Warning: Permanently added '[localhost]:10849' (ECDSA) to the list of known hosts.
2025/04/30 11:57:15 fuzzer started
2025/04/30 11:57:15 dialing manager at localhost:46073
syzkaller login: [   91.547825] cgroup: Unknown subsys name 'net'
[   91.635723] cgroup: Unknown subsys name 'cpuset'
[   91.667627] cgroup: Unknown subsys name 'rlimit'
2025/04/30 11:57:29 syscalls: 200
2025/04/30 11:57:29 code coverage: enabled
2025/04/30 11:57:29 comparison tracing: enabled
2025/04/30 11:57:29 extra coverage: enabled
2025/04/30 11:57:29 setuid sandbox: enabled
2025/04/30 11:57:29 namespace sandbox: enabled
2025/04/30 11:57:29 Android sandbox: enabled
2025/04/30 11:57:29 fault injection: enabled
2025/04/30 11:57:29 leak checking: enabled
2025/04/30 11:57:29 net packet injection: enabled
2025/04/30 11:57:29 net device setup: enabled
2025/04/30 11:57:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/30 11:57:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/30 11:57:29 USB emulation: enabled
2025/04/30 11:57:29 hci packet injection: enabled
2025/04/30 11:57:29 wifi device emulation: enabled
2025/04/30 11:57:29 802.15.4 emulation: enabled
2025/04/30 11:57:29 fetching corpus: 0, signal 0/0 (executing program)
2025/04/30 11:57:31 starting 8 fuzzer processes
11:57:31 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0xc2, 0x4)
socketpair(0x8, 0x3, 0x9, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x2c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004805}, 0x8055)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20800200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1d, 0x41}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "89113b9f2cb669b03a99e2c3569169a4"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "3955caae1d87de4b7920ae1cb8b2b260"}]}, 0x48}}, 0x4)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x814)
socketpair(0x23, 0x2, 0x3, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r5)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048840}, 0x81)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}}, 0x20048000)
socketpair(0x29, 0x3, 0x1, &(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x502, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x14}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4001)
syz_genetlink_get_family_id$fou(&(0x7f0000000d80), 0xffffffffffffffff)

11:57:31 executing program 1:
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffff, 0x80800)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x89}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000011)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x76}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000090)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x30044880)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x141}, 0x20048080)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x284040, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r2, 0x600, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d844869524cbf4b264b115b209b7baf9"}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c4}, 0xc000)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/partitions\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x949, 0x18}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x84)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), r7)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008081)

11:57:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00')
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd28, 0x64492c0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000180)={0x6, "637f2f0f224b2ecebb98d716eeee12fd673904e51636d71c3708c7b5ec99a078104d1e9cbefc1fab13a52ec169a17753219e8c97c17c4fb28900b12737b7419f792a2d65da5b0ccebfe3437ba60624b169f774531cb765dadf46d1276ab213c537d521320267603e2679be4de8097c092a7c1d0103bd23bf0bedac310b267cc989a3918a1e0e91db300ddb00968cbac792cdeda2d1f22a234149ccb51fd9842c8fc07ab68c61defab4262e156acadbb5ddd60596091244ffef3bc212f53436c4c5071e257a9bd597e9d30ea306228e831f69679d7fb0d4d1ba285bd6ab7d82feb01dafbc19a7e73d4071f2fb1f30bd7f6d02acb0c42441b583c692ee3864b17c4efd8a21f0e87e320877241d56039af1d973c1be657efd2c2ce3cb3551d5de5739a1bb07fedc79311a1cc24498d27ad762f12a1fb591d54ca74fbdf90b422274bf4d145577e49be730ac25e20dbe336d27633911744302f0410d972ab0732db0f6fa75e9a313907edde779285f7bb57f4256bab9fc4447f7645b1b661cf806a64171a19de4f4f64b9743e970d306bf0ebdcbc7dfc2d25f7c390853edf19939f1c511673187138ef498471679dd8217ebf5dca6617313847608713acb84506bec6e0c1bdc2ef59870b934ba69d677f193435b7bc5393affc330ac5a3084dc99ad0b4e7181849ba24605857c467905bf7fa73d408b7f9cc9f32604fbfbcbb414d6"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
ioctl$VT_RELDISP(r2, 0x5605)
ioctl$TCFLSH(r0, 0x540b, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000400)=0x61, 0x4)
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x0, 0x0, 0x0, {0xff, 0x800, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x6, 0x25}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x300, {0xfffa, 0x0, 0x6, 0x5}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0x9, 0x9, 0xfff7}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c011}, 0x40040)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0xa2000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000640)={0x0, @ax25={0x3, @bcast, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @local}, @ethernet={0x306}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)='lo\x00', 0xff, 0x100000000, 0xd3b2})
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "a5e53dbfe22bf8a8336d20c7419d5e24"}, @NL80211_ATTR_PMK={0x14, 0xfe, "91cefde17089a57bcf0bed10cbb7060c"}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x8005)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r4, 0x100, 0x70bd25, 0x1, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x20010800)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000980)={@mcast2, <r5=>0x0}, &(0x7f00000009c0)=0x14)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000000)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000b40)={@empty}, &(0x7f0000000b80)=0x14)

11:57:31 executing program 3:
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c004}, 0x48005)
r0 = memfd_secret(0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x73}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
fcntl$getflags(r0, 0xb)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci_express', 0x1e1040, 0x1)
getpeername(r0, &(0x7f00000002c0)=@tipc, &(0x7f0000000340)=0x80)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xffff)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = fcntl$dupfd(r1, 0x80c, r3)
ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x40)
r5 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@un=@abs, &(0x7f0000000440)=0x80)
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000004c0)={0x0, @phonet={0x23, 0xf9, 0x9, 0x20}, @ethernet={0x1, @multicast}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x3, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)='lo\x00', 0x10001, 0x3, 0x1})
socketpair(0x25, 0x80800, 0x1f, &(0x7f0000000540)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r6)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6d}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x98ea}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xedc}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x96e7}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x24000000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r6)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
socket(0x2a, 0x80000, 0x3)

11:57:31 executing program 6:
r0 = semget$private(0x0, 0x3, 0x380)
ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x12}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x4000)
semctl$SETVAL(r0, 0x1, 0x10, &(0x7f0000000300)=0x5)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x8000)
r4 = signalfd4(r1, &(0x7f00000004c0)={[0xf20]}, 0x8, 0x800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r5, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}}, 0x20000000)
getresuid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r5, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6b}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44810}, 0xc080)
semget$private(0x0, 0x1, 0x48)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x55fcd8a5b1ea26fe, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x60, r5, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1f}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x85}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff9c}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xa99}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, r6, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "991d25e041"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}}, 0x4000)

[  107.144698] audit: type=1400 audit(1746014251.187:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:57:31 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x40}}, './file0\x00'})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4001)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x810)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5399cbea}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffe00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40014)
r1 = socket(0x9, 0x2, 0x6)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000440), 0x4)
r2 = open_tree(r0, &(0x7f0000000480)='./file0\x00', 0x1800)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000000780)={0x8d0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfa70}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb45}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x603404af}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff0ef}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7b64}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r3}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9256}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4cd5}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xce5e}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x82a}}, {0x8, 0x6, r3}}}]}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x2c00c8c0}, 0x8044)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000240}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x64, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xc}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048080}, 0x80)
r8 = socket(0x23, 0x800, 0x1)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff0000000000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040840)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, 0x0, 0xc10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008810}, 0x48084)

11:57:31 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xb8a, 0x40000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xf}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x1000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004084}, 0x40004)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3a, 0x15}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1d14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x170}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x20000011)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000480)={'vlan0\x00', @ifru_hwaddr})
r3 = fcntl$dupfd(r2, 0x406, r2)
signalfd4(r3, &(0x7f00000004c0)={[0x10001]}, 0x8, 0x80800)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xce9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x24000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0)
signalfd4(r4, &(0x7f0000000680)={[0x8]}, 0x8, 0x1800)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20048840)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe, 0x7e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xf, 0x7e, @random="063fcf908852b0a17e5d53"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000940))
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r5=>r2, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$team(&(0x7f00000009c0), r5)
r6 = gettid()
syz_open_procfs(r6, &(0x7f0000000a00)='net/llc/core\x00')

11:57:31 executing program 7:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x3f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "af0aeb36fc44afbb0bf260929daad6e2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "ae4d548822f6d0b001e8f28bd44dffd8"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a85067bcee01d4dbed9db3a2d40b8c00"}]}, 0x70}, 0x1, 0x0, 0x0, 0x48004}, 0x4040)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044040}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '4'}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x811)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r0, 0x8, 0x3f, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x8000)
socketpair(0x28, 0x800, 0x1, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f00000007c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff7fff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008801}, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x164, r0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "aedcf803ee6b8000e3ac10d04cd4ef9d335351eb292e2ac8b2672c2c62fcbe7ac40f03eaf27c35eab8ef0919c6bccde04f64e91693723b8540447fef478397f6cb276b716ab7b1cd89cfa0bcd9"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xaf, 0x5b, "23fdc29c6ff6d5c56cc6543bdfe69f3babc5f8bb447d229b9fd293b11391b948dccd18a7e3a530746b186c3a60a78878a9d542458ec1fb319a7c53d79e8f6026a92beaeae54b2690ff0519827bbdf85709e75b55445b508f7ab492de9e3eff0b85fe3735e174a94a45079d7a7a20260db93a0bf4d4ef198e04563ad6f473215d6c4379d39c7efaaec337a3498b1887bbef92a61c801d149d728f371524d42a02b1f8ec2960eea25f8a9b19"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20000, 0x0)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000c80)={0x0, @can={0x1d, <r8=>r5}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000000}, @sco, 0xfffa, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)='geneve1\x00', 0x2, 0xdc, 0xaf})
getresuid(&(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)=<r9=>0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)=@migrate={0x13c, 0x21, 0x300, 0x70bd26, 0x25dfdbff, {{@in6=@local, @in6=@remote, 0x4e21, 0x3, 0x4e20, 0x400, 0x2, 0x20, 0x80, 0x2, r5, 0xee00}, 0x6e6bb5}, [@user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x4e21, 0x3ff, 0x4e23, 0xee72, 0x8, 0x0, 0x20, 0x21, r8, r9}, {0x1ff, 0x0, 0x5, 0x100000000, 0x49, 0x9, 0x3, 0x9}, {0x6ab51418, 0x8523, 0x3, 0x8}, 0x2, 0x6e6bbe, 0x2, 0x1, 0x3, 0x1}}, @coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x13c}}, 0x4048001)
openat$cgroup_subtree(r2, &(0x7f00000010c0), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000001100)={{0x0, 0x9}, {0x3, 0x2}, 0x7b, 0x1, 0x40})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000011c0)={{0x40}, 0x0, 0x8196, 0x22, {0x8, 0x3}, 0x73, 0x3f})

[  108.595748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  108.599522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  108.600964] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  108.606642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  108.609070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  108.634837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  108.639314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  108.643087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  108.646530] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  108.647066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.652295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.657570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.659438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  108.666508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.674821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  108.675807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  108.683245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  108.686824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  108.688698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  108.690184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  108.691373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  108.693488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  108.694677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.696089] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  108.699875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  108.708531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  108.710691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  108.711738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  108.714063] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  108.716845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  108.718860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  108.720765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.723913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  108.724581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.728075] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  108.736780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  108.751665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.767752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  108.768924] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  108.778385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  110.683793] Bluetooth: hci1: command tx timeout
[  110.746544] Bluetooth: hci0: command tx timeout
[  110.810289] Bluetooth: hci4: command tx timeout
[  110.810399] Bluetooth: hci3: command tx timeout
[  110.811858] Bluetooth: hci7: command tx timeout
[  110.812606] Bluetooth: hci2: command tx timeout
[  110.874282] Bluetooth: hci5: command tx timeout
[  110.875427] Bluetooth: hci6: command tx timeout
[  112.730647] Bluetooth: hci1: command tx timeout
[  112.794463] Bluetooth: hci0: command tx timeout
[  112.858783] Bluetooth: hci7: command tx timeout
[  112.860437] Bluetooth: hci4: command tx timeout
[  112.860934] Bluetooth: hci2: command tx timeout
[  112.860989] Bluetooth: hci3: command tx timeout
[  112.922283] Bluetooth: hci5: command tx timeout
[  112.922889] Bluetooth: hci6: command tx timeout
[  114.778226] Bluetooth: hci1: command tx timeout
[  114.843239] Bluetooth: hci0: command tx timeout
[  114.906491] Bluetooth: hci4: command tx timeout
[  114.907065] Bluetooth: hci7: command tx timeout
[  114.908373] Bluetooth: hci2: command tx timeout
[  114.908408] Bluetooth: hci3: command tx timeout
[  114.970282] Bluetooth: hci6: command tx timeout
[  114.970868] Bluetooth: hci5: command tx timeout
[  116.826376] Bluetooth: hci1: command tx timeout
[  116.892173] Bluetooth: hci0: command tx timeout
[  116.954287] Bluetooth: hci3: command tx timeout
[  116.955222] Bluetooth: hci7: command tx timeout
[  116.955782] Bluetooth: hci2: command tx timeout
[  116.955852] Bluetooth: hci4: command tx timeout
[  117.018475] Bluetooth: hci5: command tx timeout
[  117.019064] Bluetooth: hci6: command tx timeout
[  171.197613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.201649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.204677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  171.206268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.207376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  171.209044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.210710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.211639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  171.215449] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.216484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.217670] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.222604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  171.225636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.242207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.244083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.267862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.270302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.273381] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.276614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.278211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.316190] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  171.323031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  171.329289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  171.345599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  171.353614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  171.546864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  171.560091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  171.561299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  171.562876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  171.570796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  171.571921] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  171.583694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  171.584790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  171.605825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  171.614914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  171.648498] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  171.649363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  171.650502] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  171.678044] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  171.685298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.274238] Bluetooth: hci1: command tx timeout
[  173.275227] Bluetooth: hci0: command tx timeout
[  173.338201] Bluetooth: hci2: command tx timeout
[  173.404622] Bluetooth: hci3: command tx timeout
[  173.530239] Bluetooth: hci6: command tx timeout
[  173.722201] Bluetooth: hci4: command tx timeout
[  173.786216] Bluetooth: hci7: command tx timeout
[  173.850237] Bluetooth: hci5: command tx timeout
[  175.322329] Bluetooth: hci0: command tx timeout
[  175.322813] Bluetooth: hci1: command tx timeout
[  175.386460] Bluetooth: hci2: command tx timeout
[  175.451194] Bluetooth: hci3: command tx timeout
[  175.578211] Bluetooth: hci6: command tx timeout
[  175.770289] Bluetooth: hci4: command tx timeout
[  175.834232] Bluetooth: hci7: command tx timeout
[  175.899296] Bluetooth: hci5: command tx timeout
[  177.370476] Bluetooth: hci1: command tx timeout
[  177.370958] Bluetooth: hci0: command tx timeout
[  177.434206] Bluetooth: hci2: command tx timeout
[  177.499194] Bluetooth: hci3: command tx timeout
[  177.626239] Bluetooth: hci6: command tx timeout
[  177.818294] Bluetooth: hci4: command tx timeout
[  177.882433] Bluetooth: hci7: command tx timeout
[  177.946472] Bluetooth: hci5: command tx timeout
[  179.418585] Bluetooth: hci0: command tx timeout
[  179.419066] Bluetooth: hci1: command tx timeout
[  179.482385] Bluetooth: hci2: command tx timeout
[  179.546207] Bluetooth: hci3: command tx timeout
[  179.674685] Bluetooth: hci6: command tx timeout
[  179.866251] Bluetooth: hci4: command tx timeout
[  179.930480] Bluetooth: hci7: command tx timeout
[  179.994187] Bluetooth: hci5: command tx timeout
[  233.252608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  233.255394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  233.256674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  233.266532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  233.269727] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  233.337924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  233.349253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  233.356655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  233.372863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  233.386248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  233.409655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  233.412898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  233.423454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  233.457264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  233.478637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  233.496328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  233.512568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  233.519711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  233.519709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  233.535873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  233.553432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  233.555039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  233.556699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  233.574511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  233.577769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  233.578986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  233.588587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  233.588659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  233.602776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  233.617357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  233.625652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  233.639858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  233.640494] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  233.657309] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  233.658899] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  233.929957] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  233.951772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  233.955260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.009406] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.014185] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.291264] Bluetooth: hci0: command tx timeout
[  235.482383] Bluetooth: hci1: command tx timeout
[  235.547194] Bluetooth: hci2: command tx timeout
[  235.674184] Bluetooth: hci3: command tx timeout
[  235.675203] Bluetooth: hci4: command tx timeout
[  235.738220] Bluetooth: hci7: command tx timeout
[  235.738268] Bluetooth: hci5: command tx timeout
[  236.123256] Bluetooth: hci6: command tx timeout
[  237.340146] Bluetooth: hci0: command tx timeout
[  237.531254] Bluetooth: hci1: command tx timeout
[  237.594303] Bluetooth: hci2: command tx timeout
[  237.723186] Bluetooth: hci4: command tx timeout
[  237.723376] Bluetooth: hci3: command tx timeout
[  237.787421] Bluetooth: hci5: command tx timeout
[  237.787683] Bluetooth: hci7: command tx timeout
[  238.170254] Bluetooth: hci6: command tx timeout
[  239.386257] Bluetooth: hci0: command tx timeout
[  239.578210] Bluetooth: hci1: command tx timeout
[  239.642377] Bluetooth: hci2: command tx timeout
[  239.770833] Bluetooth: hci3: command tx timeout
[  239.771371] Bluetooth: hci4: command tx timeout
[  239.835271] Bluetooth: hci5: command tx timeout
[  239.835415] Bluetooth: hci7: command tx timeout
[  240.218194] Bluetooth: hci6: command tx timeout
[  241.434208] Bluetooth: hci0: command tx timeout
[  241.626236] Bluetooth: hci1: command tx timeout
[  241.691476] Bluetooth: hci2: command tx timeout
[  241.819283] Bluetooth: hci4: command tx timeout
[  241.819771] Bluetooth: hci3: command tx timeout
[  241.882259] Bluetooth: hci7: command tx timeout
[  241.882735] Bluetooth: hci5: command tx timeout
[  242.266220] Bluetooth: hci6: command tx timeout
[  295.729034] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  295.743057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  295.745022] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  295.750850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  295.762572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  295.767295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  295.777431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  295.787885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  295.800313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  295.812904] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  295.827459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  295.831972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  295.838773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  295.880998] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  295.887807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  295.957427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  295.968696] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  295.987003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  296.032584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  296.062944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.175864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  296.181852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  296.185761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.190958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.192856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  296.198138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  296.211546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  296.227654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  296.227808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  296.235900] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  296.259491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  296.277374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  296.287148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  296.355757] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  296.371424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  296.383403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  296.386441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  296.397533] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.398506] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.415223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  297.818188] Bluetooth: hci0: command tx timeout
[  297.882520] Bluetooth: hci1: command tx timeout
[  297.947206] Bluetooth: hci2: command tx timeout
[  298.202276] Bluetooth: hci3: command tx timeout
[  298.330604] Bluetooth: hci4: command tx timeout
[  298.587191] Bluetooth: hci5: command tx timeout
[  298.588065] Bluetooth: hci6: command tx timeout
[  298.588964] Bluetooth: hci7: command tx timeout
[  299.868131] Bluetooth: hci0: command tx timeout
[  299.930219] Bluetooth: hci1: command tx timeout
[  299.996138] Bluetooth: hci2: command tx timeout
[  300.251216] Bluetooth: hci3: command tx timeout
[  300.380226] Bluetooth: hci4: command tx timeout
[  300.634564] Bluetooth: hci6: command tx timeout
[  300.635043] Bluetooth: hci5: command tx timeout
[  300.636303] Bluetooth: hci7: command tx timeout
[  301.915146] Bluetooth: hci0: command tx timeout
[  301.979129] Bluetooth: hci1: command tx timeout
[  302.042240] Bluetooth: hci2: command tx timeout
[  302.298178] Bluetooth: hci3: command tx timeout
[  302.428397] Bluetooth: hci4: command tx timeout
[  302.683433] Bluetooth: hci5: command tx timeout
[  302.683484] Bluetooth: hci6: command tx timeout
[  302.684167] Bluetooth: hci7: command tx timeout
[  303.964170] Bluetooth: hci0: command tx timeout
[  304.026266] Bluetooth: hci1: command tx timeout
[  304.091120] Bluetooth: hci2: command tx timeout
[  304.346408] Bluetooth: hci3: command tx timeout
[  304.474305] Bluetooth: hci4: command tx timeout
[  304.730572] Bluetooth: hci6: command tx timeout
[  304.731071] Bluetooth: hci5: command tx timeout
[  304.731155] Bluetooth: hci7: command tx timeout
[  358.131944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.137728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.144019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.153839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  358.158457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  358.262352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  358.272635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  358.279890] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  358.299620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  358.308844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  358.468209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.474741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.478666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.485023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.501380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  358.536029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  358.543630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  358.559595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  358.573603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  358.596568] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  358.665571] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  358.666756] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  358.671993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  358.674654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  358.690951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  358.708668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  358.711771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  358.716006] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  358.716994] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  358.730084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  358.736898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  358.743649] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  358.745007] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  358.745074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  358.759259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  358.777953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  358.780224] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  358.790021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  358.795700] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  358.810526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  360.218210] Bluetooth: hci0: command tx timeout
[  360.346343] Bluetooth: hci1: command tx timeout
[  360.603341] Bluetooth: hci2: command tx timeout
[  360.666384] Bluetooth: hci3: command tx timeout
[  360.858464] Bluetooth: hci7: command tx timeout
[  360.922283] Bluetooth: hci6: command tx timeout
[  360.922541] Bluetooth: hci4: command tx timeout
[  360.923194] Bluetooth: hci5: command tx timeout
[  362.266201] Bluetooth: hci0: command tx timeout
[  362.394370] Bluetooth: hci1: command tx timeout
[  362.650173] Bluetooth: hci2: command tx timeout
[  362.715395] Bluetooth: hci3: command tx timeout
[  362.906286] Bluetooth: hci7: command tx timeout
[  362.970206] Bluetooth: hci4: command tx timeout
[  362.970317] Bluetooth: hci5: command tx timeout
[  362.970633] Bluetooth: hci6: command tx timeout
[  364.314194] Bluetooth: hci0: command tx timeout
[  364.443181] Bluetooth: hci1: command tx timeout
[  364.699163] Bluetooth: hci2: command tx timeout
[  364.762474] Bluetooth: hci3: command tx timeout
[  364.954183] Bluetooth: hci7: command tx timeout
[  365.018404] Bluetooth: hci5: command tx timeout
[  365.018453] Bluetooth: hci4: command tx timeout
[  365.020491] Bluetooth: hci6: command tx timeout
[  366.362480] Bluetooth: hci0: command tx timeout
[  366.490212] Bluetooth: hci1: command tx timeout
[  366.746189] Bluetooth: hci2: command tx timeout
[  366.810538] Bluetooth: hci3: command tx timeout
[  367.004150] Bluetooth: hci7: command tx timeout
[  367.066471] Bluetooth: hci5: command tx timeout
[  367.066591] Bluetooth: hci6: command tx timeout
[  367.066906] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
12:02:34  Registers:
info registers vcpu 0
RAX=00000000c41fb5ab RBX=ffff888015738000 RCX=00000000e1e34cdf RDX=00000000551b5ad2
RSI=ffff888015738a80 RDI=000000007acb4840 RBP=0000000000000000 RSP=ffff888016eff930
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff888015738a80 R13=0000000000000000 R14=0000000000000001 R15=ffff888015738a58
RIP=ffffffff81516896 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd1c9b0c540 00000000 00000000
GS =0000 ffff8880e5648000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd1c9fde000 CR3=00000000342e5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff888033a37870 RCX=ffff888033a37878 RDX=ffff888033a38000
RSI=1ffff11006746efd RDI=ffff888033a377d8 RBP=dffffc0000000000 RSP=ffff888033a37778
R8 =0000000000000000 R9 =0000000000000000 R10=ffff888033a377d8 R11=0000000000000000
R12=ffffed1006746efd R13=ffffed1006746efc R14=ffff888033a37820 R15=ffff888033a377d8
RIP=ffffffff81350820 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007efcc7892540 00000000 00000000
GS =0000 ffff8880e5748000 00000000 00000000
LDT=0000 fffffe6a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa334c9ee2c CR3=0000000032902000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000