Warning: Permanently added '[localhost]:40594' (ECDSA) to the list of known hosts. 2025/06/10 14:52:04 fuzzer started 2025/06/10 14:52:05 dialing manager at localhost:40003 syzkaller login: [ 107.043855] cgroup: Unknown subsys name 'net' [ 107.199317] cgroup: Unknown subsys name 'cpuset' [ 107.224555] cgroup: Unknown subsys name 'rlimit' 2025/06/10 14:52:26 syscalls: 208 2025/06/10 14:52:26 code coverage: enabled 2025/06/10 14:52:26 comparison tracing: enabled 2025/06/10 14:52:26 extra coverage: enabled 2025/06/10 14:52:26 setuid sandbox: enabled 2025/06/10 14:52:26 namespace sandbox: enabled 2025/06/10 14:52:26 Android sandbox: enabled 2025/06/10 14:52:26 fault injection: enabled 2025/06/10 14:52:26 leak checking: enabled 2025/06/10 14:52:26 net packet injection: enabled 2025/06/10 14:52:26 net device setup: enabled 2025/06/10 14:52:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/10 14:52:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/10 14:52:26 USB emulation: enabled 2025/06/10 14:52:26 hci packet injection: enabled 2025/06/10 14:52:26 wifi device emulation: enabled 2025/06/10 14:52:26 802.15.4 emulation: enabled 2025/06/10 14:52:26 fetching corpus: 0, signal 0/0 (executing program) 2025/06/10 14:52:28 starting 8 fuzzer processes 14:52:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000080)=""/24, 0x18}], 0x2, &(0x7f0000000100)=""/213, 0xd5}, 0x4}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/186, 0xba}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/180, 0xb4}, {&(0x7f00000023c0)=""/60, 0x3c}], 0x6, &(0x7f0000002480)=""/210, 0xd2}}, {{&(0x7f0000002580)=@isdn, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002600)=""/21, 0x15}, {&(0x7f0000002640)}, {&(0x7f0000002680)=""/140, 0x8c}, {&(0x7f0000002740)=""/195, 0xc3}, {&(0x7f0000002840)=""/131, 0x83}, {&(0x7f0000002900)=""/191, 0xbf}], 0x6, &(0x7f0000002a40)=""/133, 0x85}, 0xfff}, {{&(0x7f0000002b00)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002b80)=""/232, 0xe8}, {&(0x7f0000002c80)=""/241, 0xf1}, {&(0x7f0000002d80)=""/245, 0xf5}, {&(0x7f0000002e80)=""/106, 0x6a}, {&(0x7f0000002f00)=""/123, 0x7b}], 0x5, &(0x7f0000003000)=""/2, 0x2}, 0x1}], 0x4, 0x0, &(0x7f0000003140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000003180), 0x4e468a4574b413d3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f00000031c0)=@generic, 0x80, &(0x7f0000003740)=[{&(0x7f0000003240)=""/122, 0x7a}, {&(0x7f00000032c0)=""/240, 0xf0}, {&(0x7f00000033c0)=""/119, 0x77}, {&(0x7f0000003440)=""/113, 0x71}, {&(0x7f00000034c0)=""/63, 0x3f}, {&(0x7f0000003500)=""/53, 0x35}, {&(0x7f0000003540)=""/196, 0xc4}, {&(0x7f0000003640)=""/252, 0xfc}], 0x8, &(0x7f00000037c0)=""/193, 0xc1}, 0x40012020) syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000003940)=@phonet, 0x80, &(0x7f0000004f40)=[{&(0x7f00000039c0)=""/242, 0xf2}, {&(0x7f0000003ac0)=""/127, 0x7f}, {&(0x7f0000003b40)=""/248, 0xf8}, {&(0x7f0000003c40)=""/241, 0xf1}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/112, 0x70}, {&(0x7f0000004dc0)}, {&(0x7f0000004e00)=""/61, 0x3d}, {&(0x7f0000004e40)=""/228, 0xe4}], 0x9}, 0x1f}, {{&(0x7f0000005000)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000053c0)=[{&(0x7f0000005080)=""/3, 0x3}, {&(0x7f00000050c0)=""/204, 0xcc}, {&(0x7f00000051c0)=""/221, 0xdd}, {&(0x7f00000052c0)=""/5, 0x5}, {&(0x7f0000005300)=""/145, 0x91}], 0x5, &(0x7f0000005440)=""/253, 0xfd}, 0x7}, {{&(0x7f0000005540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/182, 0xb6}, {&(0x7f0000006680)=""/84, 0x54}, {&(0x7f0000006700)=""/102, 0x66}], 0x4, &(0x7f00000067c0)=""/33, 0x21}, 0x3}, {{&(0x7f0000006800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006940)=[{&(0x7f0000006880)=""/159, 0x9f}], 0x1, &(0x7f0000006980)=""/43, 0x2b}, 0xffffffff}, {{&(0x7f00000069c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006a40)=""/4, 0x4}, {&(0x7f0000006a80)=""/128, 0x80}, {&(0x7f0000006b00)=""/55, 0x37}, {&(0x7f0000006b40)=""/33, 0x21}, {&(0x7f0000006b80)=""/20, 0x14}, {&(0x7f0000006bc0)=""/21, 0x15}, {&(0x7f0000006c00)=""/149, 0x95}], 0x7, &(0x7f0000006d40)=""/218, 0xda}, 0x2}], 0x5, 0x40012000, &(0x7f0000006f80)) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000007080)={&(0x7f0000006fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000007040)={&(0x7f0000007000)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80040}, 0x40000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r1, &(0x7f00000070c0)=@rc={0x1f, @fixed}, &(0x7f0000007140)=0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007180), r0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000071c0)={'veth0_macvtap\x00', {0x2, 0x0, @initdev}}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000007200)={'syzkaller0\x00', {0x2, 0x0, @initdev}}) r3 = accept4$packet(r0, 0x0, &(0x7f0000007300), 0x100800) getsockname(r3, &(0x7f0000007340)=@x25, &(0x7f00000073c0)=0x80) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000007400)='.pending_reads\x00', 0x2, 0x12) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000007440)=0x2) recvmsg(r3, &(0x7f0000007600)={&(0x7f0000007480)=@generic, 0x80, &(0x7f00000075c0)=[{&(0x7f0000007500)=""/134, 0x86}], 0x1}, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x83) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000007700)={&(0x7f0000007640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x24, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = accept4$packet(r0, &(0x7f0000007740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007780)=0x14, 0x0) recvmmsg(r5, &(0x7f0000007f00)=[{{&(0x7f00000077c0)=@caif=@util, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007840)=""/116, 0x74}, {&(0x7f00000078c0)=""/74, 0x4a}, {&(0x7f0000007940)=""/42, 0x2a}, {&(0x7f0000007980)=""/135, 0x87}], 0x4, &(0x7f0000007a80)=""/59, 0x3b}, 0x3}, {{&(0x7f0000007ac0)=@caif=@util, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007b40)=""/67, 0x43}, {&(0x7f0000007bc0)=""/242, 0xf2}, {&(0x7f0000007cc0)}, {&(0x7f0000007d00)=""/86, 0x56}, {&(0x7f0000007d80)=""/71, 0x47}], 0x5, &(0x7f0000007e80)=""/87, 0x57}, 0x32d}], 0x2, 0x40, 0x0) 14:52:28 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd82}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4804) r2 = openat$incfs(r0, &(0x7f00000001c0)='.log\x00', 0x80000, 0x21) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000200)=0x157b, 0x4) getpeername$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) accept4$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0xe, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x2a0, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x7, 0x7}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x3}, {0x6, 0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x2}, {0x6, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x4}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x8}, {0x6, 0x2}, {0x1, 0x3}, {0x5}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x5}, {0x6}, {0x0, 0x9}, {0x5}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x1}, {0x0, 0x1}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x3}, {0x5, 0xa}, {0x3, 0xa}, {0x6, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0x2}, {0x7, 0x7}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x4}, {0x3, 0x2}, {}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x9}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0x5, 0x7, 0x4, 0x7, 0x3, 0xf00e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0xe952, 0x0, 0x5, 0x6, 0x6, 0xff, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x400, 0x0, 0x1b21, 0xff, 0x7, 0x1ff, 0x2]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x1b]}]}]}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x178, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0xb, 0x2, 0x12, 0x60, 0x0, 0x48, 0xb, 0x60, 0x36, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x0, 0x4, 0x40, 0xea, 0x6, 0x3ff]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x2}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x5}, {0x5, 0x8}, {0x1}, {0x3, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x3}, {0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x7, 0x1}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0x8}, {0x6, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x6, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x1}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x4}, {0x3, 0xa}, {}, {0x3, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0xa}, {0x4}, {0x3, 0x1}, {0x4, 0x6}, {0x4, 0xa}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x3, 0x9}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x3, 0x7}, {0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x8}, {0x3, 0x8}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x3, 0x9}, {0x5, 0x8}, {0x2, 0x9}, {0x7, 0x9}, {}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0x8}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x3}, {0x4, 0x1}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x2}, {}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x5, 0x7}, {0x7, 0x5}, {0x3, 0xa}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5}, {0x6, 0x5}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x5}, {0x6}, {0x1}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x8}, {0x6}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x5}, {0x4, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {}, {0x2, 0x9}, {0x3, 0x2}, {0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x4, 0x3}, {0x3}, {0x0, 0x5}, {0x6}, {0x0, 0x2}, {0x5, 0x2}, {0x2, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x9}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x5, 0x100, 0x1, 0x8000, 0x9, 0xafb7]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x101, 0x80, 0x3ff, 0x3, 0x3, 0xfff, 0xff1]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) r5 = syz_open_dev$hiddev(&(0x7f0000000700), 0x5, 0x400000) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000740)={0x2, 0x200, 0x5}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0xc000) recvmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=""/89, 0x59}, 0x2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x8, 0x4d, 0x0, 0xfffffff9}]}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a40)={0x1, &(0x7f0000000a00)=[{0x8001, 0x0, 0x0, 0x71}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000a80)={0x0, 0x3, r0, 0x5, 0x80000}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000820}, 0x40) getdents64(r2, &(0x7f0000000c40)=""/252, 0xfc) getsockname(0xffffffffffffffff, &(0x7f0000000d80)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000e00)=0x80) 14:52:28 executing program 2: migrate_pages(0xffffffffffffffff, 0x40, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x7) ptrace(0x8, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffb000/0x4000)=nil) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x7800, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fork() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x1, r1, 0xee00, 0xee00, r3, 0x86, 0x1000}, 0xa624, 0xbc3a, 0x6, 0x9869, r4, 0x0, 0x2}) r5 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x5, &(0x7f0000000700)=[{&(0x7f0000000380)="fc8fb0d56b369dd37fde76339a8b4346003e02e3fc487ef1271c3b5b85dbc36b7737be51cf3177a16f7211518932b96e1567d3200fea28334fe66f01187a78216ef48f1ce9c972a6b31b1b965ff60b55bc5b3da393551709a78a4f71b15944f0ec42cf3e63483bb90019a96ef6bd0d73e1396181a8a123324b10d24c00abba3a255938afcf847d97150b45c5f856018cad2b378b1f0455", 0x97, 0x1ff}, {&(0x7f0000000440)="8fa16627cddccbe9de4d4326de3fb5cf231bc8caa2a023b527cdba4da8aa10695386122046f518bfe98c3d52207cd55cd6412cf2a11ba16e57eb45cfac7818a7a900f32ca53c0a9eaedec213b17d7594a63405f44f91891a73ded9790bc991b548dbcc222b570a49e4c7bc9b72600c0a434d1e0aaa68f3d87b496146494dbb81cde41586a6f431b019018f4d16fe17f5752ec16082b1b0318b4ccbebb104a30e61286b0511cb649d6c97dc1e83abe9daa4919786157a8c9acdabffbf5058f5bb99c6552a8c231226a4ed8e9cecce7029316dae76990c588b5ca4cca8f83513", 0xdf, 0xe7e}, {&(0x7f0000000540)="8f3ecd29a257791c2b3aad6ef4a6d77aa067b8a9537d2f5eefd60c1cbc68ddc55c8550d700674ca11e9b1231e1b7332ed90fc4fc6aed3360e8119b8ef1d5de3f488a0cd6b41893f98b5a2d2dc807d1e08495cffde32671ed4ba4749526ae9142d41a33d03d3ad5fc8b55765cfb48e7f0f392bd06834ce1294609eb9c2e209c58ce98e9c63168c633cd702332797c8c5caaec112e88c7bcf7c88fbf89f5486793f78fbbde9b11970c7230b244d6c7eafbb8293607367cdaee935c9ea49c2f2262b84bb98d9491d3aeff4984851c", 0xcd, 0x6}, {&(0x7f0000000640)="a043e6", 0x3, 0x800}, {&(0x7f0000000680)="43df994a939ff5fa9caa51730a153a42df491478b03ae761efbf7da710aec7fd6ef655dbb2a329f71c317dc7165048ff3d905748a1c4c66dac482377e19a59f29637c7afb4a8398b9b926a6234c5106815cd37a91bf0538e715dfe5a6d9bb74dd848058209ddcf6dc26aba3cb22421ef12958bb891ee3dec31", 0x79, 0x3}], 0x101004, &(0x7f0000000780)={[{@bsdgroups}, {@block_validity}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise_type}, {@fowner_gt={'fowner>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x62, 0x39, 0x33, 0x63, 0x39, 0x38], 0x2d, [0x34, 0x34, 0x61, 0x39], 0x2d, [0x33, 0x53, 0x31, 0x32], 0x2d, [0x51, 0x39, 0x39, 0x63], 0x2d, [0x36, 0x62, 0x32, 0x36, 0x66, 0x34, 0x39, 0x31]}}}, {@uid_lt={'uid<', r1}}, {@uid_gt={'uid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[@'}}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000880)={@id={0x2, 0x0, @a}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000090) r7 = syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file0\x00', 0x1, 0x1, &(0x7f0000000b00)=[{&(0x7f0000000a80)="201c18e9ae69f9f0b575d2e8a29850568abca6746d0c96796ecc3f46ed77fad03737656a5c7ad25e005ef36918e024db50ca0f729925f889ebe57da61e9e55ee581cc29296adccb683cda24fc347e806b3181ec0e69669c4f99e22de09c167270d8fb6e7650834968f6a954372c1f4dd5e7aa4f26082e73ceb526f059be7a7", 0x7f, 0x45c}], 0x10, &(0x7f0000000b40)={[{@grpjquota}, {@jqfmt_vfsv0}, {@nouser_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x4a00000000000000}}, {@init_itable}, {@errors_remount}, {@sysvgroups}, {@orlov}, {@journal_dev={'journal_dev', 0x3d, 0xffff}}], [{@measure}, {@smackfshat={'smackfshat', 0x3d, 'fowner>'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-\\'}}, {@permit_directio}, {@dont_hash}, {@obj_user}, {@measure}]}) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x80, 0x80, 0x14}, 0x18) mknodat$loop(r8, &(0x7f0000000cc0)='./file0\x00', 0x80, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd73}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x8040) r9 = openat$incfs(r7, &(0x7f0000000e40)='.pending_reads\x00', 0xa202, 0xa0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000e80)) r10 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/28, 0x1c}, {&(0x7f0000001000)=""/152, 0x98}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/16, 0x10}], 0x4, &(0x7f0000001180)=""/55, 0x37}, 0x3}], 0x1, 0x12060, &(0x7f0000001240)) 14:52:28 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000100)) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @any, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000002c0)={0x6, 0xffff, 0x5, 0x20, 0x0, 0x5, 0x6}, 0xc) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x400002, 0xab) getdents(r2, &(0x7f0000000340)=""/4096, 0x1000) statx(r1, &(0x7f0000001340)='./file0\x00', 0x1000, 0x200, &(0x7f0000001380)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001480)=0x1) getdents64(r2, &(0x7f00000014c0)=""/61, 0x3d) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000001500)={0xffff, 0x518, 0x3, 0xff, 0x1, 0xc0, 0x1f}, 0xc) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000001540)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000001580)={0x2, 'veth1_to_hsr\x00', {}, 0x9}) faccessat2(r2, &(0x7f00000015c0)='./file0\x00', 0x6c, 0x100) getpeername$packet(r0, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001640)=0x14) r4 = syz_open_dev$sg(&(0x7f0000001680), 0x3cf, 0x20100) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f00000016c0)) 14:52:28 executing program 4: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x400800) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000000c0)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000100)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000140)) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0xc0000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0xffff, 0x7f, 0xbc, 0x9}, {0xa68, 0x2, 0x7, 0x80}, {0x1, 0x1, 0x6, 0x9}, {0x8, 0x0, 0x4a, 0x8}]}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x1, 0x101) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x8001, 0xd85}) migrate_pages(0xffffffffffffffff, 0xa9d2, &(0x7f0000000340)=0xfe00000000000000, &(0x7f0000000380)=0x7) prctl$PR_SVE_GET_VL(0x33, 0x1b9e2) r4 = socket(0x21, 0x2, 0x5) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001b00)={'sit0\x00', &(0x7f0000001a80)={'syztnl1\x00', r2, 0x29, 0x7f, 0x2, 0xfffffff7, 0x0, @mcast2, @mcast1, 0x80, 0x8000, 0x9, 0x2}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000001c00)) [ 129.908271] audit: type=1400 audit(1749567148.584:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:52:28 executing program 5: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0xc402}, 0x1}, 0x1000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x8) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x7d9) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x319000, 0x48, 0x5}, 0x18) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r2, 0xfffffffffffffffd, 0x6, 0x7, 0x4, 0x1, {0x2}}, 0xffffebda) write$cgroup_int(r0, &(0x7f0000000200)=0x2, 0x12) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000280)=0x7f) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private2, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getpeername(r3, &(0x7f0000000400)=@nl, &(0x7f0000000480)=0x80) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffe, 0xd1, 0x20, @scatter={0x1, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/194, 0xc2}]}, &(0x7f0000000600)="cc1a1d03133bd7100d9a7379779f5cf4cd04f1c5a583083ce252884fdb392e1bb7ac40f50826d57f661ea191573e7ae3e0464465ce9c6b745763e597064ef868151e62f72108e83cd8d9d16e576dd5abfefc00cc8f52dce4e1a4e37d336676cddfe4f5fd459633abf8a2f510bbbd7c9f03e340340308884da0f347e7f960e136d1030837344a48e29809bdbe77c3aa21ea27af502224a72dfd3d8c4cf17de69207ddc0d05393bae52e39c3aaeb90f1c290efe53e9acb364fd4628ef84010bd3ace1f286b017031f88371769a97fef72627", &(0x7f0000000700)=""/139, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000007c0)}) mknodat(r2, &(0x7f0000000880)='./file0\x00', 0x20, 0x9) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000008c0)=0xf45) execveat(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', &(0x7f0000000b00)=[&(0x7f0000000940)='%^\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='hugetlb.2MB.rsvd.failcnt\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='\':}\x00', &(0x7f0000000ac0)='hugetlb.2MB.rsvd.failcnt\x00'], &(0x7f0000000d40)=[&(0x7f0000000b40)='@@\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='hugetlb.2MB.rsvd.failcnt\x00', &(0x7f0000000c00)='+\x00', &(0x7f0000000c40)='-::{:\x00', &(0x7f0000000c80)='\'\x00', &(0x7f0000000cc0)='hugetlb.2MB.rsvd.failcnt\x00', &(0x7f0000000d00)=')\x00'], 0x400) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, 0x0, 0x4, 0x6817, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x48005) 14:52:28 executing program 6: clock_gettime(0x0, &(0x7f0000000000)) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) clock_getres(0x7, &(0x7f00000000c0)) clock_gettime(0x6, &(0x7f0000000100)) clock_getres(0x0, &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+10000000}, &(0x7f0000000240)) r2 = syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="eb7f68b2d9afc317f63c0b5551f01a344520ed812363752406958a0fbf6c8444999ed36964cb47e2be937770f0aeb9e9558e792c3279578ba5796150c1879e78eacbd5a419f31c12ec20607b04665b16f6dcf5f63aa3cd957fabc25c1be68519add61cc42a2389566e4b62eb9e38b8c710be6b58bb51deb0a31007d3537f7d0d26ad75206eb2e3ab952535fd48d654b8a11e70d2e3547fd298f8f02a9cff206fb48e19", 0xa3}, {&(0x7f00000003c0)="d801be536827ab075bebacfc6a5a855d080d602c6b4fefcd47919439c426595d873ff498de9b0144f9d8d061b4496b0c0046e34968e61b45de17fd5fe08494387edfac0a9579a4a99e503800b43311327bc021c6e297ab0747faf29f38f9f056a5bd4be43bf23cfbdd62c6aa73d47705e75628dcbbc7f0c19cebe444d21ff03ff9b08fe480bb1c650110af8e037f78318a0a23fd43c23cbdbf3e1a77dd", 0x9d, 0x78c}, {&(0x7f0000000480)="00913e2410ef36d5a4d4d0ee88b31edd148a72c8b400133a805762ff457419f33924e510ee1b5a", 0x27, 0x5}], 0x80, &(0x7f0000000540)={[{@data_err_abort}], [{@measure}, {@uid_gt={'uid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@appraise_type}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f00000005c0)={0x284000, 0x25, 0x11}, &(0x7f0000000600)='./file0\x00', 0x18, 0x0, 0x23456}, 0xba43) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r2}, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000006c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x10000261) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) clock_settime(0x5, &(0x7f0000000780)={r3, r4+60000000}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000004, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000880)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd_index=0x6, 0x7, &(0x7f00000007c0)="8006a3a3668c4bf37b3dda229054f8a0446a8a20ebf8435d5692d22b8bccba7dd1a44b74ecc3cdea9cd01b49d362ab1d4d28668df3fbec9b49b6ff2c163af77f5e54ba76afa0ece89446694e08995698d9f91c56e25c05cfbdbe932ed31b9ea265eabdf496af614e5655ae08495c42c131567792660e83aa77d164392cf2fa825187e79e98c7c16a893f5798622f6371465616b3a09621345dc71e358d2e9ddb818b001b5870ed75b0defe9241603f74e673a755ceb9ee460fb1290b258cca", 0xbf, 0x1}, 0xd4) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x404000, 0x0) mknodat(r6, &(0x7f0000000900)='./file0\x00', 0x80, 0xad3) linkat(r6, &(0x7f0000000940)='./file0\x00', r2, &(0x7f0000000980)='./file0\x00', 0x400) 14:52:28 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x80, @none, 0x5}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000300), 0x247bfe5d37ffcf1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000340)={0x1f, 0x7, 0x7f, 0x7f, 0xfc, 0x9, 0x6e1}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000480)=@buf={0xf5, &(0x7f0000000380)="52184aae0c46c79366502fb9a590f5af44cfd65f1cfa1f16ff8860dd91f94764b25579d7770244a71c160051061e51b334cea02ddee6708d21dd252635dde7c930de1ba06ecd2e88eee659184fe4f0e1db8d6d7898f396f1cd5644df8e231054d4348c5ac7104c176c72c145531055b23da1cd307a553a168ec2504c0d7147672f068f72419540eed2e2cec75befbfc274adcbd296b907f9a3707a7bacf816abd6af626cbfffabeafc6a75cd5484dbf89a755245dc2dd7152252c251f97b9bb429fc551b8b37026a82f232007f7c7e33df2f1c18f9230d9db6ad0c0d7a38133582ebe84dc2ea8bec74c2beee84c6c07a8aba6eecda"}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000004c0)=@req={0xb9, 0x101, 0x308f, 0x40}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000500)={r1, 0x1, 0x6, @remote}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2050204}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8b}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x20041001) bind$bt_l2cap(r3, &(0x7f0000000640)={0x1f, 0x9, @any, 0x2a}, 0xe) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000680)='.log\x00', 0xa000, 0x8) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000006c0)) futimesat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={{}, {0x0, 0xea60}}) [ 131.360773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.361858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.363218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.364163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.372930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.376227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.381797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.383052] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.385264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.390719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.416409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.418540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.429492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.431416] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.447666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.460714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.462125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.462153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.464748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.466127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.467680] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.473881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.474913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.484034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.489276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.490804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.493339] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.510836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.515949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.523898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.525239] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.531047] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.532174] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.536055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.543557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.550082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.552261] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.555044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.565048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.574542] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.499053] Bluetooth: hci0: command tx timeout [ 133.562564] Bluetooth: hci4: command tx timeout [ 133.563196] Bluetooth: hci5: command tx timeout [ 133.563906] Bluetooth: hci2: command tx timeout [ 133.564025] Bluetooth: hci3: command tx timeout [ 133.626733] Bluetooth: hci7: command tx timeout [ 133.628271] Bluetooth: hci1: command tx timeout [ 133.628293] Bluetooth: hci6: command tx timeout [ 135.546595] Bluetooth: hci0: command tx timeout [ 135.611243] Bluetooth: hci3: command tx timeout [ 135.611309] Bluetooth: hci2: command tx timeout [ 135.612632] Bluetooth: hci5: command tx timeout [ 135.612680] Bluetooth: hci4: command tx timeout [ 135.674926] Bluetooth: hci7: command tx timeout [ 135.675459] Bluetooth: hci6: command tx timeout [ 135.675952] Bluetooth: hci1: command tx timeout [ 137.595777] Bluetooth: hci0: command tx timeout [ 137.659460] Bluetooth: hci2: command tx timeout [ 137.659489] Bluetooth: hci4: command tx timeout [ 137.659950] Bluetooth: hci5: command tx timeout [ 137.660437] Bluetooth: hci3: command tx timeout [ 137.723398] Bluetooth: hci7: command tx timeout [ 137.723902] Bluetooth: hci1: command tx timeout [ 137.724474] Bluetooth: hci6: command tx timeout [ 139.644018] Bluetooth: hci0: command tx timeout [ 139.708560] Bluetooth: hci4: command tx timeout [ 139.709995] Bluetooth: hci3: command tx timeout [ 139.711364] Bluetooth: hci5: command tx timeout [ 139.713486] Bluetooth: hci2: command tx timeout [ 139.770543] Bluetooth: hci6: command tx timeout [ 139.771927] Bluetooth: hci1: command tx timeout [ 139.773578] Bluetooth: hci7: command tx timeout [ 194.330227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.340316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.342085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.347186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.349782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.447155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.452004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.458904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.466505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.469754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.498886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.501079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.503290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.520136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.521684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.524811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.531310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.532676] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.535064] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.545255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.550194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.554677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.560969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.581662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.590123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.633324] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 194.647680] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.649199] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.653220] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.654714] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.659032] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 194.659901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 194.662323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.687588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 194.689262] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.707652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.727213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 194.732093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 194.741976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 194.747814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 196.410801] Bluetooth: hci0: command tx timeout [ 196.538474] Bluetooth: hci1: command tx timeout [ 196.602705] Bluetooth: hci2: command tx timeout [ 196.667692] Bluetooth: hci4: command tx timeout [ 196.667871] Bluetooth: hci3: command tx timeout [ 196.730455] Bluetooth: hci7: command tx timeout [ 196.794477] Bluetooth: hci5: command tx timeout [ 196.858619] Bluetooth: hci6: command tx timeout [ 198.458746] Bluetooth: hci0: command tx timeout [ 198.586817] Bluetooth: hci1: command tx timeout [ 198.650459] Bluetooth: hci2: command tx timeout [ 198.714461] Bluetooth: hci3: command tx timeout [ 198.716393] Bluetooth: hci4: command tx timeout [ 198.778653] Bluetooth: hci7: command tx timeout [ 198.842513] Bluetooth: hci5: command tx timeout [ 198.907419] Bluetooth: hci6: command tx timeout [ 200.507472] Bluetooth: hci0: command tx timeout [ 200.634623] Bluetooth: hci1: command tx timeout [ 200.698590] Bluetooth: hci2: command tx timeout [ 200.762885] Bluetooth: hci4: command tx timeout [ 200.763546] Bluetooth: hci3: command tx timeout [ 200.826747] Bluetooth: hci7: command tx timeout [ 200.890855] Bluetooth: hci5: command tx timeout [ 200.954710] Bluetooth: hci6: command tx timeout [ 202.555475] Bluetooth: hci0: command tx timeout [ 202.682651] Bluetooth: hci1: command tx timeout [ 202.748618] Bluetooth: hci2: command tx timeout [ 202.810547] Bluetooth: hci3: command tx timeout [ 202.810909] Bluetooth: hci4: command tx timeout [ 202.875447] Bluetooth: hci7: command tx timeout [ 202.939664] Bluetooth: hci5: command tx timeout [ 203.003584] Bluetooth: hci6: command tx timeout [ 257.108080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.110164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.121982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.126112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.128295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 257.130144] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 257.131267] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.131573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 257.135751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.136933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.137075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 257.139245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.142790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 257.145258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.147593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.252950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 257.264773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 257.286204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 257.292826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 257.295097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.319950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.321704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.323157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.358684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.374801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.381488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.391792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.393144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.408645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.411140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.413189] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.416628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.443094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.444140] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.452708] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.459820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.488969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.505788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.505838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.516532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 259.195401] Bluetooth: hci2: command tx timeout [ 259.195490] Bluetooth: hci0: command tx timeout [ 259.196381] Bluetooth: hci1: command tx timeout [ 259.450771] Bluetooth: hci3: command tx timeout [ 259.452878] Bluetooth: hci4: command tx timeout [ 259.514654] Bluetooth: hci6: command tx timeout [ 259.579541] Bluetooth: hci5: command tx timeout [ 259.642476] Bluetooth: hci7: command tx timeout [ 261.242688] Bluetooth: hci0: command tx timeout [ 261.245406] Bluetooth: hci2: command tx timeout [ 261.245454] Bluetooth: hci1: command tx timeout [ 261.498435] Bluetooth: hci3: command tx timeout [ 261.499039] Bluetooth: hci4: command tx timeout [ 261.565402] Bluetooth: hci6: command tx timeout [ 261.626806] Bluetooth: hci5: command tx timeout [ 261.692474] Bluetooth: hci7: command tx timeout [ 263.290801] Bluetooth: hci1: command tx timeout [ 263.291691] Bluetooth: hci0: command tx timeout [ 263.291745] Bluetooth: hci2: command tx timeout [ 263.547795] Bluetooth: hci4: command tx timeout [ 263.548329] Bluetooth: hci3: command tx timeout [ 263.611413] Bluetooth: hci6: command tx timeout [ 263.674411] Bluetooth: hci5: command tx timeout [ 263.738617] Bluetooth: hci7: command tx timeout [ 265.338426] Bluetooth: hci1: command tx timeout [ 265.341716] Bluetooth: hci2: command tx timeout [ 265.341744] Bluetooth: hci0: command tx timeout [ 265.594482] Bluetooth: hci3: command tx timeout [ 265.594503] Bluetooth: hci4: command tx timeout [ 265.658452] Bluetooth: hci6: command tx timeout [ 265.722737] Bluetooth: hci5: command tx timeout [ 265.787021] Bluetooth: hci7: command tx timeout [ 319.657377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.667004] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.671468] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.676775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.680931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.862028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.863862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.865511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.871063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.873676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.901212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.911683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.914562] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.927308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.947613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.976655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.982562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.985187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.004297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.013663] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.097260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.100119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.104906] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.120503] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.142905] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.278576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.294082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.297041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.301648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.303784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 320.306025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.312862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.328037] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 320.339219] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 320.374819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.381116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.381201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.392663] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.401907] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 320.424773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.722498] Bluetooth: hci0: command tx timeout [ 321.914495] Bluetooth: hci1: command tx timeout [ 322.042492] Bluetooth: hci2: command tx timeout [ 322.106443] Bluetooth: hci3: command tx timeout [ 322.298648] Bluetooth: hci6: command tx timeout [ 322.490922] Bluetooth: hci4: command tx timeout [ 322.491647] Bluetooth: hci5: command tx timeout [ 322.556533] Bluetooth: hci7: command tx timeout [ 323.772467] Bluetooth: hci0: command tx timeout [ 323.962825] Bluetooth: hci1: command tx timeout [ 324.091395] Bluetooth: hci2: command tx timeout [ 324.154857] Bluetooth: hci3: command tx timeout [ 324.346635] Bluetooth: hci6: command tx timeout [ 324.539436] Bluetooth: hci4: command tx timeout [ 324.541156] Bluetooth: hci5: command tx timeout [ 324.603389] Bluetooth: hci7: command tx timeout [ 325.818524] Bluetooth: hci0: command tx timeout [ 326.010413] Bluetooth: hci1: command tx timeout [ 326.138422] Bluetooth: hci2: command tx timeout [ 326.202905] Bluetooth: hci3: command tx timeout [ 326.395679] Bluetooth: hci6: command tx timeout [ 326.586833] Bluetooth: hci4: command tx timeout [ 326.588632] Bluetooth: hci5: command tx timeout [ 326.650654] Bluetooth: hci7: command tx timeout [ 327.867434] Bluetooth: hci0: command tx timeout [ 328.058422] Bluetooth: hci1: command tx timeout [ 328.187437] Bluetooth: hci2: command tx timeout [ 328.251083] Bluetooth: hci3: command tx timeout [ 328.442881] Bluetooth: hci6: command tx timeout [ 328.634475] Bluetooth: hci5: command tx timeout [ 328.635890] Bluetooth: hci4: command tx timeout [ 328.698601] Bluetooth: hci7: command tx timeout [ 382.288193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.295301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.301901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.315085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.325641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.561635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.570413] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.571550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.575308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.581696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.584198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.589166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.590520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.601419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.604719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.684036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.699806] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.701836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.711712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.714851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.733982] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.739659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.747325] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.751749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.754895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.822599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.824812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 382.830738] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.831826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 382.837996] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 382.845141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 382.859733] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 382.872644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 382.878927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.888278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 382.898649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.903805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 382.906672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.924816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 382.941091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 384.378447] Bluetooth: hci0: command tx timeout [ 384.634520] Bluetooth: hci2: command tx timeout [ 384.635429] Bluetooth: hci1: command tx timeout [ 384.826994] Bluetooth: hci3: command tx timeout [ 384.828137] Bluetooth: hci4: command tx timeout [ 385.019484] Bluetooth: hci6: command tx timeout [ 385.020272] Bluetooth: hci7: command tx timeout [ 385.083462] Bluetooth: hci5: command tx timeout [ 386.427490] Bluetooth: hci0: command tx timeout [ 386.682598] Bluetooth: hci2: command tx timeout [ 386.683139] Bluetooth: hci1: command tx timeout [ 386.874476] Bluetooth: hci3: command tx timeout [ 386.875023] Bluetooth: hci4: command tx timeout [ 387.066832] Bluetooth: hci7: command tx timeout [ 387.067706] Bluetooth: hci6: command tx timeout [ 387.130436] Bluetooth: hci5: command tx timeout [ 388.474695] Bluetooth: hci0: command tx timeout [ 388.730507] Bluetooth: hci1: command tx timeout [ 388.731080] Bluetooth: hci2: command tx timeout [ 388.923501] Bluetooth: hci3: command tx timeout [ 388.925092] Bluetooth: hci4: command tx timeout [ 389.114564] Bluetooth: hci7: command tx timeout [ 389.115139] Bluetooth: hci6: command tx timeout [ 389.178729] Bluetooth: hci5: command tx timeout [ 390.522560] Bluetooth: hci0: command tx timeout [ 390.778496] Bluetooth: hci2: command tx timeout [ 390.779067] Bluetooth: hci1: command tx timeout [ 390.970554] Bluetooth: hci3: command tx timeout [ 390.971162] Bluetooth: hci4: command tx timeout [ 391.162763] Bluetooth: hci6: command tx timeout [ 391.163577] Bluetooth: hci7: command tx timeout [ 391.226440] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 14:57:34 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888016aa5280 RCX=0000000000000040 RDX=0000000000000006 RSI=ffff888016aa5d28 RDI=ffff888016aa5280 RBP=ffff888016aa5cd8 RSP=ffff8880356ef4a0 R8 =0000000000000000 R9 =000000000000009c R10=0000000000000001 R11=0000000000000000 R12=ffff888016aa5d28 R13=0000000000000000 R14=0000000000000001 R15=0000000000040000 RIP=ffffffff815191f2 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1c747a7260 CR3=0000000033f1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87a55508 RBX=ffff88802c3f3700 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff88802c3f4180 RDI=ffff88802c3f4180 RBP=ffff88802c3f4158 RSP=ffff888023e57218 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802c3f4180 R13=6a5c580aceac53cb R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81519448 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7746dc4028 CR3=000000001c54b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000