Warning: Permanently added '[localhost]:64973' (ECDSA) to the list of known hosts. 2025/05/26 15:07:57 fuzzer started 2025/05/26 15:07:58 dialing manager at localhost:46087 syzkaller login: [ 100.077430] cgroup: Unknown subsys name 'net' [ 100.232696] cgroup: Unknown subsys name 'cpuset' [ 100.258411] cgroup: Unknown subsys name 'rlimit' 2025/05/26 15:08:19 syscalls: 237 2025/05/26 15:08:19 code coverage: enabled 2025/05/26 15:08:19 comparison tracing: enabled 2025/05/26 15:08:19 extra coverage: enabled 2025/05/26 15:08:19 setuid sandbox: enabled 2025/05/26 15:08:19 namespace sandbox: enabled 2025/05/26 15:08:19 Android sandbox: enabled 2025/05/26 15:08:19 fault injection: enabled 2025/05/26 15:08:19 leak checking: enabled 2025/05/26 15:08:19 net packet injection: enabled 2025/05/26 15:08:19 net device setup: enabled 2025/05/26 15:08:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/26 15:08:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/26 15:08:19 USB emulation: enabled 2025/05/26 15:08:19 hci packet injection: enabled 2025/05/26 15:08:19 wifi device emulation: enabled 2025/05/26 15:08:19 802.15.4 emulation: enabled 2025/05/26 15:08:19 fetching corpus: 0, signal 0/0 (executing program) 2025/05/26 15:08:21 starting 8 fuzzer processes 15:08:21 executing program 0: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) delete_module(&(0x7f0000000000)='@[-\\#(]\x00', 0xa00) times(&(0x7f0000000040)) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000100)=0x80) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x81}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x24008830) times(&(0x7f0000000240)) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x400000, {0xfffb, 0x1, 0x20, 0x4}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3, {0xbe, 0x2, 0x9, 0x8}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000810}, 0x20000000) times(&(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) clock_gettime(0x6, &(0x7f0000000400)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x200000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x3ff, &(0x7f0000000480)=[r2, r3, r0, r0, r0, r1], 0x6, 0x0, 0x1}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x10, r1, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x80010, r1, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000540)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x7, &(0x7f0000000500)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0xffffffff) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc286, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x911}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xff, 0x68}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x3, 0xff, 0x9, 0x8, 0x68}, 0x35, &(0x7f0000000600)={0x5, 0xf, 0x35, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x7, 0xc0e0}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x2, 0xf00, 0x4fe, [0x0, 0x7, 0x60, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0xe, 0x1}]}, 0x2, [{0xae, &(0x7f0000000640)=@string={0xae, 0x3, "089f00a43d29fefbc023ac6598022351cc65486b4e69e22a5f298d2d22efe7a5e154b29069ff182ac1571c2cbb9d8bcc50d897b75dfb475e7ee389846bf123aa5f1a9e6b6c1161419bc12fcde1058088e0c432133c421ed97ef0998b101222340e60a116ac6bb335127260eb4320ed902b40ab14c1451c7d6746bd4d8fa98a8b367c7f1417920d8436ecac6ea5f383f52e06b27a71d9d044422491adb461c58299da0718a5b9ae49e3d7df7a"}}, {0x4a, &(0x7f0000000700)=@string={0x4a, 0x3, "3d8bb4cf4f6d0045b3506196ee0e083a14154b690c91a5be388c06aea6de9bf585c3f05f6a245a52103538895af0ba4bdd3f05e6d5573d824537d616f5858f10cbcfe987d6718f22"}}]}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x98, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbcc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 15:08:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6a634ee71789c7629bb0cab5c78e27d91f51f553b5824cd3dac8ad5ebc43b8bc1d5c30"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40008) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x32d75ed04541114f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x2, 0x0, {0x4, 0x1ff8, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x3, 0x9a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41000}, 0x40804) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000240)={0x8, 0x22, 0x6, 0xfff, 0x62c74302, 0x80000000}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r1, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x6, 0x0, 0xcf, 0x80}}}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x9, 0x8, 0x6, 0x2, 0x16b, 0x7, 0x4, 0xa31, 0x7, 0x7, 0xc40, 0x6, 0x8, 0x1000, 0x40, 0x32c0]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f7089d114e87"}, @NL80211_ATTR_FILS_KEK={0x28, 0xf2, "cc0d3f4d68582477fdb3528acf0a4ce164fbd99ad89bd38d52def4365d0ddb83008263ac"}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x0, 0x0, {0x1000, 0xc8c, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x100, 0x40}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20008825) r2 = accept(r0, &(0x7f0000000580)=@caif=@rfm, &(0x7f0000000600)=0x80) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x80000000, @bearer=@l2={'eth', 0x3a, 'bridge0\x00'}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x488d1) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x84) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r2) r4 = accept4$packet(r2, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c00)=0x14, 0x80800) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x40800) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000dc0)=@buf={0xb0, &(0x7f0000000d00)="20dab971aead43e5154b0b62c81342b0f5d31f46db099ac919f2d1a4f2f409843d6bbbffb692285787baed730b96a3f81b11837c2a2763890e6b7e13f48cb4be3dc2acb4f2a5e1bdfe3ecf2bc88dd4156c687e3800f265e72061e0607cbe40d12dd205f52139276c12de09c3ef41cac4947e4916bb1c6da5528121aaba488b7a95ec21da0693c1a0ec1cbc334a61e5fbab5ebc099b85c2c15c9e7d48c3a655190eea5139b0d17d670883e9e2dde1a34a"}) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xffffffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000f00)) syz_io_uring_setup(0x66e4, &(0x7f0000000f40)={0x0, 0xdad6, 0x4, 0x0, 0x388}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000fc0)=0x0, &(0x7f0000001000)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x10000) 15:08:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x1, 0x8, 0x0, 'queue1\x00', 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000200)=0x1, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2000, @fd_index=0x7, 0x2a09, 0x5, 0xffff4af2, 0x36, 0x1, {0x1}}, 0x4) epoll_create1(0x80000) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x36}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x4008054) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x4010, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r3, 0x80, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}}, 0x1) recvmmsg(r3, &(0x7f0000002540)=[{{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000640)=""/92, 0x5c}, {&(0x7f00000006c0)=""/173, 0xad}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000000940)=""/140, 0x8c}, {&(0x7f0000000a00)=""/30, 0x1e}, {&(0x7f0000000a40)=""/47, 0x2f}], 0x9}, 0x6c}, {{&(0x7f0000000b40)=@tipc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/102, 0x66}, {&(0x7f0000000d40)=""/173, 0xad}, {&(0x7f0000000e00)=""/211, 0xd3}], 0x4, &(0x7f0000000f40)=""/157, 0x9d}, 0x6}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000002280)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/75, 0x4b}, {&(0x7f0000002100)=""/52, 0x34}, {&(0x7f0000002140)=""/223, 0xdf}, {&(0x7f0000002240)=""/15, 0xf}], 0x5, &(0x7f0000002300)=""/170, 0xaa}, 0x40}, {{&(0x7f00000023c0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002440)=""/75, 0x4b}], 0x1, &(0x7f0000002500)=""/53, 0x35}}], 0x4, 0x10021, &(0x7f0000002640)={0x0, 0x3938700}) r4 = accept(r1, 0x0, &(0x7f0000002680)) r5 = accept4$packet(r4, &(0x7f00000026c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002700)=0x14, 0x80000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002740), 0x10000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x80010, r6, 0x8000000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002780), 0x840) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f00000027c0)) accept4$packet(r1, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002840)=0x14, 0x800) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f00000028c0)={0x0, @isdn={0x22, 0x8, 0x0, 0x2, 0x40}, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x4}}, @xdp={0x2c, 0xa, r8, 0x3c}, 0x2, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000002880)='veth0_to_bridge\x00', 0xfffffffffffffffd, 0xffffffffffffa927, 0x4}) 15:08:21 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd, 0x7143, &(0x7f00000003c0)=[{}, {&(0x7f0000000040)="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", 0xfe}, {&(0x7f0000000140)="dcab3f35544b43e277121863771677db4d7b237e390ab32d789dc34be0344494dd0f32709ccaed491a55182aab66fee0d3c41680ddb596953861e1c93be669d3ffb489500799ca2e409a7089823f7be0dab1b0fd27741d6ad63fd251850120305144ab9a1b594a5c", 0x68}, {&(0x7f00000001c0)="219e983ae009d2d10be21381edcf2197568605db4bf70cd073f12c4195c252b10dca96efefef4cf41aeb4deca9b6726a3fd2d7f83fc1f9a6d09d8d06c70dff79413381", 0x43}, {&(0x7f0000000240)="5021e696c176821b006db0575cd0b9691530fc24be95d163b845463be2564aee836f67e32d7b3227c19b6e883c31680b170b7e019174d7b35a2407bc75773236017df6e354feba8550de434f7a1d42e2a47d25eacd020de4a5372fe1937abc1f1dc18df78973ad81aa6418a89aeabe275d7a74d8c2c7db9c94f9bd8591c21de878414e2fbb4b7582f833c1a68a7e881f25acf5f23e9d7a244771a95c205baa88ba2871472052643fab54742880e6cd7b609d2d8229e820e74f9c5a0dff1c576d93774d06baf129c31fea47108c33fb130086202e0c50f9bbba40abb5f44d27263b82", 0xe2}, {&(0x7f0000000340)="700074614eaedd0b1bee20a880dbc98fa082b5e330ce99fd3e47653c525420744b4ab748acacd7304b7d595241dc522e38f95b96a550c1cbddec6d6d4d5e3fc4013bf91bbd3f76c4c7ce4946646bbdc0165ebb8ff77e609a601d6246f2d97e3275604209355f33", 0x67}], 0x6, 0x4, 0x0, {0x2}}, 0x5) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000480)=[{}], 0x1, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x8]}, 0x8) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x4, 0x6, 0x0, 0x800}, 0x0) epoll_pwait2(r0, &(0x7f0000000580)=[{}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x50a]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000640)={0x8, 0x1, {0x3, 0x1, 0xff, 0x1, 0x5}, 0x9}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000700)={0x4, 0x3, 0xfffff6d2}) r3 = accept(0xffffffffffffffff, &(0x7f0000000780)=@caif=@util, &(0x7f0000000800)=0x80) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x2b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x64}, 0x1, 0x0, 0x0, 0x40084}, 0x80) r4 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000980)={{0x4, 0x8}, {0x1f, 0xff}, 0x1000, 0x0, 0xff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a00), 0xee432b59f5c018e4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000a40)={0x9, 0x50, 0x1, 'queue1\x00', 0x100}) syz_io_uring_setup(0x7c05, &(0x7f0000000b00)={0x0, 0xef2a, 0x2, 0x3, 0x93, 0x0, r4}, &(0x7f00003ff000/0xc00000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000ec0)=@IORING_OP_WRITEV={0x2, 0x1, 0x4004, @fd=r3, 0x100000000, &(0x7f0000000e80)=[{&(0x7f0000000c00)="bee8ada4bbfcabd866b478a3f08dfc46fde9952a1feb7f0e62455cd84aab7a790bb1e8cf5f73bf895352b4225361260da608d443cc371df246a629be3ef3ede01761c338975f814fa68cea270d416d46fd9be5ce8680faaf176b988ee58437478c9c109bf9e00bf9ecc58d4fd0e437dafa98f8d19e8fcb3fb73c717ea34ddfd3ab51e547a5b556df977b4226251f19f881df5fac36002d6bbce5b2ae0a70073513365e2899c48b62db71954ae6773b271675d22cac1270ff1def88447ecc4fd63a2150d2c8277446d731c0e8f0a1ee9c05d7603dad1db410ae476080e8f3a505426910d9cf", 0xe5}, {&(0x7f0000000d00)="b7c221f5252b5035d70ba1d5486dac3456ae34ab80fb310c34aebb6db5e25c3af4cca49f51d203f6244968086949a7d45f3d192c5a0bcb5d96b593fef7ef104dd8b99d36fa62b591097236e252be3009f23380627d2244bc311bd6e2fbf05e62afe5948067d55296c9bae1c6c8b386bf0281af2eddefd3991a125c16be9e64df728f98e2c26cb76afde69b41504dd42abb969b2cc651d7e724a141775a2a9354c937f836bfbf805864b98663d17c6216d1f62a61ce7a366fe088109830aadb9e23225a11319c351aecac356f1b8d7cf382ebc305c85a1f295be5d83cb3b0c40def3e1a20d1aa", 0xe6}, {&(0x7f0000000e00)="db948f9998f4bb27741f8a39f8a61070af43e913090d0e23001c87e83f31a42d13a217ba974c88296dae3290482dae1300ab356afef4efae2d2641d0d5d27d9865ee8844773efcdc146f", 0x4a}], 0x3, 0x1, 0x1}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000f00), 0x101002) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000f40)={{0x8, 0x5}, {0x7f, 0xad}, 0x0, 0x2, 0x50}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000fc0)) 15:08:21 executing program 4: ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000)) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008008}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000200)={0x2, 0xffffffff, 0x10000, 0x0, 0x11}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000002c0)={0x9, 0x5, 0x1, 'queue0\x00', 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r1) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r1) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r2, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffc00}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x40) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000700)={0x81, @time={0x81, 0x3}, 0x2d, {0x0, 0x8}, 0x3f, 0x1, 0x1f}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x8801, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000780)) r6 = accept(r5, 0x0, &(0x7f00000007c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r7, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x6, 0xff, 0xac, 0x1000}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24004010) [ 123.288877] audit: type=1400 audit(1748272101.523:7): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:08:21 executing program 5: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x8000, 0x9d, 0x1, 'queue0\x00', 0x2000}) r0 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x4836, 0x3c3, 0x0, 'queue1\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000180)={0x84, 0x3, 0xcc, 0x1, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000001c0)={0x70, @time={0x9, 0x2b04}, 0x20, {0x20, 0x3}, 0x5, 0x2, 0x3f}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x307802) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000240)={0xfffffff7, 0x800, 0x1, 'queue1\x00', 0xff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x200, @tick=0x8, 0x3, {0x6, 0x1}, 0x20, 0x2, 0x81}) r2 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000340)={0xffff0000, 0xfffffff8, 0x1, 'queue1\x00', 0x4}) r3 = accept4$packet(r2, 0x0, &(0x7f0000000400), 0x400) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000540)=""/9, 0x9}, 0x4}], 0x1, 0x40000042, &(0x7f00000005c0)={0x77359400}) r4 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000600)={0x10}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000640)={0x7, 0x2, {0x0, 0x1, 0x800, 0x1, 0x1}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000006c0)={{0x6, 0x7}, 'port1\x00', 0xe0, 0x40, 0x7, 0x8, 0xa9f00000, 0x100, 0x7, 0x0, 0x4, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000780)={0x4, @time={0x10000, 0x7f5beffc}, 0x3f, {0xfb, 0x81}, 0x8, 0x2, 0x1f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r6, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 15:08:21 executing program 6: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x10) socketpair(0x2a, 0x800, 0x7, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2a4, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x32df}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffbef}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x37c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5147}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xdf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xce}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x11d496a3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x25}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xccd}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_REG_RULES={0x148, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf5e}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff9e}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x52}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x762}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc746}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20000000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a8c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x26}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x10}, 0x4801) socketpair(0x8, 0x5, 0x3, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000640)=0x80) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x118, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dda9de3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a852036}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4620cc63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18bb2874}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33d0369e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2af7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x428d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42c3413}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68031813}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9045}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x652ceb9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ed3f90c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16915f8d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10b8d4bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x626ae596}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd81e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20b23285}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername(r4, &(0x7f00000008c0)=@llc, &(0x7f0000000940)=0x80) socketpair(0x27, 0x4, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r7, 0x100, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x60}}, 0x40035) read$usbmon(0xffffffffffffffff, &(0x7f0000000b40)=""/11, 0xb) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r6) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2dfffcb6fde11555}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)={0x178, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffc01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x480}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x35b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffae4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x62e5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000f00)={&(0x7f0000000e40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7b}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x4008044) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0xa8, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x180}, @NL80211_ATTR_IE={0x81, 0x2a, [@measure_req={0x26, 0x1e, {0x7, 0x3, 0x8, "5db500620f78e25da4dc5b9965f9be882cf332b1867d52989001d0"}}, @dsss={0x3, 0x1, 0x99}, @ibss={0x6, 0x2, 0x7}, @cf={0x4, 0x6, {0x2, 0x8, 0x8}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0xff, 0x40, 0xe, 0xad}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x9, @device_a, 0x16426278, "", 0xffff, 0x5, @device_a, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0x8, 0x9}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000) 15:08:21 executing program 7: r0 = geteuid() setreuid(0xffffffffffffffff, r0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000d, 0x13, 0xffffffffffffffff, 0x10000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = epoll_create(0x9) r4 = syz_io_uring_complete(0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x800, &(0x7f0000000080)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) r7 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000180)={0x10000004}) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r4, 0x80, &(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81}, 0x0, 0x0, 0x1}, 0x3) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x35}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x60}, 0x1, 0x0, 0x0, 0x28000012}, 0x40090) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000d, 0x4048092, r4, 0x0) syz_io_uring_submit(r8, r1, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x5}, 0x3) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x584}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x1b, 0xc5, "7971a0b006aa5df769f505dc41832869bebd10c5035760"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_DATA={0x96, 0xc5, "2b4b1cac7a2e9aedb447369e1ae93d4301f10fd4df5a529e463259a78bfa92c2ac97e35eda0676ed59e8a9e80c8d094f9766b1dc279a5358f0fa9d9af15d4a82cc8e931cc4e23760f648e73437577f75a698209ceccfc33cc479e1d2fa38f9b0f7547baab81ae0569756c6e7950c4e88fad1873f091ad526c6baea613f5c122b068dddccd1c79d90752f0b212a33ca7c4bc6"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000005c0)={0x81, 0x833, 0x0, 'queue0\x00', 0x8bb8}) syz_io_uring_submit(r8, r1, &(0x7f0000000680)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x7) [ 124.730647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.733278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.736346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.742340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.743515] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.744331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.749144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.750751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.758400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.760589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.771973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.777043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.783174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.793427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.802418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.805757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.814277] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.816987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.818396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.828606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.830193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.832757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.845157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.847150] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.848447] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.851436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.851841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.855234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.870219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.878850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.882006] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.886023] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.894174] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.913866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.917292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.920366] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.938932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.951650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.986931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 125.010780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 126.810900] Bluetooth: hci1: command tx timeout [ 126.873965] Bluetooth: hci6: command tx timeout [ 126.874777] Bluetooth: hci0: command tx timeout [ 126.875323] Bluetooth: hci2: command tx timeout [ 126.938218] Bluetooth: hci5: command tx timeout [ 126.939010] Bluetooth: hci4: command tx timeout [ 127.001760] Bluetooth: hci3: command tx timeout [ 127.065718] Bluetooth: hci7: command tx timeout [ 128.858954] Bluetooth: hci1: command tx timeout [ 128.922675] Bluetooth: hci2: command tx timeout [ 128.924389] Bluetooth: hci0: command tx timeout [ 128.924590] Bluetooth: hci6: command tx timeout [ 128.985581] Bluetooth: hci4: command tx timeout [ 128.987011] Bluetooth: hci5: command tx timeout [ 129.051375] Bluetooth: hci3: command tx timeout [ 129.113936] Bluetooth: hci7: command tx timeout [ 130.905578] Bluetooth: hci1: command tx timeout [ 130.969911] Bluetooth: hci0: command tx timeout [ 130.970392] Bluetooth: hci2: command tx timeout [ 130.971299] Bluetooth: hci6: command tx timeout [ 131.036043] Bluetooth: hci4: command tx timeout [ 131.037385] Bluetooth: hci5: command tx timeout [ 131.097549] Bluetooth: hci3: command tx timeout [ 131.163143] Bluetooth: hci7: command tx timeout [ 132.954561] Bluetooth: hci1: command tx timeout [ 133.017730] Bluetooth: hci2: command tx timeout [ 133.019570] Bluetooth: hci6: command tx timeout [ 133.019636] Bluetooth: hci0: command tx timeout [ 133.083616] Bluetooth: hci5: command tx timeout [ 133.084230] Bluetooth: hci4: command tx timeout [ 133.146573] Bluetooth: hci3: command tx timeout [ 133.209628] Bluetooth: hci7: command tx timeout [ 187.445842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.447518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.449527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.455125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.457133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.494741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.498284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.504863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.512621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.517327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.560313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.563632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.569687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.576781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.582909] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.585923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.588177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.599361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.644402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.654620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.657844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.671352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.687870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.692152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.697806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.704293] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.707378] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.709261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.709809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.715231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.726189] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.730752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.759780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.772381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.772632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.786991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.800016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.822890] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.852909] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.878872] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.466722] Bluetooth: hci0: command tx timeout [ 189.594565] Bluetooth: hci1: command tx timeout [ 189.657581] Bluetooth: hci2: command tx timeout [ 189.785641] Bluetooth: hci4: command tx timeout [ 189.786250] Bluetooth: hci3: command tx timeout [ 189.850657] Bluetooth: hci6: command tx timeout [ 189.850747] Bluetooth: hci5: command tx timeout [ 189.913636] Bluetooth: hci7: command tx timeout [ 191.515524] Bluetooth: hci0: command tx timeout [ 191.641811] Bluetooth: hci1: command tx timeout [ 191.705571] Bluetooth: hci2: command tx timeout [ 191.833870] Bluetooth: hci4: command tx timeout [ 191.834542] Bluetooth: hci3: command tx timeout [ 191.897575] Bluetooth: hci6: command tx timeout [ 191.897623] Bluetooth: hci5: command tx timeout [ 191.963408] Bluetooth: hci7: command tx timeout [ 193.562164] Bluetooth: hci0: command tx timeout [ 193.690013] Bluetooth: hci1: command tx timeout [ 193.753828] Bluetooth: hci2: command tx timeout [ 193.881634] Bluetooth: hci4: command tx timeout [ 193.883013] Bluetooth: hci3: command tx timeout [ 193.945637] Bluetooth: hci5: command tx timeout [ 193.946569] Bluetooth: hci6: command tx timeout [ 194.009941] Bluetooth: hci7: command tx timeout [ 195.609613] Bluetooth: hci0: command tx timeout [ 195.737781] Bluetooth: hci1: command tx timeout [ 195.803582] Bluetooth: hci2: command tx timeout [ 195.929571] Bluetooth: hci4: command tx timeout [ 195.929604] Bluetooth: hci3: command tx timeout [ 195.993650] Bluetooth: hci6: command tx timeout [ 195.993692] Bluetooth: hci5: command tx timeout [ 196.058963] Bluetooth: hci7: command tx timeout [ 250.034258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.037138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.038382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.043858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.050022] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.223390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.226319] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.227682] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.229248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.230059] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.231374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.234923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.238708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.240671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.246634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.350781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.360414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.363683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.370011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.378918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.380676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.385960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.389993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.400803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.402007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.408069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.411972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.412925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.423937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.430736] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.432414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.435967] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.438835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.442893] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.448669] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.456252] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.460036] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.463374] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.465356] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.474774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.121600] Bluetooth: hci0: command tx timeout [ 252.314609] Bluetooth: hci2: command tx timeout [ 252.314971] Bluetooth: hci1: command tx timeout [ 252.443293] Bluetooth: hci3: command tx timeout [ 252.505576] Bluetooth: hci7: command tx timeout [ 252.507497] Bluetooth: hci4: command tx timeout [ 252.569548] Bluetooth: hci6: command tx timeout [ 252.633600] Bluetooth: hci5: command tx timeout [ 254.170625] Bluetooth: hci0: command tx timeout [ 254.361873] Bluetooth: hci1: command tx timeout [ 254.362427] Bluetooth: hci2: command tx timeout [ 254.491583] Bluetooth: hci3: command tx timeout [ 254.553609] Bluetooth: hci7: command tx timeout [ 254.553638] Bluetooth: hci4: command tx timeout [ 254.617749] Bluetooth: hci6: command tx timeout [ 254.681577] Bluetooth: hci5: command tx timeout [ 256.217928] Bluetooth: hci0: command tx timeout [ 256.409816] Bluetooth: hci2: command tx timeout [ 256.411346] Bluetooth: hci1: command tx timeout [ 256.537827] Bluetooth: hci3: command tx timeout [ 256.601977] Bluetooth: hci4: command tx timeout [ 256.603289] Bluetooth: hci7: command tx timeout [ 256.665614] Bluetooth: hci6: command tx timeout [ 256.730543] Bluetooth: hci5: command tx timeout [ 258.266444] Bluetooth: hci0: command tx timeout [ 258.458194] Bluetooth: hci2: command tx timeout [ 258.458228] Bluetooth: hci1: command tx timeout [ 258.585913] Bluetooth: hci3: command tx timeout [ 258.650108] Bluetooth: hci7: command tx timeout [ 258.651250] Bluetooth: hci4: command tx timeout [ 258.713739] Bluetooth: hci6: command tx timeout [ 258.779535] Bluetooth: hci5: command tx timeout [ 312.775566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.783396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.787899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.795980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.800295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.090838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.099788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.101429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.109391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.111102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.115911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.117991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.120881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.136092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.143775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.193757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.204652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.206181] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.207619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.217165] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.218505] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.222256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.228281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.236643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.239207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.241319] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.256444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.259209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.259322] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.268834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.280204] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.313786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.332155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.332907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.340951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.352696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.379151] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.379931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.389161] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.409097] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 314.843018] Bluetooth: hci0: command tx timeout [ 315.162588] Bluetooth: hci1: command tx timeout [ 315.226367] Bluetooth: hci2: command tx timeout [ 315.353869] Bluetooth: hci4: command tx timeout [ 315.355904] Bluetooth: hci3: command tx timeout [ 315.417852] Bluetooth: hci5: command tx timeout [ 315.481566] Bluetooth: hci6: command tx timeout [ 315.546009] Bluetooth: hci7: command tx timeout [ 316.891056] Bluetooth: hci0: command tx timeout [ 317.210540] Bluetooth: hci1: command tx timeout [ 317.273806] Bluetooth: hci2: command tx timeout [ 317.403038] Bluetooth: hci4: command tx timeout [ 317.403550] Bluetooth: hci3: command tx timeout [ 317.466004] Bluetooth: hci5: command tx timeout [ 317.530018] Bluetooth: hci6: command tx timeout [ 317.593790] Bluetooth: hci7: command tx timeout [ 318.937597] Bluetooth: hci0: command tx timeout [ 319.257875] Bluetooth: hci1: command tx timeout [ 319.322561] Bluetooth: hci2: command tx timeout [ 319.449918] Bluetooth: hci3: command tx timeout [ 319.451553] Bluetooth: hci4: command tx timeout [ 319.514200] Bluetooth: hci5: command tx timeout [ 319.577542] Bluetooth: hci6: command tx timeout [ 319.642284] Bluetooth: hci7: command tx timeout [ 320.985837] Bluetooth: hci0: command tx timeout [ 321.306572] Bluetooth: hci1: command tx timeout [ 321.369939] Bluetooth: hci2: command tx timeout [ 321.497810] Bluetooth: hci4: command tx timeout [ 321.498295] Bluetooth: hci3: command tx timeout [ 321.561569] Bluetooth: hci5: command tx timeout [ 321.625783] Bluetooth: hci6: command tx timeout [ 321.689555] Bluetooth: hci7: command tx timeout [ 375.342862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.349632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.354009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.361337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.370252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 375.473738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.476688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.484379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.497407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.501732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.541244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.554015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.569826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.592137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.608081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.611793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.618688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.621366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.638002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.650622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.664149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.673078] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.677340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.682191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 375.685203] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.692604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.695268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 375.699936] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.702923] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.708275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.708944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.717063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.723878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 375.725314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.732420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.738903] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.741601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 375.774143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 375.800715] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 375.805782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.434836] Bluetooth: hci0: command tx timeout [ 377.564865] Bluetooth: hci1: command tx timeout [ 377.753633] Bluetooth: hci2: command tx timeout [ 377.818320] Bluetooth: hci4: command tx timeout [ 377.881794] Bluetooth: hci6: command tx timeout [ 377.882063] Bluetooth: hci3: command tx timeout [ 377.882547] Bluetooth: hci5: command tx timeout [ 377.945677] Bluetooth: hci7: command tx timeout [ 379.483542] Bluetooth: hci0: command tx timeout [ 379.610536] Bluetooth: hci1: command tx timeout [ 379.802615] Bluetooth: hci2: command tx timeout [ 379.866806] Bluetooth: hci4: command tx timeout [ 379.930938] Bluetooth: hci3: command tx timeout [ 379.931391] Bluetooth: hci6: command tx timeout [ 379.932226] Bluetooth: hci5: command tx timeout [ 379.996142] Bluetooth: hci7: command tx timeout [ 381.530662] Bluetooth: hci0: command tx timeout [ 381.657976] Bluetooth: hci1: command tx timeout [ 381.850107] Bluetooth: hci2: command tx timeout [ 381.913841] Bluetooth: hci4: command tx timeout [ 381.977766] Bluetooth: hci6: command tx timeout [ 381.978831] Bluetooth: hci5: command tx timeout [ 381.979140] Bluetooth: hci3: command tx timeout [ 382.041889] Bluetooth: hci7: command tx timeout [ 383.577563] Bluetooth: hci0: command tx timeout [ 383.705635] Bluetooth: hci1: command tx timeout [ 383.899010] Bluetooth: hci2: command tx timeout [ 383.961615] Bluetooth: hci4: command tx timeout [ 384.025656] Bluetooth: hci5: command tx timeout [ 384.027024] Bluetooth: hci3: command tx timeout [ 384.027513] Bluetooth: hci6: command tx timeout [ 384.089743] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 15:13:26 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff819fd9fb RDX=ffff8880305d8000 RSI=ffffffff819fda05 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff8880273df9f0 R8 =0000000000000000 R9 =ffffed1002e29121 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f42ec16f000 R14=ffff888027163518 R15=00007f42ec0a4000 RIP=ffffffff81738248 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f42ec1a5260 CR3=0000000024ab8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88800d0f1240 RCX=ffff88800d0f1000 RDX=0000000000000000 RSI=ffff88800d0f1140 RDI=ffff888009405c80 RBP=ffff888009405c80 RSP=ffff888027e8fb88 R8 =0000000000000140 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888009405c80 R13=ffffea0000343c40 R14=0000000000000000 R15=ffff88800d0f1140 RIP=ffffffff81aeeb4d RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff4e058e78 CR3=00000000275a9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52 XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000