syzkaller login: [ 57.767750] sshd (240) used greatest stack depth: 22944 bytes left Warning: Permanently added '[localhost]:58567' (ECDSA) to the list of known hosts. 2024/10/25 06:12:38 fuzzer started 2024/10/25 06:12:38 dialing manager at localhost:45639 [ 69.053506] cgroup: Unknown subsys name 'net' [ 69.176750] cgroup: Unknown subsys name 'cpuset' [ 69.197545] cgroup: Unknown subsys name 'rlimit' 2024/10/25 06:12:55 syscalls: 200 2024/10/25 06:12:55 code coverage: enabled 2024/10/25 06:12:55 comparison tracing: enabled 2024/10/25 06:12:55 extra coverage: enabled 2024/10/25 06:12:55 setuid sandbox: enabled 2024/10/25 06:12:55 namespace sandbox: enabled 2024/10/25 06:12:55 Android sandbox: enabled 2024/10/25 06:12:55 fault injection: enabled 2024/10/25 06:12:55 leak checking: enabled 2024/10/25 06:12:55 net packet injection: enabled 2024/10/25 06:12:55 net device setup: enabled 2024/10/25 06:12:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/25 06:12:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/25 06:12:55 USB emulation: enabled 2024/10/25 06:12:55 hci packet injection: enabled 2024/10/25 06:12:55 wifi device emulation: enabled 2024/10/25 06:12:55 802.15.4 emulation: enabled 2024/10/25 06:12:56 fetching corpus: 0, signal 0/0 (executing program) 2024/10/25 06:12:57 starting 8 fuzzer processes 06:12:57 executing program 0: r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='][]&-&*\x00', &(0x7f0000000080)="0111cdd1d5762d00bc5c96bb953b8132b479280c7eb51816783b5ce6d5ddfe78bfe50b641ce3e768dd99ad60b3de807cfc32a40f44e8b4f407d1b92a1fa7db8cd8df2cda5146665dc23bef00b52922db1c51e7f19b1322a82e991fb2bdf96a2021439edd8b37862ce239d2cf5edf684b402d5dc9d391b20e7ddf7b320f971234d712df21c24b0ec954a8835bc3b27ff33084ffa72f67b12abea024b7d14050b9a44f9ca048b47a8a1302cb24a96ac6dff346fce221737485364cc8fbcc59436379789322c0ec435229a0f92a3f0ac882fd4b8440edb8bb663107d8e67b41b1464d2b9de1acc939b9eff5fafe7cff8a043760", 0xf2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400200, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000200)='/dev/vcsa\x00', &(0x7f0000000240)="08798bb1c8c91d2e623627e7cf425b830f82a3c5a4f447a7ae422e5d6d3b7744bd1dbfb91bfb40631b81ee7c5a7835db6019d5f23a782c0916eb69765776890e22aeb77dc6e316b31e81c5a56188848b6ebbf283a350eefc1f8c7ed05948e0f6e8e39df40747775f3eace8c3bca1d29c496d4d6c99e3500f0ab9ee9117a9cd824e4ca565a4713db6b61d9dee67c29d13897f8a7c", 0x94) getsockname(r1, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000380)=0x80) fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x48810) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x80280, 0x0) r6 = socket(0x1, 0x800, 0x200) ioctl$sock_ifreq(r6, 0x8942, &(0x7f0000000540)={'geneve1\x00', @ifru_flags}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xfd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c840}, 0x200008c1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x81, 0x7f, 0x49, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x80, 0x1000, 0x5}}) r7 = socket$inet(0x2, 0x2, 0x81) recvmmsg(r7, &(0x7f0000005b80)=[{{&(0x7f0000000780)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000800)=""/93, 0x5d}, {&(0x7f0000000880)=""/189, 0xbd}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/219, 0xdb}, {&(0x7f0000000c40)=""/56, 0x38}, {&(0x7f0000000c80)=""/41, 0x29}, {&(0x7f0000000cc0)=""/188, 0xbc}], 0x8, &(0x7f0000000e00)=""/34, 0x22}, 0x2}, {{&(0x7f0000000e40)=@rc, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2, &(0x7f0000002f00)=""/207, 0xcf}}, {{&(0x7f0000003000)=@nl=@unspec, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003080)=""/206, 0xce}, {&(0x7f0000003180)=""/84, 0x54}, {&(0x7f0000003200)=""/68, 0x44}, {&(0x7f0000003280)=""/29, 0x1d}, {&(0x7f00000032c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}, {&(0x7f0000003380)=""/232, 0xe8}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/227, 0xe3}, {&(0x7f0000004580)=""/40, 0x28}], 0xa}, 0x401}, {{&(0x7f0000004680)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/132, 0x84}, {&(0x7f00000057c0)=""/93, 0x5d}, {&(0x7f0000005840)=""/165, 0xa5}, {&(0x7f0000005900)=""/80, 0x50}, {&(0x7f0000005980)=""/215, 0xd7}], 0x6, &(0x7f0000005b00)=""/109, 0x6d}, 0x7710}], 0x4, 0x0, 0x0) r8 = fsmount(r0, 0x0, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005cc0), r6) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000005dc0)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005d80)={&(0x7f0000005d00)={0x50, r9, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7a}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x40}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1f}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) 06:12:57 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x3a90c0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x59}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040001}, 0x840) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4000010) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x50c0) r2 = accept(r0, &(0x7f0000000500)=@ieee802154, &(0x7f0000000580)=0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfe00}, @NL80211_ATTR_FRAME_MATCH={0x9, 0x5b, "194186448e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x844) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x70, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x2, 0x0, 0x0, {0x8, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x5d5, 0xb8}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000002c00)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000002bc0)={&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/116, 0x74}, {&(0x7f0000001900)=""/139, 0x8b}, {&(0x7f00000019c0)=""/170, 0xaa}, {&(0x7f0000001a80)=""/35, 0x23}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000002b40)=""/73, 0x49}, 0x0, 0x100, 0x0, {0x2}}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40842}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r5) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x58, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}}, 0x40000) accept4(r2, &(0x7f0000002f80)=@caif, &(0x7f0000003000)=0x80, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x64, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0xd81c) 06:12:57 executing program 1: sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) set_thread_area(&(0x7f0000000100)={0x200, 0x1000, 0x1000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8200480}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0xa00, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x884}, 0x11c) r2 = socket(0x5, 0x800, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}]}, 0x4c}}, 0x21) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x100}, 0x20000080) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe0, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x14}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1ff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa8, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9f, 0x1, "6f38e5e7ba6def0bd1b7ea66f3477199dfd0e5c92496eaab9ef730cbcfc08589eb0da2aeff00d1fc865fa5d543a5cc8746c6d31d3ebfdf4bf5c580c3b9cbe7e742904779f83c248d7de4e62b258179851cf900eca4782e9bf8c0618debe5354ed174eb5ee35e2714c341aa9d20b085f1da4f576fdd5926f4751e37c039c9d7ddb7a4484396f4edf53e1619f2d36eb8ebba1b663ea547d32d2719bc"}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000900)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) 06:12:57 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40001) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0xc00, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x20}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}}, 0x40014) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x40088c4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r3) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x33}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x3b0f0fb08e6efc98}, 0x4008000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r1) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r8, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x48000) [ 87.283808] audit: type=1400 audit(1729836777.786:7): avc: denied { execmem } for pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:12:57 executing program 4: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/202) semop(0x0, &(0x7f0000000100)=[{0x0, 0x3, 0x800}, {0x1, 0x9, 0x1000}, {0x0, 0x0, 0x1000}], 0x3) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000140)=""/22) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000180)=""/172) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000280)={0x800, 0x20, 0x7, 0x20, 0x10000}, 0x48) semop(0xffffffffffffffff, &(0x7f0000000300)=[{0xf704193bf7ae6b42, 0x4, 0x800}], 0x1) r1 = semget$private(0x0, 0x3, 0x2d4) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000340)=""/64) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000380)=""/121) r2 = semget(0x1, 0x1, 0x505) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000400)=""/236) semget(0x0, 0x0, 0x48) r3 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@ax25={{0x3, @default}, [@rose, @remote, @netrom, @bcast, @rose, @null, @null, @bcast]}, &(0x7f0000000580)=0x80, 0x0) getsockname(r3, &(0x7f00000005c0)=@nl=@proc, &(0x7f0000000640)=0x80) r4 = semget$private(0x0, 0x4, 0x18) semctl$IPC_RMID(r4, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) semctl$SEM_STAT(r1, 0x1, 0x12, &(0x7f0000000680)=""/229) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000780)=0x7) 06:12:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0xfffffffffffffffe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4805}, 0x4000) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20008040) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x59c2f63afae73ae2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x20014000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x1) r4 = fsmount(0xffffffffffffffff, 0x1, 0x10d) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x59}}}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x0, 0x7, 0x0, {0x9, 0x5c, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x6, 0x7e, 0x1}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x54}}, 0x8008884) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x101004}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0xc0050) r7 = accept(r4, &(0x7f0000000c40)=@can, &(0x7f0000000cc0)=0x80) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x6]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x551}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x20, 0x3}}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x8081) 06:12:57 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0xe5, 0x3, 0x1fc3, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x3, 0xffffffff}}) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffffffffffffd2c4, 0x200400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @enter_looper], 0x48, 0x0, &(0x7f0000000140)="1e9d92f2cbef8a86f46f8cb436f1b89580f82c0034f41f7c6df8cb32098d0633b78537aaabf5189e29d08fd89dbf74dce494ac33d5473b1a4847516501a3ea0fd9691455b3422ea2"}) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}], 0x6, &(0x7f0000000600)=""/218, 0xda}, 0x60) syz_io_uring_setup(0x1a2e, &(0x7f0000000740)={0x0, 0x5ce9, 0x5, 0x3, 0x14f, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)=0x0) r2 = syz_io_uring_setup(0x7dd2, &(0x7f0000000840)={0x0, 0x5160, 0x4, 0x0, 0x4a, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) syz_io_uring_submit(0x0, r1, &(0x7f0000000940)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r2, 0xe7d, 0x5, 0x16, 0x2}, 0x7) r3 = fsopen(&(0x7f0000000c80)='hugetlbfs\x00', 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000f00)={0xf8, 0x0, &(0x7f0000000d80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000a40)={@flat=@binder={0x73622a85, 0xa, 0x2}, @fda={0x66646185, 0x7, 0x2, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/186, 0xba, 0x0, 0xa}}, &(0x7f0000000ac0)={0x0, 0x18, 0x38}}}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b00)={@flat=@binder={0x73622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @fda={0x66646185, 0x3, 0x0, 0xe}}, &(0x7f0000000b80)={0x0, 0x18, 0x30}}}, @acquire_done, @release={0x40046306, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000cc0)={@flat=@binder={0x73622a85, 0x10b, 0x1}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x20}}, &(0x7f0000000d40)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x53, 0x0, &(0x7f0000000e80)="2fd3e0c94051c22f8708074bfc809aa7088e8d5570f0ae3bc866211b434dbe75845737d29f57e8417ba2dec599d22ee96a7e8be66b54696076ba7af3b77e827b8e72b8724bf07c4b5950975f9d44e7b3b2143e"}) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000002140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000000fc0)={0x1110, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1a71}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xd1, 0x5b, "0f98d183d0f6aad991d082bd7796db38946299351f32e518f8cba178db97220aece82a6d6d748b3ab6a8f30d8ef634c9dc10615ca399ddb8745a6497038e094e58ee7c7cec19d0a7928cb18717b4756673b6715d64d03ee9014bcd3cf518636d3fff47692ecfa60813a51a327dbda4523a526d3cc844396ea4ce1fec623879390feca04b1647a92940782591691201647fcb51be011335a9fedc93598733a384cdafb9b7c7b1aee1d82167644edb4218f2d6a8a2b81f2b1a5c2f20e7ee454db5af5eb0049e405afd7ec83aac7f"}]}, 0x1110}, 0x1, 0x0, 0x0, 0x880}, 0x0) shmctl$SHM_UNLOCK(r4, 0xc) r6 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r6, 0x2, &(0x7f0000002180)=""/59) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x28}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4884) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000022c0)={{{@in=@multicast2, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000023c0)=0xe8) shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000002400)=""/119) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000002480)=""/189) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000002540)=""/4096) 06:12:57 executing program 7: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/120) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f00000000c0)=""/104) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000140)=""/120) r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000805) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000300)=""/193) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800}, 0x800) semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000480)=""/4096) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) semop(0x0, &(0x7f0000001480)=[{0x2, 0x828f}, {0x1, 0x6}, {0x1, 0xfff7, 0x1000}, {0x1, 0x166, 0x800}, {0x2, 0x9, 0x1000}, {0x0, 0xf49, 0x1800}], 0x6) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x492) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000015c0)={{{@in=@private, @in=@loopback}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000016c0)=0xe8) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000001cc0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001740)={0x52c, 0x0, 0x413, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb9}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffff9}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x254, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc5, 0x1, "a3be430808c07d812913f97f099e4b2f7275909205205cb9c0ebdd543b019104f67c308d90f0334bdda3acbc2a195d787882cacedd03a05fc745ae13a75b9cdbae9cbfccde9377846bfd346e9b14cc337f025e2f3c67eec84fb803e4c7a22d0c9048b20ef7e0c1d134101c84eb7fddfd5576e82143a4f2e400b8efccc287323c82382cc2f7f67d66c970ec39b33c37fb942fc851e51e2e564f691d2a72cb2e166efad7a4db9fa3501b3548182e43cc64b3592e8ef84f7d873aaf523e5a032388af"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x77, 0x1, "3a62b07f8a5c9aafa5a76b0b2315d2dac8df36be668539d08753f8f91405d9f7e64108df96de795cdaee19001681eca1b02591ed0225d64f634bf78f138f115e7d419682e961d41de9f943bd64ac460e53280ba0e84aa40695499a1a1064c26ab2295e96d9c2bddbec255b2690da2376622b11"}}, {0x108, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x103, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c8, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe8, 0x2, "aaccdf31bfc8b735b88c98d1df3e4ec8bbec999ce84023fc12ffb45721b5a74b8a15c4c11e972611782764952ce3215a6a1a0e75a16c41549650d5856a1cb42eaf83168a5f24084692ee9e71b877152a1eb0b9477733d10ab5e7094d92b9b1df8853b6466fecfe1df73fc07312a5ea9265cdeaa9bc7ac9fe28267fe21316c4c9566875e1f541f52e27e2cb7e65af528ab3ce335811667bcf178459529a7db3db93ee37fb9d36394c975501836ef8d7aed1302025238357727be38a00798e4eb50143c114b42bf96e965083e36caccd11964a9f54050a25a7e39df6674adc9c59e5d4b235"}}, {0xd8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xd1, 0x2, "fa415d69a1238628916d56da7ecaa848036256e2b9b132fa0825a6344e206208ae348bdb39e06e431d45f8cc3a75faa6fc28480b795145e2f7944c07b3e8fefc274af0e5a4252883884a4f700f01265307d047b691aae89817cf6d665eecbecaeb879310ae482b83db215cefa22a1f7c782b4146396fe570f43c3273de9648644b3da54790b2638f2c2824f088752865e07f146e8e90b43e54e6ff7735171acc73e8443f8100543b282c8830bdeca6d5c3ef70cc76da69f5ad804e0c309710a44acaa0a4110f6af6d767d6dfff"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb4, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x38, 0x1, "69a5c7879295e29b6e6dc93aa44452d4896c628a237f52ea3a7b554becde41d8f1d1da3ea9719681de0c147645ffc76f0b569a70"}}, {0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe, 0x2, "10ec06d9aa2898bb7759"}}, {0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x5b, 0x2, "76f1d62c708c6e859ec1c6c34712b80698f3ff66f3bfaf975ae9833adea8aebbd188e2689f115e19b9308ba28f4b8f0bcf3160f0e008f33a10d9e88874095ecb40e72ee0d5582693f14e322735b7fd0b96c7ba0c51d0fa"}}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x1}, 0x4c090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5f07, 0x35}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3000}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x800) [ 88.849990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.851586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.852801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.873885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.874930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.876199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.877101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.882381] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.883222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.884521] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 88.887322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 88.890797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.893970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.896556] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.898623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.899529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.900103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.904250] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.905588] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 88.907294] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.908559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 88.919636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.923903] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 88.924977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.926927] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.928207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.934266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.939603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.942166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.944000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.950916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 88.952998] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 88.965237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 88.967573] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 88.971034] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 88.974800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.983584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.985681] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.988034] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.990798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.997657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.013040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.015434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.020408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.022073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.034686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.095130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.129918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.935476] Bluetooth: hci1: command tx timeout [ 90.997713] Bluetooth: hci4: command tx timeout [ 90.998392] Bluetooth: hci0: command tx timeout [ 91.061471] Bluetooth: hci2: command tx timeout [ 91.063650] Bluetooth: hci6: command tx timeout [ 91.064226] Bluetooth: hci7: command tx timeout [ 91.192001] Bluetooth: hci3: command tx timeout [ 91.318418] Bluetooth: hci5: command tx timeout [ 92.981475] Bluetooth: hci1: command tx timeout [ 93.045551] Bluetooth: hci0: command tx timeout [ 93.046085] Bluetooth: hci4: command tx timeout [ 93.109531] Bluetooth: hci2: command tx timeout [ 93.110994] Bluetooth: hci6: command tx timeout [ 93.112853] Bluetooth: hci7: command tx timeout [ 93.238412] Bluetooth: hci3: command tx timeout [ 93.365694] Bluetooth: hci5: command tx timeout [ 95.029544] Bluetooth: hci1: command tx timeout [ 95.093504] Bluetooth: hci0: command tx timeout [ 95.095015] Bluetooth: hci4: command tx timeout [ 95.158711] Bluetooth: hci6: command tx timeout [ 95.160162] Bluetooth: hci7: command tx timeout [ 95.161486] Bluetooth: hci2: command tx timeout [ 95.285433] Bluetooth: hci3: command tx timeout [ 95.413446] Bluetooth: hci5: command tx timeout [ 97.077458] Bluetooth: hci1: command tx timeout [ 97.141532] Bluetooth: hci4: command tx timeout [ 97.142943] Bluetooth: hci0: command tx timeout [ 97.205484] Bluetooth: hci2: command tx timeout [ 97.214310] Bluetooth: hci6: command tx timeout [ 97.215724] Bluetooth: hci7: command tx timeout [ 97.334266] Bluetooth: hci3: command tx timeout [ 97.461966] Bluetooth: hci5: command tx timeout [ 151.359003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.362829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.365827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.372830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.386677] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 151.389176] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.441127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.443525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.444946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.446076] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.447493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.452070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.459473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.462903] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.465206] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.497223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.498768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.501949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.503946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.503956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.506789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.509750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.511622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.513685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.590044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.596476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.599087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.602646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.605827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.612210] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.614477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.620964] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.634002] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.652162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.666619] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.671561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.683508] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.716745] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.745270] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.752994] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.761737] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.764375] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.773983] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.796353] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 151.796641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.802550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.805226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 151.806825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.461452] Bluetooth: hci0: command tx timeout [ 153.525440] Bluetooth: hci2: command tx timeout [ 153.590390] Bluetooth: hci1: command tx timeout [ 153.590410] Bluetooth: hci3: command tx timeout [ 153.663470] Bluetooth: hci4: command tx timeout [ 153.782469] Bluetooth: hci5: command tx timeout [ 153.909485] Bluetooth: hci7: command tx timeout [ 153.909506] Bluetooth: hci6: command tx timeout [ 155.510732] Bluetooth: hci0: command tx timeout [ 155.573963] Bluetooth: hci2: command tx timeout [ 155.637418] Bluetooth: hci1: command tx timeout [ 155.637447] Bluetooth: hci3: command tx timeout [ 155.702513] Bluetooth: hci4: command tx timeout [ 155.830698] Bluetooth: hci5: command tx timeout [ 155.957446] Bluetooth: hci7: command tx timeout [ 155.957508] Bluetooth: hci6: command tx timeout [ 157.558416] Bluetooth: hci0: command tx timeout [ 157.622423] Bluetooth: hci2: command tx timeout [ 157.687469] Bluetooth: hci3: command tx timeout [ 157.687529] Bluetooth: hci1: command tx timeout [ 157.749416] Bluetooth: hci4: command tx timeout [ 157.877435] Bluetooth: hci5: command tx timeout [ 158.005477] Bluetooth: hci7: command tx timeout [ 158.005580] Bluetooth: hci6: command tx timeout [ 159.606432] Bluetooth: hci0: command tx timeout [ 159.669404] Bluetooth: hci2: command tx timeout [ 159.733627] Bluetooth: hci3: command tx timeout [ 159.734115] Bluetooth: hci1: command tx timeout [ 159.797457] Bluetooth: hci4: command tx timeout [ 159.925406] Bluetooth: hci5: command tx timeout [ 160.053447] Bluetooth: hci7: command tx timeout [ 160.054793] Bluetooth: hci6: command tx timeout [ 213.636887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.638467] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.639680] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.643005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.644649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.645760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.762005] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.766083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.769713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.771180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.772370] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.774704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.775790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.777992] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.779249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.789615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.795720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.799169] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.825873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.837587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.854645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.857483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.878405] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.893740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.919998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.927643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.929060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.940502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.943516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.944651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.952780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.969501] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.974776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.002072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.014691] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.019232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.021749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.023576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.025744] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.028492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.030010] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.031134] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.058599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.063600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.105621] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.134711] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.139977] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 214.141461] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.669480] Bluetooth: hci0: command tx timeout [ 215.798383] Bluetooth: hci2: command tx timeout [ 215.862404] Bluetooth: hci1: command tx timeout [ 215.990522] Bluetooth: hci4: command tx timeout [ 215.990619] Bluetooth: hci3: command tx timeout [ 216.054409] Bluetooth: hci7: command tx timeout [ 216.117445] Bluetooth: hci5: command tx timeout [ 216.246600] Bluetooth: hci6: command tx timeout [ 217.719382] Bluetooth: hci0: command tx timeout [ 217.846445] Bluetooth: hci2: command tx timeout [ 217.909385] Bluetooth: hci1: command tx timeout [ 218.038076] Bluetooth: hci3: command tx timeout [ 218.038416] Bluetooth: hci4: command tx timeout [ 218.102352] Bluetooth: hci7: command tx timeout [ 218.165539] Bluetooth: hci5: command tx timeout [ 218.294345] Bluetooth: hci6: command tx timeout [ 219.765400] Bluetooth: hci0: command tx timeout [ 219.893395] Bluetooth: hci2: command tx timeout [ 219.958515] Bluetooth: hci1: command tx timeout [ 220.085443] Bluetooth: hci4: command tx timeout [ 220.085473] Bluetooth: hci3: command tx timeout [ 220.149574] Bluetooth: hci7: command tx timeout [ 220.215658] Bluetooth: hci5: command tx timeout [ 220.341386] Bluetooth: hci6: command tx timeout [ 221.813491] Bluetooth: hci0: command tx timeout [ 221.941446] Bluetooth: hci2: command tx timeout [ 222.005400] Bluetooth: hci1: command tx timeout [ 222.133474] Bluetooth: hci4: command tx timeout [ 222.137825] Bluetooth: hci3: command tx timeout [ 222.198389] Bluetooth: hci7: command tx timeout [ 222.262432] Bluetooth: hci5: command tx timeout [ 222.390393] Bluetooth: hci6: command tx timeout [ 276.133428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.141179] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.151968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.164081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.166030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.166895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.168186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.169194] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.170934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.172095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.180485] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.181542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.304251] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.320422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.326397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.331839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.335806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.338982] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.342074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.350251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.355914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.356858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.360464] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.361091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.371821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.374967] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.376473] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.393877] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.395805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.400158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.402726] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.407096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.432911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.448250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.453146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.456485] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.460536] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 276.461809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.462565] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.467757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.470013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.475483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.476809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.481196] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 276.482074] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.483836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.488717] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 276.489982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.199371] Bluetooth: hci1: command tx timeout [ 278.200383] Bluetooth: hci0: command tx timeout [ 278.390565] Bluetooth: hci3: command tx timeout [ 278.453404] Bluetooth: hci4: command tx timeout [ 278.454667] Bluetooth: hci2: command tx timeout [ 278.517652] Bluetooth: hci7: command tx timeout [ 278.518851] Bluetooth: hci5: command tx timeout [ 278.518932] Bluetooth: hci6: command tx timeout [ 280.247341] Bluetooth: hci0: command tx timeout [ 280.247879] Bluetooth: hci1: command tx timeout [ 280.437385] Bluetooth: hci3: command tx timeout [ 280.501392] Bluetooth: hci2: command tx timeout [ 280.501427] Bluetooth: hci4: command tx timeout [ 280.565534] Bluetooth: hci6: command tx timeout [ 280.566032] Bluetooth: hci7: command tx timeout [ 280.566583] Bluetooth: hci5: command tx timeout [ 282.293613] Bluetooth: hci0: command tx timeout [ 282.293783] Bluetooth: hci1: command tx timeout [ 282.485678] Bluetooth: hci3: command tx timeout [ 282.550354] Bluetooth: hci4: command tx timeout [ 282.550392] Bluetooth: hci2: command tx timeout [ 282.629461] Bluetooth: hci5: command tx timeout [ 282.630012] Bluetooth: hci7: command tx timeout [ 282.630714] Bluetooth: hci6: command tx timeout [ 284.341474] Bluetooth: hci0: command tx timeout [ 284.342009] Bluetooth: hci1: command tx timeout [ 284.533411] Bluetooth: hci3: command tx timeout [ 284.597406] Bluetooth: hci2: command tx timeout [ 284.597914] Bluetooth: hci4: command tx timeout [ 284.661384] Bluetooth: hci6: command tx timeout [ 284.662443] Bluetooth: hci7: command tx timeout [ 284.662922] Bluetooth: hci5: command tx timeout [ 338.570762] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.573792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.578632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.581565] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.585736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.588811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.590518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.592082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.598106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.599566] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.600714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.605626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.686651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.691342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.692529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.703561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.705632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.706631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.714403] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.720843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 338.721746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.727963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.732580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 338.761782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.763104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.764543] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.765879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.769400] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.771221] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 338.772487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.789150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 338.790573] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 338.791736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 338.796766] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 338.805154] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 338.808571] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.809726] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.829498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.869885] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.879797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.880682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.891524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.896208] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.917491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.928523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 338.958889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.975918] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 338.981526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.661384] Bluetooth: hci0: command tx timeout [ 340.662252] Bluetooth: hci1: command tx timeout [ 340.789673] Bluetooth: hci2: command tx timeout [ 340.790557] Bluetooth: hci3: command tx timeout [ 340.854336] Bluetooth: hci4: command tx timeout [ 340.855046] Bluetooth: hci5: command tx timeout [ 341.046422] Bluetooth: hci6: command tx timeout [ 341.109445] Bluetooth: hci7: command tx timeout [ 342.709505] Bluetooth: hci0: command tx timeout [ 342.710032] Bluetooth: hci1: command tx timeout [ 342.837507] Bluetooth: hci3: command tx timeout [ 342.838023] Bluetooth: hci2: command tx timeout [ 342.901400] Bluetooth: hci5: command tx timeout [ 342.901895] Bluetooth: hci4: command tx timeout [ 343.093424] Bluetooth: hci6: command tx timeout [ 343.157575] Bluetooth: hci7: command tx timeout [ 344.757387] Bluetooth: hci1: command tx timeout [ 344.757916] Bluetooth: hci0: command tx timeout [ 344.885479] Bluetooth: hci3: command tx timeout [ 344.886044] Bluetooth: hci2: command tx timeout [ 344.950311] Bluetooth: hci5: command tx timeout [ 344.951693] Bluetooth: hci4: command tx timeout [ 345.141396] Bluetooth: hci6: command tx timeout [ 345.206503] Bluetooth: hci7: command tx timeout [ 346.805414] Bluetooth: hci0: command tx timeout [ 346.806934] Bluetooth: hci1: command tx timeout [ 346.934475] Bluetooth: hci2: command tx timeout [ 346.936359] Bluetooth: hci3: command tx timeout [ 346.997375] Bluetooth: hci4: command tx timeout [ 346.998807] Bluetooth: hci5: command tx timeout [ 347.189397] Bluetooth: hci6: command tx timeout [ 347.253480] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 06:18:08 Registers: info registers vcpu 0 RAX=ffffffff86bee0f6 RBX=0000000000000001 RCX=ffffffff86bee0f6 RDX=dffffc0000000000 RSI=ffffffff86bee0f6 RDI=ffffffff8673bf4c RBP=ffff8880254d7ab0 RSP=ffff8880254d79e8 R8 =ffffffff86bee0f6 R9 =ffff8880254d7a98 R10=000000000003c001 R11=00000000000c2f81 R12=ffff8880254d7ab8 R13=ffff8880254d7aa0 R14=ffff8880254d7a99 R15=ffff8880254d7a58 RIP=ffffffff81149312 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd04b35b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd04b4f64a1 CR3=0000000018af8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000ff0000000000000000 XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff818e5a3f RCX=0000000000000001 RDX=1ffff11006a99f20 RSI=ffff8880354cfc90 RDI=ffffffff818e5a3f RBP=ffffffff818e5a3f RSP=ffff8880354cf858 R8 =0000000000000001 R9 =ffff8880354cf8e8 R10=000000000003c001 R11=00000000000223e3 R12=ffff8880354cf970 R13=0000000000000000 R14=ffff88800f110000 R15=0000000000092cc0 RIP=ffffffff8121e896 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff48f80f269 CR3=0000000026032000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000