Warning: Permanently added '[localhost]:23667' (ECDSA) to the list of known hosts. 2025/01/25 00:29:36 fuzzer started 2025/01/25 00:29:36 dialing manager at localhost:40883 syzkaller login: [ 70.390721] cgroup: Unknown subsys name 'net' [ 70.536148] cgroup: Unknown subsys name 'cpuset' [ 70.580870] cgroup: Unknown subsys name 'rlimit' [ 75.707207] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/25 00:29:52 syscalls: 210 2025/01/25 00:29:52 code coverage: enabled 2025/01/25 00:29:52 comparison tracing: enabled 2025/01/25 00:29:52 extra coverage: enabled 2025/01/25 00:29:52 setuid sandbox: enabled 2025/01/25 00:29:52 namespace sandbox: enabled 2025/01/25 00:29:52 Android sandbox: enabled 2025/01/25 00:29:52 fault injection: enabled 2025/01/25 00:29:52 leak checking: enabled 2025/01/25 00:29:52 net packet injection: enabled 2025/01/25 00:29:52 net device setup: enabled 2025/01/25 00:29:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/25 00:29:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/25 00:29:52 USB emulation: enabled 2025/01/25 00:29:52 hci packet injection: enabled 2025/01/25 00:29:52 wifi device emulation: enabled 2025/01/25 00:29:52 802.15.4 emulation: enabled 2025/01/25 00:29:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/25 00:29:54 starting 8 fuzzer processes 00:29:54 executing program 0: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x3}) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x141481) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='\x00', 0x0, 0xffffffffffffffff) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x8, 0x0, 0x5, 0x8, 0xb, "bbf7ef5f547a70c3e8ec690e01bd851f67e41d"}) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x4) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000540)={0x3, 0x1, 0x1b, 0x1b, 0xc4, &(0x7f0000000140)}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000580)={0x2, {0x2, 0x8, 0x8001, 0x40, 0x5a43, 0x4}}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x4) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000640)) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000680)='/dev/vcs#\x00', 0x0, r0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000006c0)=0x4) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000700)={0x57, 0x3f, 0x0, {0x3}, {0x5, 0x72b8}, @rumble={0x1, 0x6a92}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0) bind$802154_dgram(r1, &(0x7f0000000780)={0x24, @none={0x0, 0xffff}}, 0x14) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000007c0)) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000800)={0x2, 0x1, 0x3, 0x4ea0}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000840)) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000c80)={0x70, 0xb, &(0x7f0000000880)}) 00:29:54 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000011) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080040}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000051) socketpair(0x2b, 0x2, 0xa6, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r1) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r8, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r6, 0x400, 0x70bd2d, 0xae, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x3c}}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x40001) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x6) 00:29:54 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000011) socketpair(0x1f, 0x5, 0xc2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x35d4f8b9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1e088}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000011) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x319}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048090}, 0x24048850) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9631b3a1eee3"}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x12}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6455}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44110}, 0x10) r7 = fsmount(0xffffffffffffffff, 0x0, 0x74) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) r8 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x1, 0x2000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, r9, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}}, 0x2000e880) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000bc0)) 00:29:54 executing program 3: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/106) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0xd, 0x1000}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/166) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x514}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000801}, 0x40) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x40080, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000780)={0x5, 0x10000, 0x7}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000007c0)=0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000800)=0x6) r5 = syz_open_dev$vcsn(&(0x7f0000000840), 0x10000, 0x303100) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000880)) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000900)=0x9) 00:29:54 executing program 4: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/4096) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000001000)=""/127) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000001080)=""/27) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f00000010c0)={0x200, 0x1, 0xffffff81, 0x8000, 0xfffff69a, 0x6}) syz_open_dev$evdev(&(0x7f0000001100), 0x9, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001180)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000002180), 0x560, 0x10100) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000021c0)=0x6) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000002200)={0x50c, 0xf7, 0x1, 0x21067fbe, 0x1f, 0x8, 0x8}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002240), 0x0, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000002280)) fsmount(r2, 0x1, 0x7b) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008820}, 0x810) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000002400), 0x280040, 0x0) r4 = fsmount(r3, 0x0, 0x78) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000002440)=""/225) r5 = fsmount(r2, 0x0, 0x9) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000002540)={0xfffffffd, 0x3, 0x80000001, 0xfffffff8, 0xffff, 0x1f}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f00000025c0)) [ 88.515353] audit: type=1400 audit(1737764994.940:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:29:54 executing program 5: prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = fsmount(0xffffffffffffffff, 0x0, 0x84) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/86) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x100) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000240)={0x3, 0x23}) r3 = inotify_init1(0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) r4 = inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x0) inotify_rm_watch(r3, r4) prctl$PR_GET_CHILD_SUBREAPER(0x25) r5 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x8c2) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000340)=""/83) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004041}, 0x80) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 88.517572] audit: type=1400 audit(1737764994.940:8): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:29:54 executing program 6: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20010}, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x42084) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000780)=""/161) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000940), 0x80000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000b40)={0x0, 0x34, &(0x7f0000000b00)="ba097ae627e4427f60c04a0a8327a43a0e3de485bed1c54378f102e6eae090496f210f8805779ea604ff353ad1a28c99b2047814"}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000b80)=""/201) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000c80)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8d987045d54d"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe81}]}, 0x40}}, 0x80000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000dc0)=0x1f) 00:29:54 executing program 7: ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000500)={0x146, 0x1, &(0x7f0000000100)="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"}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000540)=""/174) ioctl$KDENABIO(r0, 0x4b36) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000600)={0x5, "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"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000840)={0x6, 0x9, 0x5, 0x1ff, 0x8, "c74e5d3ae5cc41ef6c407331648a1c498745d7", 0x6, 0x7}) ioctl$TIOCSBRK(r0, 0x5427) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000880)={0x6, 0x8, 0x5}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000cc0)={0x51, 0x8, &(0x7f00000008c0)}) r2 = syz_open_dev$vcsn(&(0x7f0000000d00), 0x9, 0x20000) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000d40)=""/157) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000e00)={0x200, 0x401, 0xfff, 0x1, 0x0, "e7be1b6373b23c17e9e220bd217b51088ee367"}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000001240)={0x3, 0x0, 0x3, 0x10, 0x19d, &(0x7f0000000e40)}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000001280)=""/4096) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000002680)={0x3, 0x1, 0x1b, 0x17, 0x12d, &(0x7f0000002280)}) [ 89.891289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.897583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.900264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.911816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.917470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.926302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.950715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.953301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.958952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.963489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.965889] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.967767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.997304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.999829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.005318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.009564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.013835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.017737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.019630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.034847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.037247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.039511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.057279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.059186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.063479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.065844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.067959] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.070151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.072225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.082793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.108877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.135122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.135477] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.147757] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.155050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.157543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.163545] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.168780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.179737] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.187134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.190440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.191985] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.200181] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.201653] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.203317] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.209963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.211591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.214955] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.041989] Bluetooth: hci0: command tx timeout [ 92.042728] Bluetooth: hci1: command tx timeout [ 92.106506] Bluetooth: hci4: command tx timeout [ 92.107086] Bluetooth: hci3: command tx timeout [ 92.169493] Bluetooth: hci2: command tx timeout [ 92.298472] Bluetooth: hci6: command tx timeout [ 92.299084] Bluetooth: hci7: command tx timeout [ 92.299684] Bluetooth: hci5: command tx timeout [ 94.090592] Bluetooth: hci1: command tx timeout [ 94.091096] Bluetooth: hci0: command tx timeout [ 94.153551] Bluetooth: hci4: command tx timeout [ 94.154104] Bluetooth: hci3: command tx timeout [ 94.218537] Bluetooth: hci2: command tx timeout [ 94.348603] Bluetooth: hci5: command tx timeout [ 94.349071] Bluetooth: hci7: command tx timeout [ 94.349859] Bluetooth: hci6: command tx timeout [ 96.137749] Bluetooth: hci1: command tx timeout [ 96.138948] Bluetooth: hci0: command tx timeout [ 96.201787] Bluetooth: hci3: command tx timeout [ 96.203582] Bluetooth: hci4: command tx timeout [ 96.265654] Bluetooth: hci2: command tx timeout [ 96.394460] Bluetooth: hci6: command tx timeout [ 96.395322] Bluetooth: hci7: command tx timeout [ 96.396248] Bluetooth: hci5: command tx timeout [ 98.187643] Bluetooth: hci1: command tx timeout [ 98.188154] Bluetooth: hci0: command tx timeout [ 98.250702] Bluetooth: hci3: command tx timeout [ 98.251173] Bluetooth: hci4: command tx timeout [ 98.313442] Bluetooth: hci2: command tx timeout [ 98.442652] Bluetooth: hci5: command tx timeout [ 98.443142] Bluetooth: hci7: command tx timeout [ 98.443867] Bluetooth: hci6: command tx timeout [ 152.279916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.282710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.285585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.286902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.289291] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.295042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.297179] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.301474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.305831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.307573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.321918] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.325146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.353816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.361553] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.365909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.366841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.370142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.371872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.379144] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.384647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.387444] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.391215] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.392944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.398750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.424764] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.431214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.431707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.435284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.435740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.436433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.438951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.439044] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.441960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.449206] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.452213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.457175] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.458984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.469884] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.474966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.476219] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.480630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.486067] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.487234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.491726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.500046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.514802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.517512] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 152.519009] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.377578] Bluetooth: hci1: command tx timeout [ 154.377646] Bluetooth: hci0: command tx timeout [ 154.443440] Bluetooth: hci2: command tx timeout [ 154.506539] Bluetooth: hci3: command tx timeout [ 154.569555] Bluetooth: hci5: command tx timeout [ 154.569609] Bluetooth: hci6: command tx timeout [ 154.571201] Bluetooth: hci4: command tx timeout [ 154.633741] Bluetooth: hci7: command tx timeout [ 156.425467] Bluetooth: hci0: command tx timeout [ 156.425509] Bluetooth: hci1: command tx timeout [ 156.489521] Bluetooth: hci2: command tx timeout [ 156.553550] Bluetooth: hci3: command tx timeout [ 156.617556] Bluetooth: hci6: command tx timeout [ 156.618283] Bluetooth: hci5: command tx timeout [ 156.619196] Bluetooth: hci4: command tx timeout [ 156.681519] Bluetooth: hci7: command tx timeout [ 158.473434] Bluetooth: hci1: command tx timeout [ 158.473513] Bluetooth: hci0: command tx timeout [ 158.537678] Bluetooth: hci2: command tx timeout [ 158.601430] Bluetooth: hci3: command tx timeout [ 158.665503] Bluetooth: hci4: command tx timeout [ 158.665551] Bluetooth: hci5: command tx timeout [ 158.666223] Bluetooth: hci6: command tx timeout [ 158.729449] Bluetooth: hci7: command tx timeout [ 160.521481] Bluetooth: hci1: command tx timeout [ 160.523427] Bluetooth: hci0: command tx timeout [ 160.586670] Bluetooth: hci2: command tx timeout [ 160.650500] Bluetooth: hci3: command tx timeout [ 160.713540] Bluetooth: hci5: command tx timeout [ 160.713568] Bluetooth: hci4: command tx timeout [ 160.714588] Bluetooth: hci6: command tx timeout [ 160.778544] Bluetooth: hci7: command tx timeout [ 214.638659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.642186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.645818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.655445] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.658832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.662657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.807617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.815948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.825185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.832300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.845536] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.850244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.956195] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.960089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.965089] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.966462] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.969278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.972113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.976884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.999557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.003843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.005923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.037238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.041696] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.044808] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.046626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.067271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.075156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.081966] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.083922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.090871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.092637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.100746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.115072] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.119926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.122831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.131644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.137093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.150715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.153713] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.165929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.168788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.173299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.199197] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.226886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.259637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.268789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.273676] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.713437] Bluetooth: hci0: command tx timeout [ 216.905496] Bluetooth: hci1: command tx timeout [ 217.225515] Bluetooth: hci2: command tx timeout [ 217.226629] Bluetooth: hci4: command tx timeout [ 217.227270] Bluetooth: hci3: command tx timeout [ 217.289471] Bluetooth: hci6: command tx timeout [ 217.290404] Bluetooth: hci5: command tx timeout [ 217.353624] Bluetooth: hci7: command tx timeout [ 218.761490] Bluetooth: hci0: command tx timeout [ 218.953471] Bluetooth: hci1: command tx timeout [ 219.273572] Bluetooth: hci3: command tx timeout [ 219.274062] Bluetooth: hci4: command tx timeout [ 219.274525] Bluetooth: hci2: command tx timeout [ 219.339372] Bluetooth: hci6: command tx timeout [ 219.339389] Bluetooth: hci5: command tx timeout [ 219.403416] Bluetooth: hci7: command tx timeout [ 220.809474] Bluetooth: hci0: command tx timeout [ 221.001860] Bluetooth: hci1: command tx timeout [ 221.321593] Bluetooth: hci3: command tx timeout [ 221.321667] Bluetooth: hci2: command tx timeout [ 221.322077] Bluetooth: hci4: command tx timeout [ 221.385499] Bluetooth: hci5: command tx timeout [ 221.386523] Bluetooth: hci6: command tx timeout [ 221.449422] Bluetooth: hci7: command tx timeout [ 222.857507] Bluetooth: hci0: command tx timeout [ 223.049477] Bluetooth: hci1: command tx timeout [ 223.369750] Bluetooth: hci4: command tx timeout [ 223.370913] Bluetooth: hci2: command tx timeout [ 223.371913] Bluetooth: hci3: command tx timeout [ 223.433493] Bluetooth: hci6: command tx timeout [ 223.434309] Bluetooth: hci5: command tx timeout [ 223.497451] Bluetooth: hci7: command tx timeout [ 276.969310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.973638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.976025] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.980219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.982549] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.984612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.021091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.026978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.038098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.050708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.065194] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.070871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.099459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.102537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.104180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.111502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.116986] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.132118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.340263] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.357797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.385125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.388513] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.393939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.394033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.398144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.408208] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.413879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.418567] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.428590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.432486] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.434844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.436068] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.451069] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.452667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.469609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.470733] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.471693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.487711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.501963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.503812] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.504889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.516443] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.527667] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.528525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.529153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.543037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.562887] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.582852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.049787] Bluetooth: hci0: command tx timeout [ 279.113519] Bluetooth: hci1: command tx timeout [ 279.241459] Bluetooth: hci2: command tx timeout [ 279.497466] Bluetooth: hci5: command tx timeout [ 279.562404] Bluetooth: hci4: command tx timeout [ 279.691398] Bluetooth: hci7: command tx timeout [ 279.817512] Bluetooth: hci6: command tx timeout [ 280.202427] Bluetooth: hci3: command tx timeout [ 281.098493] Bluetooth: hci0: command tx timeout [ 281.161409] Bluetooth: hci1: command tx timeout [ 281.289386] Bluetooth: hci2: command tx timeout [ 281.545472] Bluetooth: hci5: command tx timeout [ 281.610421] Bluetooth: hci4: command tx timeout [ 281.737467] Bluetooth: hci7: command tx timeout [ 281.867394] Bluetooth: hci6: command tx timeout [ 282.249465] Bluetooth: hci3: command tx timeout [ 283.146479] Bluetooth: hci0: command tx timeout [ 283.210469] Bluetooth: hci1: command tx timeout [ 283.339026] Bluetooth: hci2: command tx timeout [ 283.594521] Bluetooth: hci5: command tx timeout [ 283.658824] Bluetooth: hci4: command tx timeout [ 283.785405] Bluetooth: hci7: command tx timeout [ 283.914379] Bluetooth: hci6: command tx timeout [ 284.297422] Bluetooth: hci3: command tx timeout [ 285.194635] Bluetooth: hci0: command tx timeout [ 285.258844] Bluetooth: hci1: command tx timeout [ 285.386391] Bluetooth: hci2: command tx timeout [ 285.641492] Bluetooth: hci5: command tx timeout [ 285.705729] Bluetooth: hci4: command tx timeout [ 285.835414] Bluetooth: hci7: command tx timeout [ 285.963427] Bluetooth: hci6: command tx timeout [ 286.345442] Bluetooth: hci3: command tx timeout [ 339.548673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.552638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.557656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.563038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.565747] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.567825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.802574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.807032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.811082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.818752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.821034] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.824448] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.955980] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.961785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.965549] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.967393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.970587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.976584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.980591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.992640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.996223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.010627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.014251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.019519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.022051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.022770] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.029420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.033759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.041826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.053530] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.074223] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.089083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.093106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.100964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.104827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.108477] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.109211] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.112976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.116368] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.119831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.129242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.133038] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.139137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.169085] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.181284] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.186354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.202950] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.206897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.641814] Bluetooth: hci0: command tx timeout [ 341.897494] Bluetooth: hci1: command tx timeout [ 342.089463] Bluetooth: hci2: command tx timeout [ 342.090410] Bluetooth: hci4: command tx timeout [ 342.153418] Bluetooth: hci6: command tx timeout [ 342.217434] Bluetooth: hci3: command tx timeout [ 342.281438] Bluetooth: hci5: command tx timeout [ 342.282001] Bluetooth: hci7: command tx timeout [ 343.690353] Bluetooth: hci0: command tx timeout [ 343.945408] Bluetooth: hci1: command tx timeout [ 344.137491] Bluetooth: hci2: command tx timeout [ 344.137979] Bluetooth: hci4: command tx timeout [ 344.203329] Bluetooth: hci6: command tx timeout [ 344.265374] Bluetooth: hci3: command tx timeout [ 344.329494] Bluetooth: hci5: command tx timeout [ 344.330455] Bluetooth: hci7: command tx timeout [ 345.737781] Bluetooth: hci0: command tx timeout [ 345.993485] Bluetooth: hci1: command tx timeout [ 346.187365] Bluetooth: hci4: command tx timeout [ 346.187384] Bluetooth: hci2: command tx timeout [ 346.249987] Bluetooth: hci6: command tx timeout [ 346.315360] Bluetooth: hci3: command tx timeout [ 346.377530] Bluetooth: hci7: command tx timeout [ 346.378415] Bluetooth: hci5: command tx timeout [ 347.785449] Bluetooth: hci0: command tx timeout [ 348.041482] Bluetooth: hci1: command tx timeout [ 348.233503] Bluetooth: hci4: command tx timeout [ 348.233587] Bluetooth: hci2: command tx timeout [ 348.297464] Bluetooth: hci6: command tx timeout [ 348.363431] Bluetooth: hci3: command tx timeout [ 348.425483] Bluetooth: hci5: command tx timeout [ 348.425542] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:35:04 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000000004 RCX=ffffffff818a38df RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea0000558cf4 RBP=ffffea0000558cf4 RSP=ffff8880246bfb10 R8 =0000000000000001 R9 =fffff940000ab19e R10=ffffea0000558cf7 R11=0000000000000000 R12=0000000000000019 R13=dffffc0000000000 R14=0000000000000000 R15=ffff8880246bfd98 RIP=ffffffff818a390c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7cbccc7540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c63cf8a2b0 CR3=0000000027950000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=000000000000002c RCX=ffffffff814f3e3e RDX=fffffbfff0fe15e5 RSI=0000000000000008 RDI=ffffffff87f0af20 RBP=ffff888022cdd340 RSP=ffff88802c1f77f0 R8 =0000000000000000 R9 =fffffbfff0fe15e4 R10=ffffffff87f0af27 R11=0000000000000001 R12=0000000000000002 R13=0000000000000004 R14=ffff888022cddde0 R15=0000000000000003 RIP=ffffffff84ab2f40 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4d189aa540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d18e67008 CR3=000000002f170000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000