Warning: Permanently added '[localhost]:1327' (ECDSA) to the list of known hosts.
2024/11/28 08:33:18 fuzzer started
2024/11/28 08:33:18 dialing manager at localhost:37125
syzkaller login: [   60.162869] cgroup: Unknown subsys name 'net'
[   60.227146] cgroup: Unknown subsys name 'cpuset'
[   60.256214] cgroup: Unknown subsys name 'rlimit'
2024/11/28 08:33:36 syscalls: 2217
2024/11/28 08:33:36 code coverage: enabled
2024/11/28 08:33:36 comparison tracing: enabled
2024/11/28 08:33:36 extra coverage: enabled
2024/11/28 08:33:36 setuid sandbox: enabled
2024/11/28 08:33:36 namespace sandbox: enabled
2024/11/28 08:33:36 Android sandbox: enabled
2024/11/28 08:33:36 fault injection: enabled
2024/11/28 08:33:36 leak checking: enabled
2024/11/28 08:33:36 net packet injection: enabled
2024/11/28 08:33:36 net device setup: enabled
2024/11/28 08:33:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/11/28 08:33:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/11/28 08:33:36 USB emulation: enabled
2024/11/28 08:33:36 hci packet injection: enabled
2024/11/28 08:33:36 wifi device emulation: enabled
2024/11/28 08:33:36 802.15.4 emulation: enabled
2024/11/28 08:33:36 fetching corpus: 50, signal 16538/18383 (executing program)
2024/11/28 08:33:36 fetching corpus: 100, signal 30350/33790 (executing program)
2024/11/28 08:33:36 fetching corpus: 150, signal 38408/43347 (executing program)
2024/11/28 08:33:36 fetching corpus: 200, signal 45027/51347 (executing program)
2024/11/28 08:33:36 fetching corpus: 250, signal 49936/57586 (executing program)
2024/11/28 08:33:36 fetching corpus: 300, signal 58240/66965 (executing program)
2024/11/28 08:33:36 fetching corpus: 350, signal 62394/72294 (executing program)
2024/11/28 08:33:36 fetching corpus: 400, signal 66553/77495 (executing program)
2024/11/28 08:33:36 fetching corpus: 450, signal 68874/80949 (executing program)
2024/11/28 08:33:36 fetching corpus: 500, signal 72061/85167 (executing program)
2024/11/28 08:33:37 fetching corpus: 550, signal 74844/88961 (executing program)
2024/11/28 08:33:37 fetching corpus: 600, signal 77812/92898 (executing program)
2024/11/28 08:33:37 fetching corpus: 650, signal 80320/96348 (executing program)
2024/11/28 08:33:37 fetching corpus: 700, signal 82992/99922 (executing program)
2024/11/28 08:33:37 fetching corpus: 750, signal 85617/103375 (executing program)
2024/11/28 08:33:37 fetching corpus: 800, signal 86870/105647 (executing program)
2024/11/28 08:33:37 fetching corpus: 850, signal 88983/108623 (executing program)
2024/11/28 08:33:37 fetching corpus: 900, signal 91403/111739 (executing program)
2024/11/28 08:33:37 fetching corpus: 950, signal 93396/114524 (executing program)
2024/11/28 08:33:37 fetching corpus: 1000, signal 94838/116794 (executing program)
2024/11/28 08:33:37 fetching corpus: 1050, signal 96869/119473 (executing program)
2024/11/28 08:33:37 fetching corpus: 1100, signal 98690/121964 (executing program)
2024/11/28 08:33:37 fetching corpus: 1150, signal 99604/123764 (executing program)
2024/11/28 08:33:38 fetching corpus: 1200, signal 100791/125755 (executing program)
2024/11/28 08:33:38 fetching corpus: 1250, signal 102242/127891 (executing program)
2024/11/28 08:33:38 fetching corpus: 1300, signal 104024/130262 (executing program)
2024/11/28 08:33:38 fetching corpus: 1350, signal 105124/132113 (executing program)
2024/11/28 08:33:38 fetching corpus: 1400, signal 106495/134150 (executing program)
2024/11/28 08:33:38 fetching corpus: 1450, signal 107843/136158 (executing program)
2024/11/28 08:33:38 fetching corpus: 1500, signal 108846/137879 (executing program)
2024/11/28 08:33:38 fetching corpus: 1550, signal 110140/139727 (executing program)
2024/11/28 08:33:38 fetching corpus: 1600, signal 111588/141674 (executing program)
2024/11/28 08:33:38 fetching corpus: 1650, signal 112472/143223 (executing program)
2024/11/28 08:33:38 fetching corpus: 1700, signal 113734/145033 (executing program)
2024/11/28 08:33:38 fetching corpus: 1750, signal 114646/146528 (executing program)
2024/11/28 08:33:38 fetching corpus: 1800, signal 116377/148554 (executing program)
2024/11/28 08:33:38 fetching corpus: 1850, signal 117335/150082 (executing program)
2024/11/28 08:33:38 fetching corpus: 1900, signal 118440/151669 (executing program)
2024/11/28 08:33:39 fetching corpus: 1950, signal 119838/153351 (executing program)
2024/11/28 08:33:39 fetching corpus: 2000, signal 121174/155029 (executing program)
2024/11/28 08:33:39 fetching corpus: 2050, signal 121849/156350 (executing program)
2024/11/28 08:33:39 fetching corpus: 2100, signal 123414/158136 (executing program)
2024/11/28 08:33:39 fetching corpus: 2150, signal 124383/159520 (executing program)
2024/11/28 08:33:39 fetching corpus: 2200, signal 125282/160845 (executing program)
2024/11/28 08:33:39 fetching corpus: 2250, signal 125859/162002 (executing program)
2024/11/28 08:33:39 fetching corpus: 2300, signal 126772/163341 (executing program)
2024/11/28 08:33:39 fetching corpus: 2350, signal 128862/165333 (executing program)
2024/11/28 08:33:39 fetching corpus: 2400, signal 130178/166866 (executing program)
2024/11/28 08:33:39 fetching corpus: 2450, signal 131019/168071 (executing program)
2024/11/28 08:33:39 fetching corpus: 2500, signal 132225/169486 (executing program)
2024/11/28 08:33:39 fetching corpus: 2550, signal 133317/170784 (executing program)
2024/11/28 08:33:40 fetching corpus: 2600, signal 133986/171869 (executing program)
2024/11/28 08:33:40 fetching corpus: 2650, signal 135003/173103 (executing program)
2024/11/28 08:33:40 fetching corpus: 2700, signal 135489/174076 (executing program)
2024/11/28 08:33:40 fetching corpus: 2750, signal 136524/175301 (executing program)
2024/11/28 08:33:40 fetching corpus: 2800, signal 137576/176500 (executing program)
2024/11/28 08:33:40 fetching corpus: 2850, signal 138618/177639 (executing program)
2024/11/28 08:33:40 fetching corpus: 2900, signal 139149/178592 (executing program)
2024/11/28 08:33:40 fetching corpus: 2950, signal 139822/179536 (executing program)
2024/11/28 08:33:40 fetching corpus: 3000, signal 140653/180597 (executing program)
2024/11/28 08:33:40 fetching corpus: 3050, signal 141227/181510 (executing program)
2024/11/28 08:33:40 fetching corpus: 3100, signal 142004/182475 (executing program)
2024/11/28 08:33:40 fetching corpus: 3150, signal 142396/183259 (executing program)
2024/11/28 08:33:40 fetching corpus: 3200, signal 143023/184143 (executing program)
2024/11/28 08:33:41 fetching corpus: 3250, signal 143488/184965 (executing program)
2024/11/28 08:33:41 fetching corpus: 3300, signal 144268/185883 (executing program)
2024/11/28 08:33:41 fetching corpus: 3350, signal 144776/186650 (executing program)
2024/11/28 08:33:41 fetching corpus: 3400, signal 145271/187420 (executing program)
2024/11/28 08:33:41 fetching corpus: 3450, signal 145749/188210 (executing program)
2024/11/28 08:33:41 fetching corpus: 3500, signal 146404/189050 (executing program)
2024/11/28 08:33:41 fetching corpus: 3550, signal 146840/189774 (executing program)
2024/11/28 08:33:41 fetching corpus: 3600, signal 147305/190494 (executing program)
2024/11/28 08:33:41 fetching corpus: 3650, signal 147989/191266 (executing program)
2024/11/28 08:33:41 fetching corpus: 3700, signal 148498/192032 (executing program)
2024/11/28 08:33:41 fetching corpus: 3750, signal 148973/192722 (executing program)
2024/11/28 08:33:41 fetching corpus: 3800, signal 149502/193434 (executing program)
2024/11/28 08:33:41 fetching corpus: 3850, signal 149922/194124 (executing program)
2024/11/28 08:33:42 fetching corpus: 3900, signal 150633/194910 (executing program)
2024/11/28 08:33:42 fetching corpus: 3950, signal 151185/195606 (executing program)
2024/11/28 08:33:42 fetching corpus: 4000, signal 151890/196347 (executing program)
2024/11/28 08:33:42 fetching corpus: 4050, signal 152613/197062 (executing program)
2024/11/28 08:33:42 fetching corpus: 4100, signal 152925/197693 (executing program)
2024/11/28 08:33:42 fetching corpus: 4150, signal 153322/198319 (executing program)
2024/11/28 08:33:42 fetching corpus: 4200, signal 153772/198950 (executing program)
2024/11/28 08:33:42 fetching corpus: 4250, signal 154485/199604 (executing program)
2024/11/28 08:33:42 fetching corpus: 4300, signal 154817/200219 (executing program)
2024/11/28 08:33:42 fetching corpus: 4350, signal 155206/200809 (executing program)
2024/11/28 08:33:42 fetching corpus: 4400, signal 155670/201402 (executing program)
2024/11/28 08:33:42 fetching corpus: 4450, signal 156217/202043 (executing program)
2024/11/28 08:33:42 fetching corpus: 4500, signal 156709/202616 (executing program)
2024/11/28 08:33:42 fetching corpus: 4550, signal 157239/203197 (executing program)
2024/11/28 08:33:43 fetching corpus: 4600, signal 157650/203762 (executing program)
2024/11/28 08:33:43 fetching corpus: 4650, signal 157905/204306 (executing program)
2024/11/28 08:33:43 fetching corpus: 4700, signal 158390/204823 (executing program)
2024/11/28 08:33:43 fetching corpus: 4750, signal 159218/205422 (executing program)
2024/11/28 08:33:43 fetching corpus: 4800, signal 159642/205950 (executing program)
2024/11/28 08:33:43 fetching corpus: 4850, signal 159887/206494 (executing program)
2024/11/28 08:33:43 fetching corpus: 4900, signal 160471/206994 (executing program)
2024/11/28 08:33:43 fetching corpus: 4950, signal 160765/207488 (executing program)
2024/11/28 08:33:43 fetching corpus: 5000, signal 161236/207969 (executing program)
2024/11/28 08:33:43 fetching corpus: 5050, signal 161621/208490 (executing program)
2024/11/28 08:33:43 fetching corpus: 5100, signal 162188/208955 (executing program)
2024/11/28 08:33:43 fetching corpus: 5150, signal 162473/209434 (executing program)
2024/11/28 08:33:43 fetching corpus: 5200, signal 162837/209894 (executing program)
2024/11/28 08:33:43 fetching corpus: 5250, signal 163104/210350 (executing program)
2024/11/28 08:33:44 fetching corpus: 5300, signal 163503/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5350, signal 163873/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5400, signal 164411/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5450, signal 164669/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5500, signal 164927/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5550, signal 165411/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5600, signal 165831/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5650, signal 166445/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5700, signal 166822/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5750, signal 167107/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5800, signal 167462/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5850, signal 167765/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5900, signal 168234/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 5950, signal 168517/210457 (executing program)
2024/11/28 08:33:44 fetching corpus: 6000, signal 168828/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6050, signal 169181/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6100, signal 169583/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6150, signal 169966/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6200, signal 170228/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6250, signal 170513/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6300, signal 170764/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6350, signal 171298/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6400, signal 171573/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6450, signal 172107/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6500, signal 172392/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6550, signal 172731/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6600, signal 173062/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6650, signal 173575/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6700, signal 173885/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6750, signal 174137/210457 (executing program)
2024/11/28 08:33:45 fetching corpus: 6800, signal 174387/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 6850, signal 174791/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 6900, signal 175093/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 6950, signal 175357/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7000, signal 175624/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7050, signal 175882/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7100, signal 176418/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7150, signal 176687/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7200, signal 176893/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7250, signal 177242/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7300, signal 177401/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7350, signal 177648/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7400, signal 177902/210457 (executing program)
2024/11/28 08:33:46 fetching corpus: 7450, signal 178238/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7500, signal 178449/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7550, signal 179219/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7600, signal 179540/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7650, signal 180753/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7700, signal 180970/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7750, signal 181243/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7800, signal 181581/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7850, signal 181861/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7900, signal 182169/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 7950, signal 182525/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 8000, signal 182954/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 8050, signal 183333/210457 (executing program)
2024/11/28 08:33:47 fetching corpus: 8100, signal 183664/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8150, signal 183994/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8200, signal 184274/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8250, signal 184528/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8300, signal 184766/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8350, signal 185007/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8400, signal 185280/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8450, signal 185610/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8500, signal 185877/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8550, signal 186042/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8600, signal 186289/210457 (executing program)
2024/11/28 08:33:48 fetching corpus: 8650, signal 186524/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8700, signal 186744/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8750, signal 187066/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8800, signal 187234/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8850, signal 187468/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8900, signal 187680/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 8950, signal 187960/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9000, signal 188129/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9050, signal 188313/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9100, signal 188538/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9150, signal 188726/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9200, signal 188905/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9250, signal 189072/210457 (executing program)
2024/11/28 08:33:49 fetching corpus: 9300, signal 189323/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9350, signal 189568/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9400, signal 189856/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9450, signal 190066/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9500, signal 190240/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9550, signal 190587/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9600, signal 190779/210457 (executing program)
2024/11/28 08:33:50 fetching corpus: 9650, signal 191109/210458 (executing program)
2024/11/28 08:33:50 fetching corpus: 9700, signal 191383/210458 (executing program)
2024/11/28 08:33:50 fetching corpus: 9750, signal 191604/210458 (executing program)
2024/11/28 08:33:50 fetching corpus: 9800, signal 191855/210458 (executing program)
2024/11/28 08:33:50 fetching corpus: 9850, signal 192015/210458 (executing program)
2024/11/28 08:33:50 fetching corpus: 9900, signal 192253/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 9950, signal 192440/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10000, signal 192682/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10050, signal 192917/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10100, signal 193204/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10150, signal 193369/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10200, signal 193572/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10250, signal 193932/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10300, signal 194166/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10350, signal 194362/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10400, signal 194541/210458 (executing program)
2024/11/28 08:33:51 fetching corpus: 10450, signal 194815/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10500, signal 195004/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10550, signal 195226/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10600, signal 195444/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10650, signal 195626/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10700, signal 195845/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10750, signal 195998/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10800, signal 196182/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10850, signal 196348/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10900, signal 196488/210458 (executing program)
2024/11/28 08:33:52 fetching corpus: 10950, signal 196629/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11000, signal 196899/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11050, signal 197075/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11100, signal 197203/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11150, signal 197368/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11200, signal 197650/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11250, signal 197867/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11300, signal 198166/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11350, signal 199287/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11400, signal 199508/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11450, signal 199690/210458 (executing program)
2024/11/28 08:33:53 fetching corpus: 11500, signal 199866/210458 (executing program)
2024/11/28 08:33:54 fetching corpus: 11550, signal 200027/210458 (executing program)
2024/11/28 08:33:54 fetching corpus: 11600, signal 200173/210458 (executing program)
2024/11/28 08:33:54 fetching corpus: 11650, signal 200327/210458 (executing program)
2024/11/28 08:33:54 fetching corpus: 11691, signal 200474/210458 (executing program)
2024/11/28 08:33:54 fetching corpus: 11691, signal 200474/210458 (executing program)
2024/11/28 08:33:56 starting 8 fuzzer processes
08:33:56 executing program 0:
recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd, 0x40012040, &(0x7f0000000100)=@sco={0x1f, @none}, 0x80)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
clock_gettime(0x0, &(0x7f00000042c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000004140)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1, &(0x7f0000000300)=""/11, 0xb}}, {{&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/125, 0x7d}], 0x1}, 0x9}, {{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2, &(0x7f0000002540)}, 0x9}, {{&(0x7f0000002580)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002600)=""/189, 0xbd}, {&(0x7f00000026c0)=""/121, 0x79}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/236, 0xec}, {&(0x7f00000028c0)=""/165, 0xa5}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/28, 0x1c}, {&(0x7f00000039c0)=""/155, 0x9b}, {&(0x7f0000003a80)=""/72, 0x48}], 0x9, &(0x7f0000003bc0)=""/74, 0x4a}, 0xffff}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003c40)=""/99, 0x63}, {&(0x7f0000003cc0)=""/139, 0x8b}, {&(0x7f0000003d80)=""/204, 0xcc}, {&(0x7f0000003e80)=""/219, 0xdb}], 0x4, &(0x7f0000003fc0)=""/250, 0xfa}, 0x8001}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/49, 0x31}], 0x1}, 0x2}], 0x6, 0x40000040, &(0x7f0000004300)={r1, r2+10000000})
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000004340)='.pending_reads\x00', 0x142, 0x0)
fcntl$dupfd(r0, 0x406, r4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg(r5, &(0x7f000000a7c0)=[{{&(0x7f0000004440)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004500)=[{&(0x7f00000044c0)=""/41, 0x29}], 0x1, &(0x7f0000004540)=""/17, 0x11}, 0x3dd}, {{0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004580)=""/252, 0xfc}], 0x1}, 0x9}, {{&(0x7f00000046c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004740)=""/86, 0x56}, {&(0x7f00000047c0)=""/103, 0x67}, {&(0x7f0000004840)=""/34, 0x22}, {&(0x7f0000004880)=""/17, 0x11}, {&(0x7f00000048c0)=""/11, 0xb}], 0x5, &(0x7f0000004980)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000005980)=@ax25={{0x3, @null}, [@null, @null, @rose, @netrom, @rose, @bcast, @bcast, @bcast]}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005a00)=""/133, 0x85}, {&(0x7f0000005ac0)=""/120, 0x78}, {&(0x7f0000005b40)=""/49, 0x31}, {&(0x7f0000005b80)=""/46, 0x2e}, {&(0x7f0000005bc0)=""/176, 0xb0}, {&(0x7f0000005c80)=""/80, 0x50}], 0x6, &(0x7f0000005d80)=""/178, 0xb2}, 0x200}, {{&(0x7f0000005e40)=@qipcrtr, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005ec0)=""/134, 0x86}], 0x1}, 0x4}, {{&(0x7f0000005fc0)=@phonet, 0x80, &(0x7f0000006140)=[{&(0x7f0000006040)=""/195, 0xc3}], 0x1}, 0x3}, {{&(0x7f0000006180)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000008280)=[{&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/67, 0x43}, {&(0x7f0000007280)=""/4096, 0x1000}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f00000082c0)}, {&(0x7f0000008300)=""/137, 0x89}, {&(0x7f00000083c0)=""/4096, 0x1000}], 0x3, &(0x7f0000009400)}, 0x7fffffff}, {{0x0, 0x0, &(0x7f000000a540)=[{&(0x7f0000009440)=""/4096, 0x1000}, {&(0x7f000000a440)=""/222, 0xde}], 0x2, &(0x7f000000a580)=""/120, 0x78}, 0xfffffffb}, {{&(0x7f000000a600)=@ethernet={0x0, @local}, 0x80, &(0x7f000000a740)=[{&(0x7f000000a680)=""/83, 0x53}, {&(0x7f000000a700)=""/28, 0x1c}], 0x2, &(0x7f000000a780)=""/19, 0x13}, 0x2ca1657b}], 0xa, 0x0, &(0x7f000000aa40)={0x0, 0x989680})
r6 = openat$null(0xffffffffffffff9c, &(0x7f000000aa80), 0x2001, 0x0)
recvmmsg(r6, &(0x7f000000e9c0)=[{{&(0x7f000000aac0)=@ax25={{}, [@remote, @bcast, @remote, @rose, @remote, @remote, @rose, @null]}, 0x80, &(0x7f000000bc00)=[{&(0x7f000000ab40)=""/144, 0x90}, {&(0x7f000000ac00)=""/4096, 0x1000}], 0x2, &(0x7f000000bc40)=""/4096, 0x1000}, 0x7}, {{&(0x7f000000cc40)=@pppol2tpin6={0x18, 0x1, {0x0, <r7=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f000000ce80)=[{&(0x7f000000ccc0)=""/136, 0x88}, {&(0x7f000000cd80)=""/238, 0xee}], 0x2, &(0x7f000000cec0)=""/199, 0xc7}, 0x7}, {{&(0x7f000000cfc0)=@alg, 0x80, &(0x7f000000d0c0)=[{&(0x7f000000d040)=""/65, 0x41}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f000000d4c0)=[{&(0x7f000000d100)=""/155, 0x9b}, {&(0x7f000000d1c0)=""/64, 0x40}, {&(0x7f000000d200)=""/26, 0x1a}, {&(0x7f000000d240)=""/141, 0x8d}, {&(0x7f000000d300)=""/22, 0x16}, {&(0x7f000000d340)=""/167, 0xa7}, {&(0x7f000000d400)=""/170, 0xaa}], 0x7, &(0x7f000000d540)=""/120, 0x78}}, {{&(0x7f000000d5c0)=@ieee802154, 0x80, &(0x7f000000e880)=[{&(0x7f000000d640)=""/80, 0x50}, {&(0x7f000000d6c0)=""/93, 0x5d}, {&(0x7f000000d740)=""/4096, 0x1000}, {&(0x7f000000e740)=""/50, 0x32}, {&(0x7f000000e780)=""/218, 0xda}], 0x5, &(0x7f000000e900)=""/158, 0x9e}, 0x3ff}], 0x5, 0x10001, 0x0)
finit_module(r5, &(0x7f000000eb00)='#-\\{$-,\\\x8b)\'@!)-%.-\x00', 0x3e5ae591c1c0f4fe)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f000000eb40)={r3, 0x1, 0x6}, 0x10)
finit_module(r6, &(0x7f000000eb80)='/dev/null\x00', 0x0)
connect(r7, &(0x7f000000ebc0)=@can={0x1d, r3}, 0x80)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000000ec80)={0x5, &(0x7f000000ec40)=[{0x2, 0x3f, 0x9a, 0x8}, {0x0, 0x2, 0x2, 0x81}, {0x4, 0xf7, 0x7f, 0x4}, {0x6, 0x9}, {0xffff, 0x7d, 0xff, 0x1}]}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000ecc0)={'wlan0\x00', <r9=>0x0})
ftruncate(r0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f000000ee40)={&(0x7f000000ed00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000ee00)={&(0x7f000000ed40)={0xbc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x36}}}}, [@NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x200, 0x400, 0x3, 0x7, 0x1, 0x6, 0x81]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0x8}, {0x0, 0xa}, {0x7, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x7, 0x3}, {0x0, 0x9}, {0x3}, {0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x0, 0x9}, {0x3}, {0x4}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0x6}, {0x0, 0x13}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x2}, {0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0x3}, {0x1, 0x1f}, {0x2, 0x7}, {0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x9}, {0x6}, {0x0, 0x2}, {0x5, 0xa}, {0x2, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2000001}, 0x4008081)
recvmmsg(r8, &(0x7f0000012400)=[{{0x0, 0x0, &(0x7f00000104c0)=[{&(0x7f000000ee80)=""/56, 0x38}, {&(0x7f000000eec0)=""/227, 0xe3}, {&(0x7f000000efc0)=""/80, 0x50}, {&(0x7f000000f040)=""/157, 0x9d}, {&(0x7f000000f100)=""/171, 0xab}, {&(0x7f000000f1c0)=""/38, 0x26}, {&(0x7f000000f200)=""/4096, 0x1000}, {&(0x7f0000010200)=""/217, 0xd9}, {&(0x7f0000010300)=""/248, 0xf8}, {&(0x7f0000010400)=""/157, 0x9d}], 0xa, &(0x7f0000010580)=""/52, 0x34}, 0x1}, {{&(0x7f00000105c0)=@can, 0x80, &(0x7f00000107c0)=[{&(0x7f0000010640)=""/161, 0xa1}, {&(0x7f0000010700)=""/136, 0x88}], 0x2, &(0x7f0000010800)=""/119, 0x77}, 0xffffffff}, {{&(0x7f0000010880)=@isdn, 0x80, &(0x7f0000011fc0)=[{&(0x7f0000010900)=""/150, 0x96}, {&(0x7f00000109c0)=""/100, 0x64}, {&(0x7f0000010a40)=""/180, 0xb4}, {&(0x7f0000010b00)=""/25, 0x19}, {&(0x7f0000010b40)=""/169, 0xa9}, {&(0x7f0000010c00)=""/189, 0xbd}, {&(0x7f0000010cc0)=""/4096, 0x1000}, {&(0x7f0000011cc0)=""/214, 0xd6}, {&(0x7f0000011dc0)=""/209, 0xd1}, {&(0x7f0000011ec0)=""/238, 0xee}], 0xa, &(0x7f0000012080)=""/18, 0x12}, 0x5}, {{&(0x7f00000120c0)=@llc, 0x80, &(0x7f0000012340)=[{&(0x7f0000012140)=""/224, 0xe0}, {&(0x7f0000012240)=""/49, 0x31}, {&(0x7f0000012280)=""/181, 0xb5}], 0x3, &(0x7f0000012380)=""/128, 0x80}, 0xfffffeff}], 0x4, 0x10000, &(0x7f0000012540))

08:33:56 executing program 1:
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x49}, @val={0x8}, @val={0xc, 0x99, {0x8001, 0x37}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x8000)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf05f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x727}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040000)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x10)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.pending_reads\x00', 0x0, 0x20)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0)
getpeername$netlink(r0, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440))
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x144}}, 0x800)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x80800, 0x3a)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xc0, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfc00}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x880)
r2 = open_tree(r1, &(0x7f0000000880)='./file0\x00', 0x88000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2c, 0xf}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "059ab421"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6ca618d2b1e03bbbda36b24f9c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r4=>r0, {0x10000}}, './file0\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000e40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x308, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@random_vendor={0xdd, 0x47, "3b5fc6b0aa2309e0d166fa182a2dc7de7b7de183837c97caefcbf2eb184b162b0ef009128fa2a3de39065a2f42da11ab3500bb02787f050dfbe53b809041b041e20e2d936d2a1a"}, @gcr_ga={0xbd, 0x6, @device_b}, @mic={0x8c, 0x18, {0x7c1, "895d197cada3", @long="2665bacd4077ee11039f39a05f794166"}}, @supported_rates={0x1, 0x4, [{0x4}, {0x5, 0x1}, {0x24, 0x1}, {0x60, 0x1}]}, @chsw_timing={0x68, 0x4, {0x3, 0x20}}, @dsss={0x3, 0x1, 0x2c}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x21d, 0x2a, [@preq={0x82, 0x78, @ext={{0x1, 0x1, 0x1}, 0xe1, 0x3, 0x8, @device_a, 0x1, @broadcast, 0x3, 0x5, 0x8, [{{0x1, 0x0, 0x1}, @device_a, 0xffff}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {}, {{}, @device_b, 0x7}, {{0x1}, @broadcast}, {{}, @device_b}]}}, @measure_req={0x26, 0xa7, {0x5, 0x80, 0x1f, "4c7b22a9d9723921e7104ea53a0012f7b59ad5785fc6aa509bc75606cd770aae14d24ee1532baa612b895f4b14a3eac2ed3f6a9fa76baef37b82559be8217ff0fa699025c5df7de15deb8fa48d93161d16496ff5234b1db040032fabed08e621109996616ad81934e5662195df67a04fa78536acb5cc828b50bd385c336c627e67c9463ebab36982cc4cfb467d989a940c65593dc403d957f775d0e867b7f9cd987dc566"}}, @random={0x8, 0xf1, "16f1f117f382df53a28d40fa33c2d46c6c9cefac581a2e0512de83862a7e265d8b4fc72c4a0487a18b3362329875963a9c5e543919e7eb02d164df2bacce050e5e09db19493c012521d4b7f72d860832a0f63c0e9184bda64f188f7f557bf1d48d1e6fde348d2c648be89fcc8f122a70afff448ecfa12c0ebe7bfefd655809df64e6f3b7528c0019337991652e6b004e5d174323634cb8ab05499d2262c222cc945d290b513b8f769cb67a379225fcc649ce670f0f6f28e8bad91e3fc64969c3f6810d020c7ed652264336d151462f01efcab0026bf1d9a4550f93e27b9c6d970113e80e94a241b15ab813ca9f83380d68"}, @dsss={0x3, 0x1, 0xb2}]}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="829e13ae91df155da73f9f6f63842380bb5192f062e2988e3524"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x308}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
pselect6(0x40, &(0x7f0000000e80)={0x2, 0x6, 0x4, 0x8000, 0xffffffffffff0000, 0x1000, 0x4, 0x6}, &(0x7f0000000ec0)={0x6a, 0x8, 0x4, 0x7, 0x1, 0x3, 0x4, 0x800}, &(0x7f0000000f00)={0x6, 0x8, 0x20, 0x8, 0x1, 0x8, 0xff, 0xf404}, &(0x7f0000000f40)={0x77359400}, &(0x7f0000000fc0)={&(0x7f0000000f80)={[0x3]}, 0x8})
syz_open_dev$sg(&(0x7f0000001000), 0x20, 0x80)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x2c}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x2008005)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x27, 0xc5, "7a821f0b08e59df5c777ec92501e71b72551a4ab6120a471c0b97e1044fbd2b672e76d"}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x20000010)
pwrite64(0xffffffffffffffff, &(0x7f0000001300)="caad2565d2879dccb3e28c551e079b64bd0a0e2c96b2f47194088e60d6cd1b32c30ccb7f2830a792f2b4fcdd204efee5554d8bf58f1a4605656936abfb427291f9859f60a856b907e9be8058e20d14a4e2cffe45b778fc6989aa1b596e611395a4f9ee536e027e125725b30ac1239144225ba5e8366ac96543c079e8303781ae42f96d6edd9bb34341def6e33bacb178bc100dd5ecf3", 0x96, 0x0)

08:33:56 executing program 2:
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x6006}, @void, @llc={@llc={0x4e, 0xdc, '\\U', "b81068097f3b3fe9f33c7d00693a7fd0540e497c3dde6150bdf31009c29f2b910dd1d6cdf16ec084cc97b685391670b74179fb2e97e2b2e93efbea492175456c23f045d36844783c2db58a3a4dd1909cebd9b6fef8706153d24203d8793e17cdbc68b452c7362143e2478551388c995beca15591811416f30e3a3f5f502a1eb5144380c760a26913bacf7d20ed255b57de81b68521dcf36cde3a63a14db1986431f82ae8b86c1b81ec7c0af137d63743cb421a45"}}}, 0xbc)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "a11bd78e78cd1661c39c500e33cd6cce42a1e989d15a074bd14ebd8c9d40c8f0dea4fdc8e71595cedb8333518e773d492ccf38289cd5f1bc325d63e875e2aa2620f012b96cc7e20f1374d211103b7439b28bd8fe8e7eb47a77b182ed97e71fb1e98610e59cd603ffe7482d6efdbeefdefb163785009c96bae33e4c938d79093f8ffd5eab6675f50b93b574c5b802a30f69f3a664080656a2e56db5a9f55ecf8c5881e4019e66effbd071804d470a49bd9ea9c2be8097aaa117ed65ffc8e8adf42623884502eec98d72cb06edba826757263216cb77ac66db4c15ac75019cafc8b9c0188fd1cd4d5359f12acea0a722ef22f22ef725572089ed8ce1d6763891c1", "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"})
r1 = signalfd4(r0, &(0x7f00000010c0)={[0x40]}, 0x8, 0x800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001100)={0x30000000})
r2 = creat(&(0x7f0000001140)='./file0\x00', 0x100)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
pipe2(&(0x7f0000001180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x2000)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000011c0)=0x3)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001280)={0x9, &(0x7f0000001200)=[{0x2, 0xb2, 0x3f, 0x8}, {0xfff8, 0x3, 0x2, 0xfffffffb}, {0x97, 0x20, 0x8, 0x1}, {0x1, 0x1, 0x9, 0x29a6}, {0x2e, 0x77, 0x3, 0xfca}, {0x0, 0x1, 0x1, 0x4db5b2ec}, {0x5, 0x5, 0x40, 0xfe}, {0x2, 0x0, 0x4, 0xfffffffa}, {0x1, 0x4, 0x81, 0x7fff}]}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000012c0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x8010, r4, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000001300))
splice(r2, &(0x7f0000001700)=0xffff, r3, &(0x7f0000001740)=0x4, 0x9, 0x9)
fsmount(r0, 0x0, 0x72)
r5 = accept4$bt_l2cap(r4, &(0x7f0000001780)={0x1f, 0x0, @fixed}, &(0x7f00000017c0)=0xe, 0x800)
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001800)=@generic={0x0, 0x9, 0x7})
dup(r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001900)={'tunl0\x00', &(0x7f0000001840)={'tunl0\x00', 0x0, 0x80, 0x20, 0x2, 0x3, {{0x25, 0x4, 0x1, 0x6, 0x94, 0x65, 0x0, 0x40, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x8, [{@multicast2, 0x6}, {@empty, 0x40}, {@empty, 0xf17}]}, @timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0xd}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x96, 0x3, 0x8, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@multicast1, 0x100}, {@multicast1, 0x100}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xe8, 0x3, 0x9, [{@multicast2, 0x400}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x3}, {@rand_addr=0x64010101}, {@loopback, 0x101}]}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'})

[   98.293150] audit: type=1400 audit(1732782836.903:7): avc:  denied  { execmem } for  pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:33:56 executing program 3:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x30000010}, 0x80cc)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "f1e008fd3beebbbdf5"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x30, 0x7, 0x1, 0x0, "75291b7471ec7e68dbfdf54854a971aa1ca7f53bc9d36e8b3a777e9d56ef6b57b1c56b759314977b69d35308"}]}, 0x80}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8881)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x64}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000041)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "40703543da4a0168e673fdcbc9eef4e9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a3632c5a9b4c"}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008c1}, 0x24000004)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}}, 0x4)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x20040c00)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r7, 0xc0341d67001a9dc5, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x20, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000)
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r6, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xacc3378ca8927143)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'sit0\x00', <r8=>0x0, 0x2f, 0x1f, 0xae, 0x2, 0xe4, @empty, @empty, 0x0, 0x8000, 0x3, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000cc0)={'gre0\x00', r8, 0x1, 0x20, 0x0, 0x45, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x64, 0x0, 0x53, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@end]}}}}})
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000d40), 0x10000, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)

08:33:56 executing program 4:
r0 = shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
r1 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000)
r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil)
shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
r3 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r3, 0x0)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x5000)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/112)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10)
r4 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0)
shmdt(r4)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x4}, 0x6)
r6 = shmget(0x1, 0x3000, 0x60, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r6, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)

08:33:56 executing program 6:
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40050d0}, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x80}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xedcdd059fcb7838a}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x38}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4044091)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x82)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x400000}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7fffffff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000002)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf4, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x380000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0x3, 0x6252cf98, 0x3f, 0x4, 0x10001, 0xbb2]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fffffff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x25e4de59, 0x9, 0x6, 0x1146, 0x4, 0x200, 0x5a56]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x798}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x5, 0x2ba, 0x0, 0x9, 0xffffffff]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}]}]}, 0xf4}}, 0x4004090)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r5=>r3, {0x61}}, './file0\x00'})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x2, 0x7, 0x101, 0x0, 0x0, {0xc}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xf86}]}, 0x64}}, 0x80)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r5)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x41)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1a11, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x2000c804)
r7 = accept4(r2, &(0x7f0000000c00)=@rc={0x1f, @none}, &(0x7f0000000c80)=0x80, 0x1000)
sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2b}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10800, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x40, r9, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x762ef62e, 0x8}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000)

08:33:56 executing program 5:
r0 = memfd_secret(0x0)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ftruncate(r0, 0x7ff)
bind$packet(r1, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14)
unlinkat(r1, &(0x7f00000001c0)='./file0\x00', 0x200)
r3 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
pread64(r3, &(0x7f0000000240)=""/81, 0x51, 0x100000001)
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x19, 0x0, 0x1, 0x7, 0x6, @remote}, 0x14)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000300)={@remote, @multicast2}, 0xc)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x60140, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x10000, 0x0, 0x1})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000780)=0x8940, 0x4)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000880)={<r5=>0x0, @local, @local}, &(0x7f00000008c0)=0xc)
bind$packet(0xffffffffffffffff, &(0x7f0000000900)={0x11, 0x9, r5, 0x1, 0x7d, 0x6, @multicast}, 0x14)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x190, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {0x21, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xdb, 0x1, "e0b187a45b973146ce89f8bf7fbee08203b6c11c1c6d1fddd9d6d23ac54188f47db920406b7b82d81f7665d01fc736966043f415298ec606d926b008fad684d421767f4d4db1c2be662e2dedd87ac22b0ecf83a0d3578209098541f22388592aaae61cfbeb98acca96cb7bd924101b59c2c184fbec615e140063782d7d459ff9973d7bd3fef607740a40b955f04786cbfc3d52d91909ce8eb48f0cc7a20505224a601eb46b6acf63f79a2c9946a50f5e6c85140aaa600fea94751b69001c08a1fec4815075e76ad42567f79334fcdb2e143b3225a03a23"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "11e6d4b7899d8350bbba662cba4f78d700d69090710f46c697"}, @INET_DIAG_REQ_BYTECODE={0x80, 0x1, "1372778f1ec545f8a425ece88c5710e9b138795535553da637fb945f23e6c7e18d264aaeeeb4bcf363928d4cc0da47d9afda7b577451050121bd6ce52ce8ece43d6070969ff8b94a93a7dabc1b3a4ae6fb808fdb9b9bfd4407e15644fc653802209ca2c59113e0a59f03829ca0833ab612268f3b8c93934e3afe0ff4"}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000800}, 0x24008020)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x144, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x72, 0xc5, "f5119e572ab2dd7c5e57bb13045a3babe77c40297ed4274487a24f549198fd6dd793a628be79e53137be0111b85fa53942e967fb51d7b37d299bc648bd4e7f69d1b65ea9eb342db7fa210c9cc035246d954a1731637228fd424ea2273487b2f9bdcbb76b586f8c234058db392725"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xf0}, @NL80211_ATTR_VENDOR_DATA={0x9f, 0xc5, "1b0df5acd4ffcabdd72e6be52aaf5194a45632784aa7a8421aee73b0228afacdc9dc7444a4c5c3cb0fd81115aedb636dac1175638eb3534d6634ff4784c02c2abc1b42214e717109425f12b103a0d5baa1c22c83cd57dafa8d09896aeebd9408f2d85615b929630e04420a479b4697aef4b9d42a0fce02fcba521f8a97a9b473397a9d8becbe45cf83cd4d2c073cb6adb69738f18608b7cafd99cf"}]}, 0x144}, 0x1, 0x0, 0x0, 0x2000a890}, 0x4000000)

08:33:56 executing program 7:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, @isdn={0x22, 0x40, 0x8, 0xfb, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='netpci0\x00', 0x1, 0x7, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = signalfd4(r1, &(0x7f0000000180)={[0x5]}, 0x8, 0x0)
r3 = mq_open(&(0x7f00000001c0)='netpci0\x00', 0x800, 0x121, &(0x7f0000000200)={0xffffffffffffff7f, 0x7, 0x6964, 0x7})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
r4 = inotify_init()
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000240))
r5 = signalfd4(r4, &(0x7f0000000280)={[0x4]}, 0x8, 0x800)
r6 = syz_io_uring_setup(0x11e0, &(0x7f00000002c0)={0x0, 0x668b, 0x0, 0x0, 0x30b, 0x0, r5}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000380))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x100000001, 0x0, 0x3ff, 0x0, 0x0, {0x0, r8}}, 0x0)
mq_timedsend(r5, &(0x7f0000000400)="7c9d0303c2c5d4d8a937cbcae296b4a56451d2694e5d290f522ac787ff0e74b4acaf684213ce42b1ee7e2c154d9886", 0x2f, 0x6a4f, &(0x7f0000000440)={0x0, 0x989680})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000480)={0x80000000})
r9 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1200003}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000041}, 0x880)
fchdir(r5)
fcntl$lock(r1, 0x26, &(0x7f0000000640)={0x0, 0x4, 0x21, 0x7fff, r0})
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000680)=0xff)

[   99.814179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.815262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.818464] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   99.820505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.822145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   99.822985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.823967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.824799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.825952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   99.826880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.827904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.828919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.832068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.838500] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   99.839880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   99.840215] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   99.842123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.843056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   99.848122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   99.850823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   99.851508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   99.852248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   99.853315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.854252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.857951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.858202] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   99.868246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   99.870370] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   99.874824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   99.875911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   99.878974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.884375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   99.886084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   99.887377] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   99.896013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   99.903130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   99.907018] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   99.919553] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   99.923341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   99.928281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   99.935817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   99.936587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   99.950391] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   99.953893] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   99.964924] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   99.974234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   99.980918] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   99.983977] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  101.940871] Bluetooth: hci0: command tx timeout
[  102.001750] Bluetooth: hci7: command tx timeout
[  102.002437] Bluetooth: hci2: command tx timeout
[  102.002962] Bluetooth: hci4: command tx timeout
[  102.003175] Bluetooth: hci6: command tx timeout
[  102.003274] Bluetooth: hci1: command tx timeout
[  102.065732] Bluetooth: hci5: command tx timeout
[  102.066295] Bluetooth: hci3: command tx timeout
[  103.986712] Bluetooth: hci0: command tx timeout
[  104.049734] Bluetooth: hci1: command tx timeout
[  104.054401] Bluetooth: hci7: command tx timeout
[  104.054865] Bluetooth: hci2: command tx timeout
[  104.055285] Bluetooth: hci6: command tx timeout
[  104.055824] Bluetooth: hci4: command tx timeout
[  104.113778] Bluetooth: hci3: command tx timeout
[  104.114215] Bluetooth: hci5: command tx timeout
[  106.036076] Bluetooth: hci0: command tx timeout
[  106.097743] Bluetooth: hci4: command tx timeout
[  106.098193] Bluetooth: hci6: command tx timeout
[  106.099176] Bluetooth: hci2: command tx timeout
[  106.099306] Bluetooth: hci7: command tx timeout
[  106.099583] Bluetooth: hci1: command tx timeout
[  106.161936] Bluetooth: hci5: command tx timeout
[  106.162392] Bluetooth: hci3: command tx timeout
[  108.081745] Bluetooth: hci0: command tx timeout
[  108.145872] Bluetooth: hci1: command tx timeout
[  108.146459] Bluetooth: hci7: command tx timeout
[  108.147578] Bluetooth: hci4: command tx timeout
[  108.148491] Bluetooth: hci2: command tx timeout
[  108.149014] Bluetooth: hci6: command tx timeout
[  108.212736] Bluetooth: hci3: command tx timeout
[  108.213307] Bluetooth: hci5: command tx timeout
[  162.631218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.634407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.637043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.651032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.653918] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  162.656028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.687449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.690087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.692077] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.700037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.703701] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.708999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.839157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  162.851957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  162.861973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  162.874931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  162.883478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  162.885697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  162.916053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  162.926408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  162.930078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  162.962940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  162.984964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  163.004592] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  163.024220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  163.046079] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  163.073543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  163.085584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  163.127130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  163.132050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  163.137031] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  163.145062] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  163.153101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  163.193105] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  163.205835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  163.221886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  163.244975] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  163.296327] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  163.298596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  163.324694] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  163.329055] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  163.345328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  163.349029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  163.351977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  163.357884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  163.361086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  163.365127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  163.368407] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  164.722763] Bluetooth: hci0: command tx timeout
[  164.788119] Bluetooth: hci1: command tx timeout
[  164.913728] Bluetooth: hci2: command tx timeout
[  165.105714] Bluetooth: hci3: command tx timeout
[  165.299673] Bluetooth: hci5: command tx timeout
[  165.361893] Bluetooth: hci7: command tx timeout
[  165.425715] Bluetooth: hci4: command tx timeout
[  165.553777] Bluetooth: hci6: command tx timeout
[  166.769812] Bluetooth: hci0: command tx timeout
[  166.834304] Bluetooth: hci1: command tx timeout
[  166.961733] Bluetooth: hci2: command tx timeout
[  167.153674] Bluetooth: hci3: command tx timeout
[  167.346233] Bluetooth: hci5: command tx timeout
[  167.409701] Bluetooth: hci7: command tx timeout
[  167.473716] Bluetooth: hci4: command tx timeout
[  167.602200] Bluetooth: hci6: command tx timeout
[  168.819797] Bluetooth: hci0: command tx timeout
[  168.882758] Bluetooth: hci1: command tx timeout
[  169.009804] Bluetooth: hci2: command tx timeout
[  169.201999] Bluetooth: hci3: command tx timeout
[  169.395451] Bluetooth: hci5: command tx timeout
[  169.457731] Bluetooth: hci7: command tx timeout
[  169.521699] Bluetooth: hci4: command tx timeout
[  169.651375] Bluetooth: hci6: command tx timeout
[  170.865742] Bluetooth: hci0: command tx timeout
[  170.929676] Bluetooth: hci1: command tx timeout
[  171.057686] Bluetooth: hci2: command tx timeout
[  171.249877] Bluetooth: hci3: command tx timeout
[  171.442448] Bluetooth: hci5: command tx timeout
[  171.505983] Bluetooth: hci7: command tx timeout
[  171.570781] Bluetooth: hci4: command tx timeout
[  171.697668] Bluetooth: hci6: command tx timeout
[  224.959548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  224.968291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  224.970343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  224.974927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  224.976769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  224.978253] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  225.343902] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  225.349260] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  225.350550] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  225.353991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  225.355856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  225.357041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  225.403671] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  225.406205] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  225.407446] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  225.410311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  225.412335] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  225.413440] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  225.481252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  225.492363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  225.496359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  225.499145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  225.505526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  225.510835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  225.515374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  225.521069] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  225.536784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  225.537815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  225.549261] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  225.551264] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  225.552958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  225.562115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  225.573025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  225.579780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  225.581929] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  225.586321] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  225.645952] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  225.654181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  225.658092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  225.685572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  225.692927] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  225.695576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  225.814662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  225.820380] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  225.829352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  225.842904] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  225.853011] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  225.863364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  226.994834] Bluetooth: hci0: command tx timeout
[  227.377726] Bluetooth: hci1: command tx timeout
[  227.442864] Bluetooth: hci2: command tx timeout
[  227.633860] Bluetooth: hci3: command tx timeout
[  227.635176] Bluetooth: hci4: command tx timeout
[  227.954718] Bluetooth: hci5: command tx timeout
[  228.083339] Bluetooth: hci6: command tx timeout
[  229.041959] Bluetooth: hci7: command tx timeout
[  229.042982] Bluetooth: hci0: command tx timeout
[  229.426771] Bluetooth: hci1: command tx timeout
[  229.490727] Bluetooth: hci2: command tx timeout
[  229.682665] Bluetooth: hci3: command tx timeout
[  229.683270] Bluetooth: hci4: command tx timeout
[  230.001762] Bluetooth: hci5: command tx timeout
[  230.131644] Bluetooth: hci6: command tx timeout
[  231.089786] Bluetooth: hci7: command tx timeout
[  231.090391] Bluetooth: hci0: command tx timeout
[  231.473838] Bluetooth: hci1: command tx timeout
[  231.537743] Bluetooth: hci2: command tx timeout
[  231.729933] Bluetooth: hci3: command tx timeout
[  231.730490] Bluetooth: hci4: command tx timeout
[  232.050939] Bluetooth: hci5: command tx timeout
[  232.177799] Bluetooth: hci6: command tx timeout
[  233.138898] Bluetooth: hci0: command tx timeout
[  233.139490] Bluetooth: hci7: command tx timeout
[  233.522745] Bluetooth: hci1: command tx timeout
[  233.586708] Bluetooth: hci2: command tx timeout
[  233.777866] Bluetooth: hci4: command tx timeout
[  233.778479] Bluetooth: hci3: command tx timeout
[  234.097729] Bluetooth: hci5: command tx timeout
[  234.227765] Bluetooth: hci6: command tx timeout
[  235.186757] Bluetooth: hci7: command tx timeout
[  287.997447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  288.008147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  288.011234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  288.015882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  288.018369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  288.019702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.447225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  288.452970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  288.454504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  288.461454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  288.467861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  288.470017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  288.472045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  288.492379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  288.495351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  288.505737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  288.507776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  288.509922] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  288.527255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.535078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.542884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.545299] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  288.559645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.561831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  288.562975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  288.565210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  288.565782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.584124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  288.584487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  288.587268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  288.589117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  288.589331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  288.591349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  288.594739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  288.603139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  288.604401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  288.607248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  288.609434] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  288.610731] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  288.626988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  288.628383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  288.631689] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  288.632927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  288.672932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  288.675354] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  288.685939] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  288.693892] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  288.695844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  290.112974] Bluetooth: hci0: command tx timeout
[  290.546010] Bluetooth: hci2: command tx timeout
[  290.547125] Bluetooth: hci1: command tx timeout
[  290.673742] Bluetooth: hci3: command tx timeout
[  290.674882] Bluetooth: hci4: command tx timeout
[  290.675061] Bluetooth: hci6: command tx timeout
[  290.738083] Bluetooth: hci5: command tx timeout
[  290.801843] Bluetooth: hci7: command tx timeout
[  292.145792] Bluetooth: hci0: command tx timeout
[  292.593677] Bluetooth: hci2: command tx timeout
[  292.593759] Bluetooth: hci1: command tx timeout
[  292.721825] Bluetooth: hci6: command tx timeout
[  292.722823] Bluetooth: hci3: command tx timeout
[  292.723291] Bluetooth: hci4: command tx timeout
[  292.785770] Bluetooth: hci5: command tx timeout
[  292.849698] Bluetooth: hci7: command tx timeout
[  294.193659] Bluetooth: hci0: command tx timeout
[  294.641705] Bluetooth: hci2: command tx timeout
[  294.642912] Bluetooth: hci1: command tx timeout
[  294.769762] Bluetooth: hci4: command tx timeout
[  294.770203] Bluetooth: hci3: command tx timeout
[  294.770940] Bluetooth: hci6: command tx timeout
[  294.834762] Bluetooth: hci5: command tx timeout
[  294.897658] Bluetooth: hci7: command tx timeout
[  296.243666] Bluetooth: hci0: command tx timeout
[  296.690743] Bluetooth: hci1: command tx timeout
[  296.690789] Bluetooth: hci2: command tx timeout
[  296.818889] Bluetooth: hci4: command tx timeout
[  296.818997] Bluetooth: hci6: command tx timeout
[  296.819497] Bluetooth: hci3: command tx timeout
[  296.882372] Bluetooth: hci5: command tx timeout
[  296.946606] Bluetooth: hci7: command tx timeout
[  350.272428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.279606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.282192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.286821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.290784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  350.293523] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  350.717836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  350.722018] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  350.724130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  350.729457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  350.732326] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  350.734395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  350.847837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  350.852007] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  350.860823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  350.865066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  350.871931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  350.876983] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  350.880491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  350.900382] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  350.913795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  350.948038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  350.974202] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  350.976509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  350.979408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  350.980959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  350.987200] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  350.999917] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  351.004961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  351.027951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  351.028106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  351.041542] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  351.043933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  351.047179] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  351.052170] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  351.058128] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  351.059429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  351.061755] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  351.072074] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  351.090876] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  351.094939] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  351.096138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  351.099952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  351.101931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  351.107168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  351.126885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  351.133190] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  351.135083] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  352.370660] Bluetooth: hci0: command tx timeout
[  352.753717] Bluetooth: hci1: command tx timeout
[  352.946711] Bluetooth: hci2: command tx timeout
[  353.137651] Bluetooth: hci7: command tx timeout
[  353.201734] Bluetooth: hci5: command tx timeout
[  353.201863] Bluetooth: hci3: command tx timeout
[  353.202484] Bluetooth: hci4: command tx timeout
[  353.457767] Bluetooth: hci6: command tx timeout
[  354.417658] Bluetooth: hci0: command tx timeout
[  354.801811] Bluetooth: hci1: command tx timeout
[  354.994314] Bluetooth: hci2: command tx timeout
[  355.185737] Bluetooth: hci7: command tx timeout
[  355.249660] Bluetooth: hci5: command tx timeout
[  355.250148] Bluetooth: hci4: command tx timeout
[  355.250649] Bluetooth: hci3: command tx timeout
[  355.505650] Bluetooth: hci6: command tx timeout
[  356.465772] Bluetooth: hci0: command tx timeout
[  356.849920] Bluetooth: hci1: command tx timeout
[  357.042618] Bluetooth: hci2: command tx timeout
[  357.233635] Bluetooth: hci7: command tx timeout
[  357.297633] Bluetooth: hci5: command tx timeout
[  357.298096] Bluetooth: hci3: command tx timeout
[  357.298520] Bluetooth: hci4: command tx timeout
[  357.553742] Bluetooth: hci6: command tx timeout
[  358.514643] Bluetooth: hci0: command tx timeout
[  358.897793] Bluetooth: hci1: command tx timeout
[  359.089861] Bluetooth: hci2: command tx timeout
[  359.281652] Bluetooth: hci7: command tx timeout
[  359.345755] Bluetooth: hci4: command tx timeout
[  359.346217] Bluetooth: hci3: command tx timeout
[  359.346700] Bluetooth: hci5: command tx timeout
[  359.603617] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
08:38:57  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000001254 RCX=ffff888032787f58 RDX=0000000000000000
RSI=ffffffff817ad5a3 RDI=ffff88803e208018 RBP=ffff888031de88c0 RSP=ffff888032787e80
R8 =0000000000000001 R9 =ffff88803e208a38 R10=0000000000000000 R11=0000000000000001
R12=ffff88803e208000 R13=00007ff5befb9269 R14=ffff888008c62600 R15=ffffffff817ad5ee
RIP=ffffffff817ad622 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff5befb9269 CR3=000000002e7e8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff000000000000000000000000000000 XMM01=0000000000000000657268747062696c
XMM02=00000000000000362e6f732e6362696c XMM03=00000000000000000000000000000000
XMM04=ff000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff8880373cf8a8 RCX=ffffffff81ffc1b4 RDX=ffff888016e48000
RSI=ffffffff81ffc1c2 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff8880373cf838
R8 =0000000000000000 R9 =ffff8880373cf8a8 R10=0000000000200000 R11=0000000000000000
R12=0000000000000005 R13=0000000000200000 R14=0000000000000001 R15=0000000000000002
RIP=ffffffff81394f20 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fac6ec2e008 CR3=0000000016408000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000