Warning: Permanently added '[localhost]:15761' (ECDSA) to the list of known hosts. 2024/10/21 17:11:46 fuzzer started 2024/10/21 17:11:47 dialing manager at localhost:45639 syzkaller login: [ 73.727978] cgroup: Unknown subsys name 'net' [ 73.835479] cgroup: Unknown subsys name 'cpuset' [ 73.848291] cgroup: Unknown subsys name 'rlimit' 2024/10/21 17:12:04 syscalls: 205 2024/10/21 17:12:04 code coverage: enabled 2024/10/21 17:12:04 comparison tracing: enabled 2024/10/21 17:12:04 extra coverage: enabled 2024/10/21 17:12:04 setuid sandbox: enabled 2024/10/21 17:12:04 namespace sandbox: enabled 2024/10/21 17:12:04 Android sandbox: enabled 2024/10/21 17:12:04 fault injection: enabled 2024/10/21 17:12:04 leak checking: enabled 2024/10/21 17:12:04 net packet injection: enabled 2024/10/21 17:12:04 net device setup: enabled 2024/10/21 17:12:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 17:12:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 17:12:04 USB emulation: enabled 2024/10/21 17:12:04 hci packet injection: enabled 2024/10/21 17:12:04 wifi device emulation: enabled 2024/10/21 17:12:04 802.15.4 emulation: enabled 2024/10/21 17:12:04 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 17:12:06 starting 8 fuzzer processes 17:12:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000001c0)=""/235, &(0x7f00000002c0)=0xeb) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000850) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000480)=""/181, &(0x7f0000000540)=0xb5) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/235, &(0x7f0000000680)=0xeb) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4bc8d94797ba3b50}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xf0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0xcc084) connect$bt_sco(r4, &(0x7f0000000900)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r5 = pidfd_open(0xffffffffffffffff, 0x0) pidfd_send_signal(r5, 0x36, &(0x7f0000000940)={0x15, 0x4, 0x14}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', r6, 0x2f, 0xcf, 0xf7, 0x0, 0x68, @dev={0xfe, 0x80, '\x00', 0x3f}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x80, 0x9, 0x1}}) 17:12:06 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x804, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x40040) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008000}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10a}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8e}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x171}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) r3 = pidfd_getfd(r0, r2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) r6 = socket(0x26, 0x80000, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r8 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r5}, {0x8, 0x1, r0}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}, {0x8, 0x1, r3}, {0x8, 0x1, r0}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x90}, 0x1) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x5, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x81) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xaf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x8040) 17:12:06 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = gettid() r1 = pidfd_open(r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x42a00, 0x0) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='rdma.max\x00', 0x2, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80101, 0x0) r4 = pidfd_getfd(r3, r2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000001}, 0x10) prlimit64(r0, 0x4, &(0x7f00000001c0)={0xaf5, 0xc94e}, &(0x7f0000000200)) r5 = socket(0x3a, 0x2, 0x51dc) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x14, 0xb, 0x303, 0x70bd2d, 0x25dfdbfb, {0xc, 0x0, 0x7}, [@nested={0xaf, 0x34, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @u32=0x5}, @typed={0x4, 0x7b}, @generic="c0dedab31be519dbe22d74453b168b785d", @typed={0xc, 0x10, 0x0, 0x0, @u64=0xcd0}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x1d, 0x0, 0x0, @uid=0xee01}, @generic="006c762a3ceff64df39ee56b11bd70a5cd4debcef795c95b8ffaf959d69f6de14cb3986f4c46b8bbb5bf21b35bd831b76e721d0f82610b4203f21994d6b71920a29c463849541d8dfdf0", @typed={0x8, 0x2a, 0x0, 0x0, @pid=r0}, @generic="13d241f6b1ba103e93b7e101e8c3c9a494b1146ee74aedc8", @typed={0x8, 0x86, 0x0, 0x0, @u32=0x800}]}]}, 0xc4}}, 0x8000) r6 = pidfd_getfd(r1, r5, 0x0) mkdirat$cgroup(r6, &(0x7f0000000400)='syz0\x00', 0x1ff) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000440)={0x6, 0x3, 0x0, [{0x8000000000000000, 0x5a12, 0x0, 0x9, 0x56, 0x1f, 0x5}, {0x3, 0x98bc, 0x80000001, 0x7, 0x1, 0x20, 0x3}, {0x1, 0x2, 0x3f, 0x7, 0x81, 0x7f, 0x1}]}) r7 = socket(0x1a, 0x2, 0xfffffffe) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0xa10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80010}, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00'}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000700)='devices.allow\x00', 0x2, 0x0) [ 91.852500] audit: type=1400 audit(1729530726.225:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:12:06 executing program 3: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/79) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x200040c0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000001c0), 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf39ad1a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40400}, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_DUMPABLE(0x4, 0x3) r4 = epoll_create(0x49dc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x181080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000380)={0x10}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0xa1, 0x0, 0x0, 0x4, @empty, @empty, 0x700, 0x7, 0x1, 0x5}}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000480), &(0x7f00000004c0)=0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r4, 0x3ecd, 0x0, 0x1}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, 0x1}, 0x6) perf_event_open(&(0x7f00000005c0)={0x0, 0x80, 0x7, 0x2, 0x1, 0x0, 0x0, 0x6, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x0, 0x3, 0x1ff, 0x5, 0x80, 0x1, 0x3ff, 0x0, 0xffffffff, 0x0, 0x7fffffff}, 0x0, 0xd, r2, 0x2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r3, 0x510, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f78}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000780)=""/163, &(0x7f0000000840)=0xa3) 17:12:06 executing program 4: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0xffffffffffffffff, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x100}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x464be2e1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r3 = pidfd_getfd(r0, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x8081) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3, 0xf579, 0x40, @mcast1, @loopback, 0x20, 0x7, 0x101, 0x9}}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x440c4}, 0x400c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004}, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'ip6gre0\x00', r6, 0x4, 0x1, 0x1f, 0x6, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x20, 0x80, 0x9, 0xffff}}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9d}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x400) r8 = pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r8, 0x0) 17:12:06 executing program 5: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8b}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9b}]}, 0x34}}, 0x4040081) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x1, 0x0, 0x20, @empty, @private2, 0x7, 0x80, 0xfffffeff, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)=@getpolicy={0x2b4, 0x15, 0x1, 0x70bd28, 0x25dfdbfd, {{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e20, 0x2, 0x4e20, 0x4, 0xa, 0x0, 0x20, 0x2c, r1, 0xee01}, 0x6e6bba, 0x2}, [@extra_flags={0x8, 0x18, 0x81}, @etimer_thresh={0x8, 0xc, 0x8000}, @address_filter={0x28, 0x1a, {@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x0, 0x1f}}, @replay_thresh={0x8, 0xb, 0x9}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @sec_ctx={0x5d, 0x8, {0x59, 0x8, 0x0, 0x1, 0x51, "a6d9af096f3a6c73cca1f51641d21d72a940e070a26198938e09bbf6ee000286850a6aa35d19bfaaba61ef3217cdeb3ff6575930aa4966fcc869fc0c1bf6a13b6ca273b4cb5a94839a0543a07bf699bbab"}}, @sec_ctx={0xcb, 0x8, {0xc7, 0x8, 0x1, 0x2, 0xbf, "b46d75db78d017957ebd1150c79c62a1b84da989aec0aa2dbd322eb2147066f557646e5088ed04292f1beb3f819765859090278982dae18d0dc6e5e6e441d2dd698399f1c0dd4c4aec7f347348fb5f56eb87c993ddd9791964f82d388d05c780b945930e39319725f8d27f1a7b0e3e409f049c9aaa8ca1a4ae975c52ff2260ebae0450e562e907d9bc4c0978014b512ffadaeaa507007c180456cf44d59b0d5581766fe3b213f138c9d4a994fb9bc1592ab4ceeb61a58bfb506c9276062ca5"}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd26, 0x70bd26, 0x70bd28, 0x4c, [0xffffffff, 0x2, 0x3ff, 0x3a8, 0x5, 0x4, 0x80000001, 0x8000]}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffd}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x1, 0x4e20, 0x2, 0x2, 0x120, 0x20, 0x88, r2, 0xee00}, {0x0, 0x5, 0x6, 0x5, 0x0, 0x5, 0xff, 0x7}, {0x6, 0x5, 0x2, 0xac}, 0x9, 0x6e6bbd, 0x2, 0x1}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000800}, 0x2815) r3 = pidfd_getfd(r0, r0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2a4, 0x3, 0x1, 0x0, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa7}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}]}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x2, 0x400, 0x10001, 0x81, 0x4, 0x100, 0x5]}, @CTA_TUPLE_REPLY={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_NAT_SRC={0xa0, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x23}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x57}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x841}, 0x4008000) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000940), 0x100, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x53}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xbee}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4044004) msgsnd(0x0, &(0x7f0000000ac0)={0x0, "a1a1fc6ff1926e84e8962d31872aa270da680fcb38f86c8f89dee4ce276b13e2b4c76b79b51e022cfca7fd23d7046b0950bb20042ea866dc6d5de13c6cfa84cf21ec60"}, 0x4b, 0x800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), r0) r5 = msgget(0x0, 0x0) msgsnd(r5, &(0x7f0000000b80)={0x0, "9cf6c816b920c99b655597ce705a2659b70503590f4669355d9ff3a01b6be37920d3d0ecff461282191610baafedb1509029af6aced6a44df04828b56ffc00ceb77f9db1726057f3c4cf9d38c5908e0ca4fe075fcf15879b50a1e2947c281a53e35afd8f1fa4dcd635d4180f17911641debdaffba4dd85b8342aba92d7cbab20aafaec8fedd2b92a905b97b0c676ab99f74b7bde6bb414f535d4b538b80186e3cd27e7f341e5b138ff7ff12ea9d64eb9f0c2228c357465fc361183f1ac67967bd94771333c5dc21d62bf"}, 0xd2, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000cc0), 0x300, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r6) msgget(0x3, 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x435}]}, 0x34}}, 0x84) r7 = pidfd_getfd(r4, 0xffffffffffffffff, 0x0) accept$packet(r7, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'sit0\x00', 0x0, 0x29, 0x71, 0xf0, 0xffff8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x10, 0x10, 0x2, 0xf526}}) 17:12:06 executing program 6: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x11, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x800) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x260840, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x0, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040015}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, r0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x480}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) r6 = pidfd_getfd(r3, r5, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x40) r7 = socket(0x1, 0x800, 0x7) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r3) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x54) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c800) 17:12:06 executing program 7: sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0xc00d) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x82001, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x83}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000080}, 0x800) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c810}, 0x11) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc01) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6f51}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), r3) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x4882, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r2}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4844}, 0x80) epoll_pwait(r8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x24, &(0x7f0000000a00)={[0xd4]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x390486a6}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2044880}, 0x800) [ 93.334651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.340379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.342378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.345539] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.348900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.356336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.356808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.359548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.360558] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.363399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.368700] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.370149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.392206] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.404213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.408664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.411484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.418238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.422180] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.422217] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.423982] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.427709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.430161] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.431945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.434520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.444782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.449535] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.451651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.453384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.455529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.462430] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.466180] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.468619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.473863] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.475475] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.476923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.478722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.479761] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.480238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.481135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.482888] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.484273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.485452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.487413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.489678] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.506272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.507328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.511539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.513513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.423633] Bluetooth: hci1: command tx timeout [ 95.424689] Bluetooth: hci0: command tx timeout [ 95.488621] Bluetooth: hci2: command tx timeout [ 95.551110] Bluetooth: hci5: command tx timeout [ 95.552129] Bluetooth: hci3: command tx timeout [ 95.616235] Bluetooth: hci7: command tx timeout [ 95.617086] Bluetooth: hci4: command tx timeout [ 95.618351] Bluetooth: hci6: command tx timeout [ 97.471252] Bluetooth: hci1: command tx timeout [ 97.471277] Bluetooth: hci0: command tx timeout [ 97.535093] Bluetooth: hci2: command tx timeout [ 97.599540] Bluetooth: hci5: command tx timeout [ 97.601055] Bluetooth: hci3: command tx timeout [ 97.663761] Bluetooth: hci4: command tx timeout [ 97.663936] Bluetooth: hci7: command tx timeout [ 97.665191] Bluetooth: hci6: command tx timeout [ 99.519244] Bluetooth: hci1: command tx timeout [ 99.520802] Bluetooth: hci0: command tx timeout [ 99.583170] Bluetooth: hci2: command tx timeout [ 99.647338] Bluetooth: hci3: command tx timeout [ 99.648852] Bluetooth: hci5: command tx timeout [ 99.713088] Bluetooth: hci7: command tx timeout [ 99.714839] Bluetooth: hci4: command tx timeout [ 99.716227] Bluetooth: hci6: command tx timeout [ 101.606591] Bluetooth: hci1: command tx timeout [ 101.608194] Bluetooth: hci0: command tx timeout [ 101.684732] Bluetooth: hci2: command tx timeout [ 101.695336] Bluetooth: hci5: command tx timeout [ 101.696942] Bluetooth: hci3: command tx timeout [ 101.759278] Bluetooth: hci4: command tx timeout [ 101.761103] Bluetooth: hci7: command tx timeout [ 101.762586] Bluetooth: hci6: command tx timeout [ 155.661841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.666661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.668768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.682271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.711216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.716313] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.787309] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.790598] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.793247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.797393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.798377] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.802217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.804771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.808537] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.809633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.810946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.816402] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.821528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.858918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.874609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.880143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.881367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.885387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.890310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.892603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.895222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.897092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.933599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.943268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.945363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.955617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.960095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.967290] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.979645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.989250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.989686] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.994100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.999261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.999979] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.004742] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.006161] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.008239] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.015198] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.018216] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.019628] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.020667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.022145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.038277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.760200] Bluetooth: hci0: command tx timeout [ 157.887178] Bluetooth: hci2: command tx timeout [ 157.888403] Bluetooth: hci1: command tx timeout [ 157.951595] Bluetooth: hci3: command tx timeout [ 158.015129] Bluetooth: hci4: command tx timeout [ 158.079099] Bluetooth: hci7: command tx timeout [ 158.080042] Bluetooth: hci5: command tx timeout [ 158.080068] Bluetooth: hci6: command tx timeout [ 159.807222] Bluetooth: hci0: command tx timeout [ 159.935231] Bluetooth: hci2: command tx timeout [ 159.935391] Bluetooth: hci1: command tx timeout [ 159.999096] Bluetooth: hci3: command tx timeout [ 160.063130] Bluetooth: hci4: command tx timeout [ 160.127361] Bluetooth: hci6: command tx timeout [ 160.128083] Bluetooth: hci5: command tx timeout [ 160.128265] Bluetooth: hci7: command tx timeout [ 161.855112] Bluetooth: hci0: command tx timeout [ 161.984586] Bluetooth: hci2: command tx timeout [ 161.984666] Bluetooth: hci1: command tx timeout [ 162.048208] Bluetooth: hci3: command tx timeout [ 162.112305] Bluetooth: hci4: command tx timeout [ 162.175219] Bluetooth: hci7: command tx timeout [ 162.178038] Bluetooth: hci5: command tx timeout [ 162.178084] Bluetooth: hci6: command tx timeout [ 163.903080] Bluetooth: hci0: command tx timeout [ 164.032130] Bluetooth: hci2: command tx timeout [ 164.032155] Bluetooth: hci1: command tx timeout [ 164.095073] Bluetooth: hci3: command tx timeout [ 164.159095] Bluetooth: hci4: command tx timeout [ 164.225256] Bluetooth: hci6: command tx timeout [ 164.225334] Bluetooth: hci5: command tx timeout [ 164.225986] Bluetooth: hci7: command tx timeout [ 218.389446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.395384] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.399281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.409425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.412771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.414161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.441641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.445411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.446803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.449704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.453106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.456334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.507641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.509513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.510662] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.520699] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.524264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.525642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.598455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.603851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.605504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.609951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.613920] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.615634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.719595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.737797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.739614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.747208] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.751612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.754297] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.874307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.881254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.883790] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.885477] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.887248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.897761] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.901579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.902372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.922503] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.929438] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.932283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.936121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.955233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.955322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.967215] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.970108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.975443] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.976515] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.481066] Bluetooth: hci1: command tx timeout [ 220.482171] Bluetooth: hci0: command tx timeout [ 220.545076] Bluetooth: hci2: command tx timeout [ 220.671080] Bluetooth: hci3: command tx timeout [ 220.864278] Bluetooth: hci4: command tx timeout [ 220.991182] Bluetooth: hci5: command tx timeout [ 221.055168] Bluetooth: hci6: command tx timeout [ 221.056285] Bluetooth: hci7: command tx timeout [ 222.527131] Bluetooth: hci0: command tx timeout [ 222.527668] Bluetooth: hci1: command tx timeout [ 222.592204] Bluetooth: hci2: command tx timeout [ 222.719107] Bluetooth: hci3: command tx timeout [ 222.911068] Bluetooth: hci4: command tx timeout [ 223.039156] Bluetooth: hci5: command tx timeout [ 223.103097] Bluetooth: hci6: command tx timeout [ 223.103616] Bluetooth: hci7: command tx timeout [ 224.575175] Bluetooth: hci1: command tx timeout [ 224.575708] Bluetooth: hci0: command tx timeout [ 224.639078] Bluetooth: hci2: command tx timeout [ 224.767070] Bluetooth: hci3: command tx timeout [ 224.961047] Bluetooth: hci4: command tx timeout [ 225.087208] Bluetooth: hci5: command tx timeout [ 225.151106] Bluetooth: hci7: command tx timeout [ 225.151628] Bluetooth: hci6: command tx timeout [ 226.623178] Bluetooth: hci0: command tx timeout [ 226.623711] Bluetooth: hci1: command tx timeout [ 226.688099] Bluetooth: hci2: command tx timeout [ 226.815088] Bluetooth: hci3: command tx timeout [ 227.007095] Bluetooth: hci4: command tx timeout [ 227.135123] Bluetooth: hci5: command tx timeout [ 227.199125] Bluetooth: hci7: command tx timeout [ 227.200745] Bluetooth: hci6: command tx timeout [ 280.730873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.732502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.733697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.736504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.738347] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.739474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.785263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.790383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.792635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.796476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.799280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.808201] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.919097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.924077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.928383] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.931949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.934760] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.935913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.987710] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.004541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.005842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.008845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.010424] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.018256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.021905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.028532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.036410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.036711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.053693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.056933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.058671] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.060073] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.065135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.066335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.071405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.075223] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.082268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.083725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.088878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.089561] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.091644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.103873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.110314] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.121123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.124704] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.146107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.156416] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.182387] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.815929] Bluetooth: hci0: command tx timeout [ 282.879428] Bluetooth: hci1: command tx timeout [ 283.007099] Bluetooth: hci2: command tx timeout [ 283.135125] Bluetooth: hci4: command tx timeout [ 283.135170] Bluetooth: hci5: command tx timeout [ 283.136633] Bluetooth: hci3: command tx timeout [ 283.199115] Bluetooth: hci7: command tx timeout [ 283.263155] Bluetooth: hci6: command tx timeout [ 284.866026] Bluetooth: hci0: command tx timeout [ 284.927041] Bluetooth: hci1: command tx timeout [ 285.056443] Bluetooth: hci2: command tx timeout [ 285.183221] Bluetooth: hci3: command tx timeout [ 285.184462] Bluetooth: hci5: command tx timeout [ 285.184485] Bluetooth: hci4: command tx timeout [ 285.247033] Bluetooth: hci7: command tx timeout [ 285.311069] Bluetooth: hci6: command tx timeout [ 286.911129] Bluetooth: hci0: command tx timeout [ 286.975250] Bluetooth: hci1: command tx timeout [ 287.104266] Bluetooth: hci2: command tx timeout [ 287.231073] Bluetooth: hci5: command tx timeout [ 287.231622] Bluetooth: hci3: command tx timeout [ 287.232388] Bluetooth: hci4: command tx timeout [ 287.295191] Bluetooth: hci7: command tx timeout [ 287.359061] Bluetooth: hci6: command tx timeout [ 288.968301] Bluetooth: hci0: command tx timeout [ 289.023039] Bluetooth: hci1: command tx timeout [ 289.151049] Bluetooth: hci2: command tx timeout [ 289.280129] Bluetooth: hci4: command tx timeout [ 289.280639] Bluetooth: hci3: command tx timeout [ 289.281895] Bluetooth: hci5: command tx timeout [ 289.344117] Bluetooth: hci7: command tx timeout [ 289.408093] Bluetooth: hci6: command tx timeout [ 343.123623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.126826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.131703] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.133541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.135515] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.139138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.142108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.142828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.145773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.148317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.149623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.150718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.244892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.251164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.259525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.266571] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.269305] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.270378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.311863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.317335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.331883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.347293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.359467] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.367104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.370804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.373726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.374859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.380656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.382660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.383762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.445581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.452665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.460113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.467362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.478332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.479245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.507310] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.510182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.517784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.521445] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.522818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.548498] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.549283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.552818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.553625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.558697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.564790] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.566470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.217085] Bluetooth: hci1: command tx timeout [ 345.218182] Bluetooth: hci0: command tx timeout [ 345.343094] Bluetooth: hci2: command tx timeout [ 345.471376] Bluetooth: hci4: command tx timeout [ 345.472542] Bluetooth: hci3: command tx timeout [ 345.600014] Bluetooth: hci5: command tx timeout [ 345.664326] Bluetooth: hci6: command tx timeout [ 345.727484] Bluetooth: hci7: command tx timeout [ 347.264029] Bluetooth: hci0: command tx timeout [ 347.264562] Bluetooth: hci1: command tx timeout [ 347.391050] Bluetooth: hci2: command tx timeout [ 347.519084] Bluetooth: hci3: command tx timeout [ 347.519171] Bluetooth: hci4: command tx timeout [ 347.647757] Bluetooth: hci5: command tx timeout [ 347.711023] Bluetooth: hci6: command tx timeout [ 347.776063] Bluetooth: hci7: command tx timeout [ 349.311095] Bluetooth: hci1: command tx timeout [ 349.311615] Bluetooth: hci0: command tx timeout [ 349.440051] Bluetooth: hci2: command tx timeout [ 349.567046] Bluetooth: hci4: command tx timeout [ 349.568171] Bluetooth: hci3: command tx timeout [ 349.695234] Bluetooth: hci5: command tx timeout [ 349.761070] Bluetooth: hci6: command tx timeout [ 349.823025] Bluetooth: hci7: command tx timeout [ 351.361032] Bluetooth: hci0: command tx timeout [ 351.361069] Bluetooth: hci1: command tx timeout [ 351.488977] Bluetooth: hci2: command tx timeout [ 351.616109] Bluetooth: hci3: command tx timeout [ 351.616134] Bluetooth: hci4: command tx timeout [ 351.743185] Bluetooth: hci5: command tx timeout [ 351.808025] Bluetooth: hci6: command tx timeout [ 351.871120] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:17:16 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000002 RCX=0000000000000000 RDX=1ffffffff0b829e0 RSI=0000000000000000 RDI=ffffffff85c14f00 RBP=ffff888028dd9b80 RSP=ffff888028c47c30 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff87ed4ea7 R11=0000000000000000 R12=ffff888028dda5e8 R13=ffffffff85c14f00 R14=0000000000000000 R15=ffffffff811555e3 RIP=ffffffff812fa9a2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f32679eb540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3267b6eff0 CR3=0000000025916000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2d0065626f7270646f6d2f6e6962732f XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=000000000000032c RCX=ffffffff812ef5ee RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff87ed4f00 RBP=ffffffff87ed4f00 RSP=ffff88803184f9b8 R8 =0000000000000000 R9 =fffffbfff0fda9e0 R10=ffffffff87ed4f07 R11=0000000000000001 R12=0000000000000007 R13=ffff88800ca3c140 R14=0000000000000080 R15=0000000000000003 RIP=ffffffff818b30e6 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa28cfe4540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe2600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa28d1ce810 CR3=000000002dcba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000