Warning: Permanently added '[localhost]:50691' (ECDSA) to the list of known hosts.
2025/06/09 03:55:39 fuzzer started
2025/06/09 03:55:39 dialing manager at localhost:40003
syzkaller login: [   93.579882] cgroup: Unknown subsys name 'net'
[   93.733431] cgroup: Unknown subsys name 'cpuset'
[   93.778716] cgroup: Unknown subsys name 'rlimit'
2025/06/09 03:55:55 syscalls: 200
2025/06/09 03:55:55 code coverage: enabled
2025/06/09 03:55:55 comparison tracing: enabled
2025/06/09 03:55:55 extra coverage: enabled
2025/06/09 03:55:55 setuid sandbox: enabled
2025/06/09 03:55:55 namespace sandbox: enabled
2025/06/09 03:55:55 Android sandbox: enabled
2025/06/09 03:55:55 fault injection: enabled
2025/06/09 03:55:55 leak checking: enabled
2025/06/09 03:55:55 net packet injection: enabled
2025/06/09 03:55:55 net device setup: enabled
2025/06/09 03:55:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/09 03:55:55 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/09 03:55:55 USB emulation: enabled
2025/06/09 03:55:55 hci packet injection: enabled
2025/06/09 03:55:55 wifi device emulation: enabled
2025/06/09 03:55:55 802.15.4 emulation: enabled
2025/06/09 03:55:55 fetching corpus: 0, signal 0/0 (executing program)
2025/06/09 03:55:56 starting 8 fuzzer processes
03:55:56 executing program 0:
ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x1, 0x8})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000040)={0x80, 0x4afe, 0x0, 0xffffffff7fffffff, 0x3})
r0 = socket(0x8, 0xa, 0x81)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8024}, 0x851)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x884d8835b4a9f7c2}, 0x4000011)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000380))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48015}, 0x200000c0)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000500)=0x81)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x18, 0x3, 0x1f, &(0x7f0000000580)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r5)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'})
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1)
socket$inet6(0xa, 0x5, 0x8)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x74, 0x3, 0x1, 0x101, 0x0, 0x0, {0xc}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}}, 0x8000)

03:55:56 executing program 1:
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/120)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x10000, 0xa7c, 0xfffffffffffffffc, 0x8, 0x7, 0x7f})
r1 = syz_open_pts(r0, 0x10103)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f00000000c0)={0x800, 0x7a, 0x8000})
ioctl$TCSBRK(r0, 0x5409, 0xd1c8)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000100))
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = syz_open_pts(r2, 0x400)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140))
ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000580)={0x59, 0x20, &(0x7f0000000180)="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"})
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000005c0))
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000600))
r4 = syz_open_dev$vcsn(&(0x7f0000000640), 0x80, 0xc0c0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000680))
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f00000006c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x2000, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000740)={0x0, 0x6, 0x8, 0x5, 0x16, "331b135fe6298125"})
syz_open_pts(r3, 0x2a080)

03:55:56 executing program 2:
set_thread_area(&(0x7f0000000000)={0xcac7, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1})
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, 'EU:\"', {0x1, 0x5, 0x6, 0x3, 0x6}})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x24000084)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x68, &(0x7f0000000200)={[{0x63, 0x4e00, "88d6510ea3120b0619887ce367a6d3bdda733d048a406160f0625c3935fd1174f47e95110689ed1d70829a8ee544ffba23a0f3b98247e88c23a25f7272f737c43f8db9458002fee912effb91caa485a0dab4cd27b86242e3633bf9417a0200cdb97d27"}]})
set_thread_area(&(0x7f0000000280)={0x8, 0x20000000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1})
r1 = socket(0x15, 0x800, 0x6)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000004640)={@empty, <r2=>0x0}, &(0x7f0000004680)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000004740)={'syztnl2\x00', &(0x7f00000046c0)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0xff, 0x9, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x7800, 0x5, 0x80}})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004780)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000004880)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000048c0)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000049c0)=0xe8)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000004bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004b80)={&(0x7f0000004a00)={0x158, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040)
iopl(0x6)
pipe(&(0x7f0000004f80)={<r6=>0xffffffffffffffff})
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000005080)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20006090)
iopl(0x1f)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f00000050c0))
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000005200)={&(0x7f0000005100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005140)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x812, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x48}}, 0x44000)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000005340)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005300)={&(0x7f0000005280)={0x5c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

[  110.500578] audit: type=1400 audit(1749441356.837:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:55:56 executing program 3:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4c0c1)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x84, &(0x7f0000000280)={[{0x80, 0x4e00, "318724ae86081c113880953db654a9cb07ccf5807b93f04a2c6763a0c76444b9d71266ae835266eb708f81cb1b3637f9f6cf604e25b55f2c36b25185fab58863cf04f2fc9c2c58d7b2dad2074d26f82bccae00ca3bc525e4bc4224c2bdd106e0a75ec73d3828a1bbac27319d22164bc0ba979778308952e5ea65b8d0195995ee"}]})
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5bc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x2000c894)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x880)
r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x9, 0x101000)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, r3, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r2)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000010}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040000)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r5)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r6, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x21}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'ip6gre0\x00', <r8=>0x0, 0x2f, 0x1, 0x2, 0x2, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x7, 0x8000, 0x80, 0x3de}})
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e00)={0x244, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "e6045db1650c8640ef2c7c99fd6d92654414fb373b05263394e4f2173c0d28a9fce0efa36fa9e181a9d63ee6e16bf22c127724e6350dc2141c5bd2044925b6df62d279d8df89eb0d84014009c2c56799d219690474a4eccf5335dd5b9a"}, @ETHTOOL_A_BITSET_MASK={0x11, 0x5, "cecb7114fa3ade93d5b7131e7b"}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'gtp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/vcs#\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b9ead24}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "df240897c8f0223cf2c5245340aa92eeb2b0fe050bfa5d02a105cb86b311abfdbfa45498933dd6b1c50dd7390ee94c7dc11f19c72de3853603914415b4c339411d43652d1f8fa63356f5e3f3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x70000000}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000000}, 0x51)

03:55:56 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_LABELS_MASK={0xc, 0x17, [0x9, 0x0]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004004}, 0x24000094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000090}, 0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x72}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9b}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40050}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x80a0}, 0x40004)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

03:55:56 executing program 5:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x401)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x100000000)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000000))
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3ff)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x1f)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x7f)
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000040))
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x14)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x9, 0x80, 0x3, 0x1, 0xc, "a0b4af30b786b818"})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xfffffffffffff000, 0x4601)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000100))
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x7, 0x1, 0x9, 0x8000, 0x0, "390172795853c59f"})

03:55:56 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x222140, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xb6, 0x6, 0x5, 0x9, 0x5, "1dc8a1f317bd7db926e8fb375bb9715a393d88", 0x2, 0xe6})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x3)
r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0xb6, 0x185500)
ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000000140))
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xbd, 0x10240)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r5, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40000000)
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1206004}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd3}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x64}}, 0x41)
r6 = syz_open_dev$vcsu(&(0x7f0000000500), 0xf3eb, 0x2042)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r6)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}}, 0x2001)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x22)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$KDMKTONE(r7, 0x4b30, 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6)
sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000092}, 0x4000801)

03:55:57 executing program 7:
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x25c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@dsss={0x3, 0x1, 0x30}, @cf={0x4, 0x6, {0x1f, 0x3f, 0x8, 0x82}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x1, 0x0, {0x6, 0x3, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x301, 0x81, 0x3}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xb5, 0xfa, "b81986ba1347ef7768d359a9b4ea18f08c44cf680e44a274abe591f863118f49d68a86d473a61e4bfc30372e58ef1de1381d70885ea7eb25602d401da96d457ddc51630c7f7d0903856d1798afe81156fa358ea18df91444416b376bdcf23c5f12fdadfde81a1b69ce2cf11da8be6dcda759ebb4668fe34644e07bfed600a0484ae22c2ced5de0346193cacea428bd45aca944d56d66e6eb37a91815d982275d0d9a7da19840159f9caf1d9b83d97e1ad4"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "7f4463c8a621bfe5c5ee6d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "8c7b39328071ec58b9"}, @NL80211_ATTR_FILS_ERP_RRK={0xa0, 0xfc, "394dbc9a591988ffa5ba1732cbcc7fc1debc1ffa6d46294684ffa22909f8c1fe34b5fa51c900c3bcf4349e7aa8c4dd61e187afef0cd3537dbefbf71f3aec05b7b4595aebc1a4c5a465f126953a52397e3abcb62bd3c06d244458130c096101f0a02d40600347a8bbc40569e10835ae3eb41c566e85c19ac49ab004c914700d9ee44e3f42e9c84a07472fc50165ae67ed1404954d61e9ceafb65f8049"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x200}, @NL80211_ATTR_FILS_ERP_RRK={0x6d, 0xfc, "4c45306724088dcd2f8a39c6b3f987c3da1bde88f4ca8d8b59ff71a7273b4139d6c91ff285f30ec9ad18645f2c3710f5bdc22d85f386cc3f6db15ec1d81bbe30d609046d658a0f3c88e0a7a537f99ed143e98250cab58d16b628bcb2baa4b71c9ad49350578296ef11"}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "c4a299"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "6519d7729695c464d67008"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "fb74580a268a"}]]}, 0x25c}, 0x1, 0x0, 0x0, 0x40859}, 0x0)
r0 = socket(0x29, 0x4, 0x7)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x5d, 0x8, 0x7, 0x1, @loopback, @remote, 0x10, 0x8000, 0x5, 0x464}})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000480)={0x6e4, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x184, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&[\\$&{\'@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.]}\xb8*]:#.#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb0a}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x04)A+'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x569}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "be438c3a5279c4ce1f7fb97ffd45785ddd58950936383b674acf04b14a97dc876a9b75107dae610eed0f32101258e2f803af5a7afeb037bd"}, @ETHTOOL_A_BITSET_VALUE={0x8c, 0x4, "8e74da7c869adfce633ee7b741d6fbca2ee9b5091f8fbe3f30ead4bde2c28d747e02c42cb05e4f37a1c19b724734c9f6ce93438572ed7631909a1697de845927c2178f003fe0a923b4b445a2fca138c9e8e72277923076360a327cceb63b6c42410607c7297ce49bca6b06e71203cee8b504df6cba3f7a085c8dab45cfe006d3bc55d59d1cdf9ff1"}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "13e7122ee12db2cd4e2c267595914b059ee3514ab18cd74d04496c61cee0dffce19a8d9a73a232d5ed1974bd62ae88061cf4bc814d7553df2878c2d5c739f28e08780d179c614564d7397666f06ad9f78ac01e0d233bccba163657b2ddaf74b2c2d00ba65add4a366baddc369e121680284365de9de56e3761bc56ff7941194dbb74149d09293e92768ef114056e084401882cf7661cdbaa2df46d95b3dd29d7a76afdbc167cf42fa61bbf0e8c4b4039a12db49f72443d02a1c19efd5ef4a0b8dba0cc5a1fc064aeebd7c569731603f1aea18300773d185ddedbe05b97546797613e3aab6f4804c3bf94a0861cfbd352c4551f9f8ae52db9"}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xb8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffba}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&,.]-!$)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "4b60da0bbf6433cd66aaaedf3e05713b47c44cb8e8ac1e25690362b62d18f1854eef941b2b64d72ff1ae04ddf0278bd3ce1d3f757f9bbe5ea81befc2d390985dcb0d103e5fc3316211d53fa06855da9a189447c08e724c30e4770af35d9755b03e58c4"}]}, @ETHTOOL_A_FEATURES_WANTED={0x248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "8a191435e0cc62d8ee080ae1014ecee362169a98d166f28b7979746af20d17bcecc0769aaa779bda776f60992439e4e90060874beff0c76fbfd52388999c5deeaa808a98f710cec18cb91f01ad0c92455d66250f6b30ce4b56ff"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "fd420eb49b6569a5a0697397380dbe09c8dc4caf8ef5c59fa556d4d5a1ef959a32e6c604f04008d5e80d63efa63c20f7c35d7ba1665ad520f819e2a0ff877ce106911bb4e6ee0995585f4289685cd4b13eedcb2a08067633f9f9c9494566536a5add6968a5208a92531288c4fdf01fa9e1d6d9fea0a2cd953c36c5df0c0c3fc9ad351c320371c0fe457da5ee40608a93ca02eae295eadf8678513e956c279e8635b8d04f2bd1efd5ac26819952b7f6b9c7b841f96607493954676ac891d75345d369ae105357d7d9e5230b237c331f2dc4bf01e4d3b24ba00f8f5255ed8e599fcd645f73de207651ab4a2287"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.&\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "983908a2185e22db4d843cf101d9944c667a5958aff39a3ef3bad3b2ef4bbb5947d9b667d6646925db1b6902fb8059e174610dbb3c153518633c49017cd954a0699346b7bb1e07b3a75779c8be79e6f19cca5744c241c0e2f37031857efbb2dd286e871b2b7b765d44a31d4911655447e5df416ea7b88c57519fc5731887991898ccda6717f3ae28434929e79e9867576f3c07f43e138b5c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#Y:&.@@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@-{}]%-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+)\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+(\x16.,\'$Q{)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#+m\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.*:+]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}-!\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf6}]}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x74, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x200080e0}, 0x4000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0), r4)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r4)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r0)
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x98, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
socketpair(0x2, 0x5, 0x100, &(0x7f0000001200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048040)
r8 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000001340)=""/180)
ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000001400)=0x140)

[  111.928910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.932590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.935284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.943004] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.947439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.024081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.029641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.033950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.039849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.044014] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.089063] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.100278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.103860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.113921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.138156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.150907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.153661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.156622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.163155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.169403] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.171260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.177007] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.178856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.189164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.199799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.206910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.214386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.228636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.238144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.241081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  112.269143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.308791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.334757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  112.351714] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.385837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  112.398855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  112.400995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  112.419391] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  112.432815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.439122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.009995] Bluetooth: hci0: command tx timeout
[  114.073582] Bluetooth: hci1: command tx timeout
[  114.328592] Bluetooth: hci2: command tx timeout
[  114.328718] Bluetooth: hci4: command tx timeout
[  114.392449] Bluetooth: hci5: command tx timeout
[  114.456422] Bluetooth: hci3: command tx timeout
[  114.520535] Bluetooth: hci6: command tx timeout
[  114.521461] Bluetooth: hci7: command tx timeout
[  116.057474] Bluetooth: hci0: command tx timeout
[  116.121389] Bluetooth: hci1: command tx timeout
[  116.376700] Bluetooth: hci2: command tx timeout
[  116.376966] Bluetooth: hci4: command tx timeout
[  116.443381] Bluetooth: hci5: command tx timeout
[  116.504431] Bluetooth: hci3: command tx timeout
[  116.568780] Bluetooth: hci7: command tx timeout
[  116.568888] Bluetooth: hci6: command tx timeout
[  118.104467] Bluetooth: hci0: command tx timeout
[  118.168555] Bluetooth: hci1: command tx timeout
[  118.425018] Bluetooth: hci2: command tx timeout
[  118.425109] Bluetooth: hci4: command tx timeout
[  118.489006] Bluetooth: hci5: command tx timeout
[  118.552543] Bluetooth: hci3: command tx timeout
[  118.616442] Bluetooth: hci6: command tx timeout
[  118.616542] Bluetooth: hci7: command tx timeout
[  120.152696] Bluetooth: hci0: command tx timeout
[  120.216450] Bluetooth: hci1: command tx timeout
[  120.474274] Bluetooth: hci4: command tx timeout
[  120.474447] Bluetooth: hci2: command tx timeout
[  120.536405] Bluetooth: hci5: command tx timeout
[  120.600584] Bluetooth: hci3: command tx timeout
[  120.664831] Bluetooth: hci6: command tx timeout
[  120.667575] Bluetooth: hci7: command tx timeout
[  174.885820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.894975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.898568] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.904670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.913167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.917818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.921812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.923757] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  174.942334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.947695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.949449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.962649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.975848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.988121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.993982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.019479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.025899] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.038909] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.049538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.060987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.090684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.101697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.104893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.119147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.125960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.177187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.202471] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.209026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.211201] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.220749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.233814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.250378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.252602] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.271939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.273849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.277132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.287699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  175.293097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.305012] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  175.340315] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.985281] Bluetooth: hci0: command tx timeout
[  177.048510] Bluetooth: hci2: command tx timeout
[  177.049334] Bluetooth: hci1: command tx timeout
[  177.177567] Bluetooth: hci4: command tx timeout
[  177.178839] Bluetooth: hci3: command tx timeout
[  177.368613] Bluetooth: hci5: command tx timeout
[  177.432812] Bluetooth: hci6: command tx timeout
[  177.625498] Bluetooth: hci7: command tx timeout
[  179.032623] Bluetooth: hci0: command tx timeout
[  179.096689] Bluetooth: hci1: command tx timeout
[  179.097637] Bluetooth: hci2: command tx timeout
[  179.224848] Bluetooth: hci4: command tx timeout
[  179.226120] Bluetooth: hci3: command tx timeout
[  179.417736] Bluetooth: hci5: command tx timeout
[  179.480813] Bluetooth: hci6: command tx timeout
[  179.673530] Bluetooth: hci7: command tx timeout
[  181.081223] Bluetooth: hci0: command tx timeout
[  181.144543] Bluetooth: hci2: command tx timeout
[  181.145442] Bluetooth: hci1: command tx timeout
[  181.272649] Bluetooth: hci4: command tx timeout
[  181.273571] Bluetooth: hci3: command tx timeout
[  181.464873] Bluetooth: hci5: command tx timeout
[  181.528721] Bluetooth: hci6: command tx timeout
[  181.720529] Bluetooth: hci7: command tx timeout
[  183.130418] Bluetooth: hci0: command tx timeout
[  183.193101] Bluetooth: hci1: command tx timeout
[  183.194212] Bluetooth: hci2: command tx timeout
[  183.321164] Bluetooth: hci3: command tx timeout
[  183.322421] Bluetooth: hci4: command tx timeout
[  183.514301] Bluetooth: hci5: command tx timeout
[  183.576565] Bluetooth: hci6: command tx timeout
[  183.768540] Bluetooth: hci7: command tx timeout
[  237.356869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.364078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.369835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.378844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.384926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.453172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.454557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.456377] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.458692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.460198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.467643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.472168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.477173] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.483198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.485722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.547946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.559844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.563736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.572288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.580923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.614396] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.618810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.642879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.655744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.664946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.790085] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.818232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.822073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.853899] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.855990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.859036] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.867032] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.872006] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.888077] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.901852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.000963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.007816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.020693] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.036152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.051313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.449732] Bluetooth: hci0: command tx timeout
[  239.512492] Bluetooth: hci2: command tx timeout
[  239.513210] Bluetooth: hci1: command tx timeout
[  239.640419] Bluetooth: hci3: command tx timeout
[  239.768464] Bluetooth: hci4: command tx timeout
[  239.960428] Bluetooth: hci6: command tx timeout
[  240.024844] Bluetooth: hci5: command tx timeout
[  240.153424] Bluetooth: hci7: command tx timeout
[  241.497448] Bluetooth: hci0: command tx timeout
[  241.561465] Bluetooth: hci1: command tx timeout
[  241.561938] Bluetooth: hci2: command tx timeout
[  241.688604] Bluetooth: hci3: command tx timeout
[  241.816713] Bluetooth: hci4: command tx timeout
[  242.009638] Bluetooth: hci6: command tx timeout
[  242.073462] Bluetooth: hci5: command tx timeout
[  242.200500] Bluetooth: hci7: command tx timeout
[  243.544454] Bluetooth: hci0: command tx timeout
[  243.608488] Bluetooth: hci2: command tx timeout
[  243.609153] Bluetooth: hci1: command tx timeout
[  243.736446] Bluetooth: hci3: command tx timeout
[  243.864757] Bluetooth: hci4: command tx timeout
[  244.057673] Bluetooth: hci6: command tx timeout
[  244.120429] Bluetooth: hci5: command tx timeout
[  244.249803] Bluetooth: hci7: command tx timeout
[  245.593134] Bluetooth: hci0: command tx timeout
[  245.656708] Bluetooth: hci1: command tx timeout
[  245.657221] Bluetooth: hci2: command tx timeout
[  245.786389] Bluetooth: hci3: command tx timeout
[  245.913447] Bluetooth: hci4: command tx timeout
[  246.104422] Bluetooth: hci6: command tx timeout
[  246.168668] Bluetooth: hci5: command tx timeout
[  246.296432] Bluetooth: hci7: command tx timeout
[  299.784039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.787694] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.790719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.794589] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.798193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.817448] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.826596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.831704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.837872] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.840261] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.848138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.862909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.875217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.882544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.889207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.939136] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.942896] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.945253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.960297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.969961] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.050935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.078909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.110962] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.119943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.132985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.144382] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.156159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.163033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.171645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.175782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.180421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.191077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.206031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.212619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.219181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.228745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.236621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.253078] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.258958] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.260164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.912457] Bluetooth: hci1: command tx timeout
[  301.915378] Bluetooth: hci0: command tx timeout
[  301.976601] Bluetooth: hci2: command tx timeout
[  302.040524] Bluetooth: hci3: command tx timeout
[  302.232436] Bluetooth: hci4: command tx timeout
[  302.360762] Bluetooth: hci7: command tx timeout
[  302.360818] Bluetooth: hci5: command tx timeout
[  302.361619] Bluetooth: hci6: command tx timeout
[  303.961838] Bluetooth: hci0: command tx timeout
[  303.963207] Bluetooth: hci1: command tx timeout
[  304.024411] Bluetooth: hci2: command tx timeout
[  304.088739] Bluetooth: hci3: command tx timeout
[  304.282498] Bluetooth: hci4: command tx timeout
[  304.408579] Bluetooth: hci5: command tx timeout
[  304.408653] Bluetooth: hci7: command tx timeout
[  304.410057] Bluetooth: hci6: command tx timeout
[  306.008581] Bluetooth: hci0: command tx timeout
[  306.009622] Bluetooth: hci1: command tx timeout
[  306.073400] Bluetooth: hci2: command tx timeout
[  306.138120] Bluetooth: hci3: command tx timeout
[  306.329750] Bluetooth: hci4: command tx timeout
[  306.456673] Bluetooth: hci6: command tx timeout
[  306.456792] Bluetooth: hci7: command tx timeout
[  306.457604] Bluetooth: hci5: command tx timeout
[  308.057634] Bluetooth: hci1: command tx timeout
[  308.058128] Bluetooth: hci0: command tx timeout
[  308.121412] Bluetooth: hci2: command tx timeout
[  308.185751] Bluetooth: hci3: command tx timeout
[  308.377403] Bluetooth: hci4: command tx timeout
[  308.506445] Bluetooth: hci7: command tx timeout
[  308.506485] Bluetooth: hci5: command tx timeout
[  308.506932] Bluetooth: hci6: command tx timeout
[  362.150105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.154834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.159570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.167082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.174939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.321053] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.324912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.328293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.336633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.343205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.410067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.417895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.420969] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.440736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.451437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.462693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.473166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.475975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.485916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.503251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.521481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.532216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.551938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.570520] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.580059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.680768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.697035] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.711088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.749056] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.766863] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.770068] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.776894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.789960] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.807607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.817222] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.824993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.827253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.833254] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.900207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.913022] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.249703] Bluetooth: hci0: command tx timeout
[  364.376509] Bluetooth: hci1: command tx timeout
[  364.569923] Bluetooth: hci2: command tx timeout
[  364.569964] Bluetooth: hci3: command tx timeout
[  364.632536] Bluetooth: hci5: command tx timeout
[  364.888969] Bluetooth: hci6: command tx timeout
[  364.952700] Bluetooth: hci4: command tx timeout
[  365.016543] Bluetooth: hci7: command tx timeout
[  366.296515] Bluetooth: hci0: command tx timeout
[  366.425776] Bluetooth: hci1: command tx timeout
[  366.616655] Bluetooth: hci2: command tx timeout
[  366.618452] Bluetooth: hci3: command tx timeout
[  366.680500] Bluetooth: hci5: command tx timeout
[  366.936531] Bluetooth: hci6: command tx timeout
[  367.000549] Bluetooth: hci4: command tx timeout
[  367.064481] Bluetooth: hci7: command tx timeout
[  368.344451] Bluetooth: hci0: command tx timeout
[  368.472413] Bluetooth: hci1: command tx timeout
[  368.664447] Bluetooth: hci3: command tx timeout
[  368.664932] Bluetooth: hci2: command tx timeout
[  368.728450] Bluetooth: hci5: command tx timeout
[  368.984458] Bluetooth: hci6: command tx timeout
[  369.048410] Bluetooth: hci4: command tx timeout
[  369.112587] Bluetooth: hci7: command tx timeout
[  370.392427] Bluetooth: hci0: command tx timeout
[  370.520419] Bluetooth: hci1: command tx timeout
[  370.712739] Bluetooth: hci2: command tx timeout
[  370.713121] Bluetooth: hci3: command tx timeout
[  370.777446] Bluetooth: hci5: command tx timeout
[  371.032521] Bluetooth: hci6: command tx timeout
[  371.098218] Bluetooth: hci4: command tx timeout
[  371.160654] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:00:57  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffffffff8641fc44 RCX=ffffffff8150fc15 RDX=ffff88801a251b80
RSI=ffffffff81a4eac9 RDI=ffff88800bdfee60 RBP=ffff88802c052500 RSP=ffff88802ecb7848
R8 =0000000000000001 R9 =ffffed10017bfdcc R10=ffff88800bdfee67 R11=0000000000000001
R12=ffff8880169a6680 R13=ffff88802ecb78d0 R14=ffff88802c052520 R15=ffff88802c052510
RIP=ffffffff81738af0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f989cd488e0 CR3=0000000026111000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000010000 RBX=1ffff1100d9e11a5 RCX=ffffffff816478c3 RDX=ffff888034d43700
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888034d43700 RSP=ffff88806cf08d18
R8 =0000000000000000 R9 =fffffbfff0f0a529 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffff88806cf289c0 R15=0000000000000000
RIP=ffffffff81738af4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f420376d8e0 CR3=000000002d462000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000