Warning: Permanently added '[localhost]:18432' (ECDSA) to the list of known hosts. 2024/12/14 23:53:59 fuzzer started 2024/12/14 23:53:59 dialing manager at localhost:36477 syzkaller login: [ 63.757949] cgroup: Unknown subsys name 'net' [ 63.850781] cgroup: Unknown subsys name 'cpuset' [ 63.882104] cgroup: Unknown subsys name 'rlimit' 2024/12/14 23:54:17 syscalls: 200 2024/12/14 23:54:17 code coverage: enabled 2024/12/14 23:54:17 comparison tracing: enabled 2024/12/14 23:54:17 extra coverage: enabled 2024/12/14 23:54:17 setuid sandbox: enabled 2024/12/14 23:54:17 namespace sandbox: enabled 2024/12/14 23:54:17 Android sandbox: enabled 2024/12/14 23:54:17 fault injection: enabled 2024/12/14 23:54:17 leak checking: enabled 2024/12/14 23:54:17 net packet injection: enabled 2024/12/14 23:54:17 net device setup: enabled 2024/12/14 23:54:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/14 23:54:17 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/14 23:54:17 USB emulation: enabled 2024/12/14 23:54:17 hci packet injection: enabled 2024/12/14 23:54:17 wifi device emulation: enabled 2024/12/14 23:54:17 802.15.4 emulation: enabled 2024/12/14 23:54:17 fetching corpus: 0, signal 0/0 (executing program) 2024/12/14 23:54:19 starting 8 fuzzer processes 23:54:19 executing program 0: r0 = socket(0x10, 0xa, 0xfffffbff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x3ff, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4894) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x27) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040151}, 0xc0001) socketpair(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004085}, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x27b616e9fc2f0d15) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000800), r5) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x5008) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f00000009c0)=""/250) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100500}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) 23:54:19 executing program 1: write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x10, 0x1, 0x8}, 0x1}}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x40, 0x7, 0x401, 0x6, {{0x47, 0x4, 0x3, 0x12, 0x11c, 0x68, 0x0, 0x7, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0x27, 0x6b, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, @multicast2, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_prespec={0x44, 0x4c, 0xeb, 0x3, 0x2, [{@multicast2, 0x100}, {@empty, 0x8000}, {@empty, 0xbd3}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x7f}, {@multicast1, 0x1}, {@broadcast, 0x7}, {@private=0xa010101, 0x8}, {@loopback, 0x1c9986c3}]}, @end, @generic={0x89, 0x8, "1649d46ecc99"}, @lsrr={0x83, 0xf, 0xe6, [@multicast1, @remote, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xdc, 0x3, 0x6, [{@local, 0x10000}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x8}, {@local, 0xfe}, {@multicast1, 0x5}]}, @cipso={0x86, 0x50, 0x27b8e2cd1a060a86, [{0x5, 0xd, "414b4d1789d645b0b7475d"}, {0x0, 0x10, "382fe33b67b6caa0fccd60fc7260"}, {0x0, 0x7, "39d7c1a970"}, {0x6, 0x11, "7ad438690de1cf93dfd3a07c47a70b"}, {0x0, 0x7, "6486181ce2"}, {0x0, 0x4, "40a7"}, {0x2, 0xa, "b3757f7e3055d858"}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x22a, 0x3}, 0xd229, 0x3f, 0x101}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x404000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLERROR(r1, &(0x7f0000000280)={0xa, 0x7, 0x1, {0x1, ':'}}, 0xa) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000340)=0x1) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/3, 0x3, 0x1, &(0x7f00000003c0)=""/127, 0x7f}, &(0x7f0000000480)=0x40) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000004c0)={0x7, 0x4b, 0x2}, 0x7) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000500)={{0x1, 0x0, 0x2, 0x0, 0x63c}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000540)={{0x0, 0x3, 0x8, 0x3, 0x7}, 0xbc1, 0x4}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x404080, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x1000) pipe2$9p(&(0x7f0000000600), 0x84000) [ 82.896672] audit: type=1400 audit(1734220459.968:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:54:20 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000040)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x841, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x2, 0x9, 0x1}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"50314b71e60ec1734d91601f02b88b75", r2, 0x0, {0x0, 0x8}, {0x8, 0xfffff000}, 0x401, [0xf90a, 0x1, 0x9, 0x6, 0xfff, 0x6, 0xc0, 0xf4c0, 0x4, 0xffffffffffffffe8, 0x0, 0x10001, 0x5, 0x7, 0x1000, 0xec8]}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000580)=0x96f0) r3 = socket(0x2a, 0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x6a, 0x80000001, 0x9, @dev={0xfe, 0x80, '\x00', 0x19}, @remote, 0x8000, 0x40, 0x1ec515f9, 0x9ea9}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)) r5 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000a40)={'\x00', 0x200, 0x0, 0xeb3a, 0x1, 0x0, r5}) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000ac0)=0x8000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b00), 0x40000, 0x0) write$rfkill(r6, &(0x7f0000000b40)={0x7ff, 0x3, 0x2, 0x1, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4af0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xaac1e718139e7483}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000d00)) 23:54:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x102) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"cd39f02ccfd8314d90a795e77ebea04f", r2, r4, {0x3, 0x3}, {0x9, 0x40000}, 0x7, [0x1ff, 0x7704, 0x2, 0x8, 0x1, 0x399, 0x20, 0x9, 0x10000, 0x9, 0x0, 0x1, 0x9, 0xff, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"9bf1694e068e4e88eaad628a687fcccc", r3, r6, {0x5, 0xfffffffa}, {0x7ff, 0xfffff001}, 0x9, [0x4, 0x80000000, 0x9fd2, 0x1, 0x1000, 0x61b, 0x6, 0x7ff, 0x2, 0x9, 0x260, 0x87e4, 0x20, 0x100, 0x8000, 0x6]}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000480)=r7) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000004c0)) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000500)=0x7f) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x58}}, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000680)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000006c0)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000700), 0x48c0c0, 0x0) ioctl$BLKRAGET(r8, 0x1263, &(0x7f0000000740)) setfsgid(0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r8, 0x80083314, &(0x7f0000000780)) r9 = syz_open_dev$loop(&(0x7f00000007c0), 0x4, 0x204680) ioctl$BLKRRPART(r9, 0x125f, 0x0) 23:54:20 executing program 6: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x81, 0x67, 0x9, 0x81, 0x0, 0x1893, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000080)}, 0x340, 0x6, 0x8, 0x2, 0x4, 0x3, 0xcbba, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x2, 0x80, 0x81, 0x76, 0x5, 0x9, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140), 0x4}, 0x300, 0x3, 0x1, 0x6, 0xc8a, 0x8, 0x400, 0x0, 0xffff}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x2) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x1a000, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000240)={0xffff, 0x8}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x0, 0xfb, 0x3f, 0x1, 0x0, 0xffffffffffffffff, 0x2084, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000280), 0x9}, 0x40000, 0x2, 0x2, 0x7, 0x5, 0x3, 0x5, 0x0, 0x10000, 0x0, 0x1}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x400002, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f00000003c0)) write$P9_RMKNOD(r3, &(0x7f0000000400)={0x14, 0x13, 0x1, {0x43, 0x4, 0x8}}, 0x14) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x40080, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000005c0)={0x2, 0x80, 0x80, 0x3, 0x9, 0x2, 0x0, 0x317f, 0x41024, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f0000000580), 0x9}, 0x10220, 0x1, 0x7, 0x8, 0x6, 0x7, 0x8, 0x0, 0x9, 0x0, 0x1000}) 23:54:20 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0xd0140) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xe5) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x101, 0x6, 0x40, &(0x7f0000000040)="dd984950b6e0c059650b71b19d98ef8cc3440fa4bd3724161702c52eefa69c7831e88bd47419d578cb8b1e960eeb3cbbd8eadc4e9985cc988d52b6ec082060b8"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x1, 0x0, 0x2, {{0x12, 0x4, 0x2, 0x1e, 0x48, 0x67, 0x0, 0x1, 0x2f, 0x0, @broadcast, @multicast2, {[@generic={0x82, 0x10, "a5cde8428ae7235745304c50c55d"}, @generic={0x83, 0xe, "35453cf7437b1bfc96c0d622"}, @timestamp_addr={0x44, 0x14, 0x93, 0x1, 0x3, [{@multicast1, 0x15}, {@loopback, 0x36c}]}]}}}}}) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180)) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000001c0)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000200)={0x7, 0x2}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"5deba03a27e59eba9924f09b68d054f3", 0x0, 0x0, {0x8, 0xffff}, {0x4, 0xfffffff9}, 0x7, [0x1, 0x0, 0xfff, 0x115, 0xe1, 0x0, 0x1, 0x6, 0x2, 0x8000, 0x6, 0x7f, 0x81, 0xc8, 0x0, 0x3]}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000340)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000380)={0x7, 0x3}) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000400)) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000440)={0x2, 0xfff, 0x1}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000480)={0x8, 0x80}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000004c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x126100, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) 23:54:20 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x92080) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x2, 0x1, 0x81, 0x0, 0x2}, 0x7f47}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x6085) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = gettid() r2 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xff, 0x7f, 0xff, 0x0, 0x0, 0x7, 0x4040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6a2a, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x1040, 0x1f, 0x1, 0x8, 0x1, 0x17, 0x2, 0x0, 0x81, 0x0, 0xd035}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xec, 0x81, 0x9, 0x8, 0x0, 0xfff, 0x20000, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x86, 0x4, @perf_config_ext={0x20}, 0x1000, 0x8, 0x7, 0x3, 0x1, 0x8, 0x2, 0x0, 0x54, 0x0, 0x5}, r1, 0x10, r2, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x40, 0x20, 0x159, 0x10001, {{0x8, 0x4, 0x2, 0x39, 0x20, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast2, {[@generic={0x89, 0x2}, @generic={0x86, 0x7, "78a2c90ded"}]}}}}}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000400)={{0x0, 0x20, 0x0, 0xa1b7, 0x9, 0xff, 0x80000001, 0x8, 0x42, 0x1ff, 0x200, 0xfff, 0x4, 0xfb, 0x9}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000004c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe0, "c1e16839f78837"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000014c0)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "be5602927b1b8c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000024c0)={0xc00, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "dd9628c6f432bb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000034c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000036c0)={{0x0, 0x8001, 0x0, 0xfb, 0x7, 0x40, 0x8, 0xfffeffff, 0x0, 0x0, 0x6, 0x62e, 0x9b33, 0x0, 0x4}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000003780)={0x3e99, [{0x0, 0x0}], 0x6, "6b8c0759bd5698"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000053100)={0x1, [{r5}, {r6}, {0x0, r7}, {}, {}, {0x0, r8}, {r9}, {}, {}, {}, {r10}, {}, {0x0, r11}, {}, {0x0, r12}], 0x39, "0bc7d2fda93ff3"}) 23:54:20 executing program 2: ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000040)={0x1, 0x9, 0x1}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000080)) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x189100, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000380)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000003c0)) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000400)) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xfffffffffffffff7, 0x8000) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000480)=0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000004c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "03e38cd879f90b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000014c0)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "4626c728327dbe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000024c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "e3a94e4937fd68"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000056ac0)={0x2, [{}, {r5}, {0x0, r6}, {}, {r7}], 0x0, "220b32fde3c367"}) [ 84.389170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.394410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.397680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.405089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.408699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.411121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.512390] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.517662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.524871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.532912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.536351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.541628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.576772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.644711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.648730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.654951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.660207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.662693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.667650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.670098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.672282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.678892] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.681824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.690043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.698481] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.700318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.702530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.713474] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.715747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.722752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.724373] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.732284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.735294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.750130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.755769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.758058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 85.049625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.057350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.066146] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.079870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.082107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.093753] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.102967] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.143846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.148214] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.149670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.156932] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.163064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.474166] Bluetooth: hci0: command tx timeout [ 86.601560] Bluetooth: hci1: command tx timeout [ 86.793671] Bluetooth: hci2: command tx timeout [ 86.793698] Bluetooth: hci3: command tx timeout [ 86.856829] Bluetooth: hci4: command tx timeout [ 86.856997] Bluetooth: hci5: command tx timeout [ 87.240661] Bluetooth: hci6: command tx timeout [ 87.304493] Bluetooth: hci7: command tx timeout [ 88.522683] Bluetooth: hci0: command tx timeout [ 88.648562] Bluetooth: hci1: command tx timeout [ 88.840655] Bluetooth: hci2: command tx timeout [ 88.841655] Bluetooth: hci3: command tx timeout [ 88.904555] Bluetooth: hci5: command tx timeout [ 88.905570] Bluetooth: hci4: command tx timeout [ 89.288699] Bluetooth: hci6: command tx timeout [ 89.352627] Bluetooth: hci7: command tx timeout [ 90.568583] Bluetooth: hci0: command tx timeout [ 90.698501] Bluetooth: hci1: command tx timeout [ 90.888675] Bluetooth: hci3: command tx timeout [ 90.888887] Bluetooth: hci2: command tx timeout [ 90.952901] Bluetooth: hci4: command tx timeout [ 90.952937] Bluetooth: hci5: command tx timeout [ 91.337485] Bluetooth: hci6: command tx timeout [ 91.401551] Bluetooth: hci7: command tx timeout [ 92.617530] Bluetooth: hci0: command tx timeout [ 92.745483] Bluetooth: hci1: command tx timeout [ 92.937501] Bluetooth: hci2: command tx timeout [ 92.937559] Bluetooth: hci3: command tx timeout [ 93.000652] Bluetooth: hci4: command tx timeout [ 93.001510] Bluetooth: hci5: command tx timeout [ 93.387652] Bluetooth: hci6: command tx timeout [ 93.451520] Bluetooth: hci7: command tx timeout [ 142.883612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.884316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.438660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.439323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.733772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.734660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.579209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.581360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.587491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.593850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.597903] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.602813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.640925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.643765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.649828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.655930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.658761] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.660801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.799812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.802005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.806195] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.810741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.811767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.812591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.814473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.816074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.819195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.820096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.830868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.835748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.837603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.854657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.858841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.864603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.866231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.881864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.882616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.885940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.887928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.906833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.912039] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.913827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.003652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.013224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.016837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.018593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.027920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.029886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.033901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 147.037726] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.039140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.076675] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 147.082808] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 147.084094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.680560] Bluetooth: hci1: command tx timeout [ 148.681492] Bluetooth: hci0: command tx timeout [ 148.936516] Bluetooth: hci3: command tx timeout [ 149.000514] Bluetooth: hci5: command tx timeout [ 149.001095] Bluetooth: hci2: command tx timeout [ 149.001919] Bluetooth: hci4: command tx timeout [ 149.130475] Bluetooth: hci7: command tx timeout [ 149.131282] Bluetooth: hci6: command tx timeout [ 150.728573] Bluetooth: hci0: command tx timeout [ 150.729086] Bluetooth: hci1: command tx timeout [ 150.984601] Bluetooth: hci3: command tx timeout [ 151.048516] Bluetooth: hci4: command tx timeout [ 151.048955] Bluetooth: hci2: command tx timeout [ 151.048979] Bluetooth: hci5: command tx timeout [ 151.176711] Bluetooth: hci6: command tx timeout [ 151.176824] Bluetooth: hci7: command tx timeout [ 152.778463] Bluetooth: hci1: command tx timeout [ 152.778673] Bluetooth: hci0: command tx timeout [ 153.032474] Bluetooth: hci3: command tx timeout [ 153.096585] Bluetooth: hci4: command tx timeout [ 153.097045] Bluetooth: hci2: command tx timeout [ 153.097617] Bluetooth: hci5: command tx timeout [ 153.224642] Bluetooth: hci6: command tx timeout [ 153.227466] Bluetooth: hci7: command tx timeout [ 154.824556] Bluetooth: hci1: command tx timeout [ 154.825059] Bluetooth: hci0: command tx timeout [ 155.081733] Bluetooth: hci3: command tx timeout [ 155.145447] Bluetooth: hci5: command tx timeout [ 155.145928] Bluetooth: hci2: command tx timeout [ 155.146343] Bluetooth: hci4: command tx timeout [ 155.272514] Bluetooth: hci7: command tx timeout [ 155.272953] Bluetooth: hci6: command tx timeout [ 208.856786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.861472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.862928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.870699] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.872258] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.873205] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.983442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.986778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.987874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.991600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.994773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.996035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.044620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.047211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.049813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.061952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.064748] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.067020] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.123459] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.132133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.143588] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.144773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.148980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.154530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.155653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.156367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.158798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.162587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.163502] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.166290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.168137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.184114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.185315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.202015] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.236858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.246715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.559640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 209.566055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 209.568792] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 209.578232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.600876] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.607705] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.625290] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 209.652831] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 209.657373] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 209.660887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.674523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 209.679084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.888509] Bluetooth: hci0: command tx timeout [ 211.017029] Bluetooth: hci1: command tx timeout [ 211.080578] Bluetooth: hci2: command tx timeout [ 211.208890] Bluetooth: hci3: command tx timeout [ 211.273449] Bluetooth: hci5: command tx timeout [ 211.400681] Bluetooth: hci4: command tx timeout [ 211.720567] Bluetooth: hci7: command tx timeout [ 211.784513] Bluetooth: hci6: command tx timeout [ 212.936631] Bluetooth: hci0: command tx timeout [ 213.066436] Bluetooth: hci1: command tx timeout [ 213.128603] Bluetooth: hci2: command tx timeout [ 213.256659] Bluetooth: hci3: command tx timeout [ 213.320626] Bluetooth: hci5: command tx timeout [ 213.448467] Bluetooth: hci4: command tx timeout [ 213.768777] Bluetooth: hci7: command tx timeout [ 213.832857] Bluetooth: hci6: command tx timeout [ 214.984537] Bluetooth: hci0: command tx timeout [ 215.114596] Bluetooth: hci1: command tx timeout [ 215.177454] Bluetooth: hci2: command tx timeout [ 215.304641] Bluetooth: hci3: command tx timeout [ 215.368587] Bluetooth: hci5: command tx timeout [ 215.496592] Bluetooth: hci4: command tx timeout [ 215.817421] Bluetooth: hci7: command tx timeout [ 215.880445] Bluetooth: hci6: command tx timeout [ 217.032497] Bluetooth: hci0: command tx timeout [ 217.162421] Bluetooth: hci1: command tx timeout [ 217.224462] Bluetooth: hci2: command tx timeout [ 217.352465] Bluetooth: hci3: command tx timeout [ 217.416462] Bluetooth: hci5: command tx timeout [ 217.544820] Bluetooth: hci4: command tx timeout [ 217.864593] Bluetooth: hci7: command tx timeout [ 217.928591] Bluetooth: hci6: command tx timeout [ 271.193656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.203925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.206003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.217065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.222559] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.228246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.387653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.393945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.399504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.409041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.422153] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.424229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.474791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.481932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.497189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.499809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.507725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.512673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.524062] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.524790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.528572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.533899] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.536621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.554782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.559493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.585667] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.589724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.592150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.604693] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.607327] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.623815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.626204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.628844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.631211] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.632545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.634472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.634551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.645323] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.648644] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.651546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.665805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.671755] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.678808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.682073] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.684195] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.712134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.715147] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.717522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.290134] Bluetooth: hci0: command tx timeout [ 273.481671] Bluetooth: hci1: command tx timeout [ 273.608789] Bluetooth: hci2: command tx timeout [ 273.673512] Bluetooth: hci4: command tx timeout [ 273.736586] Bluetooth: hci3: command tx timeout [ 273.738038] Bluetooth: hci7: command tx timeout [ 273.800553] Bluetooth: hci6: command tx timeout [ 273.801833] Bluetooth: hci5: command tx timeout [ 275.336466] Bluetooth: hci0: command tx timeout [ 275.528436] Bluetooth: hci1: command tx timeout [ 275.656434] Bluetooth: hci2: command tx timeout [ 275.720580] Bluetooth: hci4: command tx timeout [ 275.784572] Bluetooth: hci7: command tx timeout [ 275.785039] Bluetooth: hci3: command tx timeout [ 275.848502] Bluetooth: hci6: command tx timeout [ 275.848962] Bluetooth: hci5: command tx timeout [ 277.384636] Bluetooth: hci0: command tx timeout [ 277.578442] Bluetooth: hci1: command tx timeout [ 277.704468] Bluetooth: hci2: command tx timeout [ 277.768543] Bluetooth: hci4: command tx timeout [ 277.832571] Bluetooth: hci7: command tx timeout [ 277.833064] Bluetooth: hci3: command tx timeout [ 277.897084] Bluetooth: hci5: command tx timeout [ 277.897792] Bluetooth: hci6: command tx timeout [ 279.432453] Bluetooth: hci0: command tx timeout [ 279.624605] Bluetooth: hci1: command tx timeout [ 279.752829] Bluetooth: hci2: command tx timeout [ 279.816517] Bluetooth: hci4: command tx timeout [ 279.880554] Bluetooth: hci3: command tx timeout [ 279.881256] Bluetooth: hci7: command tx timeout [ 279.945450] Bluetooth: hci6: command tx timeout [ 279.946081] Bluetooth: hci5: command tx timeout [ 333.274180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.276724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.279264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.285853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.289872] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.292087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.526554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.529872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.530629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.533172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.537735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.540269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.542789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.550678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.557640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.585017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.589025] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.607937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.650004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.653057] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.657298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.703847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.708196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.710315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.714737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.715762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.723041] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.725550] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.727443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.731238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.731778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.734926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.739954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.743919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.746835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.748789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.842968] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.848013] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.855840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.896625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.902992] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.906553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.972933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.976724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.978810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.005819] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.023769] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.070030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.370422] Bluetooth: hci0: command tx timeout [ 335.624508] Bluetooth: hci2: command tx timeout [ 335.688473] Bluetooth: hci1: command tx timeout [ 335.816485] Bluetooth: hci3: command tx timeout [ 335.816523] Bluetooth: hci5: command tx timeout [ 335.944486] Bluetooth: hci4: command tx timeout [ 336.200672] Bluetooth: hci7: command tx timeout [ 336.202751] Bluetooth: hci6: command tx timeout [ 337.416519] Bluetooth: hci0: command tx timeout [ 337.672436] Bluetooth: hci2: command tx timeout [ 337.736488] Bluetooth: hci1: command tx timeout [ 337.864481] Bluetooth: hci5: command tx timeout [ 337.864511] Bluetooth: hci3: command tx timeout [ 337.992450] Bluetooth: hci4: command tx timeout [ 338.249536] Bluetooth: hci6: command tx timeout [ 338.249614] Bluetooth: hci7: command tx timeout [ 339.465409] Bluetooth: hci0: command tx timeout [ 339.721296] Bluetooth: hci2: command tx timeout [ 339.784841] Bluetooth: hci1: command tx timeout [ 339.912447] Bluetooth: hci5: command tx timeout [ 339.915390] Bluetooth: hci3: command tx timeout [ 340.041078] Bluetooth: hci4: command tx timeout [ 340.296641] Bluetooth: hci6: command tx timeout [ 340.296722] Bluetooth: hci7: command tx timeout [ 341.512460] Bluetooth: hci0: command tx timeout [ 341.768437] Bluetooth: hci2: command tx timeout [ 341.832470] Bluetooth: hci1: command tx timeout [ 341.961681] Bluetooth: hci3: command tx timeout [ 341.961728] Bluetooth: hci5: command tx timeout [ 342.088474] Bluetooth: hci4: command tx timeout [ 342.344486] Bluetooth: hci7: command tx timeout [ 342.344982] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 23:59:28 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff814f5506 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff863fbe90 RBP=ffffffff85c16400 RSP=ffff88801d63f870 R8 =0000000000000000 R9 =0000000000000000 R10=0000000032a65007 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000002 R15=000000000003a70c RIP=ffffffff81abe308 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f528471b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2c55be6260 CR3=000000002aab4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffffffff0b539b1 RBX=00000000000b6422 RCX=0000000000000001 RDX=000000ff00000000 RSI=ffffffff812b5999 RDI=ffffffff85a9cd88 RBP=0000005afd7ab7f6 RSP=ffff88806cf09e98 R8 =0000000000000001 R9 =ffff888034790a40 R10=0000000000000000 R11=0000000000000000 R12=000000000032b0e4 R13=dffffc0000000000 R14=ffffffffffffffff R15=000002848a331db9 RIP=ffffffff8160e296 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6530dbe540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe9aaadf28 CR3=000000000e15a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000