Warning: Permanently added '[localhost]:20188' (ECDSA) to the list of known hosts. 2025/06/15 22:14:08 fuzzer started 2025/06/15 22:14:09 dialing manager at localhost:42061 syzkaller login: [ 94.068309] cgroup: Unknown subsys name 'net' [ 94.191699] cgroup: Unknown subsys name 'cpuset' [ 94.228228] cgroup: Unknown subsys name 'rlimit' 2025/06/15 22:14:25 syscalls: 208 2025/06/15 22:14:25 code coverage: enabled 2025/06/15 22:14:25 comparison tracing: enabled 2025/06/15 22:14:25 extra coverage: enabled 2025/06/15 22:14:25 setuid sandbox: enabled 2025/06/15 22:14:25 namespace sandbox: enabled 2025/06/15 22:14:25 Android sandbox: enabled 2025/06/15 22:14:25 fault injection: enabled 2025/06/15 22:14:25 leak checking: enabled 2025/06/15 22:14:25 net packet injection: enabled 2025/06/15 22:14:25 net device setup: enabled 2025/06/15 22:14:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/15 22:14:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/15 22:14:25 USB emulation: enabled 2025/06/15 22:14:25 hci packet injection: enabled 2025/06/15 22:14:25 wifi device emulation: enabled 2025/06/15 22:14:25 802.15.4 emulation: enabled 2025/06/15 22:14:25 fetching corpus: 0, signal 0/0 (executing program) 2025/06/15 22:14:27 starting 8 fuzzer processes 22:14:27 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"beb79ac763ddf73109f08b1a2305872b", r1, 0x0, {0x3, 0xff}, {0x0, 0x7}, 0x4, [0x9, 0x80, 0x400, 0x4, 0x10001, 0x0, 0x0, 0x8, 0x721, 0xffffffffffffff00, 0x800, 0x5, 0x3, 0x401, 0x100, 0x9a76]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r3 = syz_open_dev$mouse(&(0x7f0000000440), 0xa22, 0x123c82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000500)={r4, 0x3, 0xffffffffffffffff, 0xffff, 0x80000}) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000580)={r4, 0x101, 0x8}) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000000800)={r9, r0, "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", "aac4963fdbdbc7bd151d1b62e7485a79dbf921da981b80207815c1a382eb510f45dcb8c810a489c969f3cb8f4e92f68ee8e4c157702aa36f709adac72add1e459b4b958b6692e5ece8553be46b087961dcadd2320d3af1ece5ea2330dd83786c9d9ec80c1a3e88a2e196f6adefaebc394908f3496a433e17b3cc4b859ccec98a666a56fb08d6da92cbcfefc9a88a4c2706bdc91d3ff901f0853a308d210eee20e21ca97b3994e64c87d5bdba570150d4f52ca0bec260b2ccf6a810208c84bd5aed22de2f710c0b3cfbf70051db10e2cbad3258f1158286041f969c85f86d27e6bb007d0f3bed06d7757a9cd9394fdadd42afaf10ff43e0df7828931031c13bafb652568d4382748eabde1d26ca2914c6be08efe6bcd4b57d1a7a321ba7de9e917302dd797e452be10fb953151bd3c23234c63e5978107390c5bf20401241ea5bbd4f6c98157d8a8bc18f2f426258609b5fd0a5744fffa5e957ab0227e17dd0c74a1c5f219b83c130bfa37d99c32d5f06d45f84844889797031a629e3fcda40981f3818d0971a65010d0bdb72959430b299e3259942e5753358d0911779baa009313d2952590999f8a2b98f3ae489e7c51549921e34cea9b2d65fc6884b9db1cecb060384cbe4d0149adb95e2bdadb5ac6fadedd6fcb4f0503159c5b3deedaef2855362ab0ac57ac2f8180516ee8e7021ab5c3282a7896757239ea2211674de63c46396b58e8965cea2718e5be877c1812bb341daeca0f71f6ec9ab80cd14f910b27fc0fffd8bdfdb2210e50b90e0b724a4b2532e263b9c6f84c5db1af03defd702db6a404106a390f7ea1ed0ae83945e2cf656f0685bf53ffc0a85801f03ba0a60f610815017bdbb06720eea6f3cf6abc06bf7f83d1ba43a4681470085153da5e38d279429d253e263fc367775f369297de19088fb3b89d69be7d30550b3dacbfd2e6e8c2c28d15e8894b4fc20f21b7db7036f368c4af67ee2c5ea6cbe5df58563dd55ad5cbc718b48cd0cb53607d6fad7bf506dc709fc83e0e66031b086381c17c6a9f6acd747bb1f21226e3d2b15b4b04e71a1a50cb500fd29a52625dcaf533d55d76c168dd6ee2ce059f9236749d48f6522581541565b76b2921ae0a5d1aea30ae3b3e7f7ddf2166e1a8691afdfa6430a70d582848fff72be96de78b8c7732521c18f1c2d1211ea219f146acb1a3286b1ec6a8421e51cb88afb5092ea334ab183849a73ddeaa01e1a314fa934ca79134fdccd550595d735388eb5c80ecd6aae9de4753e68fdb3f49a9663d44747716b22e7a0a59c6318a1843d48b95f4e2678e979a50685c74b65cb2a355eb04f399ca3a3be8cd21128098abb9679f0b9659a16250bba4e7bb621605ead9a1d64cae4e7629e36d52da23272b0099077a0f632ef90e7872d0a098fbc59f6c5e138d1ff3d60ecdc220aa08cb0389b28de3546f1d9a1caab3e0457b98c648aaf0da2c49cd0730b3bc03fad4df368a496d43515db93e9ed3de556f1360c954fc79552415c91e0e068d7470e4bdc22f8733fa265f9a5b57b9afd47881877d5846de8da72cf58a46918838435b08d42b688482edf951d677af3e9f0878e46e5e3c7536b5ffef25d703a6bfc5869c99bfe63a2447cf9d44fda5834e1b7e81b431e958033721c01cc0bb0dad88179cfb487a1c31f494dd56228a6482c5a03bf54eccc4dbe7a1ccfdae101fbc5c455ea4b493919bbaf30ad25f3d6498d179b17752bd2709c7ad1910e62275e89c2376961e4c3d7c247570c7c8c7189b7919e68ea26fcfaa01ed7c2788b231103a6f162c1a9aaa0ac36ff6dc98c14ae80933441ac588d445cec4a610f2e15a2bce71da3f822e7a59205a2f27dcfc8ac4b887a5aa89fac6dce0cd42b01b1f6396836d8973d46d6ffb1690706888cb7af92672f6d4a602489f452b36b475b8750fd44b2be9dfa611c3b17c7a7c5baf6ef71b1160987651dd21dbd44b7757cbc4a44673a2061c58998020f69e2a64468175d13c784502cae4349878669a9d15ee83453767ef9bbd75cf35894de91e838c3ecc3a218e41e52bcf5a6fb3a3fe64a8b64e5e4fe0fe7d600986ffea0694ebfeb9ce4de8739f57d0392ceff0c7a7af96b21c35029cc3d39a0db4a17b6064ccb24127d5ccecc352b0a492e693fac2128d4a25915dcb1a3864b20190851687e11ea5c68711b98205af9da49daa22c565e26d7891eefd7264947aaf6026f6cc97c9158de487c5192404b6f76ed0591b4a5f54f7dfa2b6339174c6401fc641389de0142f8f3318d03270fd1b1a767f265afc24f1f186709723e59d0e62b5536f3998ca8b6d016484d0703e0d8e83bb2017a369cbfa47fad1e3952e7f8512da5b262123b7b73cf6f295bdcd95ea149c20e1bb025a9efe97cc46b51a8422d3ce544cea5704ccb4b0366a4b1cfc3b03848a96bbdf89c50e5cf6d67809b8bc362b433d03b13f32ccae2d63a425f97625b11a3b9bc4406ae79869d97c2808ba24ee6d3afda230adf934862be6d12f84be4c2b726a4a58b4d11556ef94b549604cc67536a552ea5196ac87df144c63de8e233697ad6afb253bc65d13915a80af6ff95029fec3e73a1931ba996e5c17b8811d2932806539048a960146a0393c7836991023e5c86ede6e4515f34b86b3cc474ef379ae1a7335ab5db38a3d346d01f71f407132f558360c4c096b69b451a473b834b955673c55ac93930f39a0983cb650b7badc6be16194d1e598b085fbb2352de9cebcb491312b11546290d46e06529d67abdae1755173a49a14d5fa35cae75976d95ccea220a69466583e0c9976a76f33e98dd6f0ea6d84aec3f843edf4238df717e14a24e138d8f6b6f3c51c97908a079bb17cf0b8afea535e1e14a06f54c1f45bbe32e9988d94f20bfb2c5a6d6dccdfb7a136748a43130a82aeff14fd044b3b2dfcf3a12a428519f7e89b4c4de5230f25516ba8d3a8db1e3d5cce4a717707a8e6ec1af8e9c6ed15449712fd9328f5e9eb83a84af5e15df8c1eb332fd06308bbad6e0b69cca9788d7aa54d1738d2cf30022f74a194ff2d535317d1d21734bc7522eebb9737337eb09de6192488ab40500dced35bb41ac5c797b6311f6885d1ab070fc43b9417c8736a6f0095b2037dbbd9d2ec33c45a0b43c55fabeed47578f853c0dcd2fbd20ad88fa1d45cfb1e46831f93d83bb3952b74e6963b9b1d21d776d75359d138d53f6843e267c8f0de7eb4183b98f161d83b7ea48489bf2123c16bb29e1c0bff407c211868a237743db91eeeb2c30f9e58c40f4d28e7576de1e8638b873afb82d739e9728c57ab4b2857883edf3c267dc86ff8ce1dd20171feff6eaae991c6907c02b49a6555887f5fd43296991cb8e21e5d08fc25c697abdf44784425dc6d1c1b483d9d7734a36c96e83f5100586cf079315791c7192ba56c1966dd7d1a99ed5b5c40e4bda881320094e673f6c5e5b068ee181ee9fdd1a5a5d482e06307e7d65a1c0c77c0f2b94601a5f580cf7ea2a9e93dcbbee112ccdd00f6e769e45621ef120d858109bcbdd5e3c5fa3b591912df47db7642340388d0b352ffd876d02dd847282aae872e68517dd992534344bb661acad818d9de2a0e1ec83d70dcccda2c733c9e0f78e28001ce9b7d46a4036d8fa3ea8107129e7d2edda4927bad54f3a622cf1c3d59b25e0edd25d1f1627825590775fdd1c67a5bded91f6f6988f41d5f46cf26ec832a69a1fbf69b1017ea4a667acf50c2af05c4dd41543ff0d982b546771068f41870240578af0c198a9a56b02f15cadc8c8c21b7b7c2063c44b172af859329402d035710c86b4eb84925ee32b87999ada2f819f839b98bc28eefafbc9d7e32bf31d780faab8fb00688ae0dc92442ddf7aae0c32c4ebd43638c393b5c2266a8710c084bafac310906de95eb211c75609d62dbc3e29268e8d8e6e040465df8695c5b588c24110350cebbc294489e1ebfe0df9686fe2318d092277ed8d33e8e2547196f802d8bda92105d00912427c701edbb67b7058ac6ef3e13770f4f9a7c6a22db7f999b6550b43643d90888d197a5a268f4df7fe6440d354b33b10a986fc9e0499f6b2a5d9d37ab027a65f58ac573ab76325b9d7367b9293c23e99ad2abe7b974e689f2965042e2b3d9111e0a766d81eb7fee15fdec3a8354762d3dfa1888573437d74a1f4000d5686b2f4b1f7e5137123e8556102716384a1fb65a356d13fef32b7779dc7c5014df47c1ce09a67a5875d983604f13c3d5e2f5ca191151d0452c5e5d6a048e0e43bbe929b48d89f86f8a37ada7b9031e76116873467d6d5a1e35e40dd47778dcefaecc90b9347617535a2d0e2208a3e3b3d69398ee64aa8680e398ec88942899a010ca28b200fa4d1659e64c9124633486668effb331ad580baa693daacb74f238572656571b10beae3664404cee65393b0671b15fb10c462cc0d1465d597897407a06a9cbc5708893ce739d89f29b0e0477dca6e92218c4ec8df6342a28f0be5d3ca9a38d8563b2fa57e205579728cbe037b78f43dd26a3b744398ebb3bdfddad0b79df24b3f7fa5ec18006a0698ea989d975ba661a366ad4618be0715cab472e1294763129963fc304b808b8de0c7d3997948e48ee62aa82d8a9eefc1f4b3d4e7049b5f92eec3e6cd14e16153c1aba42f53e98af47a6ca1572d1487612f7bb67ac0fab3bc0170b0d165fec479df33b6bcf4e792e277735592adb27b9a1b8aa7c61d46ccd2132923171b6b53b45e79c25d94c264b18b96b491ea585e8d22d7a032c51b00c28924abae77e5bd003b45dd928a77cb44f847d0a06c29861503f23e50d9aca4f6e60fd25c357cf79662a1abecf52d9d859fab7a2034ea1295484ab6b1508f0ceb024068044450bcee1183ed1d43be94df9ef869e69e18d7ab85b6f1fb9404050eb72d91cac13b9650f391518d0cc7467947dd833ee3cba543d9129ac044f6b452b8de1d116bd1963e905c473420c2f58ed115fa4b98eaaaf0910ef3102b8a298bf4bf48602c6cfece849de91c49d77a001b7436294a89825553cf022be1489a82d98dddc53f83758ad292005775269e098d405fe388dd9b8c3ee181aa3911c82d491dfbb22be4b66dd759e8d722bfd8e1f0187be8fcf10b9b9443b581f02f0a3c51118e580cc5d4efbe0a38b7b9f983d6972b080aef552d348d0940c95b960b13a66e7c72714f4910543f30a78a6792ee9e4f1d0beafe063a20fda2b88e814eac2971111884fefc58c991b11ea04cc327c083fb0f981efd743d35085f82a93045ea89dbcf2ba3e6bdfe18675916a9ff15d21afa9edf26102ed96798f2f7a8849d81d1196b78bb6acff4ba5a178ab289d6df07a7fd75ae74254a762f12cf589b4bc900ba796cee641d7d4f126e881fc7fcf630338cf9181fbbcb5e6ea0b93c22ba7fc0604f29b590"}) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000001800)=""/63) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001840), 0x44000, 0x0) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48040) pipe2(&(0x7f0000001a00)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8, &(0x7f0000001a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_client}, {@afid={'afid', 0x3d, 0x6}}, {@privport}, {@afid}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_user={'obj_user', 0x3d, '/dev/bsg\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000001b00)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001bc0)={r4, 0x1, r3, 0x7, 0x80000}) 22:14:27 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x250080, 0x4, 0x4}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x81) r0 = memfd_secret(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x10020, 0x1, {0x1}}, 0x101) setresgid(0x0, 0x0, 0xee01) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0x10000000) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000001000/0x3000)=nil) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x400, 0x840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000001000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x12000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="461fc4fe0664671641810fd15bbd963e8b3fa8c729b0971a0d8035765fe639c0a14c4ce6b3710c88088a5f", 0x2b, r1}, 0x68) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/116, 0x74, 0x1, &(0x7f00000002c0)=""/186, 0xba}, &(0x7f00000003c0)=0x40) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x22000, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000004, 0x30, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r0, 0x0, r0}, 0xdd) r4 = inotify_init1(0x80000) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x30, r4, 0x33814000) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000004c0)="a69ad0d6e17ce36393c619e02088253f", 0x10) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2800) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x4, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}, {@access_client}, {@mmap}, {@privport}, {@access_client}, {@version_u}], [{@uid_gt}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) 22:14:27 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0xa6b9e000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000480)={0xffffffffffffffff, r0, 0x20080}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000004c0)=0x3ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80000, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0x80000001}}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname}, {@smackfsfloor={'smackfsfloor', 0x3d, '[+'}}, {@hash}]}}) getresuid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) r6 = geteuid() mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x4000, &(0x7f0000000800)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}], [{@euid_gt={'euid>', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r6}}, {@fowner_gt={'fowner>', 0xee01}}]}}) r7 = syz_open_dev$mouse(&(0x7f00000008c0), 0x0, 0x4000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000900)) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000d00)={0xf8, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@fd={0x66642a85, 0x0, r7}, @flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}, 0x4ecc3b439cb57b30}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a40)=""/30, 0x1e, 0x2, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/126, 0x7e, 0x0, 0x2d}, @fda={0x66646185, 0xa, 0x1, 0x2c}}, &(0x7f0000000b80)={0x0, 0x28, 0x50}}, 0x400}, @acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x2}, @register_looper, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x3}], 0x8, 0x0, &(0x7f0000000cc0)="35571c9c9be2e6ad"}) memfd_secret(0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000d40)={{r3, 0x8, 0x36c0, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x2, 0x101, 0x7ff, 0x2, 0x0, 0x0, 0xb9}}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001d40)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000001d80)={{r3, 0x2, 0x9, 0x4, 0x40, 0xfff, 0x5, 0x1, 0x3000000, 0x2, 0x8, 0xffff, 0xff, 0x8, 0xe3ee}, 0x8, [0x0]}) 22:14:27 executing program 3: mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget$private(0x0, 0xa000, 0x800, &(0x7f0000ff6000/0xa000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1) r0 = fork() sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = fork() sched_rr_get_interval(r1, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x12}, 0x0) clock_getres(0x3, &(0x7f00000000c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x280800, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x3, {}, 0xffffffff, 0x0, 0x0, {0x0, 0x0, r2}}, 0x502941c3) mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3, 0x4010, r2, 0x2837000) pselect6(0x40, &(0x7f0000000180)={0x7, 0x200, 0x80000000, 0x9, 0xf7f, 0x1000, 0xe5d1, 0x5}, &(0x7f00000001c0)={0x9, 0xfffffffffffff001, 0x7, 0xffffffff, 0x8001, 0x2, 0x8, 0x1000}, &(0x7f0000000200)={0x7fff, 0x7, 0x8000, 0x100000000, 0x44, 0x8, 0x3, 0xffffffff7fffffff}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x7fffffff]}, 0x8}) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) sched_getparam(0x0, &(0x7f0000000340)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "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"}) clock_getres(0x7, &(0x7f0000001380)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000013c0)={0x1, 0x8, 0x3, 0x3}, 0x14) [ 111.917672] audit: type=1400 audit(1750025667.498:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:14:27 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x40, 0x40, 0xd5c, 0xb000, {{0x6, 0x4, 0x3, 0x12, 0x18, 0x67, 0x0, 0xa2, 0x4, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x36}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000011) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048014}, 0x20004854) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x0, 0x706, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x22008004}, 0x10) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000600)={0x2}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x2200, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r1) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x58efdbad1dd022e4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x130affc742384b63, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000800)={{0x0, 0x2, 0x7, 0x2, 0x3, 0x10001, 0x8, 0x0, 0x1, 0x9, 0xd63, 0x3f, 0x9b, 0x7f, 0x80000001}}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001800)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001840)={"bb976c8d2f4c83f9ac41fba544e1423d", r8, 0x0, {0x101, 0x396b}, {0x5, 0x3}, 0x13a, [0x32, 0x6, 0xe2a, 0xffffffffffffff44, 0x3, 0x3f, 0x1, 0x200, 0xffff, 0xe50, 0x7f, 0xff, 0x0, 0x6, 0x400, 0x3]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x3c, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001b00)={0x18, 0x0, &(0x7f0000001a40)=[@request_death, @release], 0x5e, 0x0, &(0x7f0000001a80)="a67e316c478cfb21d95d2fa35773c8ab79b598833eb9ee04b0ed3471c64116bdcb4872e1657919ebfd39cec3996a02e3ff650adecc9129ebfc83c8f2ac00b941f030294d94a0c8029eab13f73b87f65a1998ef6b423d5d7aad1a875be839"}) 22:14:27 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x7, 0x2, 0x3, 0x3, 0x7fff}, 0x14) r3 = socket(0x10, 0x3, 0xfffffffe) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000280)="84d8564517d1f8b00166d6d8b1f66cf8", 0x10) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) clock_getres(0x1, &(0x7f00000002c0)) r4 = mmap$binder(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x1, 0x11, r2, 0x941) r5 = syz_open_dev$sg(&(0x7f0000000300), 0x6, 0x40) r6 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0xdc, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x8, 0x0, 0x39}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}, 0x40}, @acquire_done={0x40106309, 0x2}, @enter_looper, @free_buffer={0x40086303, r6}, @decrefs={0x40046307, 0x3}, @free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x5, 0x0, 0x1f}, @fda={0x66646185, 0x8, 0x1, 0x12}}, &(0x7f0000000480)={0x0, 0x18, 0x38}}}], 0x0, 0x0, &(0x7f00000005c0)}) read$hidraw(r2, &(0x7f0000000640)=""/7, 0x7) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000680)) ioctl$TCSBRKP(r2, 0x5425, 0x0) 22:14:27 executing program 6: select(0x40, &(0x7f0000000000)={0x8, 0x8, 0x3, 0x8, 0x3, 0x31f, 0x940, 0x10001}, &(0x7f0000000040)={0x0, 0x6, 0x142, 0x5, 0xff, 0xfffffffffffffffa, 0x9, 0x7}, &(0x7f0000000080)={0x100000001, 0x1ff, 0xfff, 0x5, 0x6, 0x1, 0x1, 0x6}, &(0x7f00000000c0)={0x0, 0x2710}) pselect6(0x40, &(0x7f0000000100)={0x80, 0xb7, 0x100000001, 0x7ff, 0x100000001, 0x1, 0x1, 0x39700000}, &(0x7f0000000140)={0x7f, 0x5, 0x8, 0x5, 0x7ff, 0x0, 0x0, 0x40}, &(0x7f0000000180)={0x7f, 0xfff, 0x0, 0x6, 0x1000, 0x10001, 0x401, 0x7}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200)={[0x7]}, 0x8}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000300), &(0x7f0000000340)={[0xc915]}, 0x8) r0 = fork() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x2010, r1, 0x3bf) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000003c0)=""/28) r2 = memfd_secret(0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000440)) r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000480)) mmap$binder(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x5) pselect6(0x40, &(0x7f00000004c0)={0x8, 0x7fff, 0x6, 0x1000, 0x200, 0x8, 0x1, 0xfffffffffffffffe}, &(0x7f0000000500)={0x4, 0xc39, 0x7, 0x5, 0x9, 0x1, 0x2, 0x101}, &(0x7f0000000540)={0x1, 0x1ff, 0x1, 0x0, 0x5, 0x8, 0x8, 0xf2}, &(0x7f0000000580), &(0x7f0000000600)={&(0x7f00000005c0)={[0x20]}, 0x8}) move_pages(r0, 0x7, &(0x7f0000000640)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f0000000680)=[0xa8, 0xa50, 0x0, 0x7fff, 0x7], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000700)) sched_getparam(r3, &(0x7f0000000740)) r4 = memfd_secret(0x0) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000000780)=[{}, {}], 0x2, &(0x7f0000000800)={r5, r6+60000000}, &(0x7f0000000840)={[0x5]}, 0x8) 22:14:27 executing program 7: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x8, 0x842c0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1100404, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@cache_loose}, {@mmap}, {@cachetag={'cachetag', 0x3d, '-^'}}, {@msize={'msize', 0x3d, 0x5}}, {@afid={'afid', 0x3d, 0x2}}, {@access_any}, {@msize={'msize', 0x3d, 0x3}}, {@cache_mmap}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@audit}, {@obj_type={'obj_type', 0x3d, '/dev/input/mouse#\x00'}}, {@obj_role={'obj_role', 0x3d, '/dev/input/mouse#\x00'}}, {@smackfsdef}, {@euid_gt}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!}{[}\x1c&:.]-'}}, {@fsname={'fsname', 0x3d, '/dev/input/mouse#\x00'}}]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0xb000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fea000/0x14000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000440)="5d73e0ec7457a622de052a1606484cf7", 0x10, r0}, 0x68) mmap(&(0x7f0000fe7000/0x4000)=nil, 0x4000, 0x2000002, 0x2010, r0, 0xfaf31000) r1 = memfd_secret(0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000500)=0x66) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000580)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000600)={0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000006c0)={r5, 0x3, r6, 0x1, 0x80000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/16, 0x10, 0x9c5592c190ab7d6a, &(0x7f0000000740)=""/69, 0x45}, &(0x7f0000000800)=0x40) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000840)="cdcb2171479e49de575f91ad949dfc11", 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$cgroup(r0, &(0x7f0000000880)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000008c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000900)) [ 113.414673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.417640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.422272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.432053] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.434209] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.438706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.444659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.448109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.463206] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.489122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.503646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.508066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.536443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.548984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.556791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.565934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.576075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.577572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.580131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.582528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.587166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 113.589331] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.592188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.593703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.595096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.601920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 113.604714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 113.606092] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.614087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.621063] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.622486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.623804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.628182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.634717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 113.636337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.638089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.643533] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 113.645705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.647050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.667978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 115.497977] Bluetooth: hci0: command tx timeout [ 115.561920] Bluetooth: hci1: command tx timeout [ 115.689750] Bluetooth: hci3: command tx timeout [ 115.690649] Bluetooth: hci2: command tx timeout [ 115.753492] Bluetooth: hci7: command tx timeout [ 115.754086] Bluetooth: hci4: command tx timeout [ 115.817518] Bluetooth: hci6: command tx timeout [ 115.818689] Bluetooth: hci5: command tx timeout [ 117.546302] Bluetooth: hci0: command tx timeout [ 117.609581] Bluetooth: hci1: command tx timeout [ 117.738572] Bluetooth: hci2: command tx timeout [ 117.739073] Bluetooth: hci3: command tx timeout [ 117.802466] Bluetooth: hci4: command tx timeout [ 117.802958] Bluetooth: hci7: command tx timeout [ 117.867504] Bluetooth: hci5: command tx timeout [ 117.867978] Bluetooth: hci6: command tx timeout [ 119.594422] Bluetooth: hci0: command tx timeout [ 119.657714] Bluetooth: hci1: command tx timeout [ 119.786161] Bluetooth: hci3: command tx timeout [ 119.786672] Bluetooth: hci2: command tx timeout [ 119.849498] Bluetooth: hci7: command tx timeout [ 119.849951] Bluetooth: hci4: command tx timeout [ 119.913505] Bluetooth: hci6: command tx timeout [ 119.914034] Bluetooth: hci5: command tx timeout [ 121.641725] Bluetooth: hci0: command tx timeout [ 121.705546] Bluetooth: hci1: command tx timeout [ 121.834425] Bluetooth: hci2: command tx timeout [ 121.834912] Bluetooth: hci3: command tx timeout [ 121.897528] Bluetooth: hci4: command tx timeout [ 121.898016] Bluetooth: hci7: command tx timeout [ 121.961751] Bluetooth: hci5: command tx timeout [ 121.962247] Bluetooth: hci6: command tx timeout [ 176.298922] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.302606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.303121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.304299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.308711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.316712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.319776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.323269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.329936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.335180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.340969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.344124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.346831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.349123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.360727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.365323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.375096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.387916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.391130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.393986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.409857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.412190] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.419684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.421228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 176.433692] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.444142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.445724] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 176.447451] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.451782] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 176.452522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.453979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 176.455487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.457601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.460863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 176.465025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 176.467618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.469911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.528874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.534166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.628916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.345831] Bluetooth: hci1: command tx timeout [ 178.473486] Bluetooth: hci2: command tx timeout [ 178.474290] Bluetooth: hci0: command tx timeout [ 178.537507] Bluetooth: hci6: command tx timeout [ 178.539311] Bluetooth: hci5: command tx timeout [ 178.540876] Bluetooth: hci7: command tx timeout [ 178.665472] Bluetooth: hci3: command tx timeout [ 178.729710] Bluetooth: hci4: command tx timeout [ 180.394212] Bluetooth: hci1: command tx timeout [ 180.522141] Bluetooth: hci0: command tx timeout [ 180.523491] Bluetooth: hci2: command tx timeout [ 180.585806] Bluetooth: hci7: command tx timeout [ 180.586679] Bluetooth: hci5: command tx timeout [ 180.587483] Bluetooth: hci6: command tx timeout [ 180.715562] Bluetooth: hci3: command tx timeout [ 180.777697] Bluetooth: hci4: command tx timeout [ 182.443668] Bluetooth: hci1: command tx timeout [ 182.569470] Bluetooth: hci0: command tx timeout [ 182.569740] Bluetooth: hci2: command tx timeout [ 182.633715] Bluetooth: hci7: command tx timeout [ 182.633847] Bluetooth: hci6: command tx timeout [ 182.634324] Bluetooth: hci5: command tx timeout [ 182.761461] Bluetooth: hci3: command tx timeout [ 182.825473] Bluetooth: hci4: command tx timeout [ 184.491736] Bluetooth: hci1: command tx timeout [ 184.617748] Bluetooth: hci0: command tx timeout [ 184.617800] Bluetooth: hci2: command tx timeout [ 184.682421] Bluetooth: hci6: command tx timeout [ 184.682555] Bluetooth: hci5: command tx timeout [ 184.682877] Bluetooth: hci7: command tx timeout [ 184.810458] Bluetooth: hci3: command tx timeout [ 184.874595] Bluetooth: hci4: command tx timeout [ 238.362336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.371438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.373659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.379901] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.383538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.521983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.525853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.528709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.534943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.538908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.554246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.563843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.566324] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.590929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.599511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.672552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.686035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.689978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.703265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.711785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.751469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.757015] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.765810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.823982] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.843827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.864546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.893838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.898344] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.946722] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.957720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.993140] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.997504] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.003768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.014657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.055991] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.062837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.065054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.075201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.084166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.111869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.426494] Bluetooth: hci0: command tx timeout [ 240.617673] Bluetooth: hci1: command tx timeout [ 240.746635] Bluetooth: hci2: command tx timeout [ 240.874018] Bluetooth: hci3: command tx timeout [ 240.937490] Bluetooth: hci4: command tx timeout [ 241.067465] Bluetooth: hci5: command tx timeout [ 241.193522] Bluetooth: hci6: command tx timeout [ 241.257491] Bluetooth: hci7: command tx timeout [ 242.473465] Bluetooth: hci0: command tx timeout [ 242.665599] Bluetooth: hci1: command tx timeout [ 242.793542] Bluetooth: hci2: command tx timeout [ 242.921788] Bluetooth: hci3: command tx timeout [ 242.987431] Bluetooth: hci4: command tx timeout [ 243.113726] Bluetooth: hci5: command tx timeout [ 243.241633] Bluetooth: hci6: command tx timeout [ 243.305807] Bluetooth: hci7: command tx timeout [ 244.521520] Bluetooth: hci0: command tx timeout [ 244.713463] Bluetooth: hci1: command tx timeout [ 244.841491] Bluetooth: hci2: command tx timeout [ 244.969448] Bluetooth: hci3: command tx timeout [ 245.033640] Bluetooth: hci4: command tx timeout [ 245.161863] Bluetooth: hci5: command tx timeout [ 245.289467] Bluetooth: hci6: command tx timeout [ 245.353447] Bluetooth: hci7: command tx timeout [ 246.569701] Bluetooth: hci0: command tx timeout [ 246.761505] Bluetooth: hci1: command tx timeout [ 246.889636] Bluetooth: hci2: command tx timeout [ 247.017600] Bluetooth: hci3: command tx timeout [ 247.081590] Bluetooth: hci4: command tx timeout [ 247.210721] Bluetooth: hci5: command tx timeout [ 247.337730] Bluetooth: hci6: command tx timeout [ 247.401456] Bluetooth: hci7: command tx timeout [ 300.670115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.674025] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.676754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.685342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.690737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.864520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.870258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.874833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.882044] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.886357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.944826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.950050] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.954895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.974928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.982634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.138665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.141991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.156143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.162088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.169978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.194892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.200984] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.207942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.218142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.221130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.228921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.236847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.238612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.243050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.248542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.265026] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.279966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.282253] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.291014] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.305185] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.321157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.337935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.360568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.381995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.407623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.761465] Bluetooth: hci0: command tx timeout [ 302.953550] Bluetooth: hci1: command tx timeout [ 303.081618] Bluetooth: hci2: command tx timeout [ 303.338991] Bluetooth: hci4: command tx timeout [ 303.401529] Bluetooth: hci5: command tx timeout [ 303.465540] Bluetooth: hci6: command tx timeout [ 303.529558] Bluetooth: hci3: command tx timeout [ 303.594711] Bluetooth: hci7: command tx timeout [ 304.811473] Bluetooth: hci0: command tx timeout [ 305.002524] Bluetooth: hci1: command tx timeout [ 305.131181] Bluetooth: hci2: command tx timeout [ 305.385716] Bluetooth: hci4: command tx timeout [ 305.449513] Bluetooth: hci5: command tx timeout [ 305.515429] Bluetooth: hci6: command tx timeout [ 305.578479] Bluetooth: hci3: command tx timeout [ 305.642457] Bluetooth: hci7: command tx timeout [ 306.858454] Bluetooth: hci0: command tx timeout [ 307.049570] Bluetooth: hci1: command tx timeout [ 307.178915] Bluetooth: hci2: command tx timeout [ 307.434525] Bluetooth: hci4: command tx timeout [ 307.497817] Bluetooth: hci5: command tx timeout [ 307.561585] Bluetooth: hci6: command tx timeout [ 307.626589] Bluetooth: hci3: command tx timeout [ 307.689560] Bluetooth: hci7: command tx timeout [ 308.906513] Bluetooth: hci0: command tx timeout [ 309.099502] Bluetooth: hci1: command tx timeout [ 309.225666] Bluetooth: hci2: command tx timeout [ 309.482430] Bluetooth: hci4: command tx timeout [ 309.545509] Bluetooth: hci5: command tx timeout [ 309.610925] Bluetooth: hci6: command tx timeout [ 309.673433] Bluetooth: hci3: command tx timeout [ 309.737427] Bluetooth: hci7: command tx timeout [ 363.582898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.587079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.596053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.615006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.621245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.723941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.734997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.739892] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.752793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.759878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.856605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 363.860704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 363.862748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.868093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.875950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.879425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.879893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.881352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.884027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.904961] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.910884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.919016] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.928712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.934033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.957754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 363.960087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.974560] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 363.983360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.987934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.007480] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.011687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.021215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.041790] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.057249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.071298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.075630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.097516] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.097728] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.141940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.149000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 365.675416] Bluetooth: hci0: command tx timeout [ 365.801562] Bluetooth: hci1: command tx timeout [ 366.057522] Bluetooth: hci3: command tx timeout [ 366.058810] Bluetooth: hci2: command tx timeout [ 366.187435] Bluetooth: hci5: command tx timeout [ 366.188070] Bluetooth: hci7: command tx timeout [ 366.250471] Bluetooth: hci4: command tx timeout [ 366.251014] Bluetooth: hci6: command tx timeout [ 367.721618] Bluetooth: hci0: command tx timeout [ 367.849771] Bluetooth: hci1: command tx timeout [ 368.105533] Bluetooth: hci2: command tx timeout [ 368.105982] Bluetooth: hci3: command tx timeout [ 368.233496] Bluetooth: hci7: command tx timeout [ 368.233927] Bluetooth: hci5: command tx timeout [ 368.297470] Bluetooth: hci6: command tx timeout [ 368.297885] Bluetooth: hci4: command tx timeout [ 369.769671] Bluetooth: hci0: command tx timeout [ 369.897482] Bluetooth: hci1: command tx timeout [ 370.153481] Bluetooth: hci3: command tx timeout [ 370.153928] Bluetooth: hci2: command tx timeout [ 370.281512] Bluetooth: hci5: command tx timeout [ 370.281959] Bluetooth: hci7: command tx timeout [ 370.346504] Bluetooth: hci6: command tx timeout [ 370.346917] Bluetooth: hci4: command tx timeout [ 371.818643] Bluetooth: hci0: command tx timeout [ 371.945429] Bluetooth: hci1: command tx timeout [ 372.201759] Bluetooth: hci3: command tx timeout [ 372.202222] Bluetooth: hci2: command tx timeout [ 372.330433] Bluetooth: hci7: command tx timeout [ 372.330889] Bluetooth: hci5: command tx timeout [ 372.394470] Bluetooth: hci4: command tx timeout [ 372.394903] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 22:19:37 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08ac8 RSI=ffff88806ce08f48 RDI=ffff88806ce08ac8 RBP=ffffffff85a0c108 RSP=ffff88806ce08a08 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b4ed R11=00000000000119c0 R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08f48 R15=ffff88806ce08a78 RIP=ffffffff813553bc RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efdeeb5ef88 CR3=000000001b9a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353d2d RDI=fffffbfff0b83988 RBP=ffffffff85c1cc40 RSP=ffff88806cf08970 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b4ed R11=00000000000c473e R12=0000000000000001 R13=ffffffff81353d2d R14=0000000000000000 R15=ffff88806cf08a78 RIP=ffffffff81aebe79 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f44f7089540 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f44f753b130 CR3=000000003406b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000