Warning: Permanently added '[localhost]:34683' (ECDSA) to the list of known hosts. 2024/12/11 08:39:56 fuzzer started 2024/12/11 08:39:56 dialing manager at localhost:35965 syzkaller login: [ 61.189508] cgroup: Unknown subsys name 'net' [ 61.269764] cgroup: Unknown subsys name 'cpuset' [ 61.294077] cgroup: Unknown subsys name 'rlimit' 2024/12/11 08:40:14 syscalls: 202 2024/12/11 08:40:14 code coverage: enabled 2024/12/11 08:40:14 comparison tracing: enabled 2024/12/11 08:40:14 extra coverage: enabled 2024/12/11 08:40:14 setuid sandbox: enabled 2024/12/11 08:40:14 namespace sandbox: enabled 2024/12/11 08:40:14 Android sandbox: enabled 2024/12/11 08:40:14 fault injection: enabled 2024/12/11 08:40:14 leak checking: enabled 2024/12/11 08:40:14 net packet injection: enabled 2024/12/11 08:40:14 net device setup: enabled 2024/12/11 08:40:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/11 08:40:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/11 08:40:14 USB emulation: enabled 2024/12/11 08:40:14 hci packet injection: enabled 2024/12/11 08:40:14 wifi device emulation: enabled 2024/12/11 08:40:14 802.15.4 emulation: enabled 2024/12/11 08:40:14 fetching corpus: 0, signal 0/0 (executing program) 2024/12/11 08:40:16 starting 8 fuzzer processes 08:40:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xe4, 0x8, 0x0, 0x9, 0x0, 0x8, 0x40200, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x3}, 0x18, 0x1, 0x8, 0x5, 0x9, 0x9c6, 0x2, 0x0, 0x693b9726, 0x0, 0xc3c3}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x1b, &(0x7f0000000140)=[r0, 0xffffffffffffffff, r1, r2, r3], 0x5, 0x0, 0x1}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r4, &(0x7f00000001c0)=""/97, 0x61, 0x60012001, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) getsockname(r4, &(0x7f00000002c0)=@generic, &(0x7f0000000340)=0x80) r5 = accept$inet(r1, &(0x7f0000000380)={0x2, 0x0, @multicast2}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000440)={@local, @multicast1, r6}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000480)={@rand_addr=0x64010102, @remote, r6}, 0xc) recvfrom$inet(r7, &(0x7f00000004c0)=""/55, 0x37, 0x40010001, 0x0, 0x0) 08:40:16 executing program 1: mq_unlink(&(0x7f0000000000)='\x80\\:\x92^\x00') r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, 0xfffffffffffffffc) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf008}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x14001) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x10, 0x3ece, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x200480c0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e0ddff7d6360"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1b82b5ce804f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3041c3545694"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09eb88dc0c2a"}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x800c015}, 0x2400c0c4) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffff001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1ccc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x15f3}]}, 0x4c}}, 0x60058040) getuid() ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000840)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x82010500}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x37ca}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff0000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) mq_unlink(&(0x7f00000009c0)='},-[)\x00') r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4008010) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f0000000b80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/144, 0x90}], 0x1}, 0x5}, {{&(0x7f0000000d00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/167, 0xa7}, {&(0x7f0000000e40)=""/10, 0xa}, {&(0x7f0000000e80)=""/223, 0xdf}], 0x3, &(0x7f0000000fc0)=""/186, 0xba}, 0x401}, {{&(0x7f0000001080)=@isdn, 0x80, &(0x7f0000004500)=[{&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/55, 0x37}, {&(0x7f0000002140)=""/179, 0xb3}, {&(0x7f0000002200)=""/14, 0xe}, {&(0x7f0000002240)=""/112, 0x70}, {&(0x7f00000022c0)=""/102, 0x66}, {&(0x7f0000002340)=""/169, 0xa9}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/214, 0xd6}], 0xa, &(0x7f00000045c0)=""/4096, 0x1000}, 0x8}, {{&(0x7f00000055c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005640)=""/228, 0xe4}, {&(0x7f0000005740)=""/241, 0xf1}, {&(0x7f0000005840)}, {&(0x7f0000005880)=""/21, 0x15}, {&(0x7f00000058c0)=""/251, 0xfb}, {&(0x7f00000059c0)=""/124, 0x7c}, {&(0x7f0000005a40)=""/229, 0xe5}, {&(0x7f0000005b40)=""/84, 0x54}], 0x8}, 0x1}], 0x4, 0x40012140, &(0x7f0000005d40)={0x0, 0x989680}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000005e80)={&(0x7f0000005d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005e40)={&(0x7f0000005e00)={0x34, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="698e4b94bf57"}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0xc040) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000005ec0)=0xffffffc0, 0x4) getuid() 08:40:16 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x3, 0x9, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x17, 0x7800, 0x10001, 0x400}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@broadcast, @empty, r0}, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_intel_sdw_acpi', 0x18c01, 0x124) ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000140)={{0x2a5, 0x2}, {0xad, 0x100}, 0x80000000, 0x1}) r2 = fork() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/22, 0x16}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/176, 0xb0}, {&(0x7f00000004c0)=""/173, 0xad}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000640)=""/79, 0x4f}], 0x8, 0x0) recvmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000000740)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/163, 0xa3}, {&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f0000000980)=""/207, 0xcf}, {&(0x7f0000000a80)=""/65, 0x41}, {&(0x7f0000000b00)=""/96, 0x60}], 0x5, &(0x7f0000000c00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001c00)=@tipc=@id, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/251, 0xfb}], 0x2, &(0x7f0000002dc0)=""/72, 0x48}, 0x3f}], 0x2, 0x0, &(0x7f0000002ec0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f00)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002f40)={0x73622a85, 0x300, 0x1}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa840}, 0x41) r4 = accept$inet(r1, &(0x7f0000003140)={0x2, 0x0, @local}, &(0x7f0000003180)=0x10) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f00000031c0)=0x7ff, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000003280)={'syztnl1\x00', &(0x7f0000003200)={'syztnl2\x00', r0, 0x4, 0x7f, 0x1, 0xffffffff, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000003340)={'syztnl0\x00', &(0x7f00000032c0)={'syztnl2\x00', r6, 0x2f, 0xd3, 0x40, 0x6, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0xab08, 0xaa1d}}) process_vm_readv(r2, &(0x7f00000054c0)=[{&(0x7f0000003380)=""/117, 0x75}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/18, 0x12}, {&(0x7f0000005440)=""/100, 0x64}], 0x5, &(0x7f00000065c0)=[{&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/100, 0x64}], 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000066c0)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006680)={&(0x7f0000006640)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000006700)) socketpair(0x8, 0x1, 0x8000, &(0x7f0000006740)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000068c0)={'syztnl0\x00', &(0x7f0000006840)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x8, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7, 0x8, 0x1, 0x2}}) 08:40:16 executing program 4: sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x190, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40001022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}]}, 0x44}}, 0x4000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x900, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040850}, 0x4c004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x7c, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x7c}}, 0x48004) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r5) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1ff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 08:40:16 executing program 3: sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x80, 0x3f]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}]}]}, 0x38}}, 0x84) r0 = socket(0x28, 0x3, 0x800) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="60635536f95a"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4001) r1 = accept$inet(r0, 0x0, &(0x7f0000000200)) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x70e2e82c6d6b1d15, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x7f, 0x8, 0x44, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, 0x7800, 0x41, 0xf00, 0x3}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x34}}, 0x20010080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x5e1f, 0x80}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000008c0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0xf}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x23c, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xc7, 0x45, "dc3de3eba9beb3ce95dc7be44fb3fbc1071f3b6e1b524ed6f412c60ee27f29db6103f10ecdf9d2972e74c90f60f344aa29355fed1fc41a726432cd45507b5974768e7d2dd2e812d79eccdf3dd9c2db48751b972b9bccd9e512589e4b9de9ff240637e24172041f730625857313d9787098b664d47294cd2980ecf8deb95929fd85e133adc49e5e8a92cc1fd875ee932e7e01855c9eb366514fa7534cb0d2a950dc9ef0481f4a323f80b027dc91891f5ea855d09ab83732db4f23ccd15ab6c387b8ead9"}, @NL80211_ATTR_TESTDATA={0xf3, 0x45, "6385e23a56c53a66f05414d0dec877c81d9dc7f4a56120f9a50206e651c8c0018616cb8d1b7bf3c25e87c4eebb18287a729db3b0e8306ae1302900dbe953af46e3e08dec2962535cc3222e48933bcb46ec330a3186c7bc9e837a0f5367f27e720129ffc02f40417d5590a1d474d6b71045ca42bb991c8b443d3a775f7b77463918a6410ab695d685785de3cbca7cebe6de3d3dd96a14cfa56a02a70ce961ccc49a59f5af97cbf0f5ad4094b35422cf80d69703e0a862ac8fde2205c9d62979a50464cda85895bd4474addf809ef9d55e846690996df36755920a75828619ae8ba64149d664972db8a489ecd74def6e"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "5780f55adf43cf18ce03513345dcbd7f6dea92cc8be7c518fb7c3603fb61867d3d71dad65d16182e518b35629098da0995547022b07008fbecb6dcc667fdd280fa447a6b4c7f550d813640434608fcc609d075d516dbe0a894ad6cbccb"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x10}, 0x20040840) 08:40:16 executing program 5: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x24}}, 0x20008000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x205, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4840) recvmmsg(r0, &(0x7f0000006b00)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/65, 0x41}, {&(0x7f0000001580)=""/52, 0x34}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/228, 0xe4}, {&(0x7f0000001700)=""/82, 0x52}], 0x7, &(0x7f0000001800)=""/106, 0x6a}, 0x1}, {{&(0x7f0000001880)=@can, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/154, 0x9a}, {&(0x7f00000029c0)=""/85, 0x55}, {&(0x7f0000002a40)=""/13, 0xd}, {&(0x7f0000002a80)=""/217, 0xd9}], 0x5, &(0x7f0000002c00)=""/118, 0x76}, 0x101}, {{&(0x7f0000002c80)=@can, 0x80, &(0x7f0000004f80)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/130, 0x82}, {&(0x7f0000003dc0)=""/59, 0x3b}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/158, 0x9e}, {&(0x7f0000004ec0)=""/150, 0x96}], 0x6, &(0x7f0000005000)=""/228, 0xe4}, 0x5}, {{&(0x7f0000005100)=@qipcrtr, 0x80, &(0x7f0000005200)=[{&(0x7f0000005180)=""/104, 0x68}], 0x1, &(0x7f0000005240)=""/172, 0xac}, 0x1}, {{&(0x7f0000005300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005380)=""/35, 0x23}, {&(0x7f00000053c0)=""/219, 0xdb}], 0x2}, 0xb27b}, {{&(0x7f0000005500)=@tipc, 0x80, &(0x7f0000005740)=[{&(0x7f0000005580)}, {&(0x7f00000055c0)=""/102, 0x66}, {&(0x7f0000005640)=""/205, 0xcd}], 0x3}}, {{&(0x7f0000005780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006980)=[{&(0x7f0000005800)=""/75, 0x4b}, {&(0x7f0000005880)=""/6, 0x6}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/174, 0xae}], 0x4, &(0x7f00000069c0)=""/8, 0x8}, 0x6}, {{&(0x7f0000006a00)=@alg, 0x80, &(0x7f0000006a80), 0x0, &(0x7f0000006ac0)=""/64, 0x40}, 0x7fff}], 0x8, 0x2101, &(0x7f0000006d00)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000006ec0)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x60010804}, 0xc, &(0x7f0000006e80)={&(0x7f0000006e00)={0x64, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x398}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000006f00), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000007000)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f80)={0x20, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, ["", ""]}, 0x20}}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007140), r4) sendmsg$NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000007200)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007180)={0x28, r8, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x800, 0x41}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000007440)={&(0x7f0000007240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007400)={&(0x7f0000007280)={0x170, r5, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x5b}}}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x5, 0x1}, {0x40, 0x6}, {0x8, 0x5}, {0x14, 0x6}, {0x8, 0x7}, {0x8, 0x6}, {0x1, 0x3}, {0xb1, 0x4}, {0xe3, 0x2}, {0x0, 0x3}, {0x3f, 0x1}, {0x4, 0x1}, {0x6}, {0x8, 0x7}, {0x40}, {0x9}, {0x4, 0x4}, {0x9, 0x1}, {0x9, 0x4}], "854eb101ceb50c60"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x81, 0x6}, {0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x79, 0x4}, {0x6, 0x3}, {0xff, 0x5}, {0xc9, 0x1}, {0x9, 0x5}, {0x8, 0x7}, {0x9, 0x2}, {0x81, 0x7}], "94a5f451ae21219e"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x6, 0x6}, {0xfa, 0x5}], "22f3c6c29a88e377"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x2}, {0x40, 0x6}, {0x1}], "d8def87a682a9bbd"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x9f, 0x7}, {0x8, 0x1}, {0xf, 0x7}, {0x96, 0x4}, {0x3, 0x6}], "9d4f9c65345bb912"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x0, 0x3}, {0x3, 0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x20, 0x6}, {0x80, 0x1}, {0x0, 0x4}, {0x37, 0x5}, {0x2, 0x1}, {0x1c, 0x2}, {0x6, 0x1}, {0x3, 0x7}, {0x80}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x1}, {0xf1, 0x3}, {0x2, 0x6}, {0x0, 0x4}], "17ffa10aa2a43964"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1f, 0x5}, {0x6, 0x6}, {0x12, 0x6}, {0x4d, 0x4}, {0x0, 0x5}, {0xff, 0x4}, {0x7f, 0x6}, {0xc3, 0x4}, {0x85, 0x6}, {0x1f}, {0x9, 0x1}, {0x81, 0x1}], "0476793feb0caab5"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "521258089169a461"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x2, 0x5}, {0x0, 0x5}, {0xff, 0x2}, {0x24, 0x3}, {0x1, 0x6}, {0x0, 0x2}, {0x3f, 0x7}, {0x6, 0x6}, {0x81, 0x4}, {0x8, 0x3}, {0x7}, {0x40, 0x7}, {0x80, 0x7}, {0x5}, {0x81, 0x1}, {0xff, 0x2}], "cb9d893a1756384d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x6, 0x3}, {0x0, 0x1}, {0x1f, 0x3}, {0x5, 0x1}, {0x8, 0x3}, {0x0, 0x6}, {0xff, 0x5}, {0xfe}, {0x9, 0x4}, {0xad, 0x2}, {0x3}, {0x3, 0x4}, {0xe6, 0x4}, {0xed, 0x3}, {0xf8}, {0xf9, 0x4}], "23565e42e43f9731"}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000087c0)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x44000200}, 0xc, &(0x7f0000008780)={&(0x7f00000074c0)={0x12c0, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x26}}}}, [@NL80211_ATTR_TESTDATA={0xc8, 0x45, "90939866dafe2a230d20c2123a4cd33ecc78bb3480b083574d4d6f115b252654c4cfa9b85fc27cef87d258dda338415b6323b202920cba201620b464022c10eb872f007fcfdaf62344c37496617000ca274f1a8ac398b50ed3baa4c63e5665737ba3a4baca46f9ac4b610ab00f87ed1775857f242860999cb84612cd76a6305b9f0de0743e09c1be0ccb7c870290c2b2350d06f08fabb56e119587a6ba32bb96c9ef6d0036e3b43158cc442eccc155ec28d31679c8736f38d4a16734a395410a7a9850ee"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x18, 0x45, "2fd934bd4777bb300ee62c75ae68bf27dfd74153"}, @NL80211_ATTR_TESTDATA={0xe3, 0x45, "548f4022c754a63f0160a23bea3d7b4b1d104d0c09db7e3a08c71376a089f348df23532f732e88d542a046877b22c4c7590fc5651f3ebdaeced594fb2ed3b29e449f45be7b371e1d7a74ea7fa99ce967513a3328d73fedb87955831d1b3826ec9abcf1fa4dd5b7f97d6cb28d6f152d9b408cad68d06a44ffcc9ea73b929b037874b3c255bfaa4d76e2da5ff599910f673be8202b5b75c8ff140adc6c8c454591a66bd93118e4ee3a9ea418207360de2dfe801ec26a0387c5014b658e7aaa6551ce65d8cbe5ac244b1b8a71a747ef2aec44ac0ca1f06e2884d0bc743d65011b"}, @NL80211_ATTR_TESTDATA={0x99, 0x45, "82e42b1c7cf00d88e7627f7bb7141bbc94dae6ff78f7a54bac065fb839bd5f733b1e0d1e3cbf5535cd9e2c55f2b0f1216ca5e3a58420173337fb1f502467925cfd5080b30b527610f7ee44e3ac3bfa59d22d170a4809a52e4e2891068ae8104019685b574038dc24829b24a8d25a7812cc80e3bcab55edfb6718bf973c8d83aed9861ca7fc76b15af3d6eabb6196def0e8a4b72df8"}, @NL80211_ATTR_TESTDATA={0x39, 0x45, "3bdf4e01b0f6b9462f4183cad6aea8d7bd14faf6f064d60dddd629dcc0b431cba48b7d4d5857eefb74aa5dc79b89648ee43943080b"}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000008880)={'ip6gre0\x00', &(0x7f0000008800)={'syztnl1\x00', r3, 0x4, 0xa7, 0x9, 0x800, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x4, 0x80}}) 08:40:16 executing program 6: ioctl$PTP_PIN_SETFUNC2(0xffffffffffffffff, 0x40603d10, &(0x7f0000000000)={'\x00', 0x6, 0x2, 0x5}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x4000, 0x18) clock_gettime(0x0, &(0x7f0000004180)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f00000000c0)=@caif=@util, 0x80, &(0x7f0000002580)=[{&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x7, &(0x7f0000002600)=""/113, 0x71}, 0x9}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002680)=""/168, 0xa8}, {&(0x7f0000002740)=""/222, 0xde}, {&(0x7f0000002840)}, {&(0x7f0000002880)=""/194, 0xc2}, {&(0x7f0000002980)=""/69, 0x45}, {&(0x7f0000002a00)=""/25, 0x19}, {&(0x7f0000002a40)=""/169, 0xa9}], 0x7}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000002b80)=""/210, 0xd2}, {&(0x7f0000002c80)=""/130, 0x82}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/215, 0xd7}, {&(0x7f0000003e40)=""/90, 0x5a}, {&(0x7f0000003ec0)=""/30, 0x1e}, {&(0x7f0000003f00)=""/225, 0xe1}], 0x7, &(0x7f0000004080)=""/48, 0x30}, 0x81}], 0x3, 0x1, &(0x7f00000041c0)={r1, r2+10000000}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000042c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004300)='/sys/class/wakeup', 0x48941, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000043c0)={'ip6tnl0\x00', &(0x7f0000004340)={'ip6_vti0\x00', 0x0, 0x2f, 0x1f, 0x1, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x388, 0x700, 0x6, 0x28}}) clock_nanosleep(0x1, 0x0, &(0x7f0000004400)={0x0, 0x989680}, &(0x7f0000004440)) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000004480)={'\x00', 0x0, 0x0, 0x1}) clock_nanosleep(0x6, 0x0, &(0x7f0000004500), &(0x7f0000004540)) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000004580)={0x15}) clock_gettime(0x2, &(0x7f00000048c0)) clock_gettime(0x3, &(0x7f0000004900)) clock_getres(0x6, &(0x7f0000004940)) clock_nanosleep(0x6, 0x0, &(0x7f0000004980)={0x77359400}, &(0x7f00000049c0)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000004a00)='/sys/kernel/kexec_crash_loaded', 0x2000, 0x48) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000004b40)={&(0x7f0000004a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004b00)={&(0x7f0000004a80)={0x5c, 0x0, 0x404, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1d9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xd0850, r0, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000004b80)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000004bc0), 0x200c0, 0x0) [ 79.849900] audit: type=1400 audit(1733906416.206:7): avc: denied { execmem } for pid=270 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:40:16 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x6, 0x20, 0x11, @remote, @local, 0x700, 0x1, 0x200, 0x80}}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @phonet={0x23, 0x0, 0x9, 0x9}, @rc={0x1f, @any, 0x5}, @in={0x2, 0x4e21, @broadcast}, 0x1c, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000180)='geneve1\x00', 0x1, 0x7, 0x2}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10c623daec624a0}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000811) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000480), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r1, 0x29, 0x3f, 0x1, 0x3f, 0x42, @loopback, @mcast2, 0x20, 0x40, 0x9, 0x4}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001}, 0x4000011) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0), 0x4) getuid() fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) getuid() sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x4000000) getuid() getpeername(r0, &(0x7f0000000a00)=@ethernet={0x0, @link_local}, &(0x7f0000000a80)=0x80) [ 81.299101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.302470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.307996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.312749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.316282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.317351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.319003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.319952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.323934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.337029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.338950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.340186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.347282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.349303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.353991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.356226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.361028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.362383] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.370214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.374555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.376343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.381807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.388999] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.390546] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.391994] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.398300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.412529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.427341] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.435316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.437166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.439502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.441289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.443008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.445585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.447028] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.447941] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.450234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.456513] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.459958] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.460492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.471311] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.475873] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.479542] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.483461] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.495548] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.499076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.500419] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.503062] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.455556] Bluetooth: hci2: command tx timeout [ 83.455557] Bluetooth: hci0: command tx timeout [ 83.455924] Bluetooth: hci1: command tx timeout [ 83.456780] Bluetooth: hci3: command tx timeout [ 83.519986] Bluetooth: hci4: command tx timeout [ 83.521419] Bluetooth: hci5: command tx timeout [ 83.583045] Bluetooth: hci7: command tx timeout [ 83.583092] Bluetooth: hci6: command tx timeout [ 85.504440] Bluetooth: hci3: command tx timeout [ 85.505098] Bluetooth: hci1: command tx timeout [ 85.505590] Bluetooth: hci2: command tx timeout [ 85.505797] Bluetooth: hci0: command tx timeout [ 85.567799] Bluetooth: hci4: command tx timeout [ 85.568413] Bluetooth: hci5: command tx timeout [ 85.630871] Bluetooth: hci6: command tx timeout [ 85.631494] Bluetooth: hci7: command tx timeout [ 87.551753] Bluetooth: hci0: command tx timeout [ 87.552378] Bluetooth: hci2: command tx timeout [ 87.553163] Bluetooth: hci1: command tx timeout [ 87.553696] Bluetooth: hci3: command tx timeout [ 87.614942] Bluetooth: hci5: command tx timeout [ 87.615551] Bluetooth: hci4: command tx timeout [ 87.678777] Bluetooth: hci6: command tx timeout [ 87.679389] Bluetooth: hci7: command tx timeout [ 89.598998] Bluetooth: hci3: command tx timeout [ 89.599634] Bluetooth: hci1: command tx timeout [ 89.600683] Bluetooth: hci2: command tx timeout [ 89.601244] Bluetooth: hci0: command tx timeout [ 89.663063] Bluetooth: hci4: command tx timeout [ 89.663786] Bluetooth: hci5: command tx timeout [ 89.726844] Bluetooth: hci7: command tx timeout [ 89.727435] Bluetooth: hci6: command tx timeout [ 144.206779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.209880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.216699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.220562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.224012] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.226077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.230080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.237980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.240149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.247586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.250067] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.251519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.281149] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.285063] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.292149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.303874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.314040] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.317576] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.342751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.353915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.359451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.374023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.412509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.417204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.418988] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.419917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.420876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.423974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.442602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.450760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.452260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.455157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.457150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.468269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.513467] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.516098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.520098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.523059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.528124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.535821] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.538482] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.540297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.543097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.543981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.548152] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.549395] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.578311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.597156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.303040] Bluetooth: hci1: command tx timeout [ 146.304159] Bluetooth: hci0: command tx timeout [ 146.367997] Bluetooth: hci2: command tx timeout [ 146.494833] Bluetooth: hci4: command tx timeout [ 146.496118] Bluetooth: hci3: command tx timeout [ 146.622850] Bluetooth: hci7: command tx timeout [ 146.624134] Bluetooth: hci6: command tx timeout [ 146.751818] Bluetooth: hci5: command tx timeout [ 148.350750] Bluetooth: hci0: command tx timeout [ 148.351368] Bluetooth: hci1: command tx timeout [ 148.414776] Bluetooth: hci2: command tx timeout [ 148.543968] Bluetooth: hci3: command tx timeout [ 148.544570] Bluetooth: hci4: command tx timeout [ 148.671918] Bluetooth: hci6: command tx timeout [ 148.672522] Bluetooth: hci7: command tx timeout [ 148.799771] Bluetooth: hci5: command tx timeout [ 150.400331] Bluetooth: hci1: command tx timeout [ 150.401081] Bluetooth: hci0: command tx timeout [ 150.462874] Bluetooth: hci2: command tx timeout [ 150.590954] Bluetooth: hci4: command tx timeout [ 150.592206] Bluetooth: hci3: command tx timeout [ 150.718815] Bluetooth: hci7: command tx timeout [ 150.719440] Bluetooth: hci6: command tx timeout [ 150.848078] Bluetooth: hci5: command tx timeout [ 152.446962] Bluetooth: hci1: command tx timeout [ 152.447586] Bluetooth: hci0: command tx timeout [ 152.510776] Bluetooth: hci2: command tx timeout [ 152.638755] Bluetooth: hci3: command tx timeout [ 152.639395] Bluetooth: hci4: command tx timeout [ 152.767857] Bluetooth: hci7: command tx timeout [ 152.768460] Bluetooth: hci6: command tx timeout [ 152.895846] Bluetooth: hci5: command tx timeout [ 206.608410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.610465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.618588] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.623366] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.626419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.629051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.726560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.732283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.734087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.737517] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.740947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.742295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.747423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.751406] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.754030] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 206.756816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.759948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.762185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.903863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.913544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.915798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.917438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.923902] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.927025] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.929143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.933164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.978441] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.987262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.034116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.038866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.046897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.049523] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.051837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.057339] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.060187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.061592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.081816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.105332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.107137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.120018] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.124237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.127330] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.140556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.142250] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.143534] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.158776] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.203951] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.205308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.703835] Bluetooth: hci0: command tx timeout [ 208.830910] Bluetooth: hci2: command tx timeout [ 208.830946] Bluetooth: hci1: command tx timeout [ 209.023856] Bluetooth: hci3: command tx timeout [ 209.087877] Bluetooth: hci4: command tx timeout [ 209.151793] Bluetooth: hci5: command tx timeout [ 209.216763] Bluetooth: hci7: command tx timeout [ 209.278784] Bluetooth: hci6: command tx timeout [ 210.751954] Bluetooth: hci0: command tx timeout [ 210.880774] Bluetooth: hci1: command tx timeout [ 210.880815] Bluetooth: hci2: command tx timeout [ 211.072797] Bluetooth: hci3: command tx timeout [ 211.135718] Bluetooth: hci4: command tx timeout [ 211.198796] Bluetooth: hci5: command tx timeout [ 211.263737] Bluetooth: hci7: command tx timeout [ 211.326752] Bluetooth: hci6: command tx timeout [ 212.798896] Bluetooth: hci0: command tx timeout [ 212.926763] Bluetooth: hci2: command tx timeout [ 212.926801] Bluetooth: hci1: command tx timeout [ 213.119982] Bluetooth: hci3: command tx timeout [ 213.182847] Bluetooth: hci4: command tx timeout [ 213.246944] Bluetooth: hci5: command tx timeout [ 213.312677] Bluetooth: hci7: command tx timeout [ 213.374747] Bluetooth: hci6: command tx timeout [ 214.846913] Bluetooth: hci0: command tx timeout [ 214.975711] Bluetooth: hci2: command tx timeout [ 214.975802] Bluetooth: hci1: command tx timeout [ 215.167780] Bluetooth: hci3: command tx timeout [ 215.230750] Bluetooth: hci4: command tx timeout [ 215.295796] Bluetooth: hci5: command tx timeout [ 215.359859] Bluetooth: hci7: command tx timeout [ 215.425157] Bluetooth: hci6: command tx timeout [ 269.129096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.132911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.135409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.140779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.142397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.144419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.276841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.279319] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.287067] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.291245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.297161] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.299278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.331249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.333891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.335008] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.338122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.341871] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.343105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.391768] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.402981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.417788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.447569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.451466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.453281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.461240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.471970] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.485563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.489534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.490937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.500818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.502361] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.503589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.504523] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.530821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.563107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.568915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.600061] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.627986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.642344] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.650012] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.668076] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.678831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.690193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.697107] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.700995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.716275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.721964] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.740138] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 271.166745] Bluetooth: hci0: command tx timeout [ 271.359766] Bluetooth: hci2: command tx timeout [ 271.360906] Bluetooth: hci1: command tx timeout [ 271.550735] Bluetooth: hci3: command tx timeout [ 271.616035] Bluetooth: hci4: command tx timeout [ 271.679102] Bluetooth: hci5: command tx timeout [ 271.808699] Bluetooth: hci6: command tx timeout [ 272.638778] Bluetooth: hci7: command tx timeout [ 273.214870] Bluetooth: hci0: command tx timeout [ 273.406943] Bluetooth: hci2: command tx timeout [ 273.408669] Bluetooth: hci1: command tx timeout [ 273.599797] Bluetooth: hci3: command tx timeout [ 273.663292] Bluetooth: hci4: command tx timeout [ 273.728053] Bluetooth: hci5: command tx timeout [ 273.855691] Bluetooth: hci6: command tx timeout [ 274.686710] Bluetooth: hci7: command tx timeout [ 275.263655] Bluetooth: hci0: command tx timeout [ 275.454957] Bluetooth: hci2: command tx timeout [ 275.455567] Bluetooth: hci1: command tx timeout [ 275.647696] Bluetooth: hci3: command tx timeout [ 275.711778] Bluetooth: hci4: command tx timeout [ 275.774746] Bluetooth: hci5: command tx timeout [ 275.902702] Bluetooth: hci6: command tx timeout [ 276.735676] Bluetooth: hci7: command tx timeout [ 277.312695] Bluetooth: hci0: command tx timeout [ 277.502842] Bluetooth: hci1: command tx timeout [ 277.503482] Bluetooth: hci2: command tx timeout [ 277.696644] Bluetooth: hci3: command tx timeout [ 277.759722] Bluetooth: hci4: command tx timeout [ 277.822682] Bluetooth: hci5: command tx timeout [ 277.951741] Bluetooth: hci6: command tx timeout [ 278.783781] Bluetooth: hci7: command tx timeout [ 331.468365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.472330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.476139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.488564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.498120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.502287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.546947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.551266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.558526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.575039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.581293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.585540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.748144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.761885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.768153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.771444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.774399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.783077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.793124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.823547] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.825784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.827743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.842252] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.858446] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.870870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.886177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.892250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.926748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.943544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.945895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.955996] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.957268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.961917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.974998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.977417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.980113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.986870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.009031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.030742] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.042110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 332.042128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.045281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.060822] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 332.062515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.071929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.084950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.101936] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.148890] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.568809] Bluetooth: hci0: command tx timeout [ 333.630709] Bluetooth: hci1: command tx timeout [ 333.952480] Bluetooth: hci3: command tx timeout [ 334.015744] Bluetooth: hci5: command tx timeout [ 334.016530] Bluetooth: hci2: command tx timeout [ 334.144672] Bluetooth: hci4: command tx timeout [ 334.206909] Bluetooth: hci6: command tx timeout [ 334.270836] Bluetooth: hci7: command tx timeout [ 335.614795] Bluetooth: hci0: command tx timeout [ 335.678688] Bluetooth: hci1: command tx timeout [ 335.998703] Bluetooth: hci3: command tx timeout [ 336.062668] Bluetooth: hci2: command tx timeout [ 336.063136] Bluetooth: hci5: command tx timeout [ 336.190676] Bluetooth: hci4: command tx timeout [ 336.255037] Bluetooth: hci6: command tx timeout [ 336.318776] Bluetooth: hci7: command tx timeout [ 337.662988] Bluetooth: hci0: command tx timeout [ 337.727806] Bluetooth: hci1: command tx timeout [ 338.047161] Bluetooth: hci3: command tx timeout [ 338.110957] Bluetooth: hci5: command tx timeout [ 338.111920] Bluetooth: hci2: command tx timeout [ 338.239173] Bluetooth: hci4: command tx timeout [ 338.302931] Bluetooth: hci6: command tx timeout [ 338.366752] Bluetooth: hci7: command tx timeout [ 339.710977] Bluetooth: hci0: command tx timeout [ 339.774766] Bluetooth: hci1: command tx timeout [ 340.094935] Bluetooth: hci3: command tx timeout [ 340.158721] Bluetooth: hci2: command tx timeout [ 340.159309] Bluetooth: hci5: command tx timeout [ 340.286709] Bluetooth: hci4: command tx timeout [ 340.350702] Bluetooth: hci6: command tx timeout [ 340.414800] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:45:25 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffffffff81a5f650 RDX=ffff88802399d340 RSI=00000000000000d1 RDI=0000000000000004 RBP=ffffea00007d7080 RSP=ffff888023ca78f0 R8 =0000000000000000 R9 =fffff940000fae10 R10=00000000000000d1 R11=00000000000007e0 R12=00000000000000d1 R13=0000000000000017 R14=0000000000000016 R15=00000000000000d1 RIP=ffffffff8171e520 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3544204610 CR3=0000000030aee000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88802926fbd0 RCX=ffffffff849d7034 RDX=ffff888016668000 RSI=ffffffff849d7042 RDI=0000000000000005 RBP=dffffc0000000000 RSP=ffff88802926fb10 R8 =00000000ffffffff R9 =fffffbfff0fddde2 R10=0000000000000001 R11=0000000000000000 R12=ffff888022249a1e R13=ffffed100524df81 R14=ffff88802926fc0d R15=0000000000000001 RIP=ffffffff8171e528 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbacbbbf310 CR3=0000000016862000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000