Warning: Permanently added '[localhost]:47893' (ECDSA) to the list of known hosts.
2024/10/27 04:29:44 fuzzer started
2024/10/27 04:29:45 dialing manager at localhost:45639
syzkaller login: [   74.991423] cgroup: Unknown subsys name 'net'
[   75.067173] cgroup: Unknown subsys name 'cpuset'
[   75.081169] cgroup: Unknown subsys name 'rlimit'
2024/10/27 04:30:10 syscalls: 200
2024/10/27 04:30:10 code coverage: enabled
2024/10/27 04:30:10 comparison tracing: enabled
2024/10/27 04:30:10 extra coverage: enabled
2024/10/27 04:30:10 setuid sandbox: enabled
2024/10/27 04:30:10 namespace sandbox: enabled
2024/10/27 04:30:10 Android sandbox: enabled
2024/10/27 04:30:10 fault injection: enabled
2024/10/27 04:30:10 leak checking: enabled
2024/10/27 04:30:10 net packet injection: enabled
2024/10/27 04:30:10 net device setup: enabled
2024/10/27 04:30:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/27 04:30:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/27 04:30:10 USB emulation: enabled
2024/10/27 04:30:10 hci packet injection: enabled
2024/10/27 04:30:10 wifi device emulation: enabled
2024/10/27 04:30:10 802.15.4 emulation: enabled
2024/10/27 04:30:10 fetching corpus: 0, signal 0/0 (executing program)
2024/10/27 04:30:12 starting 8 fuzzer processes
04:30:12 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
read$ptp(0xffffffffffffffff, &(0x7f0000000100)=""/240, 0xf0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
r5 = syz_open_dev$loop(&(0x7f0000000400), 0xb6, 0x480000)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000440))
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "f7c5d46e0507609ad067565db02691d25c84e00506e998d6b19c0245a1fee793"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "383604ffff60817b1f1b87239417196299aae94ba6f0b832d0df2f1d20c0141d"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x4)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x80001)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2854}, 0x400440d0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000940)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000a80)={'wpan1\x00'})

04:30:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x14)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x40000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x28040000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x508c0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r4)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xd99e2396311ea888}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, r7, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1af4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000085}, 0x4000000)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='cgroup.threads\x00', 0x2, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040042)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9)

04:30:12 executing program 2:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r0=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x78}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0040, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000014)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1)
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x8c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x14)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000d40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f00000009c0)={0x31c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1b, 0xfc, "be69534c911513edcedd6eb4aacbcb84e6b2b676457c92"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "d5e715dfb719f0f89b"}, @NL80211_ATTR_FILS_ERP_REALM={0xbf, 0xfa, "0310a4899e9797f43b476c4fd0f0e86abd5681129cb2c820e3c8eee27a2f90d3d6e0feae749a3f83d0f196174f7535009f01737c8e864b8ce6e4f377479ca64500ad1a1a8e615f3f2d535f67420da9a7c3e023a6a00757debebe0a1c7b72bac8fb8713b6e2b2295fadf1a0c8871e6a74744d6a582960744229df28f5e1f5dc19f196bb3e9dd2f78c7f4cda92efdf354f9724a29ebc81080dc2266b2d2f59bdcab78312e47ce9ce7d08a2f9a917b0ec67e92daa792cb347557ed15a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_REALM={0x72, 0xfa, "1a2170f96d24ac1bbd5dc14fe58b244fdb3944fae5c28735b3f0dc5e3720e3ae85a9819f02371e50de7e7945c9dd67fed33992c91bd4a2321fce256a1873bf5867bcd49b4eab54b80f2d70f7cd3e9c46e074d3ae3f452158cc484adbeb3a1d97844077807b81cc13f18e70342511"}, @NL80211_ATTR_FILS_ERP_REALM={0xdb, 0xfa, "56a33f9844b86bb48e5fb978308b4d938254eaeca9cae1495f3c357cb4f44c6d332c94b9ec257b4f36b26bafa5c9d7d7d278698e9d8f55f138064dd72455a8bd71d44c93d1ddaeb3b8711fcedb513085fa2831263016b4074c7ab9e6bf37a2a078ee152fcd56dbd0d49f66da0936fb4d5dd91ffb9e6c6b720b5040a324b0734578ca063b12b33d7be50d6fface28c868b117c3dee0e28181026f3a85344bf4c3b2d6e8d7759b1a0384441e489b86590a9ce529d9ef206cfd9d09b0d08a349cd931b07e785f8adb6f262c0600f0b19291af4ee4c88e02dd"}, @NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "750329f946446785abcf6ffdeba1555e9fde27fad05b34469b26b9909506e81b6af22ef7c1fd5e7f2e1506d86a3e644d835d0b9fcf9514805a9722cd7f57543fbf921e023e58fa91326979e153787de904c53d569de9ea3bfec22d185696339e87440767a64f498d4b04ef30bcd73e6d3ca51df271734e064e6c34fe455704c15399cd2c3f29de414ba516668ca70d46267ab04a20b2f55373f7e327b35d25e526b26e0725d5a60f544e1e9b6afe3243ed3891b0ed3f53"}]]}, 0x31c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x48, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x29}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40001)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
syz_open_dev$usbmon(&(0x7f0000000ec0), 0x101, 0x12002)
write$P9_RREMOVE(r1, &(0x7f0000000f00)={0x7, 0x7b, 0x1}, 0x7)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x43}, @void, @val={0xc, 0x99, {0x80000000, 0x66}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x24, 0xc5, "96668a44cec02e773ba6e58e7166b8689a0beb405ac43071fcc7c40a90b7c0dd"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000020)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc001}, 0x80)
pipe2(&(0x7f0000001280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80800)
ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x6)

04:30:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000090}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x400c844)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x360000, 0x0)
r1 = clone3(&(0x7f0000000600)={0x180400, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/157, 0x9d, &(0x7f00000004c0)=""/250, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
clone3(&(0x7f0000000840)={0x80000000, &(0x7f0000000680), &(0x7f00000006c0)=<r2=>0x0, &(0x7f0000000700), {0x3}, &(0x7f0000000740)=""/105, 0x69, &(0x7f00000007c0)=""/56, &(0x7f0000000800)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
r3 = getpid()
clone3(&(0x7f0000000900)={0x20000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x2d}, &(0x7f0000000240)=""/141, 0x8d, &(0x7f0000000300)=""/25, &(0x7f00000008c0)=[r1, r2, r3, 0x0, 0x0], 0x5}, 0x58)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040884}, 0x4000)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4c900)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x11}}}}, [@NL80211_ATTR_IE={0x3f, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x30, 0x4}}, @measure_req={0x26, 0x31, {0x0, 0xb2, 0x0, "d3bae8c556a41a7b9fb0ddab3235b7c096faf9bd89ef2c7439285fa64a5e0da8beef28419b8bbc2644eaeeb7e878"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x849996bd69bb9f81}, 0x24040000)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000fc0), 0xf18, 0x105100)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x1001)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000011c0)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x14)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)={0x194, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x130, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x22004000)

[  101.262740] audit: type=1400 audit(1730003412.212:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:30:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
pipe2(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f00000001c0)={'\x00', 0x4, 0x0, 0x3})
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x2000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004891}, 0x20000000)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r7, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x350}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c881}, 0xc080)
r9 = perf_event_open$cgroup(&(0x7f00000015c0)={0x0, 0x80, 0x7, 0x7, 0x7, 0xa8, 0x0, 0x8, 0x19210, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000001580), 0x1}, 0x0, 0x1, 0x5, 0x9, 0x3f, 0x1, 0x4, 0x0, 0xfffffffd, 0x0, 0x5}, r4, 0x2, r2, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001640)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000004000/0x5000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000580)="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", 0x1000, r9}, 0x68)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/key-users\x00', 0x0, 0x0)
recvmsg(r10, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001700)=""/223, 0xdf}, {&(0x7f0000001800)=""/27, 0x1b}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/5, 0x5}, {&(0x7f0000002880)=""/90, 0x5a}, {&(0x7f0000002900)=""/6, 0x6}], 0x6, &(0x7f00000029c0)=""/89, 0x59}, 0x2000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000002a80)={0x0, 'vlan1\x00', {0x1}, 0x6})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x38, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x20, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

04:30:12 executing program 5:
r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4820118}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480c4}, 0x44000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8008)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004005}, 0x4004)
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x4000012, 0xffffffffffffffff, 0x7ff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x11c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1ff}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x94, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}]}, 0x11c}}, 0x4040000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000080)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r7, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x292}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c880}, 0x800)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004804)

04:30:12 executing program 6:
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x4}, 0xf)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x111800, 0x0)
mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0xff)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/3, 0x3, 0x1, &(0x7f0000000140)=""/86, 0x56}, &(0x7f0000000200)=0x40)
write$P9_RREMOVE(r0, &(0x7f0000000240)={0x7, 0x7b, 0x1}, 0x7)
r2 = io_uring_setup(0x35c5, &(0x7f0000000280)={0x0, 0x7241, 0x10, 0x1, 0x8f})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r2, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000a, 0x1010, r0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/220, 0xdc, 0x0, &(0x7f0000000400)=""/234, 0xea}, &(0x7f0000000540)=0x40)
timerfd_create(0x6, 0x80000)
pipe2(&(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
close_range(r2, r3, 0x2)
r5 = openat$cgroup(r0, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0)
ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000740)={&(0x7f0000000600), &(0x7f0000000640)=""/204, 0xcc})
r6 = openat$cgroup_ro(r5, &(0x7f0000000780)='cgroup.controllers\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x46, 0xc5, "a0c42ebfd1c1c34bfb7cad7bf7bf3206c58dc179d4e39be5de955b7788a9b6c7711b3ee38602b583aa246d9fc8d90c6e520ebc7aa99c9e41666dbd93d8c0c408b888"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x50acc0d2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x8)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x400000, 0x0)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)

04:30:12 executing program 7:
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x5, 0x4})
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x7, 0x1, 0x3f})
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000140))
r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0xd970, 0x200000)
ioctl$MON_IOCQ_URB_LEN(r3, 0x9201)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
r5 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC2(r5, 0x40603d10, &(0x7f0000000280)={'\x00', 0x9, 0x3, 0x1ff})
read$ptp(r0, &(0x7f0000000300)=""/86, 0x56)
read$ptp(r4, &(0x7f0000000380)=""/92, 0x5c)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r6, 0x3)
io_setup(0x2ba, &(0x7f0000000440)=<r7=>0x0)
r8 = syz_open_dev$usbmon(&(0x7f0000000480), 0x9, 0x1)
io_cancel(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f00000004c0)="0162b13221f6232d8d15a3f578fc53b257bac039b9fed4e8d7a0ca1f8ad365d97d05be6b5b3726a58346b086ccb84b4814be088cae26bba1bb3c7d229153659edf9d93f3fb768d2bdc3bdb0f41dcfec930559d8eb875ba032f03e5f1c6de6a6bad89b36a89049d2b91b9ece90bf88a92c748b4eefa5cacb26066e024f5c45c52a0f1c75c3190b2fc53633494", 0x8c}, &(0x7f00000005c0))

[  102.739446] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  102.741101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  102.742597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  102.748887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  102.750271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  102.767149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  102.784051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.789598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  102.792107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.792140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  102.794176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.795124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  102.797495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  102.813514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  102.815317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  102.815584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  102.830680] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  102.833776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.835094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  102.836180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  102.836327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  102.842627] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  102.843695] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  102.845689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  102.850011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.881527] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  102.886053] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  102.889724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.891698] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  102.894069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.895488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.913055] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  102.914232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  102.916771] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  102.918439] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  102.919532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  102.942752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  102.946594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  102.953377] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  102.956551] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  102.972636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.974430] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  102.975593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  102.999941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  103.002515] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  103.013694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  103.016331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  103.017423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  104.945611] Bluetooth: hci0: command tx timeout
[  104.945616] Bluetooth: hci3: command tx timeout
[  104.945963] Bluetooth: hci1: command tx timeout
[  105.008282] Bluetooth: hci2: command tx timeout
[  105.072077] Bluetooth: hci6: command tx timeout
[  105.072266] Bluetooth: hci4: command tx timeout
[  105.072741] Bluetooth: hci5: command tx timeout
[  105.073328] Bluetooth: hci7: command tx timeout
[  106.992023] Bluetooth: hci1: command tx timeout
[  106.992087] Bluetooth: hci0: command tx timeout
[  106.992538] Bluetooth: hci3: command tx timeout
[  107.056325] Bluetooth: hci2: command tx timeout
[  107.120045] Bluetooth: hci5: command tx timeout
[  107.120154] Bluetooth: hci4: command tx timeout
[  107.120607] Bluetooth: hci7: command tx timeout
[  107.121153] Bluetooth: hci6: command tx timeout
[  109.042036] Bluetooth: hci0: command tx timeout
[  109.042606] Bluetooth: hci1: command tx timeout
[  109.043690] Bluetooth: hci3: command tx timeout
[  109.104147] Bluetooth: hci2: command tx timeout
[  109.168216] Bluetooth: hci5: command tx timeout
[  109.168777] Bluetooth: hci7: command tx timeout
[  109.169581] Bluetooth: hci6: command tx timeout
[  109.169607] Bluetooth: hci4: command tx timeout
[  111.089420] Bluetooth: hci3: command tx timeout
[  111.090037] Bluetooth: hci1: command tx timeout
[  111.090529] Bluetooth: hci0: command tx timeout
[  111.151930] Bluetooth: hci2: command tx timeout
[  111.216024] Bluetooth: hci4: command tx timeout
[  111.216579] Bluetooth: hci5: command tx timeout
[  111.218016] Bluetooth: hci7: command tx timeout
[  111.218082] Bluetooth: hci6: command tx timeout
[  164.806947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  164.814116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  164.820011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  164.827696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  164.831171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  164.833488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  164.923719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.926268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.927990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.938461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.941393] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  164.943553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  165.000602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.003083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.011657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.026161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.028330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  165.030487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.086062] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  165.087082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  165.102317] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  165.110250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  165.110995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  165.115199] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  165.116296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  165.119368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  165.120778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  165.127941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  165.160065] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  165.161022] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  165.161923] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  165.163485] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  165.169956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  165.170999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  165.173304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  165.174372] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  165.175469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  165.177147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  165.180022] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  165.199130] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  165.207488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  165.216289] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  165.220027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  165.221519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  165.223338] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  165.232683] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  165.237160] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  165.244132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  166.896890] Bluetooth: hci0: command tx timeout
[  167.029118] Bluetooth: hci1: command tx timeout
[  167.087951] Bluetooth: hci2: command tx timeout
[  167.280011] Bluetooth: hci5: command tx timeout
[  167.280145] Bluetooth: hci3: command tx timeout
[  167.281040] Bluetooth: hci4: command tx timeout
[  167.343911] Bluetooth: hci7: command tx timeout
[  167.344693] Bluetooth: hci6: command tx timeout
[  168.945161] Bluetooth: hci0: command tx timeout
[  169.072111] Bluetooth: hci1: command tx timeout
[  169.139111] Bluetooth: hci2: command tx timeout
[  169.328052] Bluetooth: hci3: command tx timeout
[  169.328193] Bluetooth: hci5: command tx timeout
[  169.329120] Bluetooth: hci4: command tx timeout
[  169.391934] Bluetooth: hci7: command tx timeout
[  169.392935] Bluetooth: hci6: command tx timeout
[  170.992874] Bluetooth: hci0: command tx timeout
[  171.121868] Bluetooth: hci1: command tx timeout
[  171.184944] Bluetooth: hci2: command tx timeout
[  171.377862] Bluetooth: hci4: command tx timeout
[  171.378414] Bluetooth: hci5: command tx timeout
[  171.378927] Bluetooth: hci3: command tx timeout
[  171.439964] Bluetooth: hci6: command tx timeout
[  171.440033] Bluetooth: hci7: command tx timeout
[  173.040891] Bluetooth: hci0: command tx timeout
[  173.176852] Bluetooth: hci1: command tx timeout
[  173.232299] Bluetooth: hci2: command tx timeout
[  173.423964] Bluetooth: hci5: command tx timeout
[  173.424513] Bluetooth: hci4: command tx timeout
[  173.425369] Bluetooth: hci3: command tx timeout
[  173.489856] Bluetooth: hci7: command tx timeout
[  173.489883] Bluetooth: hci6: command tx timeout
[  227.140179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  227.142249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  227.151926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  227.168147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  227.178716] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  227.179895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  227.208459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.210568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.214953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  227.218735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  227.226508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  227.227667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.269770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  227.283371] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  227.299923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  227.332074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  227.351984] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  227.355087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  227.411463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  227.417565] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  227.419106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  227.420235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  227.424757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  227.428234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  227.432606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  227.434449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  227.437030] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  227.442085] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  227.453628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  227.460091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  227.461297] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  227.462461] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  227.469020] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  227.474046] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  227.475131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  227.494239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  227.495259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  227.498219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  227.499700] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  227.500732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  227.505740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  227.507119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  227.508930] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  227.518994] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  227.522029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  227.532056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  227.549262] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  227.553135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  229.236070] Bluetooth: hci0: command tx timeout
[  229.296036] Bluetooth: hci1: command tx timeout
[  229.423944] Bluetooth: hci2: command tx timeout
[  229.616199] Bluetooth: hci4: command tx timeout
[  229.617355] Bluetooth: hci3: command tx timeout
[  229.618178] Bluetooth: hci5: command tx timeout
[  229.618845] Bluetooth: hci7: command tx timeout
[  229.679987] Bluetooth: hci6: command tx timeout
[  231.279958] Bluetooth: hci0: command tx timeout
[  231.344952] Bluetooth: hci1: command tx timeout
[  231.472841] Bluetooth: hci2: command tx timeout
[  231.664061] Bluetooth: hci4: command tx timeout
[  231.665894] Bluetooth: hci7: command tx timeout
[  231.666387] Bluetooth: hci3: command tx timeout
[  231.667005] Bluetooth: hci5: command tx timeout
[  231.727898] Bluetooth: hci6: command tx timeout
[  233.328249] Bluetooth: hci0: command tx timeout
[  233.391916] Bluetooth: hci1: command tx timeout
[  233.519897] Bluetooth: hci2: command tx timeout
[  233.712081] Bluetooth: hci3: command tx timeout
[  233.712648] Bluetooth: hci5: command tx timeout
[  233.713233] Bluetooth: hci7: command tx timeout
[  233.713711] Bluetooth: hci4: command tx timeout
[  233.775911] Bluetooth: hci6: command tx timeout
[  235.375928] Bluetooth: hci0: command tx timeout
[  235.439910] Bluetooth: hci1: command tx timeout
[  235.567894] Bluetooth: hci2: command tx timeout
[  235.761889] Bluetooth: hci4: command tx timeout
[  235.763464] Bluetooth: hci7: command tx timeout
[  235.764912] Bluetooth: hci5: command tx timeout
[  235.766515] Bluetooth: hci3: command tx timeout
[  235.823900] Bluetooth: hci6: command tx timeout
[  289.367309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.370530] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.371919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.374562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.376265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  289.377519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.498029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  289.517851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  289.520307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  289.522419] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  289.523983] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  289.524974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  289.599594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  289.610715] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  289.617156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  289.638155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  289.644326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  289.645426] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  289.666755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  289.672687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.674451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  289.678517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  289.679834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  289.687484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  289.688567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  289.690567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  289.696660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  289.700582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  289.701909] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  289.703431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.708842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  289.727599] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  289.732161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  289.751019] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  289.752478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  289.754169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  289.756082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  289.757231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  289.758927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  289.766048] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  289.773932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  289.776149] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  289.777222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  289.782493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  289.785900] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  289.794621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  289.799745] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  289.801045] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.439860] Bluetooth: hci0: command tx timeout
[  291.569996] Bluetooth: hci1: command tx timeout
[  291.695893] Bluetooth: hci2: command tx timeout
[  291.760902] Bluetooth: hci4: command tx timeout
[  291.823905] Bluetooth: hci3: command tx timeout
[  291.824604] Bluetooth: hci5: command tx timeout
[  291.825541] Bluetooth: hci7: command tx timeout
[  291.887887] Bluetooth: hci6: command tx timeout
[  293.488271] Bluetooth: hci0: command tx timeout
[  293.617829] Bluetooth: hci1: command tx timeout
[  293.744250] Bluetooth: hci2: command tx timeout
[  293.807983] Bluetooth: hci4: command tx timeout
[  293.871945] Bluetooth: hci7: command tx timeout
[  293.872454] Bluetooth: hci3: command tx timeout
[  293.872989] Bluetooth: hci5: command tx timeout
[  293.935860] Bluetooth: hci6: command tx timeout
[  295.536126] Bluetooth: hci0: command tx timeout
[  295.663999] Bluetooth: hci1: command tx timeout
[  295.793814] Bluetooth: hci2: command tx timeout
[  295.855947] Bluetooth: hci4: command tx timeout
[  295.919895] Bluetooth: hci7: command tx timeout
[  295.920398] Bluetooth: hci3: command tx timeout
[  295.921476] Bluetooth: hci5: command tx timeout
[  295.983989] Bluetooth: hci6: command tx timeout
[  297.585590] Bluetooth: hci0: command tx timeout
[  297.711884] Bluetooth: hci1: command tx timeout
[  297.839872] Bluetooth: hci2: command tx timeout
[  297.903876] Bluetooth: hci4: command tx timeout
[  297.968094] Bluetooth: hci5: command tx timeout
[  297.968605] Bluetooth: hci3: command tx timeout
[  297.969372] Bluetooth: hci7: command tx timeout
[  298.032102] Bluetooth: hci6: command tx timeout
[  351.647057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.651366] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.655177] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.668969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.673314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  351.675921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.684098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  351.691660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  351.701544] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  351.717920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  351.725425] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  351.727608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  351.812036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  351.814807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  351.823032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  351.838968] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  351.843666] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  351.846171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  351.870044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  351.878418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  351.881042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  351.884698] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  351.888528] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  351.891032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  352.022410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.036414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  352.038557] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  352.048994] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  352.056082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.076896] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  352.078164] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  352.086397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  352.090665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  352.093138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.095099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  352.098122] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  352.100281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  352.106165] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  352.109637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  352.111531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  352.113516] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.121183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  352.126277] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  352.128327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  352.136319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  352.198093] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  352.203499] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  352.211320] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  353.713923] Bluetooth: hci0: command tx timeout
[  353.777003] Bluetooth: hci1: command tx timeout
[  353.904155] Bluetooth: hci2: command tx timeout
[  353.968015] Bluetooth: hci3: command tx timeout
[  354.159913] Bluetooth: hci5: command tx timeout
[  354.160010] Bluetooth: hci6: command tx timeout
[  354.288923] Bluetooth: hci4: command tx timeout
[  354.352861] Bluetooth: hci7: command tx timeout
[  355.761104] Bluetooth: hci0: command tx timeout
[  355.824944] Bluetooth: hci1: command tx timeout
[  355.953142] Bluetooth: hci2: command tx timeout
[  356.019936] Bluetooth: hci3: command tx timeout
[  356.208863] Bluetooth: hci6: command tx timeout
[  356.208912] Bluetooth: hci5: command tx timeout
[  356.336091] Bluetooth: hci4: command tx timeout
[  356.399983] Bluetooth: hci7: command tx timeout
[  357.809803] Bluetooth: hci0: command tx timeout
[  357.871834] Bluetooth: hci1: command tx timeout
[  357.999881] Bluetooth: hci2: command tx timeout
[  358.063982] Bluetooth: hci3: command tx timeout
[  358.255872] Bluetooth: hci6: command tx timeout
[  358.257859] Bluetooth: hci5: command tx timeout
[  358.383836] Bluetooth: hci4: command tx timeout
[  358.448878] Bluetooth: hci7: command tx timeout
[  359.855969] Bluetooth: hci0: command tx timeout
[  359.920913] Bluetooth: hci1: command tx timeout
[  360.047883] Bluetooth: hci2: command tx timeout
[  360.112936] Bluetooth: hci3: command tx timeout
[  360.304913] Bluetooth: hci5: command tx timeout
[  360.305448] Bluetooth: hci6: command tx timeout
[  360.432846] Bluetooth: hci4: command tx timeout
[  360.496585] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:35:14  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffea0001b787f4 RCX=ffffffff816a17c1 RDX=fffff9400036f0ff
RSI=0000000000000004 RDI=ffffea0001b787f4 RBP=00007f2c73570000 RSP=ffff888035a0fb88
R8 =0000000000000001 R9 =fffff9400036f0fe R10=ffffea0001b787f7 R11=0000000000000001
R12=0000000000000102 R13=0000000000000000 R14=ffffea0001b787c0 R15=ffff888035a0fd98
RIP=ffffffff816a17c4 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f2c73445540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2c73579570 CR3=0000000030cf0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff0000000000000000000000 XMM01=ffffffff00ffffffffffffffffffffff
XMM02=42494c4700342e332e325f4342494c47 XMM03=00000000000000000000000000006f72
XMM04=6f6c77725f646165726874705f5f0079 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88806cf40330 RCX=ffffffff8159774d RDX=0000000000000000
RSI=0000000000000008 RDI=ffff88806cf36380 RBP=ffff8880291ffc90 RSP=ffff8880291ffba8
R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=ffffffff863f274f R11=0000000000000000
R12=0000000000000282 R13=ffff88806cf40350 R14=ffff888008c4f780 R15=ffff888018ca2378
RIP=ffffffff848470c0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe2700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2eb01cf790 CR3=00000000250c2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000