7b53fb743121265e902da10bf6454006214cfda2cdafbc1a7958f217e390dbc79dbd12626220e042cd6ca0fed784258", 0x33, r3}, 0x68) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000600)={0x2, 0x18, 0x2347, 0x5, "65ca6d22f997ec36a2c5e25a3d86a17d7fd24ed6fc18a4a611552e4290569277"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x200400, 0x0) openat$cgroup_type(r4, &(0x7f0000000680), 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 84.821093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.823556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.826329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.834616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.840871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.844903] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.855082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.861269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.864568] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.870353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.878045] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.879959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.883197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.888728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.890891] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.891977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.896266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.899050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.911979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.913468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.915277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.929120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.929912] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.931223] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.935541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.939100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.945235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.947644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.949490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.951852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.954016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.961411] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.963283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.967959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.969715] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.974814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.988180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.992305] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.994558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.006744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.009272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.010628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.038674] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.057008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.062024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.068357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.075726] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.077491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.948513] Bluetooth: hci0: command tx timeout [ 86.950239] Bluetooth: hci2: command tx timeout [ 87.011549] Bluetooth: hci1: command tx timeout [ 87.013022] Bluetooth: hci3: command tx timeout [ 87.076843] Bluetooth: hci6: command tx timeout [ 87.077463] Bluetooth: hci5: command tx timeout [ 87.078083] Bluetooth: hci4: command tx timeout [ 87.139116] Bluetooth: hci7: command tx timeout [ 88.994998] Bluetooth: hci0: command tx timeout [ 88.995558] Bluetooth: hci2: command tx timeout [ 89.059890] Bluetooth: hci1: command tx timeout [ 89.061304] Bluetooth: hci3: command tx timeout [ 89.123929] Bluetooth: hci4: command tx timeout [ 89.125330] Bluetooth: hci5: command tx timeout [ 89.125368] Bluetooth: hci6: command tx timeout [ 89.187930] Bluetooth: hci7: command tx timeout [ 91.043828] Bluetooth: hci0: command tx timeout [ 91.043860] Bluetooth: hci2: command tx timeout [ 91.107140] Bluetooth: hci1: command tx timeout [ 91.107621] Bluetooth: hci3: command tx timeout [ 91.170949] Bluetooth: hci4: command tx timeout [ 91.171437] Bluetooth: hci6: command tx timeout [ 91.172874] Bluetooth: hci5: command tx timeout [ 91.234848] Bluetooth: hci7: command tx timeout [ 93.091040] Bluetooth: hci0: command tx timeout [ 93.091818] Bluetooth: hci2: command tx timeout [ 93.154978] Bluetooth: hci1: command tx timeout [ 93.155050] Bluetooth: hci3: command tx timeout [ 93.218903] Bluetooth: hci6: command tx timeout [ 93.219023] Bluetooth: hci5: command tx timeout [ 93.220400] Bluetooth: hci4: command tx timeout [ 93.282954] Bluetooth: hci7: command tx timeout [ 147.864073] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.867473] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.870983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.881548] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.889116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.928964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.967583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.972113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.973516] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.982482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.985614] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.014496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.017418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.018870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.020428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.022584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.030070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.034375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 148.034549] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.037112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.038793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.040435] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.041346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.042461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.043570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.046044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.047439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 148.048644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.050137] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.059027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.062146] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.062204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.066647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.070114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.072064] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 148.073301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.080258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 148.084125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 148.095084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.095947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.105074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.105138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.107402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 148.109971] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.112694] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 148.115748] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.125516] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.127027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.987042] Bluetooth: hci0: command tx timeout [ 150.115870] Bluetooth: hci1: command tx timeout [ 150.117506] Bluetooth: hci2: command tx timeout [ 150.179270] Bluetooth: hci4: command tx timeout [ 150.179973] Bluetooth: hci5: command tx timeout [ 150.180546] Bluetooth: hci3: command tx timeout [ 150.242968] Bluetooth: hci7: command tx timeout [ 150.243976] Bluetooth: hci6: command tx timeout [ 152.034901] Bluetooth: hci0: command tx timeout [ 152.176175] Bluetooth: hci1: command tx timeout [ 152.176315] Bluetooth: hci2: command tx timeout [ 152.227375] Bluetooth: hci4: command tx timeout [ 152.228916] Bluetooth: hci3: command tx timeout [ 152.229458] Bluetooth: hci5: command tx timeout [ 152.290836] Bluetooth: hci6: command tx timeout [ 152.293017] Bluetooth: hci7: command tx timeout [ 154.082855] Bluetooth: hci0: command tx timeout [ 154.211708] Bluetooth: hci1: command tx timeout [ 154.213832] Bluetooth: hci2: command tx timeout [ 154.275911] Bluetooth: hci5: command tx timeout [ 154.275963] Bluetooth: hci3: command tx timeout [ 154.276415] Bluetooth: hci4: command tx timeout [ 154.338900] Bluetooth: hci7: command tx timeout [ 154.339467] Bluetooth: hci6: command tx timeout [ 156.131077] Bluetooth: hci0: command tx timeout [ 156.258905] Bluetooth: hci1: command tx timeout [ 156.260119] Bluetooth: hci2: command tx timeout [ 156.323015] Bluetooth: hci4: command tx timeout [ 156.323890] Bluetooth: hci3: command tx timeout [ 156.324373] Bluetooth: hci5: command tx timeout [ 156.386975] Bluetooth: hci6: command tx timeout [ 156.388260] Bluetooth: hci7: command tx timeout [ 209.774700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.776214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.777226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.779586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.781397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.782625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.843462] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.846614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.847661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.856519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.858066] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.859160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.091357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.093254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.097971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.100421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.102234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.103482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.131980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.150983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.155211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.159082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.160208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.162269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.165140] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.166523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.167399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.183388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.185133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.186698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.191529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.193580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.194662] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.203393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.207534] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.208887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.216581] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.217959] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.219099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.221429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.222925] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.223961] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.236101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.237549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.238929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.241225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.289729] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.290878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.811968] Bluetooth: hci0: command tx timeout [ 211.939836] Bluetooth: hci1: command tx timeout [ 212.131833] Bluetooth: hci2: command tx timeout [ 212.194909] Bluetooth: hci5: command tx timeout [ 212.259849] Bluetooth: hci7: command tx timeout [ 212.260535] Bluetooth: hci3: command tx timeout [ 212.323845] Bluetooth: hci6: command tx timeout [ 212.388200] Bluetooth: hci4: command tx timeout [ 213.860791] Bluetooth: hci0: command tx timeout [ 213.986847] Bluetooth: hci1: command tx timeout [ 214.180030] Bluetooth: hci2: command tx timeout [ 214.243135] Bluetooth: hci5: command tx timeout [ 214.307896] Bluetooth: hci3: command tx timeout [ 214.309323] Bluetooth: hci7: command tx timeout [ 214.371842] Bluetooth: hci6: command tx timeout [ 214.436769] Bluetooth: hci4: command tx timeout [ 215.906814] Bluetooth: hci0: command tx timeout [ 216.035968] Bluetooth: hci1: command tx timeout [ 216.227838] Bluetooth: hci2: command tx timeout [ 216.291982] Bluetooth: hci5: command tx timeout [ 216.354856] Bluetooth: hci3: command tx timeout [ 216.356326] Bluetooth: hci7: command tx timeout [ 216.419893] Bluetooth: hci6: command tx timeout [ 216.523781] Bluetooth: hci4: command tx timeout [ 217.954971] Bluetooth: hci0: command tx timeout [ 218.082902] Bluetooth: hci1: command tx timeout [ 218.274887] Bluetooth: hci2: command tx timeout [ 218.341817] Bluetooth: hci5: command tx timeout [ 218.403875] Bluetooth: hci3: command tx timeout [ 218.405193] Bluetooth: hci7: command tx timeout [ 218.467853] Bluetooth: hci6: command tx timeout [ 218.530893] Bluetooth: hci4: command tx timeout [ 271.997410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.999512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.003120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.016475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.019227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.025965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.119147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.121305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.122368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.125377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.129087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.131049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.237244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.239432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.242585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.246915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.261586] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.266704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.364212] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.383245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.386014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.389154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.391289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.399293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.401891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.404498] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.408158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.412046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.428207] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.431610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.503511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.536286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.552333] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.553976] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.555364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.555588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.558422] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.558503] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.565066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.570126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.571157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.571898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.572529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.593460] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.614185] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.616912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 272.633093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.634636] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 274.083282] Bluetooth: hci0: command tx timeout [ 274.211944] Bluetooth: hci1: command tx timeout [ 274.339920] Bluetooth: hci2: command tx timeout [ 274.467945] Bluetooth: hci4: command tx timeout [ 274.531862] Bluetooth: hci3: command tx timeout [ 274.723079] Bluetooth: hci5: command tx timeout [ 274.787303] Bluetooth: hci7: command tx timeout [ 274.787448] Bluetooth: hci6: command tx timeout [ 276.130883] Bluetooth: hci0: command tx timeout [ 276.259000] Bluetooth: hci1: command tx timeout [ 276.386819] Bluetooth: hci2: command tx timeout [ 276.516813] Bluetooth: hci4: command tx timeout [ 276.578832] Bluetooth: hci3: command tx timeout [ 276.771011] Bluetooth: hci5: command tx timeout [ 276.835001] Bluetooth: hci7: command tx timeout [ 276.835491] Bluetooth: hci6: command tx timeout [ 278.180062] Bluetooth: hci0: command tx timeout [ 278.306918] Bluetooth: hci1: command tx timeout [ 278.435999] Bluetooth: hci2: command tx timeout [ 278.563876] Bluetooth: hci4: command tx timeout [ 278.628769] Bluetooth: hci3: command tx timeout [ 278.819833] Bluetooth: hci5: command tx timeout [ 278.882874] Bluetooth: hci7: command tx timeout [ 278.884112] Bluetooth: hci6: command tx timeout [ 280.229626] Bluetooth: hci0: command tx timeout [ 280.355820] Bluetooth: hci1: command tx timeout [ 280.483781] Bluetooth: hci2: command tx timeout [ 280.611860] Bluetooth: hci4: command tx timeout [ 280.676756] Bluetooth: hci3: command tx timeout [ 280.867811] Bluetooth: hci5: command tx timeout [ 280.931137] Bluetooth: hci7: command tx timeout [ 280.931177] Bluetooth: hci6: command tx timeout [ 334.514431] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.516638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.520042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.524663] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.528257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.535411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.642867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.645804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.649974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.652383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.656092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.661027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.666524] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.668202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.671066] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.677682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.683955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.685770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.771886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.784462] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.786691] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.791293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.800394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.807568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.810740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.817034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.838248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.843180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.854101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.867889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.873211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.879078] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.883065] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.884264] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.891271] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.895113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.897533] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.900499] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.904124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.910579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.916819] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.918257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.921519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.924247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.925336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.928002] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.929293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.936665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.610808] Bluetooth: hci0: command tx timeout [ 336.738857] Bluetooth: hci1: command tx timeout [ 336.740051] Bluetooth: hci2: command tx timeout [ 336.930887] Bluetooth: hci3: command tx timeout [ 336.996138] Bluetooth: hci4: command tx timeout [ 336.997079] Bluetooth: hci6: command tx timeout [ 336.997205] Bluetooth: hci7: command tx timeout [ 337.058825] Bluetooth: hci5: command tx timeout [ 338.659004] Bluetooth: hci0: command tx timeout [ 338.786916] Bluetooth: hci2: command tx timeout [ 338.787095] Bluetooth: hci1: command tx timeout [ 338.978811] Bluetooth: hci3: command tx timeout [ 339.042885] Bluetooth: hci7: command tx timeout [ 339.044849] Bluetooth: hci4: command tx timeout [ 339.045392] Bluetooth: hci6: command tx timeout [ 339.106807] Bluetooth: hci5: command tx timeout [ 340.706853] Bluetooth: hci0: command tx timeout [ 340.834887] Bluetooth: hci2: command tx timeout [ 340.835418] Bluetooth: hci1: command tx timeout [ 341.026802] Bluetooth: hci3: command tx timeout [ 341.090851] Bluetooth: hci6: command tx timeout [ 341.091865] Bluetooth: hci4: command tx timeout [ 341.091894] Bluetooth: hci7: command tx timeout [ 341.154855] Bluetooth: hci5: command tx timeout [ 342.755077] Bluetooth: hci0: command tx timeout [ 342.883783] Bluetooth: hci1: command tx timeout [ 342.883818] Bluetooth: hci2: command tx timeout [ 343.074858] Bluetooth: hci3: command tx timeout [ 343.138801] Bluetooth: hci7: command tx timeout [ 343.139904] Bluetooth: hci4: command tx timeout [ 343.139940] Bluetooth: hci6: command tx timeout [ 343.202897] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:48:43 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=1ffffffff0c7e4fc RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888016469f7c RBP=ffffffff863f27d4 RSP=ffff88806ce09bc8 R8 =ffff88806ce3c798 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=ffff88806ce09ff8 R12=ffff88806ce3c780 R13=0000000000000000 R14=ffffffff863f34b8 R15=ffff88806ce00000 RIP=ffffffff813b22f6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70c1dcc6f4 CR3=0000000034586000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000ff0000 XMM02=0000ff00000000000000000000ff0000 XMM03=000000000000ff000000000000000000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff813e921f RBX=ffffffff813e8f70 RCX=ffff88803473f4b8 RDX=1ffff110068e7e8e RSI=ffffffff813e921f RDI=ffffffff813e921f RBP=ffff88803473f4b0 RSP=ffff88803473f418 R8 =0000000000000001 R9 =ffff88803473f458 R10=000000000003c001 R11=0000000000003f0d R12=ffff88803473f4e0 R13=0000000000000000 R14=ffff888016251b80 R15=0000000000092cc0 RIP=ffffffff810d19a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f35d5059540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f35d512a710 CR3=0000000034930000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00 XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000