syzkaller login: [ 56.914443] sshd (236) used greatest stack depth: 24192 bytes left Warning: Permanently added '[localhost]:54732' (ECDSA) to the list of known hosts. 2024/10/17 15:00:10 fuzzer started 2024/10/17 15:00:11 dialing manager at localhost:46303 [ 74.822106] cgroup: Unknown subsys name 'net' [ 74.935216] cgroup: Unknown subsys name 'cpuset' [ 75.053671] cgroup: Unknown subsys name 'rlimit' 2024/10/17 15:00:28 syscalls: 205 2024/10/17 15:00:28 code coverage: enabled 2024/10/17 15:00:28 comparison tracing: enabled 2024/10/17 15:00:28 extra coverage: enabled 2024/10/17 15:00:28 setuid sandbox: enabled 2024/10/17 15:00:28 namespace sandbox: enabled 2024/10/17 15:00:28 Android sandbox: enabled 2024/10/17 15:00:28 fault injection: enabled 2024/10/17 15:00:28 leak checking: enabled 2024/10/17 15:00:28 net packet injection: enabled 2024/10/17 15:00:28 net device setup: enabled 2024/10/17 15:00:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 15:00:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 15:00:28 USB emulation: enabled 2024/10/17 15:00:28 hci packet injection: enabled 2024/10/17 15:00:28 wifi device emulation: enabled 2024/10/17 15:00:28 802.15.4 emulation: enabled 2024/10/17 15:00:28 fetching corpus: 0, signal 0/0 (executing program) 2024/10/17 15:00:29 starting 8 fuzzer processes 15:00:29 executing program 1: r0 = socket(0x2a, 0x800, 0x20) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x9000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ip6gretap0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000805) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000001}, 0x1) r2 = accept(r0, 0x0, &(0x7f0000000340)) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c841}, 0x8cd) socketpair(0x3, 0xc, 0x1ff, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan4\x00'}) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0x4) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000880), 0x40000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20008804) 15:00:29 executing program 0: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000000)={0x1, 0x2, 0x9, 0xa839, 0x7fffffff, 0x7fff}) prctl$PR_GET_KEEPCAPS(0x7) r1 = syz_io_uring_setup(0x152d, &(0x7f0000000040)={0x0, 0x22d5, 0x0, 0x3, 0x36d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x2000001a}, 0xffffffffffffffff, 0x3, 0x0, 0x0, {0x0, r4}}, 0xffff8000) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7, 0x20100) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x40}, @loopback, 0x40, 0x7, 0x8, 0xfffffc00}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xad, 0x2, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x700, 0xbd6, 0x6}}) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x9, 0x8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x20, 0x7, 0xffffff3a, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'sit0\x00', r7, 0x2f, 0xf9, 0xfa, 0x7, 0x31, @local, @remote, 0x7, 0x1, 0x4, 0x6}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000580)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xa, 0x68, 0x0, 0x0, 0x7, 0x1, {0x0, r0}}, 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20002000}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000780)={'ip6gre0\x00', &(0x7f0000000700)={'syztnl2\x00', r6, 0x4, 0x3, 0x6, 0x9, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x80, 0x1, 0x8}}) getpeername$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000800)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xff, 0x7f, 0x40, @mcast2, @remote, 0x700, 0x700, 0x8, 0x1}}) 15:00:30 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_ID={0x8}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x86}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2b6e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xad}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x8d0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x40) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc011}, 0x24014005) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/93, 0x5d}, {&(0x7f0000001480)=""/48, 0x30}], 0x3}}, {{&(0x7f0000001500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001580)=""/84, 0x54}, {&(0x7f0000001600)=""/126, 0x7e}, {&(0x7f0000001680)=""/251, 0xfb}, {&(0x7f0000001780)=""/230, 0xe6}, {&(0x7f0000001880)=""/82, 0x52}], 0x5}, 0x7fff}, {{&(0x7f0000001980)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001a00)=""/21, 0x15}, {&(0x7f0000001a40)=""/21, 0x15}, {&(0x7f0000001a80)=""/201, 0xc9}, {&(0x7f0000001b80)=""/99, 0x63}, {&(0x7f0000001c00)=""/181, 0xb5}, {&(0x7f0000001cc0)=""/129, 0x81}, {&(0x7f0000001d80)=""/130, 0x82}, {&(0x7f0000001e40)=""/74, 0x4a}], 0x8, &(0x7f0000001f40)=""/72, 0x48}, 0x8}], 0x3, 0x1a5, &(0x7f0000002080)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10081000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x38, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0xc080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x68, 0x6, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040050}, 0x4000080) sendmsg$sock(r1, &(0x7f0000002540)={&(0x7f0000002300)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002380)="b9005adfbfa2b6ff1ff45de7c3be30680546bbc2ccaa7c70feedd339b5a511a4c11c36b2f2c1928370b4c2332615e72ee693107ee9306b2d28682401ff21712ec9ce55998b49522278b87bd1f4d4be1644e04cd423c04deafb7470e6226bc736bf7c217f7f08e978bb7430243752c99b646697f77026f81dcd7ab7eebf5d9a554388e33e0be257c489c04938e8dbae84a475b60a9ba2318bc7e9266989daef20e9e83bc055145324558efae3395b7e90c7c8a8f7c06931781020", 0xba}, {&(0x7f0000002440)="ae8f4fb37589aafe4442034ee1b618655d07a8d1411341d91187aeb27b54914c8a7101143eedc200e6602281934828ab08d2ed6245556371d0d4c36eeaa305eae30b9940f1498556522bb18ff2ef3aa34486", 0x52}], 0x2, &(0x7f0000002500)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x18}, 0x810) socketpair(0xa, 0x80000, 0x81, &(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x78, 0xb, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7fffffff}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80001}, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r3) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002800)={&(0x7f0000002780)={0x48, r5, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x10}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x28da}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r6 = accept(r4, &(0x7f0000002880)=@nl=@proc, &(0x7f0000002900)=0x80) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4048045) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x78, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_LABELS={0x2c, 0x16, 0x1, 0x0, [0xb1d, 0x6, 0x10001, 0x80000001, 0x6, 0x5, 0x9, 0x1f, 0x3ff, 0x7]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ID={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x646}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x800) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4855) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000002d80)={'batadv_slave_0\x00', {0x2, 0x0, @initdev}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000002f80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e00)={0x134, 0x3, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7f}]}}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6b11fdd5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x76000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x39}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000030c0)={&(0x7f0000002fc0), 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x6c, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x79}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'syz_tun\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 15:00:30 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x45, 0x80000001, 0x40, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, 0x10, 0x1, 0xe68c, 0xffffff4e}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', r0, 0x29, 0x16, 0x7f, 0x904, 0x3d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x40, 0x401, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x1, 0x6, 0x4, @mcast1, @mcast1, 0x40, 0x80, 0x7f, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x6, 0xfffffffb, 0x72, @remote, @rand_addr=' \x01\x00', 0x40, 0x10, 0x5, 0x7ec}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', r3, 0x29, 0x6d, 0x81, 0x7, 0x58, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x8, 0x10, 0x80, 0x5}}) r4 = socket$inet6(0xa, 0x4, 0x3ff) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000003c0)={@initdev}, &(0x7f0000000400)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x45, 0x8, 0x40, 0x20, @remote, @mcast1, 0x40, 0x80, 0x100, 0x4}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000500)={@mcast1, 0x27, r6}) socketpair(0x1f, 0xa, 0x2, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', r3, 0x2f, 0x3f, 0x1, 0x0, 0x42, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x8000, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', r9, 0x29, 0x7, 0x1f, 0xffff7a64, 0x6a, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0xf841, 0xfffff5e1, 0x4}}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'ip6tnl0\x00', r2, 0x2f, 0x0, 0x9, 0xff, 0x30, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'syztnl1\x00', r11, 0x29, 0x2, 0x5, 0x8, 0x20, @private2, @remote, 0x20, 0x8, 0x1, 0xaa}}) r13 = accept4$inet6(r7, &(0x7f0000000900)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000940)=0x1c, 0x0) accept(r13, &(0x7f0000000980)=@nfc, &(0x7f0000000a00)=0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl0\x00', r12, 0x29, 0x1f, 0x1, 0xffffffff, 0x18, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x700, 0x1f, 0x6d}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x8c, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffc01}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x40}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xcd}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20048000}, 0x1) [ 93.165217] audit: type=1400 audit(1729177230.047:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:00:30 executing program 5: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @local}, 0x80}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080)={0x8000000000000000, 0x200, 0xb922, 0x7}, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@private2, 0x63}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x3b, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x1, [0x0]}, @generic={0x0, 0x1f, "d8200f22c8e7a019c8e6acef4ab13bd3105a68f4a9d551524d382b9ba40d71"}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x78) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x33, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x30}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x2, 0x3f, "c3f3e7c05778ca3c812c8a9111f46b31ccf5d72e640f3445b46fcc2358abca93535220fb2d6dbfba6d9ab3019dbd4d7f82dc3217237b4a3d743ab7060e2965"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x1, [0x4, 0x1, 0x6, 0x4f6]}}]}, 0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x40300, 0x0) mq_getsetattr(r1, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x9}, &(0x7f00000002c0)) r2 = accept$inet6(r1, 0x0, &(0x7f0000000300)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)={0x2b, 0x28, '\x00', [@pad1, @generic={0x9, 0xbb, "6587cc6719cdfcfd0625c839cafb58b16f7e953ccd3502d21582f54be7ee492762a18eefc4c6b2f556bd8db3ece504064759ed53f89351216505448833107fbbbc5a86633327f20e4a6aea9a2209aa98fa0b446515a3d870de5ce2d20335d2809df00aca93514ee0650f682aa7241782ea661d0bbe549f1f364e749c22dd485d836ab5fadbb24a59d265bc3f86b493afd768ed7fd310fbd175b8db8442a0e8f28a168b1a28c903a2fa1fc50d8fab6cc3afad3cc81a6b00421768fb"}, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x58, {0x0, 0x14, 0x3f, 0x9, [0x5dc8, 0x4, 0x100000000, 0x6, 0xfff, 0x100, 0x0, 0x8000, 0x3, 0x1]}}, @enc_lim={0x4, 0x1, 0x4}]}, 0x150) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x3f, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x20, 0x20, 0xffffff69}}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000580)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000005c0)={0x32, 0xa, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x7, [0x8dc, 0x10001, 0xffffffff]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0xfa, 0x1, [0x7, 0x2c8, 0x2, 0x10001, 0x4f]}}]}, 0x60) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000640)={@initdev, 0x0}, &(0x7f0000000680)=0x14) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000006c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', r3, 0x29, 0x0, 0xff, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x2a}, @private0, 0x7800, 0x20, 0xffff, 0x400}}) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000007c0)={@private1}, &(0x7f0000000800)=0x14) setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000840), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000980)=0xe8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) 15:00:30 executing program 4: sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10810012}, 0xc, &(0x7f00000008c0)={&(0x7f0000000040)={0x850, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x824, 0x3, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x49b6}, @NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x27, 0x1, "7a8c820ba949540273f391da92314079d6c6669cc7b2f9f709c1c0ffd84ae0d482fd09"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "2f27fab799b27de5903c2da1c9a87e91f268aad3459d8538fe4d8cacd3697e8e6d54b0fba8140f64b4f7d20e846c6e44836d1c5126aaf606f0bfca0b8bcb948ff181d4ccf373c19803477ffeec158a306e4ed9941a1f7d17d038ea3394c13e3b6ef5abbc3023f4285f344d0f70112920f7041465fff3d0c59deb36e63ec1156aa53c099bd08ae974f56b9bd180dea5f00e7849d86fe9cae8b29ea3ada3116ee29defc12911de834c212056e41000a2e964b03d4029bbde5e6654843be5d9fce7440fa2923db16c41897f20348db9b3c6997452dcab7dc2212dc600bcf0ab3502"}]}]}, {0x6bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x24c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf2, 0x1, "55b608cb0449e70866c99c00d4bce883b93899788facd7c9d6beaa8bdaf39e270166397c13c761a230feab5602a086eb0be9d633c81dee5d2e1366f1bab40caf8b35b21063a99c7d7a5e79713f224b4e4e1f2a2e84c5895068b4026ca1e7ab8d8ad21156d93bb8c7192165b83f449f1bbb5829cdf33055593efcbcfe8070695c2134c8352c405ffba83a1ce1e6ddb0c2a22cbfdc3531ae477347e96a557e66b421643913ec5d152f3da75f62c571b1a8f320a9c6d18a3b6d0efdf5b3fec7abb08eeec5bfe768b9827bbad50c881dd3d96941a179f0b8f52b867a63cdecb871753e48e3b533b3de9e7b68d7396c25"}, @NFTA_DATA_VALUE={0x96, 0x1, "2da9226b9b3e6d753bbde79a6d32cbe7da318efe8fc27930b5d264178001c8a0a8822a3506e7822abbf4ea98490d21bdf21c2fe3732012acfece8478b932a7b353d92dfe6ae2f7a25fc46085c455c9abb6c6266253de21b5965053d4714265a1a642c27cfc3c4624a2a71d5ac967a251f1c22259b9373160d8797c8bbdb1ccc9ef8cb99e57564f0681e8c3310d2303fd1291"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x42, 0x1, "e1f008523e47e72848c006e61f849982ef0b5ce2e1af07e57d9a46f4d16d560779e489bac971b1490caecddb1a7a517e86bd9d5293e704a8ba4acb5d493e"}, @NFTA_DATA_VALUE={0xe, 0x1, "1d3ae21b184d2bc9385c"}]}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "b6754d7c313f09c96360899c5b6bbd1094f1d1dc59b0b4faa489706cf241473ab8824a112e85845ed09c4f2b30e3b4930bf962fdec61ae3de4f25c2b8a07c5bd"}, @NFTA_DATA_VALUE={0x11, 0x1, "69eb8e4a2845993d1be18a2bd7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "2d7b86486e7abeca2229114c4db1a19a14713dcdd68c2f9069399fb3dca1ae9dc7b7f91241c02638cf983d67a2eff6b73b3f0fee6f374a474efa456798b11c271be7b9c6c24f07051cfe91edc22d5ce820914a8b38272bfd02b3dc06c87263ef40548e3edc9ceddafaf24aca1a6cf3be7df3057cc83d848308"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x36f3}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe3, 0x1, "8f1eaa2fc2bf8fe603ff28587581092f1ac00fe467d84205d9432bad6ca7f348ac76c0b22d813b388e99a51e717aa66794c8d43be0cbe2821ea5babc98216abfaa531ab6eb16c35010c8c4f80fcc2274e5b420d24e2dabff192b10c2dbd8ee5baf99aa81b9be4f98cb95a60c16078d9924e58f0e92416342c3c473139371b30abc921d2c8a30f6ba07694eb4f46b0b6b01b6c22e8ff9e6e9c89b9a782d582d6b4e9480e99efa5e7e8f1f9fbf50662004db3e3c227f25c5a1d3d764185187a9e69d00ac97061214b7a5292af6400f21a2f868a24d6a60dc633014a7d226db67"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "ef3b36a1e9aa1d3e51810be7ba941ddf9cda3a3bc208614ce52524134b7a5958b4493406435d24a96c3f95a2052ad6ecddece6f837053d8758b3c3c9a28b597271b5bd6c9d43dfc388bdccf494a602323704fa720e6fe6f0e95de41a4c9f60ab7c85d48c019dffce95681b76d79e18f15b724a7a5d230089341d0851560e7bc9ae49391810698b868694ccf3859e8fcccb893065d21a3e85c9fb08bbd5593c544484303e1f429ecee1e8c0f71bf2fe4c8ba8edeeced61f637c74113bcce3fb813c7146c725353ce8330a"}, @NFTA_DATA_VALUE={0x63, 0x1, "501a81f6ea00d66223491a12c5dd36e1b67678a8e1a93513363679da9af1469dd0c78474d4782ec08c8b9a55c3331ab99d89f3889cce8a491065a11eb718debc1057d4e7be10c604f817445beebfb01b70899d6797ab29f297715e4b3f487c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xab, 0x1, "0752ebf682318cd47c004d25946c605298816a57fbdddf631a7e30c43bf7f0d9800f02edfe059b191fa4aa33a25fd4d4fb569631b8c0dd7ad0f3b9dc785b1d08def16ea6d0764ae74b898d8e9d156ecdbab3be77fe535ac27497d507bc3486872252d091c4929f7fe71e7e256904183c94fc61942752efb436eea21b0c295d4d84c6dd2a85b90dfd2ed08b65af902849884d55be5a2278429d9887b0cd2cd363aef3aaf5bd687f"}]}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x850}, 0x1, 0x0, 0x0, 0x4}, 0x24008054) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x16c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x20, 0xfc, "d51e8fc95548040116f6ac2d282a0eb0ee15e7010eca2c3957f79d3b"}, @NL80211_ATTR_FILS_ERP_RRK={0x41, 0xfc, "d83af43981fa31c1b782adef849a34bdded1e58aedc9959a6162bdbb0a2a0e8cba0d679ba7c8e2e9ddb4bad7164f84de062e5eda616199b7e044e0b644"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "880ba9a445d429245fa98926511b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "d1458b2536c3b3c2a34337"}, @NL80211_ATTR_FILS_ERP_REALM={0xc7, 0xfa, "ffaa9f25fe8fe589ddd3dd5753d14cb83bd1a21f945d6606d110cba2e334a5861b51be0fab55be4edac80dbf76b06f3f4957397cb6643d3351a16d230b4a966adcd00c58e9ec2b3f08600492f9666fcc00db7d7eb291f28c8e65a2453994c36915616f91acee4055d255890b6cb49a10c012bab04471513312ce1aa5acb54358fffd4f56ec0c79ddbafda60ffe14a954626062aea3aff37a1aea2ca5e7ce79cf2aceb990fc1fc0bc1dc60f284467603ea6ba86435fc752213f378cfee4ea05162b707a"}]]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x41dfd2157ce8f3fe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xf8, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x44, 0x5b, "ec4833ed7abce907011f7076df049f788c9f7f95c9891acf8621e416ab631945b686bba2c3f800aa243f8e8080fb6a5277914c161ef72b0074c7cb02d74d0dd0"}, @NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "96f4c53c45cb76525226ed2885d90f563fb93d1f83f9b4dff99eaf7c2b1b1ae793d2eab73148330e2d2bc5c7f4a6beb7376805e01631215df48a71cf4a6df7e20473402d3ff4a00e042efcf854e3da2b4540d9053501b8347350a155e2fca86059a4e7ddf37a4647f2b7e7af95c5f71aa27620b254621c73b35a5e2f71908fe3b5e17e0d5212b5c31589"}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44090}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540504}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f000000ce00)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f000000cf80)={&(0x7f000000ce80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000cf40)={&(0x7f000000cec0)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0xe}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}}, 0x80) r4 = socket(0x10, 0x1, 0x2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f000000f200)={&(0x7f000000e940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f000000f1c0)={&(0x7f000000e980)={0x830, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE={0x1f5, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @random={0xc0, 0xf8, "3bd6625c3a11842de6dfc7446c6c1d6887b135a46807498aa66824ae7aaa3d305ceb143e8e267cad846854cfdd90aec75750c605189780468866aca5ce700d9a8b3ef0c598f7a61798a29b28322ea50755f11f01ce8d56e406b45f6955c1eaacdae39e8a56d2107cb396287eebb042450fb701e7f416a44f50eb342e68a47f864cd9429df9ff1c245bebfbd041b6cce1810f6007997f11527516b482da5e301f0a8a18db478f3b73ec73b9b2ea489dd49363b64af66b5794e22002035d27e26ea255a6e1ab0e04b6169abb62057192ce9fa564d0929f2095087ffca207057874afc50d4a015f5643f7727acbed6af7685bcd82373f6d0185"}, @preq={0x82, 0x3b, @not_ext={{0x0, 0x1}, 0xd6, 0x0, 0x9, @device_a, 0x5, "", 0x0, 0x81, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @device_b, 0x2}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x81, 0xb0, 0x3}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x78, @ext={{0x1}, 0x9, 0x40, 0xffffffff, @device_a, 0x100, @device_a, 0x9, 0x79, 0x8, [{{0x0, 0x0, 0x1}, @device_b}, {{}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x3}, {{0x1}, @device_a, 0x9}, {{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_b, 0xfffffffa}, {{0x0, 0x0, 0x1}, @device_a, 0x2}]}}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x0, 0x8, 0x7fff, @device_a, 0x5, "", 0x5, 0x100, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0xfff}]}}]}, @NL80211_ATTR_IE={0xbd, 0x2a, [@random={0x5, 0x93, "7d418092d6105d2c60b57724ff338fb76b741c44de65c82a9e9b78b28289407a7946c4226ad065152f0d639aa8873ab963b23670d3971f86a634a814fd976666ddf173c61e24e84d7f49cf5717f300d3871f128cd9c3feecf56de59a032de74dbaab79226ff1c1a7c3d5db591d45adfa14f6fb85fa930c9a807ceb78a63f0a532a3b7b3fe6e908482deaeee57957a80604574c"}, @mic={0x8c, 0x18, {0x593, "cebe08723ed5", @long="d769c9ce4f17ad80227ba4616af66051"}}, @ibss={0x6, 0x2, 0x40}, @chsw_timing={0x68, 0x4, {0x80, 0x6}}]}, @NL80211_ATTR_IE={0xcd, 0x2a, [@supported_rates, @measure_req={0x26, 0xc5, {0x80, 0xc2, 0x5, "3b4c3b21841b92dbe4697e3fdb0eb9a1306d7246c7f803b9b6d47b35a97de19e99679dfd55157ca57686682fc9f47d97fadf33eab14196eeb2cb8d8f67a3e325b62275d560ea93c897000270dde45afc83ab16bed8c6738f6f88dcbac33c44a9f7a869f6cbaeb1d5b5c437aca19de5211bff9d0af48773ec16d290d04e721f780e00358508b6e0981e14798f9691968ce4dbdf525efcc3f124a31110698a6e31f0095808129d8d2591c00b4f6f700d53ebc9ca12902cd827fe47c188f508147e7ae3"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x58, 0xfc, "389453dd445cdbbe20ef84333c9a3abb74c87801dd430a7bc0a0171835e272dfea9eaa6deed8b14edafb0a3e1a18cb95a866656649b0629aae80452d4e4d93716bae97930bdd378d2147c370fc0733beaa4fd538"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x38}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x64}], @NL80211_ATTR_IE={0x195, 0x2a, [@chsw_timing={0x68, 0x4, {0xf8, 0x7f}}, @mesh_chsw={0x76, 0x6, {0x1, 0x1, 0x21, 0x2}}, @dsss={0x3, 0x1, 0x2c}, @tim={0x5, 0x5c, {0x13, 0x1a, 0x8, "fe75a91529e21d78f82b5dc96aa9fe98eb4962473bc38e635773c85f24a42f921aa755f308dd56b9f6b441f5816c605d9aacdeca741bc0df048728dfae4745a2222826712c60e4d3720fb11891dafb2f3ef2479510141aa158"}}, @preq={0x82, 0x67, @not_ext={{0x0, 0x1, 0x1}, 0x40, 0x4, 0x1, @device_b, 0x0, "", 0x5, 0x101, 0x7, [{{0x0, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x1, 0x0, 0x1}, @device_b, 0x10001}, {{0x0, 0x0, 0x1}, @broadcast, 0x40}, {{}, @device_b, 0xb66}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0xffff}]}}, @random_vendor={0xdd, 0x12, "720aa77a18572b160f0b0198b06379d8caea"}, @random_vendor={0xdd, 0xa3, "cc49294ab76cc6931d1832d863dada640d7319bcf4fbd0e67667a107b8c4b8876d7ef48e601dfb665ad4c70e1182ffd30f19a69f05c61202cfc296072f8d29a18dc3ead992f3773f7955d217e58b3b43ab1edec5764b3339c890d2f94ba0ec6b96a69af8aeb9946e930159aed639d3f789ade74f001c2b4653ab33b77e3b2d3aafd1b6f24b49e81059f58351653244faa6bb662cec27790894a8b7cea7bea4a650692f"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "da3df92be06a"}, @NL80211_ATTR_FILS_ERP_RRK={0x46, 0xfc, "719a084d0c271c955603d091ffe79c1b00354d51353021210309b13dafd093b6bbfa3c20e467cc17b653ed68cbf12d921eb286edcdfac3faff1037d8fe8a14703d7b"}, @NL80211_ATTR_FILS_ERP_RRK={0x21, 0xfc, "1427a2f04ce9eca30c3512f243b46e11ce6480ae5d5f99ed9f322cf5f9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_RRK={0x4f, 0xfc, "0b4b502eb141d881861b701070feaa2b897a2b31d9844f9e9db25b6516fe5a9693e49d6aece78e08250d1f956c5eb06e9e82f084a1a04a25d3e5df179304edba2aa474947654e23d51dcbd"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "a9ccfe117a6e6fc03b82dff871038625ca0afc422eab8ac4198dbbde5cc997c06008fb9483039399315af5c9802004c60063a1315fd5bf1de0bb07fd4b745523ba72b6ed03fcba3e7cfcf074f588c5b7ba0ff7952fb4fd3e225d935cc2299deb34aaff3394c65182b2ab534813243fc0c3da6752a977d83cf9f77e735ac96066ddd7"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_RRK={0xfd, 0xfc, "59495cf8497fef4d77a84e0fab45ce9af929c46fe62b098063eb328214837aa62543e1a64140e485e84e002b342f011c43da18b1e693369ffbcfb82b38c845c18a48038f639e5d9546f6b95c47b99abdb272b212f28804b5ff38b837925d133f3c927dbafc4f4144885e3329e124f0ebd5fac1202f05ac1504c4b6c2031ef6290de510aa305834e50c6fbba88943fdd2c5b77693e9c8a4397eaefc4fe0b5786ef934ff85416b5393b55da14875b3d883012e9d500216c70a67c9cb61f3cfc6ba55ff6c5ca96928a766f504841dad566d755fb648ff5fcadc704ed01f2a9da177282ed6df9d39cbace659edc5e21c724ce7df70bd567909d723"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "96fff89a39b1d7c61aa30c2c3f90a738"}]]}, 0x830}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000f280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f000000f380)={&(0x7f000000f240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000f340)={&(0x7f000000f2c0)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xd30, 0x48}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$IPSET_CMD_DEL(r4, &(0x7f000000f4c0)={&(0x7f000000f3c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000f480)={&(0x7f000000f400)={0x50, 0xa, 0x6, 0x100, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x401}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f000000f500)={@local, 0x55}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000f580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f000000f640)={&(0x7f000000f540)={0x10, 0x0, 0x0, 0x43000}, 0xc, &(0x7f000000f600)={&(0x7f000000f5c0)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f000000f780)={&(0x7f000000f680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000f740)={&(0x7f000000f6c0)={0x70, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040808}, 0x4000) 15:00:30 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0xfffffffffffffffd) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0xf0, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in6=@empty}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000001c0)) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, 0x1, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x96d6}}, @NFQA_PAYLOAD={0xb4, 0xa, "7c117546fa33f72f78c4792fda4614ccb91c44558f833bdbda2552170894e8073a7ab48a7aec26882a792f12b1d6d761ba8fd5b5b36baeb47e3fc181f86bb4a6d36604a4c6684b9f011317a927bdcc5951d2ad51b1d695d87e0afb447b5c4ca5accec17f520b094f2073ce9c831e03f07fc94813795b5a1e9f8bb8cd58f7840471d641a7d4088c27a59243cf5c927c3786ea2d427cf080b238d67be12e64b41e8c4bbd4d20bcf808008e8710253c8d55"}, @NFQA_MARK={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r1 = accept$inet6(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000480)="39c307103553e4e104d8485435e1a3f8d9ba40bf8d6cb7ed917fcc1a7b86ac7cd9261c2ce8dcd20183e589de4de9a217da16b9a86c6a4ef193afa62f00291df661329646d547fd63521915c308898a46cc2ec27d755b561d726d67fb3f55c82b1cdc12760b22b3a377af35afedb9ed6fcb964b69cb790bcdf674", 0x7a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000500)={0x2, 0xfffffff8, 0x1f, 0x8, 0x5e3}, 0x14) socketpair(0x1f, 0x2, 0x6, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/251, 0xfb, 0x0, &(0x7f0000000680)=""/177, 0xb1}, &(0x7f0000000780)=0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc4, 0x3, 0x1, 0x101, 0x0, 0x0, {0x8, 0x0, 0x5}, [@CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xe3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x73}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x34, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x40, 0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x3f}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x20}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x20, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1f, 0x9}}]}}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000845) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000980)=@gcm_256={{0x304}, "fc5bdee0a2f98846", "80b042cec54aeb07f06df84799fbb12cb4dbc4a0cf5538d62122a5049ef38a7a", '8Icm', "7b8a94058a52cba4"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000009c0)={0x3, 0x80, 0x9, 0xfff}, 0x14) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000a00)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000a80)={0x5, 0x1, 0x0, 0x9, 0x800}, 0x14) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000ac0)=0x4, 0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) 15:00:30 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001380)={0xa8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x4, 0x0, 0x32}, @flat=@handle={0x73682a85, 0x100}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/24, 0x18, 0x2, 0x16}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @release, @exit_looper, @free_buffer, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/247, 0xf7, 0x2, 0x2a}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x120a, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x1000, 0x0, &(0x7f0000000380)="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"}) r0 = syz_io_uring_complete(0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000013c0)={0x2}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001400), 0x10040, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000001440)=0x9f1) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000001480)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, 0x2, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x8000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3d}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x30}}, 0x30000041) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xdd, 0x7d}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0c113c5054"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) syz_io_uring_setup(0x7d6a, &(0x7f0000001800)={0x0, 0x2f6b, 0x1, 0x3, 0x3a5, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000001880)=0x0, &(0x7f00000018c0)) syz_io_uring_setup(0x2624, &(0x7f0000001900)={0x0, 0xe58f, 0x10, 0x2, 0x293, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001980), &(0x7f00000019c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001a00)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}, 0x3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r6, 0x89f4, &(0x7f0000001ac0)={'syztnl1\x00', &(0x7f0000001a40)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x3f, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x79708cf3a286df4e, 0x10, 0x7fffffff, 0x61d812fc}}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000001b00)=0x1, 0x0, 0x4) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000001b40)={0xffffffffffffffff}) [ 94.738284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.741964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.746946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.752081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.753151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.756929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.758183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.762386] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.763974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.768167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.769444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.771769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.772718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.777966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.782719] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.783837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.785442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.786468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.794155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.824814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.825844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.852042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.859447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.860419] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.863698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.865732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.868628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.937622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.942016] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.958211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.968361] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.981781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.033926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.057950] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 95.074337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 95.076134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 95.077115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.080313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.101945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.102572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.154619] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.162361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.191352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.236243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.240524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.241138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.248761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.277661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.824247] Bluetooth: hci2: command tx timeout [ 96.825849] Bluetooth: hci0: command tx timeout [ 96.827028] Bluetooth: hci1: command tx timeout [ 96.951634] Bluetooth: hci4: command tx timeout [ 97.208821] Bluetooth: hci5: command tx timeout [ 97.210062] Bluetooth: hci7: command tx timeout [ 97.336639] Bluetooth: hci3: command tx timeout [ 97.338130] Bluetooth: hci6: command tx timeout [ 98.873558] Bluetooth: hci0: command tx timeout [ 98.874741] Bluetooth: hci2: command tx timeout [ 98.876005] Bluetooth: hci1: command tx timeout [ 98.999565] Bluetooth: hci4: command tx timeout [ 99.255810] Bluetooth: hci7: command tx timeout [ 99.257120] Bluetooth: hci5: command tx timeout [ 99.383660] Bluetooth: hci3: command tx timeout [ 99.385412] Bluetooth: hci6: command tx timeout [ 100.919648] Bluetooth: hci0: command tx timeout [ 100.921161] Bluetooth: hci2: command tx timeout [ 100.922221] Bluetooth: hci1: command tx timeout [ 101.047617] Bluetooth: hci4: command tx timeout [ 101.304778] Bluetooth: hci7: command tx timeout [ 101.306608] Bluetooth: hci5: command tx timeout [ 101.431604] Bluetooth: hci6: command tx timeout [ 101.433208] Bluetooth: hci3: command tx timeout [ 102.967711] Bluetooth: hci0: command tx timeout [ 102.969005] Bluetooth: hci2: command tx timeout [ 102.969037] Bluetooth: hci1: command tx timeout [ 103.095593] Bluetooth: hci4: command tx timeout [ 103.352581] Bluetooth: hci7: command tx timeout [ 103.352708] Bluetooth: hci5: command tx timeout [ 103.480754] Bluetooth: hci3: command tx timeout [ 103.480806] Bluetooth: hci6: command tx timeout [ 157.303168] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.305998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.307581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.319734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.323274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.325305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.382188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.386401] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.389224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.394800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.397422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.398832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.441985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.452834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.455686] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.461982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.464422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.473769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.479746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.481088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.484064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.485364] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.486414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.513583] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.514949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.518824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.527309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.539376] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.548797] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.550672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.589821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.597027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.603711] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.608811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.614200] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.615553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.621428] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.622135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.629363] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.634730] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.653722] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.657123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.663939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.666030] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.671816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.672922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.677857] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.678853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.351613] Bluetooth: hci0: command tx timeout [ 159.415586] Bluetooth: hci1: command tx timeout [ 159.543576] Bluetooth: hci2: command tx timeout [ 159.543612] Bluetooth: hci3: command tx timeout [ 159.607809] Bluetooth: hci4: command tx timeout [ 159.672571] Bluetooth: hci5: command tx timeout [ 159.735737] Bluetooth: hci6: command tx timeout [ 159.736610] Bluetooth: hci7: command tx timeout [ 161.399563] Bluetooth: hci0: command tx timeout [ 161.463567] Bluetooth: hci1: command tx timeout [ 161.591637] Bluetooth: hci2: command tx timeout [ 161.592066] Bluetooth: hci3: command tx timeout [ 161.655594] Bluetooth: hci4: command tx timeout [ 161.719625] Bluetooth: hci5: command tx timeout [ 161.783586] Bluetooth: hci6: command tx timeout [ 161.783648] Bluetooth: hci7: command tx timeout [ 163.447575] Bluetooth: hci0: command tx timeout [ 163.511588] Bluetooth: hci1: command tx timeout [ 163.640027] Bluetooth: hci3: command tx timeout [ 163.640098] Bluetooth: hci2: command tx timeout [ 163.704535] Bluetooth: hci4: command tx timeout [ 163.768633] Bluetooth: hci5: command tx timeout [ 163.833602] Bluetooth: hci7: command tx timeout [ 163.833878] Bluetooth: hci6: command tx timeout [ 165.495564] Bluetooth: hci0: command tx timeout [ 165.559770] Bluetooth: hci1: command tx timeout [ 165.687676] Bluetooth: hci3: command tx timeout [ 165.687776] Bluetooth: hci2: command tx timeout [ 165.753524] Bluetooth: hci4: command tx timeout [ 165.815634] Bluetooth: hci5: command tx timeout [ 165.879546] Bluetooth: hci7: command tx timeout [ 165.879615] Bluetooth: hci6: command tx timeout [ 219.655562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.657159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.658075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.659496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.660071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.664157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.665264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.667823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.668397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.679522] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.680944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.684176] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.718061] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.723562] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.724679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.734651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.736227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.737954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.938012] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.946083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.947097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.948650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.949226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.951816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.952399] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.956774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.975349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.981235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.985245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.987751] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.988634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.997147] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.013793] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 220.014606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 220.015245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.015930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.046650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.047698] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 220.050679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 220.051972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 220.065061] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 220.066028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 220.080462] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 220.080876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.082938] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.109730] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 220.111878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 220.114876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 221.751892] Bluetooth: hci0: command tx timeout [ 221.817507] Bluetooth: hci2: command tx timeout [ 221.879608] Bluetooth: hci1: command tx timeout [ 222.071733] Bluetooth: hci3: command tx timeout [ 222.073896] Bluetooth: hci4: command tx timeout [ 222.136606] Bluetooth: hci6: command tx timeout [ 222.199691] Bluetooth: hci5: command tx timeout [ 222.201215] Bluetooth: hci7: command tx timeout [ 223.801554] Bluetooth: hci0: command tx timeout [ 223.863921] Bluetooth: hci2: command tx timeout [ 223.927744] Bluetooth: hci1: command tx timeout [ 224.121552] Bluetooth: hci4: command tx timeout [ 224.121910] Bluetooth: hci3: command tx timeout [ 224.188232] Bluetooth: hci6: command tx timeout [ 224.250162] Bluetooth: hci5: command tx timeout [ 224.250183] Bluetooth: hci7: command tx timeout [ 225.848574] Bluetooth: hci0: command tx timeout [ 225.912556] Bluetooth: hci2: command tx timeout [ 225.977557] Bluetooth: hci1: command tx timeout [ 226.170540] Bluetooth: hci3: command tx timeout [ 226.170913] Bluetooth: hci4: command tx timeout [ 226.231558] Bluetooth: hci6: command tx timeout [ 226.295610] Bluetooth: hci5: command tx timeout [ 226.296883] Bluetooth: hci7: command tx timeout [ 227.896527] Bluetooth: hci0: command tx timeout [ 227.960519] Bluetooth: hci2: command tx timeout [ 228.023622] Bluetooth: hci1: command tx timeout [ 228.216539] Bluetooth: hci4: command tx timeout [ 228.216957] Bluetooth: hci3: command tx timeout [ 228.279579] Bluetooth: hci6: command tx timeout [ 228.344119] Bluetooth: hci7: command tx timeout [ 228.344149] Bluetooth: hci5: command tx timeout [ 281.929080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.930271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.932067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.935460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.942753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.947238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.983733] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.986979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.988951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.992306] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.996045] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.997786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.124305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.125150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.133219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.138547] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.146135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.148288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.150522] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.152251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.153141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.154126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.155976] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.157757] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.219301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.243561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.248090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.260219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.265721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.273191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.274036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.277874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.281762] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.285615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.288774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.293727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.333289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.339196] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 282.339727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.342833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 282.343667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.379199] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.552363] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 282.555912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 282.559023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 282.592468] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 282.596577] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 282.598226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 284.024607] Bluetooth: hci1: command tx timeout [ 284.025486] Bluetooth: hci0: command tx timeout [ 284.215729] Bluetooth: hci2: command tx timeout [ 284.216638] Bluetooth: hci3: command tx timeout [ 284.600605] Bluetooth: hci5: command tx timeout [ 284.601508] Bluetooth: hci6: command tx timeout [ 284.663700] Bluetooth: hci7: command tx timeout [ 284.733614] Bluetooth: hci4: command tx timeout [ 286.071827] Bluetooth: hci1: command tx timeout [ 286.072251] Bluetooth: hci0: command tx timeout [ 286.263522] Bluetooth: hci2: command tx timeout [ 286.263947] Bluetooth: hci3: command tx timeout [ 286.647584] Bluetooth: hci5: command tx timeout [ 286.648028] Bluetooth: hci6: command tx timeout [ 286.712506] Bluetooth: hci7: command tx timeout [ 286.775543] Bluetooth: hci4: command tx timeout [ 288.120624] Bluetooth: hci0: command tx timeout [ 288.121082] Bluetooth: hci1: command tx timeout [ 288.311531] Bluetooth: hci3: command tx timeout [ 288.311960] Bluetooth: hci2: command tx timeout [ 288.696517] Bluetooth: hci6: command tx timeout [ 288.696934] Bluetooth: hci5: command tx timeout [ 288.759572] Bluetooth: hci7: command tx timeout [ 288.823528] Bluetooth: hci4: command tx timeout [ 290.167559] Bluetooth: hci1: command tx timeout [ 290.167980] Bluetooth: hci0: command tx timeout [ 290.360079] Bluetooth: hci2: command tx timeout [ 290.360534] Bluetooth: hci3: command tx timeout [ 290.743525] Bluetooth: hci5: command tx timeout [ 290.743947] Bluetooth: hci6: command tx timeout [ 290.807493] Bluetooth: hci7: command tx timeout [ 290.871681] Bluetooth: hci4: command tx timeout [ 344.205359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.207851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.215382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.231698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.237357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.239687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.399713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.401556] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.402516] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.406651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.408076] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.409340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.461257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.475097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.477184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.480168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.517289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.522017] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.523478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.533662] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.577558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.578178] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.594618] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.607162] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.616027] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.618914] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.619378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.629690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.629692] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.642188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.642783] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.645712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.647303] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.648892] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.653630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.653643] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.654160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.661634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.663046] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.664071] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.673010] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.674033] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.675365] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.676138] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.678739] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.679976] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.680875] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.687926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.295937] Bluetooth: hci0: command tx timeout [ 346.423495] Bluetooth: hci1: command tx timeout [ 346.679522] Bluetooth: hci2: command tx timeout [ 346.680563] Bluetooth: hci3: command tx timeout [ 346.743535] Bluetooth: hci6: command tx timeout [ 346.744074] Bluetooth: hci5: command tx timeout [ 346.744578] Bluetooth: hci7: command tx timeout [ 346.745018] Bluetooth: hci4: command tx timeout [ 348.343568] Bluetooth: hci0: command tx timeout [ 348.471699] Bluetooth: hci1: command tx timeout [ 348.727570] Bluetooth: hci3: command tx timeout [ 348.727992] Bluetooth: hci2: command tx timeout [ 348.794517] Bluetooth: hci4: command tx timeout [ 348.794589] Bluetooth: hci7: command tx timeout [ 348.794909] Bluetooth: hci5: command tx timeout [ 348.795233] Bluetooth: hci6: command tx timeout [ 350.392477] Bluetooth: hci0: command tx timeout [ 350.519487] Bluetooth: hci1: command tx timeout [ 350.775780] Bluetooth: hci3: command tx timeout [ 350.775820] Bluetooth: hci2: command tx timeout [ 350.839520] Bluetooth: hci7: command tx timeout [ 350.839541] Bluetooth: hci5: command tx timeout [ 350.839599] Bluetooth: hci6: command tx timeout [ 350.839976] Bluetooth: hci4: command tx timeout [ 352.441465] Bluetooth: hci0: command tx timeout [ 352.568501] Bluetooth: hci1: command tx timeout [ 352.823516] Bluetooth: hci2: command tx timeout [ 352.823930] Bluetooth: hci3: command tx timeout [ 352.888569] Bluetooth: hci5: command tx timeout [ 352.888642] Bluetooth: hci6: command tx timeout [ 352.889125] Bluetooth: hci7: command tx timeout [ 352.889215] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 15:05:39 Registers: info registers vcpu 0 RAX=ffff8880335c5cb8 RBX=00000000000000e8 RCX=ffffffff810046fa RDX=0000000000000166 RSI=00000000a88314d8 RDI=ffff8880335c5cb8 RBP=ffff8880137cf730 RSP=ffff8880137cf6d0 R8 =ffff88806c0c5580 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000116 R12=ffff888008c4f780 R13=0000000000092800 R14=00000000000000e8 R15=0000000000092800 RIP=ffffffff81841af9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6502d6c288 CR3=0000000016032000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffffea0001b3a200 RCX=ffffffff816a17d0 RDX=ffff88802acf0000 RSI=0000000000000000 RDI=0000000000000001 RBP=00007fe8f7b6e000 RSP=ffff88800f68fb80 R8 =0000000000000001 R9 =fffff9400036744e R10=0000000000000000 R11=0000000000000001 R12=000000000000000b R13=0000000000000000 R14=ffffea0001b3a240 R15=ffff88800f68fd98 RIP=ffffffff81517d92 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe8f7681540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8f7b66000 CR3=0000000013b72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000