Warning: Permanently added '[localhost]:23734' (ECDSA) to the list of known hosts. 2024/10/27 16:36:35 fuzzer started 2024/10/27 16:36:36 dialing manager at localhost:45639 syzkaller login: [ 62.007162] cgroup: Unknown subsys name 'net' [ 62.147787] cgroup: Unknown subsys name 'cpuset' [ 62.191333] cgroup: Unknown subsys name 'rlimit' 2024/10/27 16:36:53 syscalls: 208 2024/10/27 16:36:53 code coverage: enabled 2024/10/27 16:36:53 comparison tracing: enabled 2024/10/27 16:36:53 extra coverage: enabled 2024/10/27 16:36:53 setuid sandbox: enabled 2024/10/27 16:36:53 namespace sandbox: enabled 2024/10/27 16:36:53 Android sandbox: enabled 2024/10/27 16:36:53 fault injection: enabled 2024/10/27 16:36:53 leak checking: enabled 2024/10/27 16:36:53 net packet injection: enabled 2024/10/27 16:36:53 net device setup: enabled 2024/10/27 16:36:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/27 16:36:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/27 16:36:53 USB emulation: enabled 2024/10/27 16:36:53 hci packet injection: enabled 2024/10/27 16:36:53 wifi device emulation: enabled 2024/10/27 16:36:53 802.15.4 emulation: enabled 2024/10/27 16:36:53 fetching corpus: 0, signal 0/0 (executing program) 2024/10/27 16:36:55 starting 8 fuzzer processes 16:36:55 executing program 0: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c658989cfacd1fc8f83bd70947a4971b21077001e02f767a81e37c82a880946c9c7f047ea6683ab57f2d15fa1e7ad2741369ec3b367a9052bb5ef636fd171de12cd865cf0243c7ca5ef507cb86b1413f040ff29bd808944c1e81686fbdf96f962bfc8e98721cd663443117759a31fdd2addf9ab7e7db87c85464ffcbbe376945bb8bacb5cee07b0bafa008c93010ac79c4441ee7f352535c64516a2f7cccc728b5947ef2a8", 0xa5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000140)=0x101, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0xa75, 0x3, 0xffffffff, 0xfffffffa, 0x10000, 0x7, 0x5}, 0x1c) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xd0, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1e}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x20) r1 = socket(0x6, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000003c0)=@req={0x29e, 0x7ff, 0x3, 0x2}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000400), 0x3, 0x50400) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44040) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r4, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048085}, 0x20008000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r4, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7fffffff, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0xc004) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xf4a7a366622d9238}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x4810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', <r5=>0x0}) r6 = socket(0x1, 0x1, 0x2008) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000010c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000000b80)={0x500, r7, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x58}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x1}, {0x0, 0x7, 0x0, 0x10001}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x500}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 16:36:55 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x20008080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4008000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r1 = syz_open_dev$vcsa(&(0x7f0000000440), 0x0, 0x8040) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001680)={0x70, 0x0, &(0x7f0000001540)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fda={0x66646185, 0x0, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, 0x18}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000001500)={0x0, 0x20, 0x48}}}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x3}, @register_looper, @increfs_done={0x40106308, 0x1}], 0x8e, 0x0, &(0x7f00000015c0)="9eb592f697b332d7ee4e24e463c75be410875f2071a46bf0fb7f6969f4af869345c9c389164ef46e49d8f7bcf64cdc4ac20e490f90f618d66483c94fb54f4fba248eff8fa37b2aef1f7eca8d275c578b78a224fe5bc0062fc9550a11192ec92f24d8fab1f592f53257e3f15112ebdc9a15be1a0e7c9ce5218c62e3dc395684da71865343143343b74b9e5c7e2c6b"}) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001800)={'batadv_slave_0\x00', <r2=>0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x11000040}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001980), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x40084) socketpair(0xa, 0x800, 0x9, &(0x7f0000001a80)={<r4=>0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2012020}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x0, 0x102, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000001e40)={0x24, @none={0x0, 0x36f28c9ca4783f63}}, 0x14) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0xc001) 16:36:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x240088c0}, 0x8a0) r2 = socket(0x9, 0x4, 0x5) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r3 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8c}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x84001) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000810) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000740)={'team0\x00', <r6=>0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', <r8=>0x0}) accept4$packet(r2, &(0x7f0000000800)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r10=>0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x2a4, 0x0, 0x124, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r9}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcf3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) syz_open_dev$vcsa(&(0x7f0000000c00), 0x1, 0x200000) setns(0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000d4}, 0x8860) 16:36:55 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x200408c4) r1 = fork() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x1d}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x50}}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x44}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r3 = socket(0x1d, 0x3, 0x7) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x3690, 0x24}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048090}, 0x20004010) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000003c0), 0x4) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14, 0x800) bind$packet(r4, &(0x7f0000000480)={0x11, 0x2, 0x0, 0x1, 0x8}, 0x14) r6 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x10001, 0x38d00) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4048000) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}}}, &(0x7f0000000740)=0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl1\x00', <r8=>r5, 0x4, 0x20, 0x5a, 0x5, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, 0x1, 0x20, 0x0, 0x7}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40814}, 0x4004000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5a47bae2fd5077d7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000a80)={r8, 0x1, 0x6, @remote}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) 16:36:55 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0}) r2 = gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x13}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0}, &(0x7f0000000240)=0x14, 0x800) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000280)=0x6, 0x4) r7 = accept4$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', <r9=>0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000003c0)={'team0\x00', <r10=>0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x280, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8, 0x7, 0x3}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x20008084}, 0x80d0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r0, 0x200, 0x182, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40088d0) sendto$packet(r5, &(0x7f0000000900)="0a0e894d56580b2bffcece1be6db8df0481221318999a984", 0x18, 0x0, &(0x7f0000000940)={0x11, 0xf5, r6, 0x1, 0x5, 0x6, @multicast}, 0x14) socketpair(0x22, 0x80000, 0x3e318bc7, &(0x7f0000000980)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r14 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r14, 0x7, r7, &(0x7f0000000b00)={0xffffffffffffffff, r12, 0x10000}) [ 80.339280] audit: type=1400 audit(1730047015.141:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:36:55 executing program 5: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x1, 0x6, 0x55b, 0x12, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x8, 0x7}}) r1 = socket$inet6(0xa, 0xa, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r2=>r0, 0x4, 0x7, 0xff, 0x101, 0x50, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0x6, 0xc58}}) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket(0x1, 0x1, 0x5a00000) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@initdev, @in6=@local}}, {{@in6=@private0}}}, &(0x7f0000000300)=0xe8) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r3) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x18632a00d193b696}, 0x20000004) r5 = socket(0x11, 0x3, 0x6) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000881) r7 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x7, 0x408080) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0xba5e533f24a071e1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}}, 0x4004000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x306, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004004}, 0x40040) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000ac0)={0x4, 0x4560dc08d8ec0eea}, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x18850013}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, r6, 0x60d, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x2004c000) 16:36:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40040c1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x24004040) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20000000) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r5 = socket(0x27, 0x2, 0x2) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan4\x00', <r6=>0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48040) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair(0x1, 0x2, 0x0, &(0x7f0000000ac0)={<r7=>0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xf4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x801}, 0x4) 16:36:55 executing program 7: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r2=>0x0}) r3 = socket(0x2, 0xa, 0x9e) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20885}, 0x24000011) r4 = socket$inet6(0xa, 0x800, 0x26ab) getsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000500)=""/176, &(0x7f00000005c0)=0xb0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', <r5=>0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d0}, 0x40080) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000880)="8ec308db182452fa879109e3cbe2e3a0ba2518f22d7690b529580ee5a679d9286cdcd987feb2f9a6") socketpair(0x8, 0x4, 0xfffffa2c, &(0x7f00000008c0)={<r7=>0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000940), r3) accept4$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000009c0)=0x14, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001340)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000d00)={0x5e4, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57d}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r1}, {0x94, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x100, 0x20, 0x8}, {0x7fff, 0x1f, 0xd5, 0x6}, {0x200, 0x80, 0x0, 0x9e3}, {0x0, 0x3, 0xb1, 0x800}]}}}]}}, {{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x80000}, 0x40) [ 81.733880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.736907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.738157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.747015] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.755230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.756914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.791648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.793488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.794480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.796026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.798499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.802315] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.803387] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.805170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.811530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.816990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.821112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.822137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.826931] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.828470] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.829566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.843720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.844734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.852920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.855964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.856540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.858003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.861052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.865486] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.866625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.868071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.869721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.873849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.875226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.878471] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.880177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.890854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.892057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.894155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.895265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.903248] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.904639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.912760] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.915939] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.917005] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.935002] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.945502] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.946771] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.809153] Bluetooth: hci0: command tx timeout [ 83.936830] Bluetooth: hci1: command tx timeout [ 83.936895] Bluetooth: hci2: command tx timeout [ 84.001813] Bluetooth: hci4: command tx timeout [ 84.002550] Bluetooth: hci6: command tx timeout [ 84.002805] Bluetooth: hci7: command tx timeout [ 84.003730] Bluetooth: hci5: command tx timeout [ 84.003768] Bluetooth: hci3: command tx timeout [ 85.856876] Bluetooth: hci0: command tx timeout [ 85.986832] Bluetooth: hci1: command tx timeout [ 85.987001] Bluetooth: hci2: command tx timeout [ 86.048753] Bluetooth: hci3: command tx timeout [ 86.050261] Bluetooth: hci5: command tx timeout [ 86.050296] Bluetooth: hci7: command tx timeout [ 86.051002] Bluetooth: hci6: command tx timeout [ 86.051125] Bluetooth: hci4: command tx timeout [ 87.904779] Bluetooth: hci0: command tx timeout [ 88.032837] Bluetooth: hci1: command tx timeout [ 88.033383] Bluetooth: hci2: command tx timeout [ 88.097039] Bluetooth: hci7: command tx timeout [ 88.098875] Bluetooth: hci4: command tx timeout [ 88.099548] Bluetooth: hci3: command tx timeout [ 88.099589] Bluetooth: hci6: command tx timeout [ 88.100149] Bluetooth: hci5: command tx timeout [ 89.952770] Bluetooth: hci0: command tx timeout [ 90.080792] Bluetooth: hci1: command tx timeout [ 90.081366] Bluetooth: hci2: command tx timeout [ 90.146754] Bluetooth: hci6: command tx timeout [ 90.147340] Bluetooth: hci3: command tx timeout [ 90.148175] Bluetooth: hci7: command tx timeout [ 90.148709] Bluetooth: hci4: command tx timeout [ 90.149210] Bluetooth: hci5: command tx timeout [ 144.304235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.306237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.307934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.315142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.325558] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.331599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.363236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.366002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.367347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.389409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.425776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.428962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.499051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.502125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.510064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.521903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.526500] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.531103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.564511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.570592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.575131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.580464] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.585849] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.589902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.621160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.643991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.650383] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.653327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.657347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.661933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.667996] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.674024] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.678897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.695606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.715948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.723127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.725476] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.729530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.731428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.732600] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.749167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.754403] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.756369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.758230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.759303] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.767057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.769262] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.770826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.402056] Bluetooth: hci0: command tx timeout [ 146.465410] Bluetooth: hci1: command tx timeout [ 146.593717] Bluetooth: hci2: command tx timeout [ 146.657787] Bluetooth: hci3: command tx timeout [ 146.722815] Bluetooth: hci6: command tx timeout [ 146.848922] Bluetooth: hci4: command tx timeout [ 146.850127] Bluetooth: hci5: command tx timeout [ 146.913746] Bluetooth: hci7: command tx timeout [ 148.449858] Bluetooth: hci0: command tx timeout [ 148.513184] Bluetooth: hci1: command tx timeout [ 148.640810] Bluetooth: hci2: command tx timeout [ 148.705107] Bluetooth: hci3: command tx timeout [ 148.770774] Bluetooth: hci6: command tx timeout [ 148.897636] Bluetooth: hci5: command tx timeout [ 148.898479] Bluetooth: hci4: command tx timeout [ 148.961805] Bluetooth: hci7: command tx timeout [ 150.497693] Bluetooth: hci0: command tx timeout [ 150.562076] Bluetooth: hci1: command tx timeout [ 150.688771] Bluetooth: hci2: command tx timeout [ 150.752871] Bluetooth: hci3: command tx timeout [ 150.817811] Bluetooth: hci6: command tx timeout [ 150.944921] Bluetooth: hci5: command tx timeout [ 150.945895] Bluetooth: hci4: command tx timeout [ 151.011354] Bluetooth: hci7: command tx timeout [ 152.544846] Bluetooth: hci0: command tx timeout [ 152.608799] Bluetooth: hci1: command tx timeout [ 152.738320] Bluetooth: hci2: command tx timeout [ 152.801819] Bluetooth: hci3: command tx timeout [ 152.864723] Bluetooth: hci6: command tx timeout [ 152.993839] Bluetooth: hci5: command tx timeout [ 152.994373] Bluetooth: hci4: command tx timeout [ 153.057195] Bluetooth: hci7: command tx timeout [ 206.582281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.584010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.586892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.596864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.598493] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.600919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.638886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.644901] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.648445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.653396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.656052] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.658371] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.710435] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.727568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.737297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.738109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.745973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.748810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.762456] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.763599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.764786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.767809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.782049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.791215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.855369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.873011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.876124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.895404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.915865] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.917173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.998969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.000529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.008398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.011832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.015427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.016478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.021914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.037872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.078583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.079595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.084834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.087908] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.092019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.092896] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.093843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.115951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.124367] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.126239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.672801] Bluetooth: hci1: command tx timeout [ 208.672828] Bluetooth: hci0: command tx timeout [ 208.802696] Bluetooth: hci3: command tx timeout [ 208.864811] Bluetooth: hci2: command tx timeout [ 208.992814] Bluetooth: hci4: command tx timeout [ 209.185415] Bluetooth: hci7: command tx timeout [ 209.186142] Bluetooth: hci6: command tx timeout [ 209.248813] Bluetooth: hci5: command tx timeout [ 210.720874] Bluetooth: hci0: command tx timeout [ 210.721409] Bluetooth: hci1: command tx timeout [ 210.848786] Bluetooth: hci3: command tx timeout [ 210.914818] Bluetooth: hci2: command tx timeout [ 211.040827] Bluetooth: hci4: command tx timeout [ 211.233811] Bluetooth: hci7: command tx timeout [ 211.234046] Bluetooth: hci6: command tx timeout [ 211.296745] Bluetooth: hci5: command tx timeout [ 212.768771] Bluetooth: hci1: command tx timeout [ 212.769730] Bluetooth: hci0: command tx timeout [ 212.897562] Bluetooth: hci3: command tx timeout [ 212.960817] Bluetooth: hci2: command tx timeout [ 213.089749] Bluetooth: hci4: command tx timeout [ 213.280729] Bluetooth: hci6: command tx timeout [ 213.280757] Bluetooth: hci7: command tx timeout [ 213.344944] Bluetooth: hci5: command tx timeout [ 214.817907] Bluetooth: hci1: command tx timeout [ 214.817916] Bluetooth: hci0: command tx timeout [ 214.944792] Bluetooth: hci3: command tx timeout [ 215.009716] Bluetooth: hci2: command tx timeout [ 215.137706] Bluetooth: hci4: command tx timeout [ 215.328716] Bluetooth: hci6: command tx timeout [ 215.328759] Bluetooth: hci7: command tx timeout [ 215.392723] Bluetooth: hci5: command tx timeout [ 268.915080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.917872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.920425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.925497] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 268.928384] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 268.930292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.034202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.035869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.037459] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.043396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.046836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.048010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.106427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.107378] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.110133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.111669] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.113201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.127315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.128740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.129736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.130607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.148920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.150867] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.152451] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.175425] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.180876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.182069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.184974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.186669] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.187855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.293348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.300719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.323874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.357289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.381885] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.389978] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.473216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.486725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.507072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.510852] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.512811] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.514131] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.562434] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.563836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.565000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.568721] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.571174] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.572568] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.945903] Bluetooth: hci0: command tx timeout [ 271.072806] Bluetooth: hci1: command tx timeout [ 271.201789] Bluetooth: hci4: command tx timeout [ 271.201819] Bluetooth: hci2: command tx timeout [ 271.202169] Bluetooth: hci3: command tx timeout [ 271.456839] Bluetooth: hci5: command tx timeout [ 271.648862] Bluetooth: hci7: command tx timeout [ 271.715665] Bluetooth: hci6: command tx timeout [ 272.993692] Bluetooth: hci0: command tx timeout [ 273.120697] Bluetooth: hci1: command tx timeout [ 273.248690] Bluetooth: hci3: command tx timeout [ 273.249799] Bluetooth: hci4: command tx timeout [ 273.250086] Bluetooth: hci2: command tx timeout [ 273.504746] Bluetooth: hci5: command tx timeout [ 273.696842] Bluetooth: hci7: command tx timeout [ 273.761660] Bluetooth: hci6: command tx timeout [ 275.040946] Bluetooth: hci0: command tx timeout [ 275.169492] Bluetooth: hci1: command tx timeout [ 275.297752] Bluetooth: hci2: command tx timeout [ 275.298261] Bluetooth: hci4: command tx timeout [ 275.298656] Bluetooth: hci3: command tx timeout [ 275.553661] Bluetooth: hci5: command tx timeout [ 275.744758] Bluetooth: hci7: command tx timeout [ 275.808683] Bluetooth: hci6: command tx timeout [ 277.088819] Bluetooth: hci0: command tx timeout [ 277.216909] Bluetooth: hci1: command tx timeout [ 277.345736] Bluetooth: hci4: command tx timeout [ 277.345765] Bluetooth: hci3: command tx timeout [ 277.346230] Bluetooth: hci2: command tx timeout [ 277.600820] Bluetooth: hci5: command tx timeout [ 277.792707] Bluetooth: hci7: command tx timeout [ 277.856763] Bluetooth: hci6: command tx timeout [ 331.388892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.393840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.399871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.411120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.414184] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.416900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.437160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.441545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.442963] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.446107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.449353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.455524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.507050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.519841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.524461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.536302] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.544929] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.551737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.589044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.593894] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.598874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.602989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.607460] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.610105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.620012] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.648490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.650897] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.653917] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.657060] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.659510] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.661483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 331.664769] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 331.664885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.675564] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.677984] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.702149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.739840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 331.739983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.742286] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 331.759823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.761769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.766693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.773928] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.775846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.777018] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.794897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.795918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.811209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.472747] Bluetooth: hci1: command tx timeout [ 333.473672] Bluetooth: hci0: command tx timeout [ 333.600719] Bluetooth: hci2: command tx timeout [ 333.730752] Bluetooth: hci3: command tx timeout [ 333.793349] Bluetooth: hci7: command tx timeout [ 333.856877] Bluetooth: hci5: command tx timeout [ 333.858679] Bluetooth: hci4: command tx timeout [ 333.986209] Bluetooth: hci6: command tx timeout [ 335.520950] Bluetooth: hci0: command tx timeout [ 335.521557] Bluetooth: hci1: command tx timeout [ 335.648777] Bluetooth: hci2: command tx timeout [ 335.776914] Bluetooth: hci3: command tx timeout [ 335.840739] Bluetooth: hci7: command tx timeout [ 335.904753] Bluetooth: hci4: command tx timeout [ 335.905271] Bluetooth: hci5: command tx timeout [ 336.032680] Bluetooth: hci6: command tx timeout [ 337.569059] Bluetooth: hci1: command tx timeout [ 337.570486] Bluetooth: hci0: command tx timeout [ 337.696684] Bluetooth: hci2: command tx timeout [ 337.824671] Bluetooth: hci3: command tx timeout [ 337.888738] Bluetooth: hci7: command tx timeout [ 337.953733] Bluetooth: hci4: command tx timeout [ 337.954241] Bluetooth: hci5: command tx timeout [ 338.080804] Bluetooth: hci6: command tx timeout [ 339.616791] Bluetooth: hci1: command tx timeout [ 339.618710] Bluetooth: hci0: command tx timeout [ 339.745648] Bluetooth: hci2: command tx timeout [ 339.872724] Bluetooth: hci3: command tx timeout [ 339.936943] Bluetooth: hci7: command tx timeout [ 340.000917] Bluetooth: hci5: command tx timeout [ 340.002438] Bluetooth: hci4: command tx timeout [ 340.130847] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 16:42:05 Registers: info registers vcpu 0 RAX=0000000080010101 RBX=0000000000010000 RCX=ffffffff813fa5f8 RDX=ffff888028f05280 RSI=ffffffff81602a2b RDI=0000000000000005 RBP=0000000000000002 RSP=ffff88806ce096e0 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=0000000000010000 R11=000000000008fdc5 R12=ffff88806ce2bb40 R13=fffffbfff0b41e40 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81602a2b RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f702e7fe8e0 CR3=0000000028c50000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff87ed63f0 RBX=1ffff11005052de5 RCX=ffffffff812ef5ee RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff87ed4ea0 RBP=ffff888035c3b700 RSP=ffff888028296f00 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=0000000000000009 R13=ffff888035c3c1b8 R14=0000000000000200 R15=0000000000000003 RIP=ffffffff812f9106 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9489148540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3200000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbd9beeb270 CR3=000000002e660000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000