Warning: Permanently added '[localhost]:26629' (ECDSA) to the list of known hosts.
2024/11/07 22:55:56 fuzzer started
2024/11/07 22:55:57 dialing manager at localhost:46317
syzkaller login: [   75.010206] cgroup: Unknown subsys name 'net'
[   75.104695] cgroup: Unknown subsys name 'cpuset'
[   75.118438] cgroup: Unknown subsys name 'rlimit'
2024/11/07 22:56:14 syscalls: 206
2024/11/07 22:56:14 code coverage: enabled
2024/11/07 22:56:14 comparison tracing: enabled
2024/11/07 22:56:14 extra coverage: enabled
2024/11/07 22:56:14 setuid sandbox: enabled
2024/11/07 22:56:14 namespace sandbox: enabled
2024/11/07 22:56:14 Android sandbox: enabled
2024/11/07 22:56:14 fault injection: enabled
2024/11/07 22:56:14 leak checking: enabled
2024/11/07 22:56:14 net packet injection: enabled
2024/11/07 22:56:14 net device setup: enabled
2024/11/07 22:56:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/07 22:56:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/07 22:56:14 USB emulation: enabled
2024/11/07 22:56:14 hci packet injection: enabled
2024/11/07 22:56:14 wifi device emulation: enabled
2024/11/07 22:56:14 802.15.4 emulation: enabled
2024/11/07 22:56:14 fetching corpus: 0, signal 0/0 (executing program)
2024/11/07 22:56:15 starting 8 fuzzer processes
22:56:15 executing program 0:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x400)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x54}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000884}, 0x810)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/class/power_supply', 0x4200, 0xc0)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000280)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform', 0x40000, 0x2)
ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x5)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x31b29561}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20040814)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000480)='[[\x00', 0x0, r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x144, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x4849777832be5aa0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x104, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1bccc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x44}}, 0x1)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r7)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x114, r9, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000)

22:56:15 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x28a3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44}, 0x1)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r1, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40090}, 0xc0c1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x85bb}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x10008000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000480)=0x2, 0x4)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x12f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8015}, 0x40)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000740)=0x9, 0x2)
ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f00000007c0)={@lba=0x6b0, 0x1, 0x27, &(0x7f0000000780)=""/39})
r4 = fsmount(r0, 0x1, 0x2)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004010}, 0x800)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/187, 0xbb}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000ac0)=""/62, 0x3e}, {&(0x7f0000000b00)=""/189, 0xbd}, {&(0x7f0000000bc0)=""/105, 0x69}, {&(0x7f0000000c40)=""/46, 0x2e}, {&(0x7f0000000c80)=""/42, 0x2a}], 0x7)
r5 = fsmount(r4, 0x1, 0x3c)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000d40)=0x10001, &(0x7f0000000d80)=0x4)

22:56:15 executing program 2:
r0 = fsmount(0xffffffffffffffff, 0x1, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4)
r1 = fsmount(r0, 0x0, 0x70)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3b4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20080}, 0x80)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x10000)
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000001c0)=""/4096)
r3 = syz_open_dev$vcsa(&(0x7f00000011c0), 0x800, 0x8380)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xb4, 0x0, 0x200, 0x70bd2b, 0x40, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x86b6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2002c840}, 0x40)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000001)
r4 = fsmount(r3, 0x1, 0x84)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0)
sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x37726e6d62ccd19}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000001600)={0xff, 0xa8}, 0x2)
r6 = socket(0x3, 0x6, 0x431eff90)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000420}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc444)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000001740)=r4, 0x1)
ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x3c}}, 0x48)
r7 = fsmount(r4, 0x0, 0x40)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000001880)='\x00', &(0x7f00000018c0)='./file0\x00', r3)

[   93.229998] audit: type=1400 audit(1731020175.910:7): avc:  denied  { execmem } for  pid=278 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:56:15 executing program 3:
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/140, 0x8c}], 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001180))
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001380), 0x40000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r1 = socket(0x11, 0x5, 0x7ff)
sendmsg$802154_raw(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000001440)={&(0x7f0000001400)="fe0503d9c19cc3404048fc3ada749a178a26742ed7108437ed9ce5a17656aec5a2683e4357ea03b75a6ee4e6091e425d6126c1", 0x33}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c0)
r3 = fsmount(0xffffffffffffffff, 0x1, 0x71)
ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001640)={0xff, 0x1f, 0xe1, 0x20, 0x92, 0xfc})
io_uring_enter(r3, 0x4625, 0x22ea, 0x3, &(0x7f0000001680)={[0x6]}, 0x8)
ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f00000016c0))
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x240408d0)
ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000001840))
r4 = socket(0x18, 0x5, 0x6)
sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x10, 0x3f5, 0x400, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24}, 0x20048091)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001980)={<r5=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001b80)={{r5, 0x1ff, 0xe158, 0xfffffffffffffc4e, 0x7, 0x10000, 0x6, 0x9, 0xffffffff, 0x1, 0x0, 0x7fff, 0xae14, 0x5, 0x5}})
sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x28, 0x3f7, 0x4, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}}, 0x40080)

22:56:15 executing program 4:
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xffffffffffffff80, 0x24840)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/56)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x2b, 0x0, 0x6, 0x8, "04f4039f176afbead39c02e539cb8a7a4cdb26d1a5056eb2f399738975def0ce"})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x0, 0x1d, 0xfff, 0x1, "5a15918496583a3d80d9bc18ca2659202ebd723581f7cfd1568ab39508c5a487"})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x88500, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {}, {0x0, @struct}})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual', 0x1, 0x2)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000005c0))
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000007c0)=""/192)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000880)=""/235)
accept$packet(r0, &(0x7f00000009c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdadc}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040854}, 0x8f47d69b8fc1c380)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000b40)={0x1, @le_conn_param_req_neg_reply={{0x2021, 0x3}, {0xc9, 0x4}}}, 0x7)
ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000b80)=""/22)
ioctl$CDROMREADRAW(r2, 0x5314, &(0x7f0000000bc0)={0x1, 0x7, 0x6, 0x9, 0x7})
fsmount(r0, 0x1, 0xf4)

22:56:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)="23547b9256127948843461a7dd4cff9920c8a2e644fd42c624aa147a0cbd5c856f36146d39fe2e2f2c0dcd47068e2cda568bf32f8c056f9eeed895e7d53d651e3766c8f02b574f9758367d0fc68e791c7173b91d897728528fe9f7a021d3ede8b9ac96d386f79267804ef8e26d4ee19387d39c91e2390b7abf9db9cb97463c0cd92503f4d769ac7a992fef2d8bbf04f08b66ad2481921d992482b77a4a1ee249a37938561ea9c8786b52445f73fd2a0bd11181c08f4e841c5700e6dc6b9f1adced3f88a81f4c97fe978c8e39b35a99b9178e49a9e4eacaee36146705df4bd8573d83cf6a602f", 0xe6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kernel', 0x100800, 0x20)
getsockopt$inet6_tcp_int(r2, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x20)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000240), &(0x7f0000000280))
ioctl$CDROM_LAST_WRITTEN(r3, 0x5395, &(0x7f00000002c0))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000300)={0xf8000000, 0x4, 0x0, 0x10001, 0x7f}, 0x14)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="748df38a283c4bda419fdfdc10ceaf31", 0x10)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000380), 0x4)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/class/dma', 0x645d3ab198ba500d, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000400)={0xba5e8c74, 0x6, 0x7, 0x9, 0x9}, 0x14)
r5 = socket(0x1d, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000440)=0x4, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4)
socket(0xf, 0x6, 0x57ac4d1e)
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000500))

22:56:15 executing program 6:
ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x408101, 0x0)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000040)={0x2, 0x3, 0x40, 0x5, 0x8, 0x3f})
r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0)
ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000ac0)={0x3c, 0x2})
r2 = fsmount(r1, 0x1, 0x9)
ioctl$CDROM_DEBUG(r2, 0x5330, 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/thermal', 0x2000, 0x84)
ioctl$CDROM_GET_MCN(r3, 0x5311, &(0x7f0000000b40))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x70}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040004)
ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x8001)
r5 = syz_open_dev$vcsn(&(0x7f0000000cc0), 0x8, 0x80)
ioctl$CDROMMULTISESSION(r5, 0x5310, &(0x7f0000000d00)={@msf={0x5, 0x2, 0x8}, 0x0, 0x2})
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000d40)={0x3, 0x4, "29da5b", 0x8, 0x8d})
r6 = syz_open_dev$evdev(&(0x7f0000000d80), 0x20, 0x54dc40)
ioctl$EVIOCGPHYS(r6, 0x80404507, &(0x7f0000000dc0)=""/4096)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000001e00)=']!#}!^&]\xd6[-p#@$#+(\x00', &(0x7f0000001e40)="7a5d6d54da0b6d9f96c9f371e5d809b787fce783709f2c0478364435d2db269ecaa8180d75dddce22900d20467c5a4de964ca4040a373305fe844fdc8b0b6f507f44155573598f9de2d77eb8f0892da4703501b128d1ad0be30e443bf267ea7cedcad7fd873ce0982cdb1f62f93718a0aa3befed9e715967a378", 0x7a)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000002040)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd83}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x83c5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffbc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000000)

22:56:16 executing program 7:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb29f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd179}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48804}, 0x400c094)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/snd_intel_dspcfg', 0x100, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x52}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/firmware/memmap', 0x600, 0x40)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff0000}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfb}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x44050)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', <r2=>0x0, 0x29, 0x8, 0x3f, 0x5, 0x1, @empty, @mcast2, 0x1, 0x8, 0x5, 0x3}})
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000740), 0x80000001, 0x2c000)
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
r4 = socket(0xb, 0x800, 0x3)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000880)=0x5, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c58cb6cc882d"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r6)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000b80)={0x0, 0x9, @status={[0x0, 0x1f, 0x7, 0x4, 0x2, 0x7fffffff]}, [0x9, 0x35a8, 0x7, 0x8, 0x101, 0x2, 0xe4, 0x8, 0x5, 0x8, 0x7, 0x2, 0x42b, 0x107141b9, 0x1000, 0x28, 0x1f2, 0x8, 0x3, 0xfffffffffffffffb, 0x4, 0x7, 0x2, 0xff, 0x5, 0x1000, 0x1, 0x9c, 0x6, 0x0, 0x80000000, 0x80000000, 0x4, 0x2, 0x2, 0x9, 0x9a2, 0x80d, 0xfffffffffffeffff, 0x0, 0x1, 0x0, 0x401, 0x4080000000000000, 0x100, 0x0, 0x101, 0x75633ef2, 0xfffffffffffffffc, 0x3f, 0x2, 0x1, 0x7e000000, 0x8, 0xb1b, 0x59, 0x100, 0x1, 0xf, 0x0, 0xa7, 0x7fff, 0x7, 0x1ff]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup/syz0\x00', 0x200002, 0x0)

[   94.748465] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.755833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.756875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.757999] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.758987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.762508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.763323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.764243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.765087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.772070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.773737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.775238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.783524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.789233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.790167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.791967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   94.792064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.794117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.796160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   94.797334] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.798263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.805294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.806083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.808447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   94.812077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.817920] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   94.820009] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.821115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.850899] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   94.853560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.856127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.869757] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.875570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   94.878434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   94.888720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.892752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   94.897434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.907244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   94.909578] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   94.912268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   94.913904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.916426] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   94.918921] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   94.922886] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   94.925433] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.927558] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   94.929320] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   94.930455] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   96.869956] Bluetooth: hci0: command tx timeout
[   96.870917] Bluetooth: hci2: command tx timeout
[   96.871556] Bluetooth: hci3: command tx timeout
[   96.934211] Bluetooth: hci4: command tx timeout
[   96.935951] Bluetooth: hci1: command tx timeout
[   96.997766] Bluetooth: hci5: command tx timeout
[   96.999343] Bluetooth: hci6: command tx timeout
[   96.999372] Bluetooth: hci7: command tx timeout
[   98.918894] Bluetooth: hci3: command tx timeout
[   98.919036] Bluetooth: hci2: command tx timeout
[   98.920269] Bluetooth: hci0: command tx timeout
[   98.984650] Bluetooth: hci4: command tx timeout
[   98.984683] Bluetooth: hci1: command tx timeout
[   99.046938] Bluetooth: hci7: command tx timeout
[   99.047003] Bluetooth: hci5: command tx timeout
[   99.047401] Bluetooth: hci6: command tx timeout
[  100.965861] Bluetooth: hci0: command tx timeout
[  100.966379] Bluetooth: hci2: command tx timeout
[  100.967083] Bluetooth: hci3: command tx timeout
[  101.031686] Bluetooth: hci4: command tx timeout
[  101.032190] Bluetooth: hci1: command tx timeout
[  101.094662] Bluetooth: hci7: command tx timeout
[  101.094828] Bluetooth: hci5: command tx timeout
[  101.095122] Bluetooth: hci6: command tx timeout
[  103.013721] Bluetooth: hci2: command tx timeout
[  103.013750] Bluetooth: hci0: command tx timeout
[  103.014231] Bluetooth: hci3: command tx timeout
[  103.077720] Bluetooth: hci4: command tx timeout
[  103.077742] Bluetooth: hci1: command tx timeout
[  103.141751] Bluetooth: hci6: command tx timeout
[  103.142451] Bluetooth: hci5: command tx timeout
[  103.143559] Bluetooth: hci7: command tx timeout
[  157.429682] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  157.432101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  157.433906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  157.458093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  157.467109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  157.473179] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.654399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  157.659017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  157.664397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  157.666339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.668913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  157.673008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  157.673500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.675098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  157.678755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.681296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  157.688260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  157.689170] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  157.690357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  157.694308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  157.698431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  157.699902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  157.729211] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  157.736655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.737977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  157.741355] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  157.742474] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  157.749697] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  157.755497] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  157.756871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  157.758839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  157.760002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  157.762893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.769500] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  157.771144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  157.773452] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  157.777688] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  157.781871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  157.785877] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  157.803292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  157.803611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  157.806888] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  157.807080] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  157.816531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  157.844139] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  157.845061] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  157.846246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  157.847219] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.540804] Bluetooth: hci0: command tx timeout
[  159.782833] Bluetooth: hci1: command tx timeout
[  159.845872] Bluetooth: hci3: command tx timeout
[  159.845925] Bluetooth: hci7: command tx timeout
[  159.846684] Bluetooth: hci2: command tx timeout
[  159.909723] Bluetooth: hci5: command tx timeout
[  159.910909] Bluetooth: hci4: command tx timeout
[  160.104047] Bluetooth: hci6: command tx timeout
[  161.573725] Bluetooth: hci0: command tx timeout
[  161.829750] Bluetooth: hci1: command tx timeout
[  161.895653] Bluetooth: hci7: command tx timeout
[  161.895687] Bluetooth: hci3: command tx timeout
[  161.896166] Bluetooth: hci2: command tx timeout
[  161.957815] Bluetooth: hci4: command tx timeout
[  161.957902] Bluetooth: hci5: command tx timeout
[  162.150763] Bluetooth: hci6: command tx timeout
[  163.621868] Bluetooth: hci0: command tx timeout
[  163.877772] Bluetooth: hci1: command tx timeout
[  163.942637] Bluetooth: hci3: command tx timeout
[  163.942798] Bluetooth: hci2: command tx timeout
[  163.944047] Bluetooth: hci7: command tx timeout
[  164.007636] Bluetooth: hci5: command tx timeout
[  164.009038] Bluetooth: hci4: command tx timeout
[  164.197707] Bluetooth: hci6: command tx timeout
[  165.671618] Bluetooth: hci0: command tx timeout
[  165.925673] Bluetooth: hci1: command tx timeout
[  165.989701] Bluetooth: hci7: command tx timeout
[  165.992191] Bluetooth: hci2: command tx timeout
[  165.992960] Bluetooth: hci3: command tx timeout
[  166.053670] Bluetooth: hci4: command tx timeout
[  166.054185] Bluetooth: hci5: command tx timeout
[  166.245779] Bluetooth: hci6: command tx timeout
[  219.772766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  219.775418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  219.783167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  219.797985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  219.803981] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  219.807061] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  219.848710] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  219.852879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  219.855758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  219.860297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  219.863953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.870447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.913211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.923846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.932948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.944817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.958278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  219.972139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.972171] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  219.999183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  220.023592] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  220.035433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  220.044941] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  220.055932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.095144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  220.105020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  220.106240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  220.111669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  220.114504] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  220.116987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  220.147187] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  220.147386] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  220.159101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  220.163377] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  220.165886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  220.168264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  220.172264] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  220.175831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  220.178145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  220.211211] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  220.217357] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  220.219678] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  220.234155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  220.274294] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  220.317244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  220.347102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  220.372549] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  220.389195] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  221.861704] Bluetooth: hci0: command tx timeout
[  221.925836] Bluetooth: hci1: command tx timeout
[  222.053742] Bluetooth: hci2: command tx timeout
[  222.117754] Bluetooth: hci3: command tx timeout
[  222.181893] Bluetooth: hci4: command tx timeout
[  222.245721] Bluetooth: hci6: command tx timeout
[  222.246496] Bluetooth: hci5: command tx timeout
[  222.502735] Bluetooth: hci7: command tx timeout
[  223.909782] Bluetooth: hci0: command tx timeout
[  223.973685] Bluetooth: hci1: command tx timeout
[  224.101671] Bluetooth: hci2: command tx timeout
[  224.166500] Bluetooth: hci3: command tx timeout
[  224.233656] Bluetooth: hci4: command tx timeout
[  224.293689] Bluetooth: hci6: command tx timeout
[  224.294191] Bluetooth: hci5: command tx timeout
[  224.550636] Bluetooth: hci7: command tx timeout
[  225.957674] Bluetooth: hci0: command tx timeout
[  226.021684] Bluetooth: hci1: command tx timeout
[  226.149712] Bluetooth: hci2: command tx timeout
[  226.213919] Bluetooth: hci3: command tx timeout
[  226.278114] Bluetooth: hci4: command tx timeout
[  226.343641] Bluetooth: hci5: command tx timeout
[  226.344144] Bluetooth: hci6: command tx timeout
[  226.597671] Bluetooth: hci7: command tx timeout
[  228.005826] Bluetooth: hci0: command tx timeout
[  228.070650] Bluetooth: hci1: command tx timeout
[  228.197711] Bluetooth: hci2: command tx timeout
[  228.261769] Bluetooth: hci3: command tx timeout
[  228.325873] Bluetooth: hci4: command tx timeout
[  228.389681] Bluetooth: hci6: command tx timeout
[  228.390216] Bluetooth: hci5: command tx timeout
[  228.645796] Bluetooth: hci7: command tx timeout
[  282.170118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  282.172034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  282.176058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  282.183711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  282.185236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  282.187057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  282.187072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  282.189392] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  282.191104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  282.192988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  282.210307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  282.212865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  282.297399] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  282.309908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  282.317397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  282.323864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  282.329797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  282.331861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  282.372165] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  282.376171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  282.377299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  282.382964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  282.384484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  282.385892] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  282.447814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  282.451061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  282.452117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  282.455997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  282.461668] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  282.462838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  282.474439] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  282.475281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  282.478398] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  282.482214] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  282.483507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  282.486454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  282.490125] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  282.491358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  282.495693] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  282.499040] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  282.509028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  282.511087] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  282.512887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  282.534066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  282.536242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  282.626896] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  282.642854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  282.646133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.261733] Bluetooth: hci0: command tx timeout
[  284.262762] Bluetooth: hci1: command tx timeout
[  284.389696] Bluetooth: hci2: command tx timeout
[  284.453696] Bluetooth: hci3: command tx timeout
[  284.518703] Bluetooth: hci7: command tx timeout
[  284.581832] Bluetooth: hci4: command tx timeout
[  284.583785] Bluetooth: hci6: command tx timeout
[  284.774405] Bluetooth: hci5: command tx timeout
[  286.311611] Bluetooth: hci1: command tx timeout
[  286.313086] Bluetooth: hci0: command tx timeout
[  286.437693] Bluetooth: hci2: command tx timeout
[  286.503883] Bluetooth: hci3: command tx timeout
[  286.566597] Bluetooth: hci7: command tx timeout
[  286.629745] Bluetooth: hci4: command tx timeout
[  286.631300] Bluetooth: hci6: command tx timeout
[  286.821720] Bluetooth: hci5: command tx timeout
[  288.357662] Bluetooth: hci0: command tx timeout
[  288.358861] Bluetooth: hci1: command tx timeout
[  288.485632] Bluetooth: hci2: command tx timeout
[  288.549641] Bluetooth: hci3: command tx timeout
[  288.613643] Bluetooth: hci7: command tx timeout
[  288.678513] Bluetooth: hci4: command tx timeout
[  288.680104] Bluetooth: hci6: command tx timeout
[  288.869662] Bluetooth: hci5: command tx timeout
[  290.405679] Bluetooth: hci0: command tx timeout
[  290.406217] Bluetooth: hci1: command tx timeout
[  290.533639] Bluetooth: hci2: command tx timeout
[  290.597693] Bluetooth: hci3: command tx timeout
[  290.661794] Bluetooth: hci7: command tx timeout
[  290.725656] Bluetooth: hci4: command tx timeout
[  290.726130] Bluetooth: hci6: command tx timeout
[  290.918618] Bluetooth: hci5: command tx timeout
[  344.443783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  344.453034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  344.457453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  344.464087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  344.466626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  344.468716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  344.739008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  344.776419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  344.779457] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  344.781848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  344.783313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  344.784356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  344.803124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  344.804944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  344.806939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  344.823097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  344.825155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  344.826473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  344.828109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  344.839108] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  344.852776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  344.854698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  344.855770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  344.857042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  344.858328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  344.860995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  344.862468] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  344.863895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  344.869937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  344.870789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  344.873901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  344.878035] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  344.879350] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  344.881247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  344.882047] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  344.882986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  344.887769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  344.899079] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  344.907090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  344.914650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  344.914843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  344.925504] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  344.934322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  344.946774] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  344.960035] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  344.963059] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  344.963900] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  344.966766] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  346.534963] Bluetooth: hci0: command tx timeout
[  346.854852] Bluetooth: hci1: command tx timeout
[  346.917777] Bluetooth: hci4: command tx timeout
[  346.917814] Bluetooth: hci5: command tx timeout
[  346.918152] Bluetooth: hci2: command tx timeout
[  346.918841] Bluetooth: hci3: command tx timeout
[  347.045686] Bluetooth: hci7: command tx timeout
[  347.046688] Bluetooth: hci6: command tx timeout
[  348.581806] Bluetooth: hci0: command tx timeout
[  348.903584] Bluetooth: hci1: command tx timeout
[  348.967617] Bluetooth: hci3: command tx timeout
[  348.968178] Bluetooth: hci4: command tx timeout
[  348.969275] Bluetooth: hci2: command tx timeout
[  348.969856] Bluetooth: hci5: command tx timeout
[  349.093805] Bluetooth: hci6: command tx timeout
[  349.094370] Bluetooth: hci7: command tx timeout
[  350.629716] Bluetooth: hci0: command tx timeout
[  350.950330] Bluetooth: hci1: command tx timeout
[  351.013732] Bluetooth: hci2: command tx timeout
[  351.014238] Bluetooth: hci5: command tx timeout
[  351.014895] Bluetooth: hci3: command tx timeout
[  351.015414] Bluetooth: hci4: command tx timeout
[  351.141692] Bluetooth: hci7: command tx timeout
[  351.142228] Bluetooth: hci6: command tx timeout
[  352.678601] Bluetooth: hci0: command tx timeout
[  352.997715] Bluetooth: hci1: command tx timeout
[  353.061625] Bluetooth: hci4: command tx timeout
[  353.062126] Bluetooth: hci5: command tx timeout
[  353.062646] Bluetooth: hci2: command tx timeout
[  353.063111] Bluetooth: hci3: command tx timeout
[  353.189684] Bluetooth: hci6: command tx timeout
[  353.190198] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:01:26  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8115d8f7 RDX=ffff888028ff0000
RSI=ffffffff8115d901 RDI=0000000000000007 RBP=000000000a005770 RSP=ffff88806ce09d50
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=00000000000c33ea
R12=0000000000000000 R13=ffffea0000620b80 R14=0000000000000000 R15=ffff88801882f600
RIP=ffffffff8115d93e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9f633378e0 CR3=000000002d78c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff000000000000ffffffffffff0000 XMM03=ffffffffff0000ffffffffff00000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000003 RBX=0000000000020000 RCX=1ffffffff0fdda92 RDX=0000000000000004
RSI=0000000000000200 RDI=ffffffff87eed490 RBP=ffff8880139b1b80 RSP=ffff88806cf09c40
R8 =0000000000000000 R9 =fffffbfff0fdc5e7 R10=ffffffff87ee2f3f R11=00000000000c36d9
R12=ffffffff85c15ca0 R13=ffffffff87eed430 R14=0000000000000000 R15=ffff8880139b26b0
RIP=ffffffff812fc492 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb8b5bf9269 CR3=0000000028644000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c
XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000