Warning: Permanently added '[localhost]:39415' (ECDSA) to the list of known hosts.
2025/04/26 01:48:33 fuzzer started
2025/04/26 01:48:33 dialing manager at localhost:46629
syzkaller login: [   95.435869] cgroup: Unknown subsys name 'net'
[   95.585331] cgroup: Unknown subsys name 'cpuset'
[   95.629585] cgroup: Unknown subsys name 'rlimit'
2025/04/26 01:48:57 syscalls: 202
2025/04/26 01:48:57 code coverage: enabled
2025/04/26 01:48:57 comparison tracing: enabled
2025/04/26 01:48:57 extra coverage: enabled
2025/04/26 01:48:57 setuid sandbox: enabled
2025/04/26 01:48:57 namespace sandbox: enabled
2025/04/26 01:48:57 Android sandbox: enabled
2025/04/26 01:48:57 fault injection: enabled
2025/04/26 01:48:57 leak checking: enabled
2025/04/26 01:48:57 net packet injection: enabled
2025/04/26 01:48:57 net device setup: enabled
2025/04/26 01:48:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/26 01:48:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/26 01:48:57 USB emulation: enabled
2025/04/26 01:48:57 hci packet injection: enabled
2025/04/26 01:48:57 wifi device emulation: enabled
2025/04/26 01:48:57 802.15.4 emulation: enabled
2025/04/26 01:48:57 fetching corpus: 0, signal 0/0 (executing program)
2025/04/26 01:48:59 starting 8 fuzzer processes
01:48:59 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20008010)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10008841}, 0x24008090)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/sem\x00', 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'syztnl0\x00', <r7=>0x0, 0x20, 0x7, 0xe54f, 0x100, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x66, 0x0, 0x1f, 0x29, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x13, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0x98, [@private=0xa010100, @broadcast, @remote, @multicast2]}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x9, [0xfffffa84, 0x8, 0xffff0001]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', <r8=>0x0, 0x4, 0x20, 0x96, 0x81, 0x8, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0xff, 0x8}})
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x414, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x29}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x100)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl2\x00', <r9=>r8, 0x4, 0x3f, 0x1, 0x3ff, 0x2, @private1={0xfc, 0x1, '\x00', 0x81}, @mcast2, 0x7800, 0x8000, 0x5, 0xd6f}})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffc0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x400c800)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40059806}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r5)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r11, 0x110, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801)

01:48:59 executing program 1:
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x810)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8004)
socketpair(0x23, 0x6, 0x7, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb14}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44805}, 0x4000004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2020000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000780)={0x0, 0x6, 0xfffffffe})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000053c0)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000005300)=[{{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=""/13, 0xd}}, {{&(0x7f0000001a80)=@qipcrtr, 0x80, &(0x7f0000002c00)=[{&(0x7f0000001b00)=""/42, 0x2a}, {&(0x7f0000001b40)=""/132, 0x84}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x3, &(0x7f0000002c40)=""/73, 0x49}, 0x1}, {{&(0x7f0000002cc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000005180)=[{&(0x7f0000002d40)=""/93, 0x5d}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/178, 0xb2}, {&(0x7f0000003e80)=""/98, 0x62}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/136, 0x88}, {&(0x7f0000004fc0)=""/217, 0xd9}, {&(0x7f00000050c0)=""/25, 0x19}, {&(0x7f0000005100)=""/19, 0x13}, {&(0x7f0000005140)=""/2, 0x2}], 0xa, &(0x7f0000005240)=""/188, 0xbc}, 0x7}], 0x3, 0x10001, &(0x7f0000005400)={r8, r9+60000000})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000005480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd55}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
socketpair(0x2, 0x2, 0x1, &(0x7f0000005580))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000055c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

01:48:59 executing program 2:
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0xb5, [0xff, 0x0, 0x8, 0x4, 0x0, 0x5], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/181}, &(0x7f0000000180)=0x78)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68)
r0 = socket$inet(0x2, 0x5, 0x9)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0x10000, 0x16, 0x4, 0x3ff, 0x34b}, 0x14)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000003c0)={0x2, 0x3, @start={0x0, 0x1, "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", "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"}, [0x6, 0x6, 0x0, 0xfff, 0x6, 0x1ff, 0x6e4, 0xe6, 0x8, 0x9, 0xde5e, 0x100000001, 0x0, 0x20, 0x3, 0x401, 0x9, 0x5b0a6e5e, 0x401, 0x167b, 0x0, 0xfffffffffffff800, 0x7, 0x6ef2, 0x5, 0x1f, 0x100, 0x9, 0x1, 0x5, 0x7ff, 0x6, 0x1, 0x0, 0x10001, 0xc7b, 0x7, 0x9, 0x7, 0x80000001, 0x93cd, 0x7, 0x227, 0x3, 0x3, 0x7f, 0x100000000, 0x200, 0x7, 0x7ff, 0x7, 0x3, 0x4, 0x1f, 0x8, 0x20, 0x5e, 0x1, 0x4, 0x3, 0x4, 0x9, 0x3, 0xffffffffe2e1b91a]})
r2 = syz_open_dev$vcsa(&(0x7f0000003240), 0xfc, 0x400)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000003280), &(0x7f00000032c0)=0x14)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000003300)={'filter\x00', 0x0, [0x81, 0x8a, 0x81, 0x7f3, 0x7]}, &(0x7f0000003380)=0x54)
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000033c0))
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x404e3ed6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48854)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000003540))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x54, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4800)
socketpair(0x1, 0x5, 0x2, &(0x7f00000036c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000003700)={@rand_addr, @loopback}, &(0x7f0000003740)=0x8)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000037c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000003780), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @dev={0xac, 0x14, 0x14, 0x15}, @local, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @broadcast, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d00)={0x58, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x8001)

01:48:59 executing program 3:
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0xd9, "3d07d315bfdad1be68aea42e01fc4378b4fd93b44da584e9b38bd22652f878e8978a0f6488812da556e158bc015bcb20e5b9db86f3d3414a3bc988f17c214977fea2e7a5172a2d19959e8d97bac7063a76188eda3355317e28ef9234d1e132de160031cdc968fcd23c5fc0ac77ad32216641a57579caef2e807895d406d5b7e005f3663322bcebc5948bb19da8375aeea7e0eb17d1e7ad9d278ca09085e52cc57923605d74eb328fb4fded0bf65c93120abaa238641f9a0abd29c7cb0fff74a168bfa08167b224118b3b1f24254b6e1d4578b9068c266b5386"}, &(0x7f0000000100)=0xfd)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x23c5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socketpair(0xa, 0x3, 0xef3, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x2}}, @l2tp={0x2, 0x0, @empty, 0x3}, @phonet={0x23, 0xef, 0xd9, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)='vxcan1\x00', 0x1, 0x2, 0x3f})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000440)={0x87, @broadcast, 0x4e22, 0x3, 'dh\x00', 0x1, 0xffff0000, 0x62}, 0x2c)
r2 = memfd_secret(0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000540)={0x0, @remote, 0x4e21, 0x2, 'rr\x00', 0x12, 0xcd, 0x49}, 0x2c)
socketpair(0x2c, 0x5, 0x400, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffffe]}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048001}, 0x20048880)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x9000001}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x59}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20008800)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000a00)={'broute\x00', 0x0, 0x4, 0xf4, [0x2, 0x80000000, 0x2, 0x9, 0x33a, 0x4], 0x1, &(0x7f00000008c0)=[{}], &(0x7f0000000900)=""/244}, &(0x7f0000000a80)=0x78)
socketpair(0x11, 0x1, 0x1, &(0x7f0000000bc0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r6=>r4, {0x1f}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r7=>r3, {0x1}}, './file0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={<r8=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x80)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000e80)={'filter\x00', 0x0, 0x3, 0x79, [0x100000000, 0x5, 0x2, 0xfffffffffffffbb3, 0xfff, 0x7], 0x3, &(0x7f0000000dc0)=[{}, {}, {}], &(0x7f0000000e00)=""/121}, &(0x7f0000000f00)=0x78)

01:48:59 executing program 4:
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c7006b6e8bef14b}, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8d9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x90}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0)
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xab2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20040000)
r1 = semget$private(0x0, 0x1, 0x449)
semctl$GETNCNT(r1, 0x2, 0xe, &(0x7f0000000340))
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x1, 0x2, 0x2, 0x50, @local, @private0, 0x20, 0x80, 0x3, 0xfffffffb}})
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000000740)=0x80)
getsockname(0xffffffffffffffff, &(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000800)=0x80)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname(r3, &(0x7f0000003740)=@l2, &(0x7f00000037c0)=0x80)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x1c, r0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r4 = memfd_secret(0x80000)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003940), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003a40)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x4c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003a80))
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa574}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004094}, 0x1)

[  120.675410] audit: type=1400 audit(1745632139.138:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
01:48:59 executing program 6:
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x6c, @remote, 0x4e22, 0x0, 'dh\x00', 0x10, 0x3, 0x59}, 0x2c)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/32, 0x20, 0x0, &(0x7f0000000080)=""/162, 0xa2}, &(0x7f0000000180)=0x40)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f00000001c0)=0x6, 0x0, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68)
sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x10000)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @loopback}, 0x305, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)='wlan0\x00', 0x0, 0x80000001, 0x1})
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair(0x15, 0x5, 0xe2ec0367, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000480)={'nat\x00', 0x0, 0x4, 0x7e, [0x5, 0x1, 0x8, 0x3, 0x3, 0x9], 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=""/126}, &(0x7f0000000500)=0x78)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000540)={{0x2, 0x4e20, @local}, {0x1}, 0x50, {0x2, 0x4e21, @multicast1}, 'team_slave_1\x00'})
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x2, 0x6, 0x6]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44000)
syz_open_dev$hidraw(&(0x7f0000000700), 0x81, 0x101000)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000740)=@ccm_128={{0x304}, "e06fd4dd9708f2b6", "0a711a28c0f9530321de9a656323ad43", "21fceb76", "35f6635ae5085a5c"}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r3=>r1, {0x8}}, './file0\x00'})
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x200}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x2, 0x8, 0x9f, 0x1]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000084)

01:48:59 executing program 5:
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x4, 0x2, {0x8, @usage=0x292, 0x0, 0x4, 0x100, 0x6, 0x6, 0x81, 0x2, @struct={0xf613, 0xece4}, 0x400, 0x102, [0x0, 0x1ff, 0x152, 0x0, 0x6, 0x5]}, {0x1, @struct={0x7f, 0x5}, <r0=>0x0, 0x0, 0x1, 0xfff, 0xc61, 0x401, 0x404, @struct={0x7}, 0x1, 0x0, [0x4, 0x0, 0x21, 0x7, 0x2cae, 0x4]}, {0xfff, @struct={0x1}, <r1=>0x0, 0xffffffffffffff22, 0x516b, 0x6, 0x401, 0xfff, 0x8, @struct={0x40, 0xfffffff7}, 0x3, 0x4, [0x5, 0xc2a4, 0xffffffff80000001, 0x4, 0x10001, 0x3]}, {0x3ff, 0x400, 0x2}})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={r0, 0x100, 0x0, [0x8, 0x4bb6cf3f, 0x71, 0xa6e0, 0x1], [0x100000001, 0x7fff, 0x3, 0x5, 0x3, 0x7f, 0xfffffffffffffffb, 0xb8, 0x3, 0x7fffffff, 0x0, 0x7fff, 0x7, 0x5, 0x3, 0x6, 0x7fc00, 0xff, 0x5, 0x9, 0x3f, 0x1cb9, 0x8001, 0x7, 0x10001, 0x2a, 0x10000, 0xfffffffffffffff7, 0xffffffff, 0xffffffff, 0xf4, 0x2, 0xff, 0x0, 0x9, 0x8, 0x10001, 0x3, 0x7, 0x3d, 0x5, 0x4, 0x1, 0x1, 0xfff, 0xc3, 0x9, 0x800, 0x92f, 0x7ff, 0x7, 0xffffffff, 0x4, 0x6, 0x17, 0x0, 0x2, 0x8, 0x100000000, 0x800, 0x5, 0x81, 0x1ff, 0x4, 0x1ff, 0x200000000000, 0x10001, 0x5, 0x0, 0x9, 0x0, 0xffffffff, 0x7fffffff, 0x7fff, 0xffffffffffffff81, 0x0, 0x3, 0x5, 0x10000, 0x3ff, 0xa5e, 0x0, 0xfff, 0x4, 0x8, 0x0, 0x3bd02817, 0x0, 0x8001, 0x1f, 0x100, 0x9, 0x44f, 0xffffffffffff1695, 0xcd1, 0x81, 0x40, 0xd2, 0x6, 0x2, 0x6, 0x6, 0x6, 0x8, 0x433, 0x9, 0x2, 0x7f, 0x20e, 0x3, 0x2, 0x6, 0x4, 0x5c, 0x81, 0x800, 0x100000000, 0x4, 0x3, 0x7b69, 0x1]})
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x10, 0x0, &(0x7f0000000880)=[@request_death], 0x6c, 0x0, &(0x7f00000008c0)="99a8368f863a55628e6d689c4ac3ac7748c5994ea57a0845c764e514c3239385db3fc4c50dd3e9589a1bdff35f647d5b1d7f0c7c55ef73076bd148d881beebf5921887e876a23b6943dcd1eace2488ae8e020949033aefa2147e16e65d607c3c78604b9d8289bec1c01c08ae"})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000980)={0x3, 0x20, @start={0x0, 0x0, "da98e303e2bb089722e8dbc85ae0ff036e81115dbf44889d4e6d7fc593b3212f11efa04ad6c5b1df89b96464b897b1a91ce75acf31cedce7857c2cdffd1f9e33d152d2b2ef793f42bc5c106088038e9f8bc3bbb0fabc96196c279702c759db57d14e419f5bb9d05a41946a9febdecffab9e88ea79939c5573725061be76df63db39caaccee8bea6892d05d040583c1c9bf3cc0878c0066e87992841baf7e21e510d6c152bf38874b3ad66494ea23f165a719a22d61c05d84062d59bf03cd3d82e350b6f4905135e7ccdcd1709fcb596cdc45c314bc7f314fc1601c53db777f3de2c79c9736f001fe616c90669a01adfe536faaf5acaa33c4b3dbf1f1752ae1dd75617c3263835acabaf776a8d6b5a72f10b9c296a15d24e95db012981c6b52a96bef92423f73a0f67e9153f3d12cc92f9405ef4074e784fe09e8f04b5e75c2acb9ad55fb483422705f02b0077e36d8fb2edb740322a700d1dd49ea22b6db44a28d68d89b4c609f08de2f7b11bddd19132d56d309000837bc657fdcad1617b744e973d1ada0b63e043aa7233433aab104e3a01050e02732b90f240cc522f0f467908ef190afa31a58ff1d3345b2e2ac609d7bbfa321556ca389e959f45e00628649f88ccb11b00ce9eed5fb2684c3e1403d7835f769fceadd1d5c630bc6025ac7d5788f87c034c7f7e90f06975b203ee323f78bc02abccb40c32779644ff29bc9de47ce0e7308c8b2d03030e0647d95b3254ee33a1e58157251a26e19e33ff88301fa87e71f50ec26f2a7b44d88be80d0bf514df2bf7cec00411b13dcb193ede63742a6e08e17adbbb7244ea80eb839a2530962510790739e76144bc375f79fb39312de57bf2a3f22b9b8114503b6dfb3249ec598dfd5feed765ef40fc5de0c2b03cda1a9cfb1e8c176c9e39444c8c0d42b4443027b7d9ec38166872154d2de8357b65300ca2069ef16208494c9b090802a4c3fec4c46bd86809620fb9f8d3a7dafdf1b1b5cf1afad38f48945d22efa1c6ed89f2504d707440ef5f0e2947a0195dde744238353657dae7a61698f87cb190396001b87261d418a6d2bb5167c054fb9e54a4af9b207061727bb6387415743e280742fcfd18dcfe029ef34aea2ff7803dc42738c5340e24f23120de43cacd5c9c40f4466519fad870ffa8fc407fc63985ce984e2c07b4d6dd281aede5f914055e138538bc1db6097a815c4d2f096af04cf3cc5d5615b2d96edbc22781c27b06c56a97fb4e3149dd3cc512db0555f4ba2b6e1050c7fcb7c7fca51c63b8e0da130f20e159054aff1a96615420a06747a82813f8b379eeefdc6316e05572dcd0d5eccb975a8caf1473801433a700e531de803e78b4dec4e9bb5fca8ddd8b8a067d482e91c2393ae152c14a19f5c8a72e38f408540dc42dc42eb322a248d457ee435ed38254bb60c75a1ba40835a84ee5ba8", "bfa17f1c5ebdb2dd98c2dda3ca79886ca0655690ef711b1964eac7a13b6e4b86e0dcba7ba4db5073f890e33df139d4ac7076315d3eb22fd8103e03814e594ccf792e4988bd8da756b003eb205a231c1440ae013e74e637d1a17a286f8824f0ac5c5474ab90c7897a4268a3bcfde70a5b1eebd4adcf0406a06171a029aaf43dc9d0a10a06448819d9ec30251f9defa9a182f8800d9893a70259297545e3d7d39c2d3e0f6615f80e23fb43a9c784e4d2461baa3d651211f4e4fdf7e0611f3c2378a0e7edaaff494646f150c177bcae9cc6614bd9c4f9aa0b6ebce5e4a435752bb8cd0b5424df0fa9e6671d5e9e27d24301bd7a065da973547ff66bc8d69a88ee0345b5a52295254f0a34ea0419a7e7e073f67c2700b37eb9526ad2408c82e694e55e50128e8579b6ee475e063679da94505de720c97195bde4edf925c025365c57ffd5f4dfd79f1cbe60db5706174e74d3f6966fd3f5e842bed2b652a505a56e15c747b518662f4abf12f8bd0af0fc54c07de92355d580fb381c42e1a798405a96ae5ece23d0e212eadc0e466aedb939a41a6f4e91163e18dee1e994be7c87738c62fd45ede019418561eb6acb271c2a5f5e099fa60f2bbce01491f3ad97c0a9a8a877d8d352cf336d0025a84db7c9bcd85bb485c1775177f69b519c632d9eb4a8462cc8598e4b7047fdca861496438bbc0c7dfdfe8bf452b3eddc97e01f675e7a9fab78cd8f1778acadc37827a253fe96cd37fcdd23d860c0188708ed1c8e732d5f4418ddfc5c5b910b0b3a150f6b02b8790c653fa227181378ba429677ff1a71933a2a0cfc9bb94a2a6cde5aae5d5ba80d0c4a959a182376434e3700fb3efe347576b3cd91a8c5da80b0591d1f8e110e7b1dd8a48a8249aea9da9af8793b83349c3764c73126f3f3c8007fd2e06deccb0ce0bc0cd6ffbb2229e08f95c33a89b3d264f70b1ebd94c8e1cc09efe2989bb43a633cb9d317ebe2ff8a5bf2ef18c887b3d3b52f6e99a5fe49b84df095a11cc8937c24a7d8596f95dea14e5241f5928c7966bbc94a902b6327c1713a53d73f36a0c63a61ec354eca70720f6aeb6ae0b8fa1be413f799184df796a31cc4f2ad7a25dc108bde84fb75a48d249863c5cc9e7ebbe2fc276a1e5211d9ffc49bb955d4793909128707ca1876efaf6f8a3b24d0c3ce31444f4c0e8030d6596a69ba00d8ec9998d37f501bb0b6f34378e39c60a15db22fe0bbea2258604867dfe7dbb2f4b09d76664c4afa30adc13ddc03b4746f5e8eab5e1d4070900cb01114d30d8ce01cbc01d65dee0ae1edeec0a4093dc4eca001c093acf3be1bfe81e7a7e4380e7f494137edf3617b677f33720f9450ae63fbf07ca3e91ed6fddbbc944bef43d84570d6298ab06ad2c2402a5fe630ef37ca2761a0f489eb444ca3250b3c0c7b99adfcc7f7d107626e0c4cbb7fedc1c763a234"}, [0x3c5, 0x2, 0xf8e1, 0x0, 0x2449, 0x3, 0x7fd, 0x3f, 0x10, 0x2, 0x5, 0x88a, 0x0, 0x7fff, 0x0, 0x0, 0x7fffffff, 0x12, 0x1f, 0x80, 0xff, 0x30, 0x9, 0x7, 0x0, 0x3, 0x2, 0x5, 0x3, 0x5970, 0x6, 0xfffffffffffffffc, 0x6a, 0x8c7, 0x0, 0xfff, 0x5, 0x7ff, 0xffff, 0x40, 0x100000000, 0x4, 0x9, 0x2, 0x7fffffff, 0x10001, 0x180000000000000, 0x2, 0x8, 0xfffffffffffffffa, 0x6, 0x4, 0xa174, 0x80000001, 0x6131, 0x4, 0x0, 0x2, 0x800, 0x2, 0x6, 0x3ff, 0x3000000000]})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000013c0)={r1, 0x80000000, 0x0, 0x1})
r2 = syz_open_dev$hidraw(&(0x7f00000017c0), 0x1, 0x400)
ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001800))
r3 = syz_open_dev$vcsa(&(0x7f0000001840), 0xfffffffffffeffff, 0x20000)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000001880)={0x1c, "bfa5b9af4313c66ab8b319484e8dc7f02891442c0b6206428429cb5245ce29ca49d11569be98d71d206c645c1390eae8be55b554461215bdb82c32b24896c3d9"})
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001900)={0x1, 0x400, @status={[0x0, 0x20, 0x8, 0x7, 0x4, 0xa4]}, [0x80000001, 0xde, 0x8, 0x7, 0x74f, 0x4, 0xfff, 0x1f, 0x400080000000000, 0x3, 0x9, 0x9, 0x9, 0x23, 0xff, 0x0, 0x60a, 0x1, 0x3, 0x3, 0xae6c, 0xe4, 0x8, 0x4, 0xffffffffffffffe0, 0x0, 0x4, 0xd32e, 0x0, 0xf53, 0x4, 0x7, 0x10001, 0x5, 0x9, 0x6, 0x0, 0x6, 0x43d6ed82, 0x4, 0x0, 0x8, 0x7, 0xffffffffffffffe0, 0x800, 0x3ff, 0x7, 0x7, 0x6, 0x2, 0x4, 0x4, 0x9, 0x80000001, 0x7, 0x3, 0x1, 0x1912, 0x5, 0x2, 0x5, 0x2, 0x5, 0x7]})
openat$procfs(0xffffffffffffff9c, &(0x7f0000002340)='/proc/zoneinfo\x00', 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000002380)={@dev, @initdev}, &(0x7f00000023c0)=0x8)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000002400)=0x2, 0x4)
r5 = syz_open_dev$vcsa(&(0x7f0000002440), 0xffffffffffffff1d, 0x101000)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000025c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/139, 0x8b, 0x0, &(0x7f0000002540)=""/78, 0x4e}, &(0x7f0000002600)=0x40)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000002640), &(0x7f0000002680)=0x14)
r6 = syz_open_dev$vcsa(&(0x7f0000002700), 0x401, 0x400002)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x58, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf4e0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48050}, 0x20000)

01:48:59 executing program 7:
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80000)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x7, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
write$hidraw(0xffffffffffffffff, &(0x7f0000000340)="5afe7fb9f9afbfb917f69d76b67411699c16940a3ddb9fa1669541cb17fcaa20cb528d3ef9761fcb944e236c0dd1549fcda69e23ebf80a8b7c", 0x39)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x8f2e06c9e9640293, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x64}}, 0x40408d0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/asound/seq/timer\x00', 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r2)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000640))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r2)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000007c0))
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000800)={0x0, @rand_addr=0xffff, 0x4e24, 0x2, 'lblcr\x00', 0x18, 0xd0a, 0x58}, 0x2c)

[  122.181544] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.184082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.191244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.193301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.196362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.198773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.230528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.234320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.237067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.237862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.241260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.248878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.249302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.254353] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.266068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.276896] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.292405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.294244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.300996] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.321896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.325976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.341079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.348779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.353174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  122.363003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.367420] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  122.369043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.372299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  122.379264] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.379572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  122.387315] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.388932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.390408] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.397016] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.407068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.416949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.420194] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.447699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.483959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.493964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.309031] Bluetooth: hci2: command tx timeout
[  124.372556] Bluetooth: hci0: command tx timeout
[  124.372976] Bluetooth: hci1: command tx timeout
[  124.436875] Bluetooth: hci6: command tx timeout
[  124.502601] Bluetooth: hci5: command tx timeout
[  124.503424] Bluetooth: hci4: command tx timeout
[  124.503602] Bluetooth: hci3: command tx timeout
[  124.566535] Bluetooth: hci7: command tx timeout
[  126.356779] Bluetooth: hci2: command tx timeout
[  126.420909] Bluetooth: hci0: command tx timeout
[  126.422125] Bluetooth: hci1: command tx timeout
[  126.484647] Bluetooth: hci6: command tx timeout
[  126.548558] Bluetooth: hci3: command tx timeout
[  126.549538] Bluetooth: hci4: command tx timeout
[  126.549976] Bluetooth: hci5: command tx timeout
[  126.612629] Bluetooth: hci7: command tx timeout
[  128.404597] Bluetooth: hci2: command tx timeout
[  128.468680] Bluetooth: hci1: command tx timeout
[  128.469143] Bluetooth: hci0: command tx timeout
[  128.532560] Bluetooth: hci6: command tx timeout
[  128.596659] Bluetooth: hci5: command tx timeout
[  128.597131] Bluetooth: hci4: command tx timeout
[  128.597927] Bluetooth: hci3: command tx timeout
[  128.660674] Bluetooth: hci7: command tx timeout
[  130.452853] Bluetooth: hci2: command tx timeout
[  130.517542] Bluetooth: hci0: command tx timeout
[  130.518012] Bluetooth: hci1: command tx timeout
[  130.580540] Bluetooth: hci6: command tx timeout
[  130.644779] Bluetooth: hci3: command tx timeout
[  130.645242] Bluetooth: hci4: command tx timeout
[  130.646091] Bluetooth: hci5: command tx timeout
[  130.708641] Bluetooth: hci7: command tx timeout
[  184.616118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  184.620780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  184.624824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  184.635068] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  184.642517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  184.786997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  184.791068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  184.793720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  184.802028] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  184.807081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.853004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.863862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.868129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.877684] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.885047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.951320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  184.955648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  184.958034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  184.963927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  184.967334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.055529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.060832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.077721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.094125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.126010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.129735] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.154883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.176165] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.226354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.235998] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.238890] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.256782] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.256785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.281025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.297178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.311770] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.336987] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.342018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.348010] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.505028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.709603] Bluetooth: hci0: command tx timeout
[  186.900919] Bluetooth: hci1: command tx timeout
[  186.964814] Bluetooth: hci2: command tx timeout
[  187.028812] Bluetooth: hci3: command tx timeout
[  187.284631] Bluetooth: hci4: command tx timeout
[  187.413570] Bluetooth: hci5: command tx timeout
[  187.542513] Bluetooth: hci7: command tx timeout
[  187.604914] Bluetooth: hci6: command tx timeout
[  188.756798] Bluetooth: hci0: command tx timeout
[  188.948595] Bluetooth: hci1: command tx timeout
[  189.012897] Bluetooth: hci2: command tx timeout
[  189.078592] Bluetooth: hci3: command tx timeout
[  189.332528] Bluetooth: hci4: command tx timeout
[  189.460767] Bluetooth: hci5: command tx timeout
[  189.589713] Bluetooth: hci7: command tx timeout
[  189.652538] Bluetooth: hci6: command tx timeout
[  190.804558] Bluetooth: hci0: command tx timeout
[  190.996730] Bluetooth: hci1: command tx timeout
[  191.060541] Bluetooth: hci2: command tx timeout
[  191.124538] Bluetooth: hci3: command tx timeout
[  191.380832] Bluetooth: hci4: command tx timeout
[  191.510544] Bluetooth: hci5: command tx timeout
[  191.636543] Bluetooth: hci7: command tx timeout
[  191.700770] Bluetooth: hci6: command tx timeout
[  192.852739] Bluetooth: hci0: command tx timeout
[  193.045574] Bluetooth: hci1: command tx timeout
[  193.108821] Bluetooth: hci2: command tx timeout
[  193.174542] Bluetooth: hci3: command tx timeout
[  193.428898] Bluetooth: hci4: command tx timeout
[  193.556542] Bluetooth: hci5: command tx timeout
[  193.684870] Bluetooth: hci7: command tx timeout
[  193.748759] Bluetooth: hci6: command tx timeout
[  246.578349] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  246.581512] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  246.583901] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  246.591265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  246.598339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  246.761755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.766254] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.770252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.776138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.782084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.898003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.910024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.925251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.951788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.955252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.976660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  246.992956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.022824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.028097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.038191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.042508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.056354] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.077926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.088715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.112187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.126107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  247.154210] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  247.160204] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  247.163263] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  247.165674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  247.170108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  247.173389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  247.186531] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  247.208631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  247.221257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  247.224814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.240225] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  247.295122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  247.331183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  247.357142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.660759] Bluetooth: hci0: command tx timeout
[  248.853778] Bluetooth: hci1: command tx timeout
[  249.044729] Bluetooth: hci2: command tx timeout
[  249.236696] Bluetooth: hci6: command tx timeout
[  249.237342] Bluetooth: hci3: command tx timeout
[  249.238544] Bluetooth: hci4: command tx timeout
[  249.300549] Bluetooth: hci5: command tx timeout
[  249.493536] Bluetooth: hci7: command tx timeout
[  250.708535] Bluetooth: hci0: command tx timeout
[  250.901872] Bluetooth: hci1: command tx timeout
[  251.093495] Bluetooth: hci2: command tx timeout
[  251.284624] Bluetooth: hci4: command tx timeout
[  251.284673] Bluetooth: hci6: command tx timeout
[  251.285105] Bluetooth: hci3: command tx timeout
[  251.348521] Bluetooth: hci5: command tx timeout
[  251.540848] Bluetooth: hci7: command tx timeout
[  252.756532] Bluetooth: hci0: command tx timeout
[  252.949521] Bluetooth: hci1: command tx timeout
[  253.141736] Bluetooth: hci2: command tx timeout
[  253.332823] Bluetooth: hci6: command tx timeout
[  253.333427] Bluetooth: hci4: command tx timeout
[  253.334050] Bluetooth: hci3: command tx timeout
[  253.397702] Bluetooth: hci5: command tx timeout
[  253.588660] Bluetooth: hci7: command tx timeout
[  254.804531] Bluetooth: hci0: command tx timeout
[  254.997056] Bluetooth: hci1: command tx timeout
[  255.188583] Bluetooth: hci2: command tx timeout
[  255.380708] Bluetooth: hci4: command tx timeout
[  255.382633] Bluetooth: hci3: command tx timeout
[  255.382791] Bluetooth: hci6: command tx timeout
[  255.445551] Bluetooth: hci5: command tx timeout
[  255.637525] Bluetooth: hci7: command tx timeout
[  309.035440] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.042196] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.046708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.057131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.065184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  309.163014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  309.168088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  309.170370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  309.178131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  309.181611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  309.237519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  309.247057] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  309.259995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  309.304240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  309.331282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  309.390863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.395021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.399123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.407953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.413013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.508350] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  309.517435] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  309.521816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  309.559320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  309.567804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  309.583053] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.597957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.616617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.656127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.688164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.697957] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  309.702281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  309.705893] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  309.711871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  309.716933] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  310.323268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  310.326886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  310.331023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  310.362710] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  310.401901] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  311.125564] Bluetooth: hci0: command tx timeout
[  311.253661] Bluetooth: hci1: command tx timeout
[  311.380707] Bluetooth: hci2: command tx timeout
[  311.446552] Bluetooth: hci3: command tx timeout
[  311.636844] Bluetooth: hci4: command tx timeout
[  311.764660] Bluetooth: hci6: command tx timeout
[  311.765629] Bluetooth: hci5: command tx timeout
[  312.534257] Bluetooth: hci7: command tx timeout
[  313.172554] Bluetooth: hci0: command tx timeout
[  313.301541] Bluetooth: hci1: command tx timeout
[  313.429526] Bluetooth: hci2: command tx timeout
[  313.492663] Bluetooth: hci3: command tx timeout
[  313.684671] Bluetooth: hci4: command tx timeout
[  313.812593] Bluetooth: hci6: command tx timeout
[  313.813036] Bluetooth: hci5: command tx timeout
[  314.580723] Bluetooth: hci7: command tx timeout
[  315.220786] Bluetooth: hci0: command tx timeout
[  315.348684] Bluetooth: hci1: command tx timeout
[  315.478568] Bluetooth: hci2: command tx timeout
[  315.540531] Bluetooth: hci3: command tx timeout
[  315.734579] Bluetooth: hci4: command tx timeout
[  315.860525] Bluetooth: hci6: command tx timeout
[  315.860955] Bluetooth: hci5: command tx timeout
[  316.630580] Bluetooth: hci7: command tx timeout
[  317.268679] Bluetooth: hci0: command tx timeout
[  317.397083] Bluetooth: hci1: command tx timeout
[  317.524536] Bluetooth: hci2: command tx timeout
[  317.589613] Bluetooth: hci3: command tx timeout
[  317.780888] Bluetooth: hci4: command tx timeout
[  317.908560] Bluetooth: hci5: command tx timeout
[  317.908994] Bluetooth: hci6: command tx timeout
[  318.677771] Bluetooth: hci7: command tx timeout
[  371.307066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.313836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.317844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.335182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.342222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.498083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  371.501112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  371.503962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  371.509775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  371.513304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  371.689337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  371.694763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  371.700414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  371.704943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  371.710272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  371.719950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  371.725698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  371.742227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  371.770832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  371.778534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  371.820737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  371.838361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  371.841477] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  371.844047] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  371.846698] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  371.858430] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  371.875914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  371.877855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  371.893098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  371.895589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  371.899993] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  371.903943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.913134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  371.914595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  371.924275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  371.928256] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.930384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  371.941953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  371.999003] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  372.037006] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.397989] Bluetooth: hci0: command tx timeout
[  373.588867] Bluetooth: hci1: command tx timeout
[  373.780727] Bluetooth: hci2: command tx timeout
[  373.909045] Bluetooth: hci3: command tx timeout
[  373.973587] Bluetooth: hci6: command tx timeout
[  374.036582] Bluetooth: hci5: command tx timeout
[  374.036624] Bluetooth: hci4: command tx timeout
[  374.164988] Bluetooth: hci7: command tx timeout
[  375.444533] Bluetooth: hci0: command tx timeout
[  375.637495] Bluetooth: hci1: command tx timeout
[  375.829743] Bluetooth: hci2: command tx timeout
[  375.956536] Bluetooth: hci3: command tx timeout
[  376.020881] Bluetooth: hci6: command tx timeout
[  376.084606] Bluetooth: hci5: command tx timeout
[  376.085107] Bluetooth: hci4: command tx timeout
[  376.212718] Bluetooth: hci7: command tx timeout
[  377.492554] Bluetooth: hci0: command tx timeout
[  377.686184] Bluetooth: hci1: command tx timeout
[  377.876525] Bluetooth: hci2: command tx timeout
[  378.004783] Bluetooth: hci3: command tx timeout
[  378.068592] Bluetooth: hci6: command tx timeout
[  378.132778] Bluetooth: hci4: command tx timeout
[  378.133097] Bluetooth: hci5: command tx timeout
[  378.261572] Bluetooth: hci7: command tx timeout
[  379.541766] Bluetooth: hci0: command tx timeout
[  379.735515] Bluetooth: hci1: command tx timeout
[  379.925673] Bluetooth: hci2: command tx timeout
[  380.053528] Bluetooth: hci3: command tx timeout
[  380.116614] Bluetooth: hci6: command tx timeout
[  380.180846] Bluetooth: hci5: command tx timeout
[  380.181694] Bluetooth: hci4: command tx timeout
[  380.309314] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
01:54:01  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffea00001dc100 RCX=ffffffff81a0f0a9 RDX=ffff8880295fb780
RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff888025d07828
R8 =0000000000000000 R9 =fffff9400003b820 R10=0000000000000000 R11=0000000000000000
R12=ffffea00001dc100 R13=0000000000000000 R14=ffff88800d973dc0 R15=ffff888025d079c8
RIP=ffffffff81a0f0a9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f405f4f16f4 CR3=000000000c1ee000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f405f50047000007f405f4fff20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=0000000000000200 RCX=ffffffff87a381c8 RDX=0000000000000008
RSI=ffff88800e72ddc0 RDI=ffff88800e72d340 RBP=ffff88800e72d340 RSP=ffff88802a0ef3b0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000000
R12=0000000000000009 R13=0000000000000001 R14=ffff88800e72ddc0 R15=ffff88800e72dd98
RIP=ffffffff81515849 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564fb363b2b0 CR3=000000000a76c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000