Warning: Permanently added '[localhost]:48937' (ECDSA) to the list of known hosts.
2025/01/29 12:28:29 fuzzer started
2025/01/29 12:28:29 dialing manager at localhost:40187
syzkaller login: [   80.810079] cgroup: Unknown subsys name 'net'
[   80.956232] cgroup: Unknown subsys name 'cpuset'
[   81.022150] cgroup: Unknown subsys name 'rlimit'
[   86.308469] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   96.740587] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/29 12:28:55 syscalls: 213
2025/01/29 12:28:55 code coverage: enabled
2025/01/29 12:28:55 comparison tracing: enabled
2025/01/29 12:28:55 extra coverage: enabled
2025/01/29 12:28:55 setuid sandbox: enabled
2025/01/29 12:28:55 namespace sandbox: enabled
2025/01/29 12:28:55 Android sandbox: enabled
2025/01/29 12:28:55 fault injection: enabled
2025/01/29 12:28:55 leak checking: enabled
2025/01/29 12:28:55 net packet injection: enabled
2025/01/29 12:28:55 net device setup: enabled
2025/01/29 12:28:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/29 12:28:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/29 12:28:55 USB emulation: enabled
2025/01/29 12:28:55 hci packet injection: enabled
2025/01/29 12:28:55 wifi device emulation: enabled
2025/01/29 12:28:55 802.15.4 emulation: enabled
2025/01/29 12:28:55 fetching corpus: 0, signal 0/0 (executing program)
2025/01/29 12:28:56 starting 8 fuzzer processes
12:28:56 executing program 0:
r0 = getuid()
ioprio_get$uid(0x3, r0)
getgroups(0x1, &(0x7f0000000180)=[<r1=>0x0])
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x5c, 0x7d, 0x1, {{0x0, 0x47, 0x4aa, 0x8, {0x50, 0x4, 0x6}, 0x28a80000, 0x404, 0x9, 0x81, 0x8, '\x14][!\x96$).', 0x8, 'o-\\,.\\+#', 0x4, '\xe0-+-'}, 0x0, '', r0, r1, 0xffffffffffffffff}}, 0x5c)
write$snapshot(0xffffffffffffffff, &(0x7f0000000240)="6f08efdc05dd73a69dfdaff0fd2e9222f5e80a09b42d19bb74280de6995a3cfa78ad7193b6cd8ee3db4ed6b5c60f9ab6090cb3293cba8d9c30837bda2d18a345d2ecad02faba8973f50abe536c3629cd361ef856c2329f44386f", 0x5a)
getgroups(0x1, &(0x7f00000002c0)=[<r2=>r1])
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000340)='cpu.pressure\x00', 0x2, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x10001)
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x140000, 0x71}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6a}}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="6dce4a68addb"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x24004000)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f00000004c0))
r4 = syz_open_dev$vcsa(&(0x7f0000000500), 0x9, 0x4a0000)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x1000)
pipe2$9p(&(0x7f0000000540), 0x104800)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_io_uring_setup(0x762f, &(0x7f0000000580)={0x0, 0x2b83, 0x10, 0x2, 0x8f, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000600), &(0x7f0000000640))
getgroups(0x3, &(0x7f0000000900)=[<r5=>r1, r1, r1])
getgroups(0x8, &(0x7f00000009c0)=[r2, <r6=>r1, 0xee00, r1, r1, r1, r1, r1])
getgroups(0xa, &(0x7f0000000a00)=[0xffffffffffffffff, r1, r1, r1, r1, r1, r1, r2, <r7=>r2, r2])
getgroups(0x6, &(0x7f0000000a40)=[r1, r5, r1, 0xffffffffffffffff, r6, r7])

12:28:56 executing program 1:
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1e}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000041)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x90, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x24004080)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}]}, 0x8c}}, 0x89d4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x168, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x180a9979}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x14}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc95c}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xc1a, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x400, @local, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfcf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4008800}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x70}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10010)
r2 = syz_open_dev$vcsa(&(0x7f0000000c00), 0x1, 0x111101)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x391}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x647}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x81}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x40010)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4001)
r4 = syz_open_dev$vcsa(&(0x7f0000000e80), 0x4, 0x1d5d80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8800a120}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r5, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)

12:28:56 executing program 2:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x12ab9}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48880}, 0x800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x51e1e340ae9f2b38}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x800)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c081}, 0x54)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040020)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x9004)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x110, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff7f, 0x19}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0xb6, 0x5b, "47de6bcf9f047c6990fd4e22131dea7872cb2ff1d04b5075c46baa7ed62cb8eca481266ea3d34ea54c7c5dc6317e8e0dbe24ee3288e3448980267ff24bdc5dcba3258d3a9540ba7672dedf1c236988b6bdd246efbfe1620af2123f4cd44942b95d94a3e3d99df647f50622aa3af5dabd38cb93ae8ff6f6fda53c7b5e9bb9a84ef21c1e512a8db031cc81ce827f8222bcacce99045d12d997596ad9a6117776b22b69c246ddaab849f399a15b77b262107236"}, @NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "05b999211282c7fff55b2f5c7fa13b8ca02a6d89a5fe95a88bd1dceb40572ab0c05d9cdef9a328f06a204c2a31d4b6"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000040}, 0x4840)
r7 = socket(0x0, 0x1, 0x2)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x2f}}}}, [@NL80211_ATTR_FRAME_MATCH={0x82, 0x5b, "59e7cd1b592d0f04bb6e2f1cfefbaf65cefa295b4985553ccf8c53fb2e18d2a196999c65cb5de309f8ef72d3305f6f9075629dabdbc39cdd53a68874c09ef306ddc7da8bf90f491ea3ff467c2382add7025efd76c3d75b1e423d0cd681c21a37ab77d8f8ec08d4c261ed8b40df471cee8a6b67dcc21dc8d93904cf11fc3c"}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r7)
sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x2, 0x70bd2a, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb0c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x3c}}, 0x844)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r10, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0xc010)

12:28:56 executing program 3:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x5, 0x4003, @fd, 0x101, &(0x7f0000000000)="bce68058536a6568cff262a78e5ceee10f9c852be77729d8cd65bfde78740bb2853566d47685466d9ac954c8865dab60b62e6484bfd491804f6557f0f4b0541bbe5bf23fbe319f0a971008bfdc33a1ff8bed9e28b338ca3b92bc352a2c455c038f50e9ce49017839f147ed814d82b983bd3764930cf3ca5a18f962030bd717bd3b2c7ef3bc84ceb3f60bf87b72cadbd47f5a66d40bcfc913757e3f5d9b2aa50236d3318a487cd905c3c407f53d94d17ef36b5b6e959d19fbf4a1215f18f42dce41d23a0d6d7b", 0xc6, 0xc}, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/110, 0x6e, 0x1, &(0x7f00000001c0)=""/248, 0xf8}, &(0x7f0000000300)=0x40)
r0 = socket(0x6, 0x4, 0x80)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8021}, 0x40080)
r1 = io_uring_setup(0x5710, &(0x7f0000000440)={0x0, 0xaa7d, 0x2, 0x0, 0x9b})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000004c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540), 0x2, 0x0)
r2 = semget(0x3, 0x2, 0x4)
semop(r2, &(0x7f0000000580)=[{0x2, 0xff, 0x800}, {0x2, 0x7, 0x800}, {0x2, 0x47, 0x800}, {0x0, 0xdf, 0x2000}, {0x7, 0x2, 0x800}, {0x3, 0x624c, 0x1800}], 0x6)
semctl$SEM_STAT(r2, 0x3, 0x12, &(0x7f00000005c0)=""/102)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000640)=[0x401, 0x7f, 0x3, 0x49e4])
r3 = syz_open_dev$vcsa(&(0x7f0000000680), 0x10001, 0x101000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/183, 0xb7, 0x1, &(0x7f0000000780)=""/222, 0xde}, &(0x7f00000008c0)=0x40)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r3)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000a40)={{0x7f, 0x6}, 'port1\x00', 0x0, 0x0, 0x25, 0x8, 0x40, 0x696, 0x1, 0x0, 0x3, 0x8})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

12:28:56 executing program 4:
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/eeepc_laptop', 0x0, 0xa67842ad0e9ec382)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x23, 0x34, @random="e06b1e460a58a2967ab22da9ef07b4d245e72294176a71d8f7409ec95bd1ce"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b0f93b8f5127"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x8000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x80)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x57}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008844}, 0x4)
write$P9_RREAD(r1, &(0x7f0000000580)={0x9c, 0x75, 0x1, {0x91, "8c6efd00f1ff118d300f523e124e8a4f5fbf6afb05f4b77a66e1800b064e9b6b3be4fd639ba1e566916c6270b0a001ab03d17fc7cdf7f74ee51f72946e01d860845a51b08ed5965419d426c9bf93d41934d5741086fde7c12bf7ae7101c996f447f6d2dd9aa1248a6574bbd56da600c5089501dec37a385d72004e4c849ce9b8337d73c6641519666e0c4f9a1490753fe2"}}, 0x9c)
pipe2$9p(&(0x7f0000000640), 0x4000)
write$P9_RSTATu(r1, &(0x7f0000000680)={0x5c, 0x7d, 0x1, {{0x0, 0x41, 0x6, 0x101, {0xdb}, 0x100000, 0x3, 0x3, 0x100000000, 0x3, '(:&', 0x0, '', 0x4, '.!u^', 0x7, '}]#*:{R'}, 0x6, '\xff\xff\xff\xff\xff\xff', 0x0, 0x0, 0xffffffffffffffff}}, 0x5c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x14}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff812}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000005}, 0x8000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/snd_timer', 0xa00, 0x32)
sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x124e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x871}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x14c}}, 0x80)
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x154, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffea}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6224}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x51a2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20004050}, 0x4)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/pm_wakeup_irq', 0x200040, 0x100)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r6, 0x4afe1000)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000d40))

[  107.698225] audit: type=1400 audit(1738153736.947:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:28:56 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/random', 0x2000, 0x1a4)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3f)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x5bd6000)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x5)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x400, 0x28)
write$P9_RLERROR(r1, &(0x7f0000000080)={0xa, 0x7, 0x2, {0x1, '-'}}, 0xa)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x9)
write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7)
write$P9_RREMOVE(r1, &(0x7f0000000100)={0x7, 0x7b, 0x2}, 0x7)
sysfs$2(0x2, 0x1000, &(0x7f0000000140)=""/17)
sysfs$2(0x2, 0x2f18, &(0x7f0000000180)=""/14)
write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7)
r2 = semget(0x3, 0x4, 0x18)
getgroups(0x2, &(0x7f0000000280)=[<r3=>0x0, 0xee01])
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0xee00, r3, 0xffffffffffffffff, 0xee01, 0x4, 0xa0d}, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380))
r4 = semget(0x3, 0x0, 0x81)
semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000003c0)=""/132)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000480))

12:28:56 executing program 6:
semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x2, 0x7ff, 0x1800}, {0x2, 0xed4, 0x1800}, {0x1, 0x4, 0x2000}, {0x1, 0x9, 0x1800}], 0x4, &(0x7f0000000040)={0x0, 0x3938700})
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/8139too', 0x80000, 0x101)
mq_timedreceive(r0, &(0x7f00000000c0)=""/222, 0xde, 0x1ff, &(0x7f00000001c0))
r1 = socket(0x1f, 0x80000, 0x5945)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
write$P9_RXATTRCREATE(r2, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7)
semop(0x0, &(0x7f00000002c0)=[{0x3, 0x0, 0x1000}, {0x0, 0x4, 0x1000}], 0x2)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x32}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4009}, 0x400088c)
r3 = socket(0x18, 0x800, 0x4)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000004}, 0x50)
r4 = socket(0x13, 0x5, 0xa0000)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6940d044}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x31}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
write$P9_RSYMLINK(r2, &(0x7f0000000700)={0x14, 0x11, 0x2, {0x1, 0x2, 0x1}}, 0x14)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r3)
sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004804}, 0x44405)
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f00000008c0)=""/169)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x277}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x20004014)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)

12:28:57 executing program 7:
syz_io_uring_setup(0x642d, &(0x7f0000000000)={0x0, 0x4bce, 0x10, 0x3, 0x226}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x1f1f, &(0x7f0000000100)={0x0, 0xe929, 0x0, 0x2, 0x1af}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x2000, @fd_index=0x6, 0x6, 0x2, 0x2, 0x6, 0x1, {0x1}}, 0x2)
io_setup(0xe4, &(0x7f0000000240)=<r3=>0x0)
io_pgetevents(r3, 0xfff, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)={0x0, 0x989680}, 0xfffffffffffffffe)
pselect6(0x40, &(0x7f00000003c0)={0xad, 0x7, 0x1f, 0xa7b, 0x7, 0x1000, 0x5, 0x3}, &(0x7f0000000400)={0x9, 0x0, 0x20, 0x7fff, 0xfffffffffffffffa, 0x6, 0x5, 0x40}, &(0x7f0000000440)={0x66fa, 0x0, 0x8, 0x5, 0x5, 0x4, 0xffffffff80000001, 0x2}, &(0x7f0000000480)={0x77359400}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x8]}, 0x8})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8010)
io_pgetevents(r3, 0x67e3, 0x6, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000740), 0x0)
pselect6(0x40, &(0x7f0000000780)={0x0, 0xffffffff, 0xffffffffffff0001, 0x1, 0x1, 0xa0, 0x8, 0x5}, &(0x7f00000007c0)={0x3, 0x7ff, 0x6, 0x7d9d9d6d, 0x7, 0x7, 0x5}, &(0x7f0000000800)={0x8, 0x8, 0x2, 0x9, 0xffff, 0x2, 0x9, 0x20}, &(0x7f0000000840)={0x77359400}, &(0x7f00000008c0)={&(0x7f0000000880)={[0x6]}, 0x8})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4)
sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5c}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x80}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x80}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x28}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x82109500}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r8, 0x800, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4042091}, 0x40040)
syz_io_uring_setup(0x20c5, &(0x7f0000000cc0)={0x0, 0xd99f, 0x1, 0x0, 0x20d, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000d40)=<r9=>0x0, &(0x7f0000000d80))
syz_io_uring_submit(r9, r2, &(0x7f0000000dc0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x80000001, 0x0, 0x7, 0x1}, 0x63ee)
pselect6(0x40, &(0x7f0000000e00)={0xffffffffffffff3f, 0x1f, 0x5000000000, 0x1f, 0x9, 0x0, 0x6de8, 0x4}, &(0x7f0000000e40)={0x20b, 0x2, 0x7, 0x0, 0x1f0, 0x9b, 0x40, 0x81}, &(0x7f0000000e80)={0x100000001, 0x400, 0x2, 0xfffffffffffffffb, 0x2000000, 0x7, 0x7, 0x5}, &(0x7f0000000ec0), &(0x7f0000000f40)={&(0x7f0000000f00)={[0xf6e8]}, 0x8})

[  109.221933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.248799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.250281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.266862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.267821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.268769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  109.271601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.272582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.273286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  109.277129] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.277950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.283121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.284905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.287320] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.290045] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  109.294332] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.297793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.298603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  109.300837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.302276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  109.304013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.304901] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  109.306085] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  109.318940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  109.319982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.322580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  109.327114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.347859] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  109.349335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  109.351153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.372066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.374439] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.380877] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  109.381785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  109.385620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  109.410844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.417325] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  109.426726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  109.428839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  109.431168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  109.440302] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  109.442392] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  109.455959] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  109.456964] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  109.470027] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  109.471128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  109.494352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  109.496144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.430777] Bluetooth: hci2: command tx timeout
[  111.430785] Bluetooth: hci4: command tx timeout
[  111.494127] Bluetooth: hci7: command tx timeout
[  111.494851] Bluetooth: hci0: command tx timeout
[  111.495438] Bluetooth: hci1: command tx timeout
[  111.557635] Bluetooth: hci6: command tx timeout
[  111.558347] Bluetooth: hci3: command tx timeout
[  111.621806] Bluetooth: hci5: command tx timeout
[  113.478561] Bluetooth: hci4: command tx timeout
[  113.478593] Bluetooth: hci2: command tx timeout
[  113.541831] Bluetooth: hci1: command tx timeout
[  113.542354] Bluetooth: hci0: command tx timeout
[  113.542383] Bluetooth: hci7: command tx timeout
[  113.605660] Bluetooth: hci6: command tx timeout
[  113.606202] Bluetooth: hci3: command tx timeout
[  113.672397] Bluetooth: hci5: command tx timeout
[  115.525811] Bluetooth: hci2: command tx timeout
[  115.527113] Bluetooth: hci4: command tx timeout
[  115.600585] Bluetooth: hci7: command tx timeout
[  115.601160] Bluetooth: hci1: command tx timeout
[  115.601793] Bluetooth: hci0: command tx timeout
[  115.653702] Bluetooth: hci6: command tx timeout
[  115.654249] Bluetooth: hci3: command tx timeout
[  115.717562] Bluetooth: hci5: command tx timeout
[  117.573665] Bluetooth: hci4: command tx timeout
[  117.574191] Bluetooth: hci2: command tx timeout
[  117.637720] Bluetooth: hci0: command tx timeout
[  117.638265] Bluetooth: hci1: command tx timeout
[  117.638492] Bluetooth: hci7: command tx timeout
[  117.701647] Bluetooth: hci3: command tx timeout
[  117.701709] Bluetooth: hci6: command tx timeout
[  117.765681] Bluetooth: hci5: command tx timeout
[  171.608772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  171.621318] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  171.623826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  171.633057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  171.642693] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  171.644649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  171.804011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  171.870108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  171.919710] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  171.922850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  171.925150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  171.927362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  171.928937] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  171.930005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  171.930977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  171.932404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  171.933722] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  171.933726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  171.934666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  171.936187] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  171.937206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  171.937647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  171.941097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  171.942249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  171.944025] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  171.950638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  171.953018] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  171.955540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  171.959955] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  171.961576] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  171.963716] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  171.967827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  171.969182] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  171.972044] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  171.972099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  171.974263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  171.975202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  171.982414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  171.990049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  171.991645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  171.994270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.004919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.015707] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  172.025843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.030780] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  172.031619] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  172.036908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  172.041160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.701880] Bluetooth: hci0: command tx timeout
[  174.021622] Bluetooth: hci4: command tx timeout
[  174.022628] Bluetooth: hci1: command tx timeout
[  174.023211] Bluetooth: hci2: command tx timeout
[  174.085652] Bluetooth: hci3: command tx timeout
[  174.086162] Bluetooth: hci5: command tx timeout
[  174.151561] Bluetooth: hci6: command tx timeout
[  174.215146] Bluetooth: hci7: command tx timeout
[  175.750547] Bluetooth: hci0: command tx timeout
[  176.069715] Bluetooth: hci4: command tx timeout
[  176.070247] Bluetooth: hci2: command tx timeout
[  176.071592] Bluetooth: hci1: command tx timeout
[  176.136989] Bluetooth: hci5: command tx timeout
[  176.137011] Bluetooth: hci3: command tx timeout
[  176.197775] Bluetooth: hci6: command tx timeout
[  176.261550] Bluetooth: hci7: command tx timeout
[  177.799515] Bluetooth: hci0: command tx timeout
[  178.122359] Bluetooth: hci1: command tx timeout
[  178.122926] Bluetooth: hci2: command tx timeout
[  178.123376] Bluetooth: hci4: command tx timeout
[  178.182643] Bluetooth: hci5: command tx timeout
[  178.185082] Bluetooth: hci3: command tx timeout
[  178.250529] Bluetooth: hci6: command tx timeout
[  178.309785] Bluetooth: hci7: command tx timeout
[  179.864547] Bluetooth: hci0: command tx timeout
[  180.165630] Bluetooth: hci4: command tx timeout
[  180.165864] Bluetooth: hci2: command tx timeout
[  180.166151] Bluetooth: hci1: command tx timeout
[  180.233515] Bluetooth: hci3: command tx timeout
[  180.233900] Bluetooth: hci5: command tx timeout
[  180.294819] Bluetooth: hci6: command tx timeout
[  180.360539] Bluetooth: hci7: command tx timeout
[  234.136196] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.141845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.149921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.155382] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.176180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  234.196155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.321920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.334290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.335426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.337686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.339172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.340183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.375725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  234.385634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  234.389057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  234.391947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  234.393332] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  234.394642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.425995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.429940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.433097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.435950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.470181] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  234.471678] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  234.478173] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  234.478289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  234.483086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  234.495099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  234.508848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  234.510296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  234.511471] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  234.518172] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.523018] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  234.523108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  234.527000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  234.527857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  234.528912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.537324] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  234.541678] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  234.543331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  234.544510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.551683] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  234.553715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  234.587953] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  234.601656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.645347] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.651709] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  234.655699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.296556] Bluetooth: hci0: command tx timeout
[  236.425539] Bluetooth: hci2: command tx timeout
[  236.426607] Bluetooth: hci1: command tx timeout
[  236.614663] Bluetooth: hci4: command tx timeout
[  236.614671] Bluetooth: hci3: command tx timeout
[  236.677594] Bluetooth: hci7: command tx timeout
[  236.677661] Bluetooth: hci5: command tx timeout
[  236.741643] Bluetooth: hci6: command tx timeout
[  238.341554] Bluetooth: hci0: command tx timeout
[  238.469555] Bluetooth: hci2: command tx timeout
[  238.469584] Bluetooth: hci1: command tx timeout
[  238.663589] Bluetooth: hci3: command tx timeout
[  238.663700] Bluetooth: hci4: command tx timeout
[  238.725568] Bluetooth: hci7: command tx timeout
[  238.728493] Bluetooth: hci5: command tx timeout
[  238.789536] Bluetooth: hci6: command tx timeout
[  240.390612] Bluetooth: hci0: command tx timeout
[  240.517637] Bluetooth: hci2: command tx timeout
[  240.517683] Bluetooth: hci1: command tx timeout
[  240.709690] Bluetooth: hci3: command tx timeout
[  240.712482] Bluetooth: hci4: command tx timeout
[  240.774622] Bluetooth: hci5: command tx timeout
[  240.774645] Bluetooth: hci7: command tx timeout
[  240.838629] Bluetooth: hci6: command tx timeout
[  242.439514] Bluetooth: hci0: command tx timeout
[  242.565608] Bluetooth: hci2: command tx timeout
[  242.566098] Bluetooth: hci1: command tx timeout
[  242.757727] Bluetooth: hci4: command tx timeout
[  242.759484] Bluetooth: hci3: command tx timeout
[  242.821568] Bluetooth: hci7: command tx timeout
[  242.821586] Bluetooth: hci5: command tx timeout
[  242.885641] Bluetooth: hci6: command tx timeout
[  296.648023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.675378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.677816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.679088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  296.682810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  296.684517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.686572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  296.689013] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  296.692084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.699105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  296.711684] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  296.712790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  296.747481] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  296.748498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  296.781376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  296.781394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  296.784712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  296.788525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  296.793826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  296.803087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  296.804045] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  296.808997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  296.810110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  296.815092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.815918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  296.816371] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  296.817183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  296.826973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  296.828287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.829448] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  296.830601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.831969] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  296.833167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  296.834644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  296.836855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  296.849192] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  296.850545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  296.851719] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  296.853038] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.862912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  296.884174] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  296.884617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  296.887118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  296.889281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  296.890137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.899729] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  296.915094] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  296.916090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  298.761600] Bluetooth: hci0: command tx timeout
[  298.763072] Bluetooth: hci1: command tx timeout
[  298.922909] Bluetooth: hci3: command tx timeout
[  298.924745] Bluetooth: hci5: command tx timeout
[  298.925544] Bluetooth: hci4: command tx timeout
[  298.950744] Bluetooth: hci7: command tx timeout
[  298.957049] Bluetooth: hci2: command tx timeout
[  299.026086] Bluetooth: hci6: command tx timeout
[  300.805661] Bluetooth: hci1: command tx timeout
[  300.805679] Bluetooth: hci0: command tx timeout
[  300.933646] Bluetooth: hci4: command tx timeout
[  300.934180] Bluetooth: hci5: command tx timeout
[  300.934737] Bluetooth: hci3: command tx timeout
[  300.997606] Bluetooth: hci2: command tx timeout
[  300.998523] Bluetooth: hci7: command tx timeout
[  301.062825] Bluetooth: hci6: command tx timeout
[  302.853535] Bluetooth: hci0: command tx timeout
[  302.854520] Bluetooth: hci1: command tx timeout
[  302.981572] Bluetooth: hci3: command tx timeout
[  302.982130] Bluetooth: hci5: command tx timeout
[  302.982691] Bluetooth: hci4: command tx timeout
[  303.046537] Bluetooth: hci7: command tx timeout
[  303.047088] Bluetooth: hci2: command tx timeout
[  303.110880] Bluetooth: hci6: command tx timeout
[  304.901592] Bluetooth: hci1: command tx timeout
[  304.902154] Bluetooth: hci0: command tx timeout
[  305.029624] Bluetooth: hci4: command tx timeout
[  305.030144] Bluetooth: hci5: command tx timeout
[  305.031312] Bluetooth: hci3: command tx timeout
[  305.093564] Bluetooth: hci2: command tx timeout
[  305.094108] Bluetooth: hci7: command tx timeout
[  305.157663] Bluetooth: hci6: command tx timeout
[  358.990131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.991907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.993925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.996226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  358.998165] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  359.004932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  359.006514] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  359.012814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  359.056059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  359.059845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  359.061581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  359.065286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  359.140589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  359.145792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  359.146792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  359.159295] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  359.160301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  359.167733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  359.171776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  359.181086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  359.184526] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  359.187391] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  359.189091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  359.191289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  359.194623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  359.214662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  359.219685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  359.222173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  359.224090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  359.225344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  359.242274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  359.245610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.261536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.264273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.270960] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  359.274667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  359.356049] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  359.380347] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  359.381573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  359.385580] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  359.397024] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  359.413519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  359.456929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  359.475546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  359.486634] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  359.526659] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  359.528736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  359.529758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.115499] Bluetooth: hci1: command tx timeout
[  361.117466] Bluetooth: hci0: command tx timeout
[  361.222519] Bluetooth: hci2: command tx timeout
[  361.288496] Bluetooth: hci4: command tx timeout
[  361.289378] Bluetooth: hci3: command tx timeout
[  361.419370] Bluetooth: hci5: command tx timeout
[  361.670337] Bluetooth: hci6: command tx timeout
[  361.671314] Bluetooth: hci7: command tx timeout
[  363.142808] Bluetooth: hci1: command tx timeout
[  363.206211] Bluetooth: hci0: command tx timeout
[  363.269482] Bluetooth: hci2: command tx timeout
[  363.333609] Bluetooth: hci3: command tx timeout
[  363.334113] Bluetooth: hci4: command tx timeout
[  363.462529] Bluetooth: hci5: command tx timeout
[  363.717639] Bluetooth: hci7: command tx timeout
[  363.718178] Bluetooth: hci6: command tx timeout
[  365.189744] Bluetooth: hci1: command tx timeout
[  365.254456] Bluetooth: hci0: command tx timeout
[  365.317586] Bluetooth: hci2: command tx timeout
[  365.381536] Bluetooth: hci3: command tx timeout
[  365.382077] Bluetooth: hci4: command tx timeout
[  365.509661] Bluetooth: hci5: command tx timeout
[  365.765663] Bluetooth: hci7: command tx timeout
[  365.766211] Bluetooth: hci6: command tx timeout
[  367.238029] Bluetooth: hci1: command tx timeout
[  367.301596] Bluetooth: hci0: command tx timeout
[  367.365517] Bluetooth: hci2: command tx timeout
[  367.429532] Bluetooth: hci4: command tx timeout
[  367.430083] Bluetooth: hci3: command tx timeout
[  367.557978] Bluetooth: hci5: command tx timeout
[  367.815134] Bluetooth: hci6: command tx timeout
[  367.815723] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
12:33:58  Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=ffff88806ce402f0 RCX=0000000000000001 RDX=00000000000d000b
RSI=ffffea0000af6040 RDI=ffffffff81a47cf2 RBP=ffff88802d437d00 RSP=ffff88802d437c20
R8 =0000000000000000 R9 =00000000800d000d R10=ffffffff864044d7 R11=0000000000000001
R12=0000000000000202 R13=ffffea0000af6040 R14=ffff888008c4f780 R15=ffff88802bd81128
RIP=ffffffff84a8eb35 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffb7b78b570 CR3=000000001a60e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000001199 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff84a8e7d9 RBP=0000000000000000 RSP=ffff888031d8ff58
R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff864044d7 R11=0000000000000000
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81001a60 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f33c70b8540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33c71c5e60 CR3=0000000034a78000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000