Warning: Permanently added '[localhost]:61111' (ECDSA) to the list of known hosts.
2025/06/07 17:20:47 fuzzer started
2025/06/07 17:20:48 dialing manager at localhost:40003
syzkaller login: [  106.078670] cgroup: Unknown subsys name 'net'
[  106.236626] cgroup: Unknown subsys name 'cpuset'
[  106.274421] cgroup: Unknown subsys name 'rlimit'
2025/06/07 17:21:05 syscalls: 210
2025/06/07 17:21:05 code coverage: enabled
2025/06/07 17:21:05 comparison tracing: enabled
2025/06/07 17:21:05 extra coverage: enabled
2025/06/07 17:21:05 setuid sandbox: enabled
2025/06/07 17:21:05 namespace sandbox: enabled
2025/06/07 17:21:05 Android sandbox: enabled
2025/06/07 17:21:05 fault injection: enabled
2025/06/07 17:21:05 leak checking: enabled
2025/06/07 17:21:05 net packet injection: enabled
2025/06/07 17:21:05 net device setup: enabled
2025/06/07 17:21:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/07 17:21:05 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/07 17:21:05 USB emulation: enabled
2025/06/07 17:21:05 hci packet injection: enabled
2025/06/07 17:21:05 wifi device emulation: enabled
2025/06/07 17:21:05 802.15.4 emulation: enabled
2025/06/07 17:21:05 fetching corpus: 0, signal 0/0 (executing program)
2025/06/07 17:21:07 starting 8 fuzzer processes
17:21:07 executing program 0:
msgget(0x2, 0x20)
r0 = msgget$private(0x0, 0x45)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001000), 0x2000c0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001040)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001080)=@gcm_256={{0x304}, "cdbbff3a422afada", "2b2aeef62f52100d86481b5cf1905e758f4a8b9045b660df97a36c947d66c5d5", "c0c3f1af", "afec2441a968728c"}, 0x38)
msgget$private(0x0, 0x40)
r2 = msgget$private(0x0, 0x240)
msgctl$IPC_STAT(r2, 0x2, &(0x7f00000010c0)=""/238)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x4044840)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000012c0)=""/4096)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000022c0), 0x230c00, 0x0)
ioctl$DVD_READ_STRUCT(r3, 0x5390, &(0x7f0000002300)=@physical={0x0, 0x2, [{0x3, 0xa, 0x6, 0x3, 0xe, 0x1, 0x3, 0xa, 0x6, 0x0, 0x80000000, 0x7fff, 0xc862}, {0x1, 0x5, 0x1, 0x9, 0x9, 0x1, 0x0, 0x0, 0x7, 0x0, 0x1000000, 0x3}, {0xc, 0x3, 0x9, 0x7, 0x1, 0x1, 0x1, 0x4, 0x4, 0x0, 0xff, 0x200, 0x8}, {0x8, 0xb, 0x8, 0x2, 0x3, 0x1, 0x0, 0x6, 0x7, 0x1, 0x20, 0xffff8000}]})
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002b40)={@in6={{0xa, 0x4e23, 0x6, @loopback, 0x2}}, 0x0, 0x0, 0x34, 0x0, "ee9d7d25560304f65a9a97b9292330b86dc11021920c2d2e2288bcd26c20efd845ce7589581be18e0cb06cdfff324d1ea856c60573343c2d675b8188206ff8486e0c731afd281c3a380b138cd93b9ac8"}, 0xd8)
r4 = msgget$private(0x0, 0x122)
msgctl$IPC_STAT(r4, 0x2, &(0x7f0000002c40)=""/39)
msgrcv(r0, &(0x7f0000002c80)={0x0, ""/52}, 0x3c, 0x0, 0x6800)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000002cc0), 0x600, 0x0)
msgget$private(0x0, 0x200)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0xb4}}, 0x8000)

17:21:07 executing program 1:
prctl$PR_SVE_GET_VL(0x33, 0xdbdb)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000000)="2e2598e89b7e", 0x6)
r0 = socket(0x2b, 0xa, 0x9)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001280), &(0x7f00000012c0)=0x14)
clock_gettime(0x2, &(0x7f0000001300))
prctl$PR_SVE_GET_VL(0x33, 0x1d420)
clock_gettime(0x5, &(0x7f0000001340))
clock_gettime(0x4, &(0x7f0000001380))
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004084}, 0x40000)
prctl$PR_SVE_GET_VL(0x33, 0xd2b3)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001500)='hybla\x00', 0x6)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000001540)={0x7, 0xff, 0x7f, 0x7, 0x8, 0x9})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd028}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000048}, 0x8008084)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000021c0)="9b3c4c25ee941a765516ad5a7a47929d", 0x10)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000002200))
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000002300)={&(0x7f0000002240), 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4)
clock_gettime(0x0, &(0x7f0000002340))
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000003780)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003740)={&(0x7f0000003700)={0x3c, 0x0, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8010)

[  124.736298] audit: type=1400 audit(1749316867.239:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
17:21:07 executing program 2:
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)})
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x60000)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x6f7ec)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000140)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/6, 0x6})
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000180))
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', <r1=>0x0, 0x29, 0xff, 0x7, 0xfb, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x8, 0xffff}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000540)={0x638, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe1d}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x46, 0x81, 0x81, 0x7e94}]}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7987}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x1, 0x0, 0xb4}, {0x6, 0x6, 0xc3, 0xfffffffb}, {0x6, 0x8, 0x80, 0x80000000}, {0x400, 0x7, 0x8, 0x1}, {0xd2, 0x7, 0x81, 0x9}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}]}, 0x638}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
r5 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x280)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000d80)={&(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000c80)=""/213, 0xd5})
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000e00)={&(0x7f0000000dc0)=[0x0, 0x0], 0x2, 0x1f})
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000e40), 0x2002, 0x0)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x8010, r6, 0x1)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000ec0)={&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2})
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x8d95d)

17:21:07 executing program 3:
socket$inet6_icmp(0xa, 0x2, 0x3a)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/207, 0xcf}], 0x4, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r1=>0x0}}}, @rights={{0x2c, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}], 0x50}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000080)
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x24}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5ed}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4)
clock_gettime(0x0, &(0x7f00000079c0)={<r10=>0x0, <r11=>0x0})
recvmmsg$unix(r4, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/75, 0x4b}, {&(0x7f0000003140)=""/168, 0xa8}, {&(0x7f0000003200)=""/6, 0x6}, {&(0x7f0000003240)=""/254, 0xfe}, {&(0x7f0000003340)}], 0x6, &(0x7f0000003400)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r12=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r13=>0x0}}}], 0xb0}}, {{&(0x7f00000034c0)=@abs, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000003540)=""/228, 0xe4}, {&(0x7f0000003640)=""/213, 0xd5}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/83, 0x53}, {&(0x7f00000047c0)=""/225, 0xe1}, {&(0x7f00000048c0)=""/147, 0x93}, {&(0x7f0000004980)=""/123, 0x7b}, {&(0x7f0000004a00)=""/233, 0xe9}, {&(0x7f0000004b00)=""/166, 0xa6}, {&(0x7f0000004bc0)=""/65, 0x41}], 0xa}}, {{&(0x7f0000004d00)=@abs, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004d80)=""/141, 0x8d}, {&(0x7f0000004e40)=""/151, 0x97}], 0x2, &(0x7f0000004f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000004f80)=@abs, 0x6e, &(0x7f0000005000), 0x0, &(0x7f0000005040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000050c0)=@abs, 0x6e, &(0x7f0000007640)=[{&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000006140)=""/229, 0xe5}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/193, 0xc1}, {&(0x7f0000007340)=""/42, 0x2a}, {&(0x7f0000007380)=""/145, 0x91}, {&(0x7f0000007440)=""/62, 0x3e}, {&(0x7f0000007480)=""/66, 0x42}, {&(0x7f0000007500)=""/32, 0x20}, {&(0x7f0000007540)=""/200, 0xc8}], 0xa, &(0x7f0000007700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r15=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r18=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r19=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x180}}], 0x5, 0x0, &(0x7f0000007a00)={r10, r11+10000000})
setresuid(r1, r1, r19)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r17, &(0x7f0000007b00)={&(0x7f0000007a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x3c, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20004044)
clone3(&(0x7f0000007d80)={0x100000000, &(0x7f0000007b40), &(0x7f0000007b80), &(0x7f0000007bc0), {0x2d}, &(0x7f0000007c00)=""/232, 0xe8, &(0x7f0000007d00)=""/37, &(0x7f0000007d40)=[r13, r12, r12], 0x3}, 0x58)
setsockopt$inet6_tcp_TCP_ULP(r14, 0x6, 0x1f, &(0x7f0000007e00), 0x4)
r20 = syz_genetlink_get_family_id$batadv(&(0x7f0000007e80), r15)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r18, 0x89f4, &(0x7f0000007f40)={'syztnl0\x00', &(0x7f0000007ec0)={'syztnl1\x00', <r21=>r9, 0x2f, 0x7, 0x81, 0x46b4, 0x48, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, 0x40, 0x80, 0xe66, 0x8eb}})
sendmsg$BATADV_CMD_SET_HARDIF(r16, &(0x7f0000008040)={&(0x7f0000007e40)={0x10, 0x0, 0x0, 0x48001410}, 0xc, &(0x7f0000008000)={&(0x7f0000007f80)={0x48, r20, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r21}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4e56}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2044091}, 0x8080)

17:21:07 executing program 4:
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x8, 0x2c, 0xf8, 0xfa, 0x80, 0x7f})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000040)={0xff, 0xbb})
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000080))
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xc7c34)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4068060}, 0x804)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000c40)={0x9, 0x4, 0x5, 0xff, 0x80, 0x1})
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, 0x17, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4085)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x880)
ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000018c0), 0x800, 0x0)
ioctl$CDROMPAUSE(r2, 0x5301)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)=""/4, 0x4}, {&(0x7f0000001a80)=""/105, 0x69}, {&(0x7f0000001b00)=""/137, 0x89}, {&(0x7f0000001bc0)=""/153, 0x99}, {&(0x7f0000001c80)=""/168, 0xa8}, {&(0x7f0000001d40)=""/86, 0x56}, {&(0x7f0000001dc0)=""/149, 0x95}, {&(0x7f0000001e80)=""/38, 0x26}, {&(0x7f0000001ec0)=""/152, 0x98}], 0xa, &(0x7f0000002040)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x2020)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0xa}}}}, ["", ""]}, 0x20}}, 0x20000010)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x40840)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000023c0)={0x0, @isdn={0x22, 0x5, 0x81, 0x54, 0x80}, @generic={0x1d, "aff9e87757d827f60af1873018ac"}, @sco, 0x3f, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002380)='wlan1\x00', 0x7, 0x400, 0x7fff})
recvmsg$unix(r5, &(0x7f0000002840)={&(0x7f0000002440), 0x6e, &(0x7f0000002680)=[{&(0x7f00000024c0)=""/150, 0x96}, {&(0x7f0000002580)=""/234, 0xea}], 0x2, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}, 0x10000)

17:21:07 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8}, @val={0xc, 0x99, {0x9d8, 0x18}}}}, ["", "", "", ""]}, 0x30}}, 0x4008000)
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2600, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004040)
recvmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/4, 0x4}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/13, 0xd}], 0x3}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001800)=[{&(0x7f0000000780)=""/82, 0x52}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2, &(0x7f0000001840)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x3, 0x0, &(0x7f0000001940)={0x0, 0x989680})
ioctl$CDROMSEEK(r2, 0x5316, &(0x7f0000001980)={0x9, 0x5e, 0x1, 0x10, 0x80, 0x9})
recvmmsg$unix(r5, &(0x7f0000002080)=[{{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001a40)=""/102, 0x66}, {&(0x7f0000001ac0)=""/182, 0xb6}, {&(0x7f0000001b80)=""/112, 0x70}, {&(0x7f0000001c00)=""/87, 0x57}, {&(0x7f0000001c80)=""/242, 0xf2}, {&(0x7f0000001d80)=""/81, 0x51}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/221, 0xdd}, {&(0x7f0000001f40)=""/99, 0x63}], 0x9}}], 0x1, 0x2001, &(0x7f00000020c0)={0x0, 0x3938700})
r6 = socket(0x10, 0x2, 0x480)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000021c0)={&(0x7f0000002100), 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f0000002200))
ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x70, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x31}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x20, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x9}}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040011}, 0x4048044)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000004)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x598b}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4008010)
recvmmsg$unix(r4, &(0x7f0000003ec0)=[{{&(0x7f00000025c0), 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002640)=""/153, 0x99}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/219, 0xdb}, {&(0x7f0000003800)=""/200, 0xc8}, {&(0x7f0000003900)=""/70, 0x46}, {&(0x7f0000003980)=""/56, 0x38}], 0x6, &(0x7f0000003a40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000003b40)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003bc0)=""/161, 0xa1}, {&(0x7f0000003c80)=""/252, 0xfc}, {&(0x7f0000003d80)=""/30, 0x1e}, {&(0x7f0000003dc0)=""/130, 0x82}], 0x4}}], 0x2, 0x1, &(0x7f0000003f40)={0x0, 0x3938700})
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000003f80), 0x208400, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x14, 0x3, 0x2, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000044)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/36, 0x24}, {&(0x7f0000005140)}, {&(0x7f0000005180)=""/107, 0x6b}, {&(0x7f0000005200)=""/66, 0x42}, {&(0x7f0000005280)=""/164, 0xa4}, {&(0x7f0000005340)=""/63, 0x3f}], 0x7}, 0x2022)

17:21:07 executing program 6:
syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
bind$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14)
syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f0000000140)=@default_ap_ssid, 0x6, 0x2)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x4)
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000280)={0x2, 0x1})
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000)
r1 = msgget(0x1, 0x100)
msgrcv(r1, &(0x7f0000000400)={0x0, ""/216}, 0xe0, 0x0, 0x800)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x743e02f49cc0f56a, 0x0)
ioctl$MON_IOCQ_URB_LEN(r2, 0x9201)
syz_open_dev$usbmon(&(0x7f0000000540), 0x831, 0x4000)
socketpair(0x3, 0x6, 0x7, &(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$802154_raw(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000700)={&(0x7f0000000600)="388b927ef9494db801d88302aaf29915ad06328026cd2dfba37b70e126e1046d0a3fe9a2391a9156004aa8addfbd2a117cc0db85202c040e51e0b7a749682c9c64a1f5ff4e5497d2ca022fe265628b860c9c9413f0b845885907aa0cdc990b14b0f587946e94bc631f9545c94e50f49b1514d4622cdb39bd76c58588ecf84dc2bf41608238b2fb9c28257bf4eb19f3d75f7f41018bbda3ca5531bc0d42f8f5ddc6293cc723a8899c931500b8f30abd19f5a7538543fad79734f2d62a80a3bc7717f3852a15099dae9dec966cf13ba65361ec6f127f0d9c3bb4", 0xd9}, 0x1, 0x0, 0x0, 0x800}, 0x8800)
getpgid(0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000780))
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000007c0)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x13, 0x0, "d070cd687e768682460b82740eb344fb22795b08b887b0166d4f7a89383f150e87413720679492f7d440c7d7179f52a9e40675f84558a9404c82f4b202fe94573a114e41655eb603eb65fb6c519d3c08"}, 0xd8)
ioctl$CDROMREADALL(r2, 0x5318, &(0x7f00000008c0))
setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000001340)={0x8001}, 0x4)

17:21:07 executing program 7:
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_CHAIN_POLICY={0x8}]}, 0x1c}}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2, 0x1}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x9842000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2e9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb9f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfeb}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5b9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x942}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40882}, 0x4008040)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004c80)=[{{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000017c0)=""/185, 0xb9}, {&(0x7f0000001880)=""/199, 0xc7}, {&(0x7f0000001980)=""/148, 0x94}, {&(0x7f0000001a40)=""/239, 0xef}, {&(0x7f0000001b40)=""/49, 0x31}, {&(0x7f0000001b80)=""/38, 0x26}], 0x6, &(0x7f0000001c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000001d80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000001e00)=""/219, 0xdb}, {&(0x7f0000001f00)=""/228, 0xe4}, {&(0x7f0000002000)=""/225, 0xe1}, {&(0x7f0000002100)=""/39, 0x27}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x5, &(0x7f00000031c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003200), 0x6e, &(0x7f0000003300)=[{&(0x7f0000003280)=""/128, 0x80}], 0x1, &(0x7f0000003340)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/190, 0xbe}, {&(0x7f0000003540)=""/124, 0x7c}], 0x2, &(0x7f0000003600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f00000036c0)=""/157, 0x9d}, {&(0x7f0000003780)=""/226, 0xe2}, {&(0x7f0000003880)=""/10, 0xa}, {&(0x7f00000038c0)=""/3, 0x3}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/107, 0x6b}, {&(0x7f0000004980)=""/133, 0x85}, {&(0x7f0000004a40)=""/88, 0x58}, {&(0x7f0000004ac0)=""/161, 0xa1}], 0x9, &(0x7f0000004c40)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}}], 0x5, 0x0, &(0x7f0000004dc0))
sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000004ec0)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e40)={0x40, 0x7, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000004f40), r9)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000005000)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f80)={0x2c, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc6d}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000050c0)={&(0x7f0000005080)={0x3c, r11, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xee}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x8000)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000005180), r10)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005240)={&(0x7f00000051c0)={0x64, r12, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3935e550}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x800)
ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000005300)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x1}}, @sco={0x1f, @none}, @hci={0x1f, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000052c0)='syzkaller1\x00', 0x4, 0xda8})
sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000005480)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005440)={&(0x7f00000053c0)={0x54, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x96}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000005500), r4)
ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000005640)={0x0, @l2={0x1f, 0xd12, @none, 0xffff}, @vsock={0x28, 0x0, 0x0, @local}, @xdp={0x2c, 0x9, <r14=>0x0, 0x39}, 0x5, 0x0, 0x0, 0x0, 0xff, &(0x7f0000005600)='dummy0\x00', 0x7ff, 0x2, 0xf9})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000056c0)={'batadv_slave_0\x00', <r15=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000057c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005780)={&(0x7f0000005700)={0x5c, r13, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000058c0)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005880)={&(0x7f0000005840)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x10)

[  126.135327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.138646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.139770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.144213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.146620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.203236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.209376] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.217346] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.228290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.237792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.264800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.272229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.275321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.279075] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.280854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.335528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.345150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.348255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.363497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.363595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.380241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.390978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.394694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.398081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.420233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.459857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.461939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.463584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.474671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.485103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.510308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.518439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.529577] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.529986] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.540063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.543347] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.555273] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  126.585320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.598744] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.618716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.165378] Bluetooth: hci0: command tx timeout
[  128.292953] Bluetooth: hci2: command tx timeout
[  128.292976] Bluetooth: hci1: command tx timeout
[  128.486446] Bluetooth: hci4: command tx timeout
[  128.549160] Bluetooth: hci3: command tx timeout
[  128.613173] Bluetooth: hci6: command tx timeout
[  128.677927] Bluetooth: hci5: command tx timeout
[  128.740933] Bluetooth: hci7: command tx timeout
[  130.213471] Bluetooth: hci0: command tx timeout
[  130.342298] Bluetooth: hci2: command tx timeout
[  130.342442] Bluetooth: hci1: command tx timeout
[  130.534248] Bluetooth: hci4: command tx timeout
[  130.599867] Bluetooth: hci3: command tx timeout
[  130.662140] Bluetooth: hci6: command tx timeout
[  130.724991] Bluetooth: hci5: command tx timeout
[  130.789279] Bluetooth: hci7: command tx timeout
[  132.261956] Bluetooth: hci0: command tx timeout
[  132.388913] Bluetooth: hci1: command tx timeout
[  132.388961] Bluetooth: hci2: command tx timeout
[  132.582995] Bluetooth: hci4: command tx timeout
[  132.644941] Bluetooth: hci3: command tx timeout
[  132.708920] Bluetooth: hci6: command tx timeout
[  132.772938] Bluetooth: hci5: command tx timeout
[  132.837887] Bluetooth: hci7: command tx timeout
[  134.309851] Bluetooth: hci0: command tx timeout
[  134.437254] Bluetooth: hci2: command tx timeout
[  134.437764] Bluetooth: hci1: command tx timeout
[  134.628943] Bluetooth: hci4: command tx timeout
[  134.693326] Bluetooth: hci3: command tx timeout
[  134.757311] Bluetooth: hci6: command tx timeout
[  134.820889] Bluetooth: hci5: command tx timeout
[  134.885939] Bluetooth: hci7: command tx timeout
[  189.114281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.117649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.123371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.131798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.137706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.230450] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.232407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.236104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.241494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.244502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.335360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.336705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.344206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.349599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.357772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.360701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.362531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.366166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.367254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.368550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.374213] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.378917] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.381172] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.386983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.387772] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.389155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.390523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.392249] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.403232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.407513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.418581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.431448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.432100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.433239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.468376] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.481082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.482383] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.484518] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.536713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.580596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.204960] Bluetooth: hci0: command tx timeout
[  191.332936] Bluetooth: hci1: command tx timeout
[  191.460966] Bluetooth: hci6: command tx timeout
[  191.524975] Bluetooth: hci5: command tx timeout
[  191.526299] Bluetooth: hci7: command tx timeout
[  191.588942] Bluetooth: hci4: command tx timeout
[  191.589650] Bluetooth: hci2: command tx timeout
[  191.653425] Bluetooth: hci3: command tx timeout
[  193.255143] Bluetooth: hci0: command tx timeout
[  193.380900] Bluetooth: hci1: command tx timeout
[  193.509086] Bluetooth: hci6: command tx timeout
[  193.574585] Bluetooth: hci5: command tx timeout
[  193.575559] Bluetooth: hci7: command tx timeout
[  193.638852] Bluetooth: hci4: command tx timeout
[  193.639361] Bluetooth: hci2: command tx timeout
[  193.700923] Bluetooth: hci3: command tx timeout
[  195.301092] Bluetooth: hci0: command tx timeout
[  195.429041] Bluetooth: hci1: command tx timeout
[  195.556986] Bluetooth: hci6: command tx timeout
[  195.621904] Bluetooth: hci7: command tx timeout
[  195.622389] Bluetooth: hci5: command tx timeout
[  195.685114] Bluetooth: hci2: command tx timeout
[  195.685559] Bluetooth: hci4: command tx timeout
[  195.749872] Bluetooth: hci3: command tx timeout
[  197.348895] Bluetooth: hci0: command tx timeout
[  197.477161] Bluetooth: hci1: command tx timeout
[  197.604908] Bluetooth: hci6: command tx timeout
[  197.669517] Bluetooth: hci5: command tx timeout
[  197.669978] Bluetooth: hci7: command tx timeout
[  197.733216] Bluetooth: hci4: command tx timeout
[  197.733645] Bluetooth: hci2: command tx timeout
[  197.796878] Bluetooth: hci3: command tx timeout
[  251.383747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.387705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.402379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.410377] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.416680] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.455525] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.458205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.460351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.465357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.468755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.561192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.580328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.586111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.589649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.600182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.601637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.604353] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.608270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.629546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.645346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.674976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.679363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.693784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.705650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.717340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.814543] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.820333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  251.829974] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.840395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  251.853372] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.859126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  251.873103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.875550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.877328] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  251.881594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  251.884721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.890097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  251.915544] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.959085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.966116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.477217] Bluetooth: hci0: command tx timeout
[  253.541512] Bluetooth: hci1: command tx timeout
[  253.668953] Bluetooth: hci3: command tx timeout
[  253.796927] Bluetooth: hci4: command tx timeout
[  253.796950] Bluetooth: hci2: command tx timeout
[  253.988904] Bluetooth: hci7: command tx timeout
[  253.989480] Bluetooth: hci6: command tx timeout
[  254.117174] Bluetooth: hci5: command tx timeout
[  255.525846] Bluetooth: hci0: command tx timeout
[  255.589926] Bluetooth: hci1: command tx timeout
[  255.716891] Bluetooth: hci3: command tx timeout
[  255.845236] Bluetooth: hci4: command tx timeout
[  255.845668] Bluetooth: hci2: command tx timeout
[  256.038860] Bluetooth: hci6: command tx timeout
[  256.038886] Bluetooth: hci7: command tx timeout
[  256.165128] Bluetooth: hci5: command tx timeout
[  257.574007] Bluetooth: hci0: command tx timeout
[  257.637974] Bluetooth: hci1: command tx timeout
[  257.766042] Bluetooth: hci3: command tx timeout
[  257.893906] Bluetooth: hci2: command tx timeout
[  257.894051] Bluetooth: hci4: command tx timeout
[  258.087043] Bluetooth: hci7: command tx timeout
[  258.087160] Bluetooth: hci6: command tx timeout
[  258.213945] Bluetooth: hci5: command tx timeout
[  259.620904] Bluetooth: hci0: command tx timeout
[  259.685207] Bluetooth: hci1: command tx timeout
[  259.812891] Bluetooth: hci3: command tx timeout
[  259.941016] Bluetooth: hci2: command tx timeout
[  259.941322] Bluetooth: hci4: command tx timeout
[  260.134980] Bluetooth: hci6: command tx timeout
[  260.135003] Bluetooth: hci7: command tx timeout
[  260.261063] Bluetooth: hci5: command tx timeout
[  313.655958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.660368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.664612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.675528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.681484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.814547] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.817335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  313.826383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  313.832072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  313.835719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  313.863231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  313.869601] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  313.890711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.904318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.912639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.937193] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  313.962717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.965431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.970342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.973853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.050874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.085294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.123903] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.131636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.147421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.150389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.159675] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.164213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.168270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.180528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.185143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.195454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.197462] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.210588] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.216157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.217798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.221375] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.228623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.246719] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.260093] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  315.750953] Bluetooth: hci0: command tx timeout
[  315.941916] Bluetooth: hci1: command tx timeout
[  316.005940] Bluetooth: hci3: command tx timeout
[  316.069936] Bluetooth: hci2: command tx timeout
[  316.389035] Bluetooth: hci4: command tx timeout
[  316.389923] Bluetooth: hci6: command tx timeout
[  316.390436] Bluetooth: hci7: command tx timeout
[  316.453908] Bluetooth: hci5: command tx timeout
[  317.796903] Bluetooth: hci0: command tx timeout
[  317.989893] Bluetooth: hci1: command tx timeout
[  318.054270] Bluetooth: hci3: command tx timeout
[  318.117900] Bluetooth: hci2: command tx timeout
[  318.438275] Bluetooth: hci7: command tx timeout
[  318.438945] Bluetooth: hci6: command tx timeout
[  318.439384] Bluetooth: hci4: command tx timeout
[  318.502466] Bluetooth: hci5: command tx timeout
[  319.846186] Bluetooth: hci0: command tx timeout
[  320.039879] Bluetooth: hci1: command tx timeout
[  320.102142] Bluetooth: hci3: command tx timeout
[  320.166210] Bluetooth: hci2: command tx timeout
[  320.484968] Bluetooth: hci7: command tx timeout
[  320.485368] Bluetooth: hci4: command tx timeout
[  320.485490] Bluetooth: hci6: command tx timeout
[  320.549897] Bluetooth: hci5: command tx timeout
[  321.894743] Bluetooth: hci0: command tx timeout
[  322.086559] Bluetooth: hci1: command tx timeout
[  322.149101] Bluetooth: hci3: command tx timeout
[  322.212915] Bluetooth: hci2: command tx timeout
[  322.532948] Bluetooth: hci4: command tx timeout
[  322.533473] Bluetooth: hci6: command tx timeout
[  322.533547] Bluetooth: hci7: command tx timeout
[  322.598876] Bluetooth: hci5: command tx timeout
[  376.061244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.067652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.074615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.087237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.094481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.306484] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.312538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.318374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.331344] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.339398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.451766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  376.456353] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  376.461338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  376.471354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  376.478316] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  376.599887] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  376.605850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  376.609457] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  376.628378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  376.644326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  376.659356] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  376.664338] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  376.670782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.675104] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  376.685590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  376.689116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.705939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  376.737180] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  376.754605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  376.758714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  376.761351] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  376.772782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.774301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  376.788696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  376.790641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.805332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  376.812285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.816424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  376.845569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  376.880411] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.150026] Bluetooth: hci0: command tx timeout
[  378.405644] Bluetooth: hci1: command tx timeout
[  378.535851] Bluetooth: hci2: command tx timeout
[  378.789201] Bluetooth: hci3: command tx timeout
[  378.916914] Bluetooth: hci5: command tx timeout
[  378.917639] Bluetooth: hci7: command tx timeout
[  378.981969] Bluetooth: hci6: command tx timeout
[  378.982649] Bluetooth: hci4: command tx timeout
[  380.197167] Bluetooth: hci0: command tx timeout
[  380.453915] Bluetooth: hci1: command tx timeout
[  380.580992] Bluetooth: hci2: command tx timeout
[  380.837881] Bluetooth: hci3: command tx timeout
[  380.965679] Bluetooth: hci7: command tx timeout
[  380.966910] Bluetooth: hci5: command tx timeout
[  381.029893] Bluetooth: hci6: command tx timeout
[  381.030336] Bluetooth: hci4: command tx timeout
[  382.245161] Bluetooth: hci0: command tx timeout
[  382.501278] Bluetooth: hci1: command tx timeout
[  382.629885] Bluetooth: hci2: command tx timeout
[  382.884870] Bluetooth: hci3: command tx timeout
[  383.012907] Bluetooth: hci7: command tx timeout
[  383.013367] Bluetooth: hci5: command tx timeout
[  383.077843] Bluetooth: hci6: command tx timeout
[  383.078282] Bluetooth: hci4: command tx timeout
[  384.292912] Bluetooth: hci0: command tx timeout
[  384.548889] Bluetooth: hci1: command tx timeout
[  384.679764] Bluetooth: hci2: command tx timeout
[  384.932869] Bluetooth: hci3: command tx timeout
[  385.061879] Bluetooth: hci7: command tx timeout
[  385.062348] Bluetooth: hci5: command tx timeout
[  385.124941] Bluetooth: hci4: command tx timeout
[  385.125396] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
17:26:16  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000007 RCX=ffffffff8190a1db RDX=ffff88802593b700
RSI=ffffffff8190a126 RDI=0000000000000001 RBP=ffffea0001b39080 RSP=ffff888015817808
R8 =0000000000000001 R9 =fffff94000367216 R10=0000000000000000 R11=0000000000000001
R12=ffff888015817948 R13=ffff8880158179d0 R14=dffffc0000000000 R15=ffff888015817a08
RIP=ffffffff8190a131 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa4b633c000 CR3=000000000d42e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffffea0001ae8fc0
RSI=ffffea0001ae8fc0 RDI=ffff8880167e7d88 RBP=00007f41ac4cf000 RSP=ffff8880167e7b18
R8 =00007f41ac4cf000 R9 =fffff9400035d1f8 R10=00007f41ac4cb000 R11=0000000000000001
R12=ffff8880167e7d88 R13=0000000000000000 R14=ffffea0001ae8fc0 R15=ffffea0001ae8fc0
RIP=ffffffff819d074e RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f41ac4cb260 CR3=000000000e751000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000