Warning: Permanently added '[localhost]:65363' (ECDSA) to the list of known hosts.
2024/10/24 23:41:03 fuzzer started
2024/10/24 23:41:03 dialing manager at localhost:45639
syzkaller login: [   62.834570] cgroup: Unknown subsys name 'net'
[   62.912099] cgroup: Unknown subsys name 'cpuset'
[   62.940106] cgroup: Unknown subsys name 'rlimit'
2024/10/24 23:41:20 syscalls: 202
2024/10/24 23:41:20 code coverage: enabled
2024/10/24 23:41:20 comparison tracing: enabled
2024/10/24 23:41:20 extra coverage: enabled
2024/10/24 23:41:20 setuid sandbox: enabled
2024/10/24 23:41:20 namespace sandbox: enabled
2024/10/24 23:41:20 Android sandbox: enabled
2024/10/24 23:41:20 fault injection: enabled
2024/10/24 23:41:20 leak checking: enabled
2024/10/24 23:41:20 net packet injection: enabled
2024/10/24 23:41:20 net device setup: enabled
2024/10/24 23:41:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/24 23:41:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/24 23:41:20 USB emulation: enabled
2024/10/24 23:41:20 hci packet injection: enabled
2024/10/24 23:41:20 wifi device emulation: enabled
2024/10/24 23:41:20 802.15.4 emulation: enabled
2024/10/24 23:41:20 fetching corpus: 0, signal 0/0 (executing program)
2024/10/24 23:41:22 starting 8 fuzzer processes
23:41:22 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x8041)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2001a}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x240041d0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x710d02c68d5292d0}, 0x2000c051)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1ac, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x90)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x44}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xb2, 0xbe, "46741210d97cb821552ae46de89ccf51c8383801fa7d9d55353ccab51fa98a5e991d9dab58758635de50864112684fb49d4754d39297a707690f020aa70404472da53270431f8d84d450ebc91b49ea26693f6dfe868bf31c3ecdab893adba5cffd30b300861215df860c54896d092c0b7a35fc3b87017d85916f3d1d38d9701de6e99c98198be24fd2e1f0d6e5476082921bb8884aa8bd4f1d3feffb03a20a87707d5bf03c878e5bc3ea068b3f5d"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x6c}, {0x48}, {0x12}, {0x6}, {0x1b, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000a18}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1d0, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0b, 0xfac02, 0xfac00]}], @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x7, 0x8, 0x4, 0x51, 0x7fff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x6, 0xb, 0x2, 0x18, 0x36, 0x3, 0x16, 0x1b, 0x5, 0x5, 0x60, 0x36, 0x36, 0x9, 0x16, 0x1, 0x6, 0x12, 0x30, 0x36, 0x5, 0x6c, 0x6c, 0x60]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x2, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x14, 0x34a, 0x2, 0x0, 0x4, 0x8]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe8ba, 0x16a5, 0x4, 0x8, 0xfa3b, 0xc, 0x694, 0x400]}}]}, @NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x4}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x5}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0xa}, {0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x5}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x3}, {0x5, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x4}, {0x6, 0x8}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x5}, {0x6}, {0x7, 0x9}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x5}, {0x6, 0x8}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x2, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x5}, {0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x4}, {0x1}, {0x4, 0x9}, {0x4, 0xa}, {0x4}, {0x4, 0x2}, {0x0, 0x1}, {}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0xa}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0x6}, {0x2, 0x5}, {0x1, 0x8}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x1, 0x8}, {0x2, 0x2}, {0x1, 0x9}, {0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x4}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x3}, {0x6, 0xa}, {0x2}, {0x4, 0x4}, {0x4, 0x4}, {0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0xa}, {0x2, 0x6}, {0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x1}, {0x2}, {0x7, 0x7}, {0x6, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x7}, {0x2, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0x8}, {0x2, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x2, 0x5, 0x30, 0xb, 0x60, 0x24, 0x1, 0xc, 0x6c, 0x9, 0x73, 0x6c, 0x6c, 0x4, 0x6c, 0x0, 0x1b, 0x6, 0x6]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r1)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x50, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x40010)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x75}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40000808}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, r2, 0x32a, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3ff}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
r6 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x4, 0x268280)
sendmsg$NL80211_CMD_LEAVE_IBSS(r6, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x8880)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r7, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x5f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000894)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24010)

23:41:22 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x40, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}, @decrefs={0x40046307, 0x1}, @clear_death, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}], 0x96, 0x0, &(0x7f0000000040)="d32975dd4a331aa7883812e611617f55966536418910dc6a07ac55f19a07b8b2c6ecb44cb2fef912592eba398f5f134e40012d400777cf4c07c7199e2338aa7b32fae2ae4ea0f9c661fa164e180426219a3e624c2610131e99547f2da59af6fa22cedfd2e311f5cba7f7e342b7d8033953e68036f8299fd3d7476693967330d877e9c3e048f62726ad68c5b22520806f66b3717f86b3"})
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x108, 0x3})
r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x540000)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)={0x2})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"6d2323b23733673e9a8a31e957161524", r3, 0x0, {0x9, 0x3ff}, {0x8, 0x9}, 0x8832, [0x9, 0x1, 0xff, 0xfff, 0x5, 0x1f, 0x6, 0x1, 0xc40, 0x3, 0x2, 0x81, 0x7fff, 0x2, 0x80000001, 0x5]})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000003c0)=0x75ec)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r4, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fe64575901cf1d4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c266806407542a00"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dd1f5e6e06dbb0103fbe4edc233946da9450aea2972872c6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9d751180312b89297d5516a194563c10"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1b976e513f74904df4f50e7e9110d6ac"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c10d0733382cf3f6ba6aa42bb7141949858c6c97d4551b84789b15b340037363"}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f00000005c0)=0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x54, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x0, 0x38}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}, @exit_looper, @free_buffer], 0xb7, 0x0, &(0x7f0000000740)="ba4ed96e8c5f6092da0b380bc795ad11d1f3a76b721845ff6d958f1865fa65f4659aab682ec287d3cbff114d6f653039390873c4ab893fdc5a514b0d337e63d5ceb71ed28cfe4a1d377d6fc18758e7a060c9af9dc735e59aa8c99151b33541dc746327c7815c33a909c2f92dc3e2d281cbf1e221ae4f10463384761a84380e2fcfe895d1b2fc11d04cdafda0445443485caf4ea31d548a664e5c545af970f1588b583394f570bbb19fad83be5543c5ed11e7286d306edc"})
r5 = syz_open_dev$vcsn(&(0x7f0000000840), 0xf90, 0x226300)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000b80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000900)={0x220, r6, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0xe}}}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "7f"}, @NL80211_ATTR_FRAME_MATCH={0x82, 0x5b, "ab83d10d0634dae343091b3c14dd656492ceb46c76421fd47bd2fe3ebdbdc95b7052986fbddb322808bceff58bc9212036316aa06247b4b295efa43efbe404e7dfca3984bad339ec11bef5ba12cb77725cf2a76fa54b8a3c57a9e552addb3247c47d42fbd6037bf55af6d79f99bfe82bc8da8d6e730c70f268c130cc1ca6"}, @NL80211_ATTR_FRAME_MATCH={0xc5, 0x5b, "7559516c9f6fb89ab697e97b37a114ba8ca79531655dd5340ae2ac7a1bee7c182fed15014b1033bcf69ff3fdd2e2f13034fcde4f1643175cf6533624718e5507fb16f910b6c478d878b613b69aac75fc67b5a8dd8de863a2f52857e00f6d1f374ee5c3e2dc828c5ee66559ae025e3a24beb31eaa20d74a736c4af2fb154194913460204da8d758cefc2e7d6e34fb1c62afd5ff17a9ee24ef02d1fa4e2ba0c192c1455a141b328c4d172c4a29bb022da3a7c9a2c8d51a8de29df73c3965359eff2f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0x99, 0x5b, "399608429e1c4bf8fe2ed77700b2384df8bab37e09a02d779d7180673191e1b5c06b978bd3ddfb57a04e37871e11638357ffc4c0a534453694f3e42884beaef90fbba21c333e203aaa7cd845398b7ed59931a72ccd40942dbecadb95a98bec3b5716d0326a45946de30b9abc488838304d858ff64f406ecf708f8a49a6df222e028bba6c3cd5a4d65f00e6e68293294527d62d76da"}]}, 0x220}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000c80)=0x4, 0x4)

23:41:22 executing program 2:
r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x401, 0x82)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x453, 0x1, 0x70bd28, 0x25dfdbfd, "5030f900bfc1779887b8fe16e5cb2a31", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000002600))
syz_genetlink_get_family_id$devlink(&(0x7f0000002640), r0)
write$hidraw(r0, &(0x7f0000002680)="bc171a0bb779d9268ecf1c1a1c9396d8248d9d30b51fc628f1d2c3999b961fa1564425dd581a4caf1d903fb602601b1775197500", 0x34)
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000026c0)={0x0, 0xffffffff00000001})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2d35, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x70}}, 0x20000800)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000003840)=0x704)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x4c, 0x0, 0x408, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000039c0)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000005e40)={0xe0, 0x0, &(0x7f0000005cc0)=[@increfs_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000005a80)={@ptr={0x70742a85, 0x1, &(0x7f0000003a00)=""/4096, 0x1000, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000004a00)=""/4096, 0x1000, 0x2, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000005a00)=""/100, 0x64, 0x2, 0x3d}}, &(0x7f0000005b00)={0x0, 0x28, 0x50}}, 0x40}, @enter_looper, @free_buffer, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000005c00)={@flat=@weak_binder={0x77622a85, 0x10a, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000005b40)=""/167, 0xa7, 0x2, 0x15}}, &(0x7f0000005c80)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}, @register_looper], 0x7e, 0x0, &(0x7f0000005dc0)="8b488f1d15da4624422745fbfe66e5d5e3f1df83cfe5fe40cbc31538996d9bd2ce684ffed561dc7985cc036b2d5acf9f78aa93c70075a0ee61bdc4948add536ce2893027fea95532d7f7dbb6b66d239c84fa640713e7f19b37a3b15a290e989e40af316fb71457813e5c7f7b286978c2fa03503691db7beb200334862a94"})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000005f80)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005f40)={&(0x7f0000005ec0)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040000}, 0x20000805)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000005fc0))
r5 = syz_open_dev$vcsn(&(0x7f00000060c0), 0x9, 0x103903)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000062c0)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006280)={&(0x7f0000006140)={0x120, 0x14, 0x100, 0x70bd27, 0x25dfdbff, {0x1e, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "a46cc86802ba0bc787297fede897191fadf7f4c4c8f926e5ab4c26074ebc1af6d14d7a"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "6db88d6ef267f152d91bd55775f01a4d0858d5a12a82cf9858e76bfdf47f7b34"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "4b7a27ddc50cc308e68c501049dd169f3ba5ac3e87e8e7eca91289b02842fea866b2c60b18136ac6f621a6c481dc475a25feea43f18c457e8ec52c379b31ebc3080c10b5b3a3e2675f4a73b356699a1d962165ed2ff66b7161989a8f9307e0cd4c20605fe446a6585c6951ec0fb6b7fb76f7640ae7f2872c361770fdc13c4fd485fe65511c575f89fbac46f0ba5c4979c7196170fba46ab7d8cb6e891d0c90b9917408ae2d808f8e716dc0f3788eac5159996d8d89dd743e6b"}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x404c081)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x8050)

23:41:22 executing program 3:
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x8001}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x801)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x13}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x558}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x612}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ed}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x2, 0x40, 0xf4a, 0x200, 0x0, 0x1f, 0x5]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e4, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x1)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x1, 0x6}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044091}, 0x40001)
r3 = syz_open_dev$vcsn(&(0x7f00000007c0), 0xfffffffffffffc00, 0x10002)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004010)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000900)={0x0, 0xc4})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1fc, r1, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xe8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7f00d29733c26050"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4d3259859d0c5a5c8d52d2fb03ebc3ab4e78be674441ddd38cef64bec56d4724"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="27c460b31cc8b99a769af07f2ee9fadf4e73e24ca57b0c69"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c6f4f3410edd3a67"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="92dea14dc143209c5c6788fa7939f22c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d6ac365c7d6f81c7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7a617b4a1ee2c1db43bc283e09f97bcc8c4220700e4f324951d63e294fd43398"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="482cdba1deef39ae46f0d056c1c0a5efd05343505774dd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="bcfc944278c052de65d260d56cc5dbaffcac03e0e02122b7a889ed84765cb679"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09d2ce591904933e"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e6aaa6e27c4aec331980418a0036bbe6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3f3d31c5dd40615d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36bb47a4833b8307"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d37b8754bd327e9a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "980419d405604fd3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bd5f3a8ffae27108"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c80b31a18b03fdaef35b9e1ac0d90b9cc43f8a5d2411ed33206a07c264177740"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="549f6bec2e9ccc35ee3ce8b3a9a6e48d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="01c3b5a394d98873b6385541d00f88a96c6d33345368880b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67703912be96d894"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd428e937915fa53"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0f3932e4ee6265f75ac54624a04a5bc05ce3c7ca49acbc2a"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x880}, 0x80)
clock_gettime(0x0, &(0x7f0000001c40)={<r4=>0x0, <r5=>0x0})
recvmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/134, 0x86}, {&(0x7f0000000d80)=""/247, 0xf7}, {&(0x7f0000000e80)=""/97, 0x61}, {&(0x7f0000000f00)=""/60, 0x3c}, {&(0x7f0000000f40)=""/35, 0x23}], 0x5, &(0x7f0000001000)=""/162, 0xa2}, 0x101}, {{&(0x7f00000010c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001140)=""/84, 0x54}, {&(0x7f00000011c0)=""/58, 0x3a}], 0x2}, 0x15}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000001600)=[{&(0x7f00000012c0)=""/42, 0x2a}, {&(0x7f0000001300)=""/89, 0x59}, {&(0x7f0000001380)=""/123, 0x7b}, {&(0x7f0000001400)=""/91, 0x5b}, {&(0x7f0000001480)=""/151, 0x97}, {&(0x7f0000001540)=""/137, 0x89}], 0x6, &(0x7f0000001680)=""/39, 0x27}}, {{&(0x7f00000016c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001740)=""/241, 0xf1}, {&(0x7f0000001840)=""/11, 0xb}, {&(0x7f0000001880)=""/112, 0x70}], 0x3}, 0x7}, {{&(0x7f0000001940)=@llc, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/8, 0x8}], 0x2}, 0x800}], 0x5, 0x0, &(0x7f0000001c80)={r4, r5+10000000})
syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r6)
recvmmsg(r6, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001cc0)=""/35, 0x23}, {&(0x7f0000001d00)=""/35, 0x23}, {&(0x7f0000001d40)=""/23, 0x17}, {&(0x7f0000001d80)=""/196, 0xc4}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/185, 0xb9}, {&(0x7f0000002f40)=""/176, 0xb0}, {&(0x7f0000003000)=""/178, 0xb2}], 0x8, &(0x7f0000003140)=""/70, 0x46}, 0x10001}, {{&(0x7f00000031c0)=@generic, 0x80, &(0x7f0000004600)=[{&(0x7f0000003240)=""/139, 0x8b}, {&(0x7f0000003300)=""/100, 0x64}, {&(0x7f0000003380)=""/186, 0xba}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/48, 0x30}, {&(0x7f0000004480)=""/169, 0xa9}, {&(0x7f0000004540)=""/135, 0x87}], 0x7, &(0x7f0000004680)=""/46, 0x2e}, 0x4}, {{&(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/129, 0x81}], 0x1}}, {{&(0x7f0000004840)=@ax25={{0x3, @bcast}, [@remote, @null, @null, @bcast, @netrom, @null, @bcast, @netrom]}, 0x80, &(0x7f00000048c0), 0x0, &(0x7f0000004900)=""/130, 0x82}, 0x8}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f00000049c0)=""/223, 0xdf}, {&(0x7f0000004ac0)}, {&(0x7f0000004b00)=""/113, 0x71}, {&(0x7f0000004b80)=""/194, 0xc2}, {&(0x7f0000004c80)=""/138, 0x8a}], 0x5, &(0x7f0000004dc0)=""/239, 0xef}, 0x8}, {{&(0x7f0000004ec0)=@tipc=@name, 0x80, &(0x7f0000006440)=[{&(0x7f0000004f40)=""/154, 0x9a}, {&(0x7f0000005000)=""/180, 0xb4}, {&(0x7f00000050c0)=""/200, 0xc8}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)}, {&(0x7f0000006200)=""/229, 0xe5}, {&(0x7f0000006300)=""/121, 0x79}, {&(0x7f0000006380)=""/119, 0x77}, {&(0x7f0000006400)=""/22, 0x16}], 0x9}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000006500)=""/37, 0x25}], 0x1}, 0x8001}, {{&(0x7f0000006580)=@un=@abs, 0x80, &(0x7f0000007980)=[{&(0x7f0000006600)=""/192, 0xc0}, {&(0x7f00000066c0)=""/11, 0xb}, {&(0x7f0000006700)=""/141, 0x8d}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/146, 0x92}, {&(0x7f0000007880)=""/47, 0x2f}, {&(0x7f00000078c0)=""/142, 0x8e}], 0x7, &(0x7f0000007a00)=""/138, 0x8a}, 0x7}, {{0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007ac0)=""/122, 0x7a}, {&(0x7f0000007b40)=""/55, 0x37}, {&(0x7f0000007b80)=""/62, 0x3e}], 0x3, &(0x7f0000007c00)=""/14, 0xe}, 0x1}, {{&(0x7f0000007c40)=@caif=@rfm, 0x80, &(0x7f0000008200)=[{&(0x7f0000007cc0)=""/239, 0xef}, {&(0x7f0000007dc0)=""/143, 0x8f}, {&(0x7f0000007e80)=""/245, 0xf5}, {&(0x7f0000007f80)=""/171, 0xab}, {&(0x7f0000008040)=""/252, 0xfc}, {&(0x7f0000008140)=""/156, 0x9c}], 0x6, &(0x7f0000008280)=""/49, 0x31}}], 0xa, 0x40000020, &(0x7f0000008540)={0x0, 0x3938700})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, &(0x7f00000087c0)={&(0x7f0000008580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008780)={&(0x7f00000085c0)={0x190, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000008840)={<r9=>0x0, <r10=>0x0})
recvmmsg(r8, &(0x7f0000008800), 0x0, 0x40010000, &(0x7f0000008880)={r9, r10+60000000})
ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000088c0)={0x2, 0x8, "fcf875", 0x9, 0x5})

23:41:22 executing program 4:
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/60)
shmctl$IPC_RMID(0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xac630958dc9962d3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xd}, 0x8010)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004041}, 0x10)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/18)
r1 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000280)=""/215)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000380)=""/82)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000400)=""/198)
r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2e3, 0x34}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c}, 0x8004)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x120, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x404800d}, 0x240088c1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000800)=""/26)
r4 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_LOCK(r4, 0xb)

23:41:22 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x8001)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x5)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0x3e}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x80}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x880)
getpeername(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000380)=0x80)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x128, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x3c}}}}, [@NL80211_ATTR_TX_RATES={0xe0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x6, 0x1d}, {0x2, 0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x34, 0x3, 0xe, 0x0, 0x30, 0x0]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd1, 0x80, 0xf2, 0x9, 0xd6, 0xa1, 0x1, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x66, 0x6, 0x9, 0x3, 0xe0, 0x9, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x5}, {0x5, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x7}, {0x4, 0x7}, {0x4, 0x1}, {0x3, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {}, {}, {0x1, 0x1}, {0x5, 0xa}, {0x6, 0xa}, {0x6}, {0x4, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x7}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2a1c, 0x4, 0x5, 0x1ff, 0xffff, 0x6, 0x8]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x0, 0x3, 0x7f, 0x3f, 0x2, 0x613]}}]}]}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="b6db44b849f3ab05fb117ea201a8c8e3fb466467cbce4c5c68"}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x20000800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x6b}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc5}, 0x4)
socketpair(0x5, 0x80000, 0x8001, &(0x7f0000000700)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4002004)
socketpair(0x21, 0x800, 0x4, &(0x7f0000000880)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbc3, 0xd}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x40, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x40}, 0x1, 0x0, 0x0, 0xc5731b849ed1a82d}, 0x884)
sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400041}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x28, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x40, 0x62}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
r9 = syz_open_dev$vcsn(&(0x7f0000001700), 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x58, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x49}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

[   80.970580] audit: type=1400 audit(1729813282.292:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:41:22 executing program 6:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x4000)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xad4, 0xd}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000080)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x14c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x8b0e}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9ac}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x400}, {0x8, 0xb, 0xa6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x71a439d2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7e82}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0xffffffff}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000380)={'\x00', 0x1, 0x1, 0x1})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_KEK={0x11, 0xf2, "55baf83d97876f65f33e59c20e"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0x11, 0xff1e, 0x8}}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4d, 0x2a, [@preq={0x82, 0x25, @not_ext={{0x0, 0x1, 0x1}, 0x9a, 0x3f, 0x80000001, @device_a, 0xcd8, "", 0x1, 0x1ff, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xa13}]}}, @mic={0x8c, 0x18, {0xf92, "a53a979b1b61", @long="ee894ee7c44a70840bf732f0b7ee3bb5"}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x17, {0x2, 0x8, 0x284, 0x6}}}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20488c1)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000580)=""/56)
sendmsg$AUDIT_USER(r0, &(0x7f0000001680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000600)={0x1010, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfe, "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", [""]}, 0x1010}, 0x1, 0x0, 0x0, 0x20040040}, 0x24000004)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000016c0)=""/24)
getpeername(r0, &(0x7f0000001700)=@pppol2tpin6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000001780)=0x80)
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "a8335239de484fbf119b240ee9100a45"}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="76cbddb57eb755fea6daed4caa717a1f2f044ed0c0e0aecf"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}, @NL80211_ATTR_PMKID={0x14, 0x55, "e48289e2b1b87712c27ee08492b824b2"}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001980)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x40, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x61}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aff9cfd1a34d"}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x1)
r5 = getpid()
sendmsg$AUDIT_SET(r0, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x38, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfc, {0x3, 0x1, 0x1, r5, 0xe9, 0x2, 0x4, 0x3ff, 0x0, 0x9}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40440b0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001b80)=<r6=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001bc0)={"5505f1a28730d7b6613054a6b157c554", 0x0, r6, {0x7f, 0x3f}, {0x8000, 0x401}, 0x6, [0xffffffff, 0x0, 0x5, 0x80000001, 0x7ff, 0xf86, 0x9, 0x3f, 0x0, 0x400, 0x8001, 0x10001, 0x2, 0x6, 0x9, 0x1]})
socketpair(0x1a, 0x80000, 0xfffffff9, &(0x7f0000001cc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff40, 0x49}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x15)

23:41:22 executing program 7:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x101, 0x92082)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2ae}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6b0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x30b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5be}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x527}]}, 0x64}, 0x1, 0x0, 0x0, 0x8400}, 0x4048c40)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x40840)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x1)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x6b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
r2 = syz_open_dev$vcsn(&(0x7f0000000540), 0x8, 0x284002)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x19f21974, 0x36}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x81}, @NL80211_ATTR_PMKID={0x14, 0x55, "a21d5d59e2edca7c7e3779768f5a64a3"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x293d}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000700)={0x1f, 0xd})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x54}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x1)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x1000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r2)
sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r6, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x68, 0xf}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x40}}, 0x0)
write$hidraw(r2, &(0x7f0000000b00)="a95dea44b4599043293400854115c6dadf0df8226851f6b47fe36ca7c07f77e8f299a7b17d1924bfee901b717b4d25c671810491e421c9d4ddd51e56345ae2d91bf20183bc26703c672f6c2f5bbffd47c8f8e091a3a3b4ad20fd2af9ccb2f916eed3f7d455b9f1cb58055f6651b9d919b582c6bda8e219ff444c59bd05258f5a06a9faaa4958125e24eaa184b1a7494716bcc91c12f7d182cd536a3817437354cc106ccc84ae2aad45759cf22e711fa1a550a14cfe9ba2eb581e3a4a1be2be79628567073d3fcde82c786a54ef20bd79ed3342afba74226e46737ebb3ff12238fb5af24498ac901a96", 0xe9)
clock_gettime(0x0, &(0x7f00000080c0)={<r7=>0x0, <r8=>0x0})
recvmmsg(r5, &(0x7f0000007ec0)=[{{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/100, 0x64}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x4}, 0x20}, {{&(0x7f0000002dc0)=@xdp, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/95, 0x5f}, {&(0x7f0000002ec0)=""/9, 0x9}], 0x2}, 0x6}, {{&(0x7f0000002f40)=@can, 0x80, &(0x7f0000003180)=[{&(0x7f0000002fc0)=""/7, 0x7}, {&(0x7f0000003000)=""/177, 0xb1}, {&(0x7f00000030c0)=""/135, 0x87}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000041c0)=@nfc, 0x80, &(0x7f0000004240), 0x0, &(0x7f0000004280)=""/142, 0x8e}, 0x4}, {{&(0x7f0000004340)=@pppol2tpin6={0x18, 0x1, {0x0, <r9=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/137, 0x89}, {&(0x7f0000005480)=""/63, 0x3f}, {&(0x7f00000054c0)=""/157, 0x9d}, {&(0x7f0000005580)=""/19, 0x13}], 0x5, &(0x7f0000005640)=""/60, 0x3c}, 0x3}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/67, 0x43}, {&(0x7f0000006700)}, {&(0x7f0000006740)=""/32, 0x20}, {&(0x7f0000006780)=""/230, 0xe6}, {&(0x7f0000006880)=""/188, 0xbc}, {&(0x7f0000006940)=""/49, 0x31}], 0x7, &(0x7f0000006a00)=""/179, 0xb3}}, {{&(0x7f0000006ac0)=@x25={0x9, @remote}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006b40)=""/72, 0x48}], 0x1}, 0x1ff}, {{&(0x7f0000006c00)=@x25={0x9, @remote}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000006c80)=""/17, 0x11}, {&(0x7f0000006cc0)=""/79, 0x4f}, {&(0x7f0000006d40)=""/120, 0x78}, {&(0x7f0000006dc0)=""/4096, 0x1000}, {&(0x7f0000007dc0)=""/61, 0x3d}], 0x5, &(0x7f0000007e80)=""/22, 0x16}, 0x41f2}], 0x8, 0x22, &(0x7f0000008100)={r7, r8+10000000})
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000008340)={&(0x7f0000008140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000008300)={&(0x7f00000081c0)={0x12c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x100}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_NODE_NAME={0xb7, 0xa8, @random="4904bfec947a013c8e2222bd1845ac6ed88b00a40ad8cf0c94b54c94ee03f15a69df44c47cd6a274599e6f55934e249a742c3cb9f071dfecd34a1fd8b2c6e404ebaf7a9c609b5285a456b6a5d2c269c9626f87dae7a86d795068c38571efe57f97e3b3808d3239854bf1954be92477c788dae677c6e3c38d458b361d6220dbf293739587365f7d545c855bb67d09610ef00941614f0ae134f2ff3e2a41b73e008b03280b8ddf981fdb189566e29a6b9d44c061"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x811)

[   82.316300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.318849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.322457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.338897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   82.342326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.348146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.350358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.352815] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   82.354905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.357383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.365129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.366916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.374287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.376110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.381214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.384931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.389912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.392056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.395435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.404781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.406198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.436779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.447765] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.447947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.452392] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.466016] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.471841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.483417] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.483567] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.486158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.489385] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.492997] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   82.495660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.502382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.508854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.512103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.516881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.523923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.526857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.528959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.551977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.555608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.558253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.566765] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   82.572996] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.595535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.602918] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   82.609375] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.410996] Bluetooth: hci0: command tx timeout
[   84.412182] Bluetooth: hci1: command tx timeout
[   84.469716] Bluetooth: hci3: command tx timeout
[   84.534717] Bluetooth: hci2: command tx timeout
[   84.598897] Bluetooth: hci4: command tx timeout
[   84.599512] Bluetooth: hci5: command tx timeout
[   84.661842] Bluetooth: hci7: command tx timeout
[   84.662447] Bluetooth: hci6: command tx timeout
[   86.453769] Bluetooth: hci1: command tx timeout
[   86.454338] Bluetooth: hci0: command tx timeout
[   86.517703] Bluetooth: hci3: command tx timeout
[   86.582943] Bluetooth: hci2: command tx timeout
[   86.646799] Bluetooth: hci5: command tx timeout
[   86.647274] Bluetooth: hci4: command tx timeout
[   86.710771] Bluetooth: hci6: command tx timeout
[   86.711256] Bluetooth: hci7: command tx timeout
[   88.501781] Bluetooth: hci1: command tx timeout
[   88.502324] Bluetooth: hci0: command tx timeout
[   88.566782] Bluetooth: hci3: command tx timeout
[   88.629732] Bluetooth: hci2: command tx timeout
[   88.693742] Bluetooth: hci4: command tx timeout
[   88.694225] Bluetooth: hci5: command tx timeout
[   88.757893] Bluetooth: hci7: command tx timeout
[   88.758402] Bluetooth: hci6: command tx timeout
[   90.549991] Bluetooth: hci0: command tx timeout
[   90.550538] Bluetooth: hci1: command tx timeout
[   90.613917] Bluetooth: hci3: command tx timeout
[   90.678797] Bluetooth: hci2: command tx timeout
[   90.741985] Bluetooth: hci5: command tx timeout
[   90.742472] Bluetooth: hci4: command tx timeout
[   90.806820] Bluetooth: hci6: command tx timeout
[   90.807299] Bluetooth: hci7: command tx timeout
[  144.964672] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.970613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.971482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.981895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.983048] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.986453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.988846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.989842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.993900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.995045] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  144.997003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.998213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.999867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.000931] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  145.002113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  145.020680] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.024762] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  145.026131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.046481] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.056052] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.057488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  145.058099] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  145.066988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.067315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  145.068847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  145.070699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  145.072335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  145.073527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.075427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  145.076986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  145.082071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  145.084072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.084858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  145.085597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  145.087997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  145.090435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.091996] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  145.093233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  145.094361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.106879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  145.110585] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  145.112104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.213138] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  145.218886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  145.223007] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  145.229924] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  145.233225] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  145.239037] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  147.069802] Bluetooth: hci0: command tx timeout
[  147.070764] Bluetooth: hci2: command tx timeout
[  147.132250] Bluetooth: hci3: command tx timeout
[  147.133115] Bluetooth: hci4: command tx timeout
[  147.133694] Bluetooth: hci1: command tx timeout
[  147.190752] Bluetooth: hci6: command tx timeout
[  147.253906] Bluetooth: hci7: command tx timeout
[  147.445881] Bluetooth: hci5: command tx timeout
[  149.109735] Bluetooth: hci2: command tx timeout
[  149.110282] Bluetooth: hci0: command tx timeout
[  149.173821] Bluetooth: hci1: command tx timeout
[  149.175248] Bluetooth: hci4: command tx timeout
[  149.176402] Bluetooth: hci3: command tx timeout
[  149.237931] Bluetooth: hci6: command tx timeout
[  149.302686] Bluetooth: hci7: command tx timeout
[  149.493804] Bluetooth: hci5: command tx timeout
[  151.157776] Bluetooth: hci2: command tx timeout
[  151.158283] Bluetooth: hci0: command tx timeout
[  151.221773] Bluetooth: hci4: command tx timeout
[  151.222273] Bluetooth: hci3: command tx timeout
[  151.223216] Bluetooth: hci1: command tx timeout
[  151.287664] Bluetooth: hci6: command tx timeout
[  151.349786] Bluetooth: hci7: command tx timeout
[  151.541793] Bluetooth: hci5: command tx timeout
[  153.205862] Bluetooth: hci2: command tx timeout
[  153.206381] Bluetooth: hci0: command tx timeout
[  153.269758] Bluetooth: hci1: command tx timeout
[  153.270252] Bluetooth: hci3: command tx timeout
[  153.271064] Bluetooth: hci4: command tx timeout
[  153.333748] Bluetooth: hci6: command tx timeout
[  153.397775] Bluetooth: hci7: command tx timeout
[  153.589730] Bluetooth: hci5: command tx timeout
[  207.325425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  207.329934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  207.331101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  207.338499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  207.341062] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  207.342160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  207.389186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.390728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.392250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.393696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.398422] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.399573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.401993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.404912] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.406097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  207.407320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.412835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  207.414023] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  207.434362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.437972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.451451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.461126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.468371] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  207.473984] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.500200] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.501535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.505763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.525000] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.530396] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  207.532749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.659184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.662015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.664876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.676931] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  207.681876] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  207.682795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  207.684476] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.686341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  207.687467] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.709134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  207.713880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  207.715797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  207.717925] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  207.727865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  207.741281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  207.749967] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  207.752743] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  207.759093] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  209.397709] Bluetooth: hci0: command tx timeout
[  209.462789] Bluetooth: hci1: command tx timeout
[  209.463509] Bluetooth: hci2: command tx timeout
[  209.525905] Bluetooth: hci3: command tx timeout
[  209.590706] Bluetooth: hci4: command tx timeout
[  209.717826] Bluetooth: hci5: command tx timeout
[  209.846664] Bluetooth: hci6: command tx timeout
[  209.911720] Bluetooth: hci7: command tx timeout
[  211.445776] Bluetooth: hci0: command tx timeout
[  211.510758] Bluetooth: hci2: command tx timeout
[  211.511262] Bluetooth: hci1: command tx timeout
[  211.574732] Bluetooth: hci3: command tx timeout
[  211.639694] Bluetooth: hci4: command tx timeout
[  211.765730] Bluetooth: hci5: command tx timeout
[  211.893777] Bluetooth: hci6: command tx timeout
[  211.969392] Bluetooth: hci7: command tx timeout
[  213.494711] Bluetooth: hci0: command tx timeout
[  213.558758] Bluetooth: hci2: command tx timeout
[  213.559261] Bluetooth: hci1: command tx timeout
[  213.621706] Bluetooth: hci3: command tx timeout
[  213.686733] Bluetooth: hci4: command tx timeout
[  213.815675] Bluetooth: hci5: command tx timeout
[  213.942791] Bluetooth: hci6: command tx timeout
[  214.005800] Bluetooth: hci7: command tx timeout
[  215.541734] Bluetooth: hci0: command tx timeout
[  215.606921] Bluetooth: hci1: command tx timeout
[  215.607422] Bluetooth: hci2: command tx timeout
[  215.670818] Bluetooth: hci3: command tx timeout
[  215.734685] Bluetooth: hci4: command tx timeout
[  215.862696] Bluetooth: hci5: command tx timeout
[  215.990682] Bluetooth: hci6: command tx timeout
[  216.055063] Bluetooth: hci7: command tx timeout
[  269.596734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.628780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.653968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.706217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.708062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.710006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  269.711135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  269.711938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.714560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.718379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.720325] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.721566] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.897028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.914940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.931020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.932312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.935852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.939242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.939362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.945816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  269.950240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.954186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.968295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.971142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.975372] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.985346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  270.000267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  270.007294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  270.019305] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  270.026748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  270.199388] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  270.201179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  270.202266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  270.202909] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  270.213481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  270.217215] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  270.218258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  270.229919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  270.248846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  270.281190] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  270.292932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  270.294201] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  270.300228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  270.302258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  270.305808] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  270.324077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  270.329856] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  270.338841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  271.734787] Bluetooth: hci0: command tx timeout
[  271.797923] Bluetooth: hci1: command tx timeout
[  271.989746] Bluetooth: hci2: command tx timeout
[  272.061904] Bluetooth: hci3: command tx timeout
[  272.117940] Bluetooth: hci4: command tx timeout
[  272.250323] Bluetooth: hci5: command tx timeout
[  272.438166] Bluetooth: hci7: command tx timeout
[  272.566961] Bluetooth: hci6: command tx timeout
[  273.782732] Bluetooth: hci0: command tx timeout
[  273.847850] Bluetooth: hci1: command tx timeout
[  274.037872] Bluetooth: hci2: command tx timeout
[  274.102199] Bluetooth: hci3: command tx timeout
[  274.165828] Bluetooth: hci4: command tx timeout
[  274.293822] Bluetooth: hci5: command tx timeout
[  274.485789] Bluetooth: hci7: command tx timeout
[  274.620643] Bluetooth: hci6: command tx timeout
[  275.832682] Bluetooth: hci0: command tx timeout
[  275.894818] Bluetooth: hci1: command tx timeout
[  276.085772] Bluetooth: hci2: command tx timeout
[  276.150668] Bluetooth: hci3: command tx timeout
[  276.215359] Bluetooth: hci4: command tx timeout
[  276.341665] Bluetooth: hci5: command tx timeout
[  276.534691] Bluetooth: hci7: command tx timeout
[  276.661952] Bluetooth: hci6: command tx timeout
[  277.878997] Bluetooth: hci0: command tx timeout
[  277.942216] Bluetooth: hci1: command tx timeout
[  278.133884] Bluetooth: hci2: command tx timeout
[  278.199810] Bluetooth: hci3: command tx timeout
[  278.261684] Bluetooth: hci4: command tx timeout
[  278.392637] Bluetooth: hci5: command tx timeout
[  278.582752] Bluetooth: hci7: command tx timeout
[  278.709743] Bluetooth: hci6: command tx timeout
[  332.042923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  332.056314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  332.061169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  332.074959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  332.078368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  332.079461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  332.103107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  332.104930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  332.106254] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  332.111255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  332.113098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  332.114333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  332.178546] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  332.190123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  332.192893] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  332.196271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  332.198702] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  332.200698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  332.251203] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  332.252807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  332.256822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  332.270942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  332.272816] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  332.274848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.312452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  332.324357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  332.327313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  332.331795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  332.334838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  332.339736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  332.344791] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  332.345916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  332.346706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  332.365217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  332.366909] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  332.368087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  332.392524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  332.426906] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  332.455515] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  332.476896] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  332.501844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  332.507009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  332.731271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  332.742871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  332.785991] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  332.839719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  332.844365] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  332.848494] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  334.133756] Bluetooth: hci1: command tx timeout
[  334.133791] Bluetooth: hci0: command tx timeout
[  334.262787] Bluetooth: hci2: command tx timeout
[  334.389699] Bluetooth: hci3: command tx timeout
[  334.453787] Bluetooth: hci4: command tx timeout
[  334.453836] Bluetooth: hci5: command tx timeout
[  334.646698] Bluetooth: hci6: command tx timeout
[  334.965897] Bluetooth: hci7: command tx timeout
[  336.181696] Bluetooth: hci1: command tx timeout
[  336.183196] Bluetooth: hci0: command tx timeout
[  336.309671] Bluetooth: hci2: command tx timeout
[  336.438638] Bluetooth: hci3: command tx timeout
[  336.501755] Bluetooth: hci4: command tx timeout
[  336.501802] Bluetooth: hci5: command tx timeout
[  336.693969] Bluetooth: hci6: command tx timeout
[  337.013993] Bluetooth: hci7: command tx timeout
[  338.231646] Bluetooth: hci0: command tx timeout
[  338.232223] Bluetooth: hci1: command tx timeout
[  338.357793] Bluetooth: hci2: command tx timeout
[  338.486756] Bluetooth: hci3: command tx timeout
[  338.549911] Bluetooth: hci5: command tx timeout
[  338.550181] Bluetooth: hci4: command tx timeout
[  338.741792] Bluetooth: hci6: command tx timeout
[  339.061701] Bluetooth: hci7: command tx timeout
[  340.277909] Bluetooth: hci1: command tx timeout
[  340.278451] Bluetooth: hci0: command tx timeout
[  340.405678] Bluetooth: hci2: command tx timeout
[  340.534191] Bluetooth: hci3: command tx timeout
[  340.597675] Bluetooth: hci5: command tx timeout
[  340.598836] Bluetooth: hci4: command tx timeout
[  340.789690] Bluetooth: hci6: command tx timeout
[  341.110630] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:46:32  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806ce09b20 RCX=0000000000000001 RDX=1ffff1100d9c1365
RSI=ffffffff8481ceef RDI=ffff88806ce09b28 RBP=000000000000001b RSP=ffff88806ce09a38
R8 =0000000000000001 R9 =ffff88806ce09a98 R10=000000000003c001 R11=000000000000334b
R12=ffff88806ce09b20 R13=0000000000000000 R14=ffff88800a588000 R15=ffff88800dcd35e8
RIP=ffffffff813e8fbe RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f340df77028 CR3=000000002af58000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff819221de RDX=0000000000009221
RSI=0000000000009221 RDI=ffffffff86c43070 RBP=ffff88806cf09ad0 RSP=ffff88806cf09a08
R8 =0000000000000000 R9 =ffff88806cf09ab8 R10=000000000003c001 R11=000000000002b837
R12=ffff88806cf09ad8 R13=ffff88806cf09ac0 R14=ffff88806cf09ab9 R15=ffff88806cf09a78
RIP=ffffffff81149040 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc6ba212008 CR3=000000001a056000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000