Warning: Permanently added '[localhost]:28312' (ECDSA) to the list of known hosts. 2024/10/28 04:30:28 fuzzer started 2024/10/28 04:30:28 dialing manager at localhost:45639 syzkaller login: [ 70.856382] cgroup: Unknown subsys name 'net' [ 70.934755] cgroup: Unknown subsys name 'cpuset' [ 70.960727] cgroup: Unknown subsys name 'rlimit' 2024/10/28 04:30:45 syscalls: 203 2024/10/28 04:30:45 code coverage: enabled 2024/10/28 04:30:45 comparison tracing: enabled 2024/10/28 04:30:45 extra coverage: enabled 2024/10/28 04:30:45 setuid sandbox: enabled 2024/10/28 04:30:45 namespace sandbox: enabled 2024/10/28 04:30:45 Android sandbox: enabled 2024/10/28 04:30:45 fault injection: enabled 2024/10/28 04:30:45 leak checking: enabled 2024/10/28 04:30:45 net packet injection: enabled 2024/10/28 04:30:45 net device setup: enabled 2024/10/28 04:30:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/28 04:30:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/28 04:30:45 USB emulation: enabled 2024/10/28 04:30:45 hci packet injection: enabled 2024/10/28 04:30:45 wifi device emulation: enabled 2024/10/28 04:30:45 802.15.4 emulation: enabled 2024/10/28 04:30:45 fetching corpus: 0, signal 0/0 (executing program) 2024/10/28 04:30:47 starting 8 fuzzer processes 04:30:47 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='[\',!&&c$+\x7f].#+%>$+*\'&)\x00', &(0x7f0000000040)='./file0\x00', r0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='[\',!&&c$+\x7f].#+%>$+*\'&)\x00', 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@msize={'msize', 0x3d, 0x80000000}}, {@cache_loose}, {@nodevmap}, {@cache_none}, {@cache_mmap}, {@cache_fscache}, {@mmap}], [{@appraise_type}, {@euid_lt={'euid<', 0xee00}}, {@subj_role={'subj_role', 0x3d, '{'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_eq}, {@euid_gt={'euid>', r4}}, {@obj_role}]}}) r5 = fsopen(&(0x7f0000000340)='openpromfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000380)='rfdno', &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400e0}, 0x4001) r8 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000580)='[\',!&&c$+\x7f].#+%>$+*\'&)\x00', 0x0, r6) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='{', 0x0, r2) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r9, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}}, 0x4000081) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000008c0)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x5}) 04:30:47 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc65ca01dc417ef29}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6e6d}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x1}, 0xfff) r2 = syz_io_uring_complete(r1) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x7, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x80) pause() syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x8100, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10840, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}], [{@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '(.(]).-$$'}}]}}) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) clock_getres(0x7, &(0x7f00000005c0)) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000700)={0x358, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbc5a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x84c8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x0, 0x8, 0x36, 0xa3e}, {0x3ff, 0x81, 0x3, 0x2}, {0x9, 0x18, 0x1, 0xf824}, {0x9, 0x0, 0x6}]}}}]}}, {{0x8, 0x1, r6}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0xff, 0x40, 0x7fffffff}, {0x40, 0x5, 0x4}, {0x1, 0x6, 0xfb, 0x8}, {0x4, 0x7, 0x1, 0x9ac2}, {0x0, 0x2, 0x80, 0x67f}]}}}]}}]}, 0x358}}, 0xc000) 04:30:47 executing program 2: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_complete(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x2270, &(0x7f0000000240)={0x0, 0x874d, 0x20, 0x0, 0xaa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x10000000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x1440}}, 0xffffffff) syz_io_uring_submit(r5, r4, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r1, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)}], 0x1, &(0x7f0000000480)=""/28, 0x1c}, 0x0, 0x10001, 0x1, {0x1}}, 0x4fa) r6 = syz_io_uring_complete(r3) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8090) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x44054) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}]}, 0x2c}}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000840)=0x2, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000880)=0x8000, 0x0, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x20}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20044080) r7 = syz_io_uring_complete(r3) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x86380c0d063a8114, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4862}, 0x67621873c87fabfd) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x140080b0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r1, 0x0) 04:30:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x4040044) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0xc000, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x0, 0x8, 0x81, 0x1}]}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000400)={{0x1ff, 0x80}, {0x34000000000, 0xff}, 0xcca4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000440)={'\x00', 0x10001, 0x2, 0x7fffffff}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000004c0)={{0x2, 0x8001}, {0x401, 0x80000001}, 0x3}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x20, 0x0, 0x0, @remote, @local, 0x8000, 0x1, 0x80, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000007c0)={0x8}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f0000000b40)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r7, 0x800, 0x3f, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 88.861462] audit: type=1400 audit(1730089847.327:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:30:47 executing program 4: fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20008890) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xf8, 0x2, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x8000, 0x20, 0x81, 0x120}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0x20, 0x1f, 0x4, 0x40, @local, @mcast2, 0x1, 0x41, 0xffffffc0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0xd1, 0x26, @loopback, @mcast2, 0x10, 0x40, 0x9e3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x40, 0xffffffff, 0x50, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, 0xfc4369908dc48feb, 0x700, 0x7b, 0xeda}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000600)={0x504, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6394, 0x0, 0x40, 0x20}, {0x5c2, 0x5, 0x5, 0xd4}, {0x4, 0x54, 0x5, 0x7f9}, {0x7f, 0x6, 0xce, 0x9}, {0x9, 0x0, 0x7f, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x250, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2000, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4040004) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r6) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x3c}}, 0xc000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000e40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000ec0)={r8, 0x10001, 0x800}) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), 0xffffffffffffffff) r10 = socket(0x2c, 0x4, 0x7) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x68, r9, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6b5d6b7f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004840}, 0x8000) 04:30:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4100}, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfd94}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4041000}, 0x20000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{0x80, 0x20, 0x1, 0x8001}, {0x0, 0x0, 0x5, 0x7}, {0x6e9, 0x1f, 0x7f, 0x7}, {0x5, 0x1, 0x0, 0x9}]}) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r0, 0x8, {0x0, r4}, 0x5, 0x5, 0x1, {0x0, 0x0, r5}}, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc1) r6 = socket(0xb, 0x4, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r2, 0x700, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x24008c40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r8 = syz_io_uring_complete(r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xac5f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) 04:30:47 executing program 6: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x303, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000c4) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x338, r0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0xffffffff}}}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5a}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x57e}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "6bbce46920c53d2f214c014b3e7ee4dcd5ca49c01798837e40ee2ce51d6f955640b5ca15ebbfde890e0baa37631002e5928aa2c01b851b7450b6a66a6597b259d3c42e47e2da239d8d5791b8c6db8cd82eafa4e4291839593eaa6714df016c56859c6487eca3ae349547d16190c5468babff3146892c797aa6b5243c7d4b937d6063fd3e20416f74990e7a1172dee64c0a5bd47341e9058ae3e8ac993b7a7fda8834cbf7df46d1dab20322bb73a143ebd52081bc900ba686fed61cffe00ce6b610776fd12d52f1015abe93b9a6b6d14c9271"}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6b80000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3af}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1c0b}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x98000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x228}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1abfff24}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20004080}, 0x50) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r1, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "c77a8717b6ee71720e3fd92198e2d3be7e0deb61e6e2dc0ad2ed1a41fa09aaa35ee87ab1778d9a4811a27b75f91c85ed68263f029a60f625a0e1837e3f40ec9ab69757d385ade17952176c468cb728c61d570fee0a1999649700ae11f334"}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket(0x1e, 0x2, 0x1ff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x19a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x838}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', r5, 0x2f, 0x3, 0x7, 0x3ff, 0x58, @private0, @empty, 0x7800, 0x700, 0x800, 0x3}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x4000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0xc8d25411282e7778}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r8, 0x310, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x76}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000f00)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, r2}}, 0x5) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f40), 0x400200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r9, 0x89f4, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x1, 0x3, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x7, 0xd2, 0x8001}}) 04:30:47 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3d2, 0x80040) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x9}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x5) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x29a9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}]}]}, 0x70}}, 0x840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000052) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000640)={&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000600)=""/29, 0x1d}) r5 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r1, 0x404, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ff8b239b66ff"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x200a0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f00000009c0)=0x5, 0x0, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x5810) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001) syz_open_dev$usbmon(&(0x7f0000000c00), 0x4, 0x4800) [ 90.335319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.350278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.351797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.356274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.361683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.364654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.366070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.367032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.371231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.373414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.374387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.375207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.377110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.379802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.383969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.391745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.402783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.405012] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.433767] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.435098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.436267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.436967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.441867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.443041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.443931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.445932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.447775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.448550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.451445] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.452706] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.453636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.475852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.481343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.487042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.489388] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.492126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.496919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.500104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.502784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.502819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.504964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.531323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.543826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.546853] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.547968] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.553915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.559872] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.561160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.447310] Bluetooth: hci0: command tx timeout [ 92.447398] Bluetooth: hci1: command tx timeout [ 92.448810] Bluetooth: hci2: command tx timeout [ 92.511610] Bluetooth: hci5: command tx timeout [ 92.575646] Bluetooth: hci4: command tx timeout [ 92.576666] Bluetooth: hci7: command tx timeout [ 92.577713] Bluetooth: hci3: command tx timeout [ 92.638693] Bluetooth: hci6: command tx timeout [ 94.495577] Bluetooth: hci2: command tx timeout [ 94.495613] Bluetooth: hci1: command tx timeout [ 94.497200] Bluetooth: hci0: command tx timeout [ 94.558594] Bluetooth: hci5: command tx timeout [ 94.622922] Bluetooth: hci3: command tx timeout [ 94.624472] Bluetooth: hci7: command tx timeout [ 94.624692] Bluetooth: hci4: command tx timeout [ 94.686601] Bluetooth: hci6: command tx timeout [ 96.542882] Bluetooth: hci0: command tx timeout [ 96.542995] Bluetooth: hci1: command tx timeout [ 96.544562] Bluetooth: hci2: command tx timeout [ 96.607704] Bluetooth: hci5: command tx timeout [ 96.671558] Bluetooth: hci4: command tx timeout [ 96.671618] Bluetooth: hci7: command tx timeout [ 96.672849] Bluetooth: hci3: command tx timeout [ 96.736631] Bluetooth: hci6: command tx timeout [ 98.590600] Bluetooth: hci2: command tx timeout [ 98.592009] Bluetooth: hci1: command tx timeout [ 98.595546] Bluetooth: hci0: command tx timeout [ 98.654702] Bluetooth: hci5: command tx timeout [ 98.718672] Bluetooth: hci7: command tx timeout [ 98.719156] Bluetooth: hci3: command tx timeout [ 98.719662] Bluetooth: hci4: command tx timeout [ 98.783677] Bluetooth: hci6: command tx timeout [ 153.065696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.067191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.068356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.105055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.147995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.150209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.152995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.158002] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.160657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.162931] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.282397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.284124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.287928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.289130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.290315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.291731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.294386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.296251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.297366] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.475975] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.478806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.546669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.548670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.549940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.557427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.559670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.560873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.578147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.580121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.581399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.360113] Bluetooth: hci3: command tx timeout [ 155.488255] Bluetooth: hci2: command tx timeout [ 155.615327] Bluetooth: hci1: command tx timeout [ 155.616672] Bluetooth: hci4: command tx timeout [ 156.064646] Bluetooth: hci0: command tx timeout [ 156.272368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.274820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.276726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.307025] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.321806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.331095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.339749] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.354129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.358846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.360052] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.378650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.394838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.421873] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.423191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.434783] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.488425] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.509737] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.530761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.407790] Bluetooth: hci3: command tx timeout [ 157.535585] Bluetooth: hci2: command tx timeout [ 157.663745] Bluetooth: hci1: command tx timeout [ 157.664289] Bluetooth: hci4: command tx timeout [ 158.111620] Bluetooth: hci0: command tx timeout [ 158.495700] Bluetooth: hci5: command tx timeout [ 158.559650] Bluetooth: hci6: command tx timeout [ 158.687653] Bluetooth: hci7: command tx timeout [ 159.454561] Bluetooth: hci3: command tx timeout [ 159.584534] Bluetooth: hci2: command tx timeout [ 159.711306] Bluetooth: hci4: command tx timeout [ 159.711910] Bluetooth: hci1: command tx timeout [ 160.159657] Bluetooth: hci0: command tx timeout [ 160.544631] Bluetooth: hci5: command tx timeout [ 160.607672] Bluetooth: hci6: command tx timeout [ 160.735639] Bluetooth: hci7: command tx timeout [ 161.502816] Bluetooth: hci3: command tx timeout [ 161.630616] Bluetooth: hci2: command tx timeout [ 161.758724] Bluetooth: hci4: command tx timeout [ 161.759267] Bluetooth: hci1: command tx timeout [ 162.207729] Bluetooth: hci0: command tx timeout [ 162.591566] Bluetooth: hci5: command tx timeout [ 162.655581] Bluetooth: hci6: command tx timeout [ 162.783793] Bluetooth: hci7: command tx timeout [ 164.639575] Bluetooth: hci5: command tx timeout [ 164.704709] Bluetooth: hci6: command tx timeout [ 164.831670] Bluetooth: hci7: command tx timeout [ 215.214506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.215989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.218349] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.220566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.222001] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.223001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.233372] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.236084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.241231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.247741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.254845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.256245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.274735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.276073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.277147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.279665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.281361] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.284764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.431211] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.444453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.459925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.480973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.487228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.489028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.490891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.492085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.493921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.496778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.498622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.498707] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.501229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.501348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.504943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.506332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.509709] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.511147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.540200] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.563984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.572961] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.614080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.616173] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.623885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.628794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.630003] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.632507] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.666713] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.671201] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.672459] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.246572] Bluetooth: hci0: command tx timeout [ 217.310775] Bluetooth: hci2: command tx timeout [ 217.310841] Bluetooth: hci1: command tx timeout [ 217.566594] Bluetooth: hci4: command tx timeout [ 217.566619] Bluetooth: hci3: command tx timeout [ 217.631661] Bluetooth: hci5: command tx timeout [ 217.713600] Bluetooth: hci6: command tx timeout [ 217.887699] Bluetooth: hci7: command tx timeout [ 219.295559] Bluetooth: hci0: command tx timeout [ 219.358737] Bluetooth: hci2: command tx timeout [ 219.360502] Bluetooth: hci1: command tx timeout [ 219.614664] Bluetooth: hci3: command tx timeout [ 219.615673] Bluetooth: hci4: command tx timeout [ 219.679827] Bluetooth: hci5: command tx timeout [ 219.745185] Bluetooth: hci6: command tx timeout [ 219.935646] Bluetooth: hci7: command tx timeout [ 221.342556] Bluetooth: hci0: command tx timeout [ 221.406565] Bluetooth: hci1: command tx timeout [ 221.406615] Bluetooth: hci2: command tx timeout [ 221.662756] Bluetooth: hci4: command tx timeout [ 221.663389] Bluetooth: hci3: command tx timeout [ 221.727707] Bluetooth: hci5: command tx timeout [ 221.791574] Bluetooth: hci6: command tx timeout [ 221.984537] Bluetooth: hci7: command tx timeout [ 223.390526] Bluetooth: hci0: command tx timeout [ 223.454812] Bluetooth: hci2: command tx timeout [ 223.455662] Bluetooth: hci1: command tx timeout [ 223.710583] Bluetooth: hci3: command tx timeout [ 223.711736] Bluetooth: hci4: command tx timeout [ 223.774543] Bluetooth: hci5: command tx timeout [ 223.839621] Bluetooth: hci6: command tx timeout [ 224.032186] Bluetooth: hci7: command tx timeout [ 277.620276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.622098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.623147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.625040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.625886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.627167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.634639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.639898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.646826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.650702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.655579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.656894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.868284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.870940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.872034] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.881583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.883407] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.884847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.891779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.892897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.894767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.897132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.902900] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.909565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.917075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.921899] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.923090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.925135] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.937810] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.940583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.959416] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.965163] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.974784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.974868] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.978142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.986105] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.000152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.009716] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.017276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.021035] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.022849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.027818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.035780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.038251] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.046549] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.069807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.072122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.075739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.710800] Bluetooth: hci0: command tx timeout [ 279.711793] Bluetooth: hci1: command tx timeout [ 279.902654] Bluetooth: hci2: command tx timeout [ 279.967779] Bluetooth: hci4: command tx timeout [ 280.094683] Bluetooth: hci6: command tx timeout [ 280.222718] Bluetooth: hci7: command tx timeout [ 280.223774] Bluetooth: hci3: command tx timeout [ 280.224358] Bluetooth: hci5: command tx timeout [ 281.758699] Bluetooth: hci1: command tx timeout [ 281.758728] Bluetooth: hci0: command tx timeout [ 281.950616] Bluetooth: hci2: command tx timeout [ 282.014532] Bluetooth: hci4: command tx timeout [ 282.143609] Bluetooth: hci6: command tx timeout [ 282.270677] Bluetooth: hci3: command tx timeout [ 282.271222] Bluetooth: hci7: command tx timeout [ 282.271541] Bluetooth: hci5: command tx timeout [ 283.806682] Bluetooth: hci0: command tx timeout [ 283.807883] Bluetooth: hci1: command tx timeout [ 283.998554] Bluetooth: hci2: command tx timeout [ 284.063087] Bluetooth: hci4: command tx timeout [ 284.190638] Bluetooth: hci6: command tx timeout [ 284.318791] Bluetooth: hci7: command tx timeout [ 284.320183] Bluetooth: hci3: command tx timeout [ 284.320720] Bluetooth: hci5: command tx timeout [ 285.854610] Bluetooth: hci1: command tx timeout [ 285.854632] Bluetooth: hci0: command tx timeout [ 286.046630] Bluetooth: hci2: command tx timeout [ 286.110556] Bluetooth: hci4: command tx timeout [ 286.240502] Bluetooth: hci6: command tx timeout [ 286.366689] Bluetooth: hci7: command tx timeout [ 286.367235] Bluetooth: hci3: command tx timeout [ 286.367829] Bluetooth: hci5: command tx timeout [ 339.827624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.830536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.836774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.841637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.844377] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.846539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.946239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.948799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.952024] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.961503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.969585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.972245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.014970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.019225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.024111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.026671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.030763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.032606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.042385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.044399] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.044585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.046561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.049816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.051769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.078739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.080365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.081729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.085709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.088827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.090104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.160708] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.161797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.167622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.198806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.202892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.203827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.227009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.227026] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.231216] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.232304] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.249053] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.258533] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.268945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.280085] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.281659] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.285905] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.291980] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.295758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 341.854587] Bluetooth: hci0: command tx timeout [ 342.049737] Bluetooth: hci1: command tx timeout [ 342.111695] Bluetooth: hci4: command tx timeout [ 342.112396] Bluetooth: hci3: command tx timeout [ 342.113172] Bluetooth: hci2: command tx timeout [ 342.302566] Bluetooth: hci5: command tx timeout [ 342.303498] Bluetooth: hci6: command tx timeout [ 342.366588] Bluetooth: hci7: command tx timeout [ 343.902633] Bluetooth: hci0: command tx timeout [ 344.094512] Bluetooth: hci1: command tx timeout [ 344.160502] Bluetooth: hci2: command tx timeout [ 344.161046] Bluetooth: hci3: command tx timeout [ 344.162402] Bluetooth: hci4: command tx timeout [ 344.351041] Bluetooth: hci5: command tx timeout [ 344.351763] Bluetooth: hci6: command tx timeout [ 344.414510] Bluetooth: hci7: command tx timeout [ 345.950505] Bluetooth: hci0: command tx timeout [ 346.143466] Bluetooth: hci1: command tx timeout [ 346.207577] Bluetooth: hci3: command tx timeout [ 346.208067] Bluetooth: hci4: command tx timeout [ 346.208725] Bluetooth: hci2: command tx timeout [ 346.399547] Bluetooth: hci5: command tx timeout [ 346.400061] Bluetooth: hci6: command tx timeout [ 346.463490] Bluetooth: hci7: command tx timeout [ 347.998614] Bluetooth: hci0: command tx timeout [ 348.191826] Bluetooth: hci1: command tx timeout [ 348.255539] Bluetooth: hci4: command tx timeout [ 348.256045] Bluetooth: hci3: command tx timeout [ 348.256594] Bluetooth: hci2: command tx timeout [ 348.446581] Bluetooth: hci6: command tx timeout [ 348.447110] Bluetooth: hci5: command tx timeout [ 348.511225] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:35:57 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=ffffffff85cfbde0 RCX=ffffffff81306973 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85cfbde0 RBP=ffffffff85cfbde0 RSP=ffff888023e97858 R8 =0000000000000001 R9 =ffff8880151d25b8 R10=ffffffff863f274f R11=00000000000c2f81 R12=ffff88800a0c7600 R13=0000000000000060 R14=0000000000000001 R15=0000000000000282 RIP=ffffffff818b3f48 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f87d382a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ef931154c8 CR3=0000000027760000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffea0001b3bf80 RCX=ffffffff817e9606 RDX=fffff940003677f7 RSI=0000000000000004 RDI=ffffea0001b3bfb0 RBP=0000000000000001 RSP=ffff88802d01f868 R8 =0000000000000001 R9 =fffff940003677f6 R10=ffffea0001b3bfb3 R11=ffff88802542a028 R12=ffffea0001b3bf80 R13=0000000000000000 R14=ffff888009b519a0 R15=ffff88802d01fce0 RIP=ffffffff817e960d RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f718801b6f4 CR3=0000000022dfc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f718802a47000007f7188029f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000