Warning: Permanently added '[localhost]:39164' (ECDSA) to the list of known hosts. 2024/10/21 19:16:49 fuzzer started 2024/10/21 19:16:49 dialing manager at localhost:45639 syzkaller login: [ 78.273395] cgroup: Unknown subsys name 'net' [ 78.403629] cgroup: Unknown subsys name 'cpuset' [ 78.449956] cgroup: Unknown subsys name 'rlimit' 2024/10/21 19:17:15 syscalls: 213 2024/10/21 19:17:15 code coverage: enabled 2024/10/21 19:17:15 comparison tracing: enabled 2024/10/21 19:17:15 extra coverage: enabled 2024/10/21 19:17:15 setuid sandbox: enabled 2024/10/21 19:17:15 namespace sandbox: enabled 2024/10/21 19:17:15 Android sandbox: enabled 2024/10/21 19:17:15 fault injection: enabled 2024/10/21 19:17:15 leak checking: enabled 2024/10/21 19:17:15 net packet injection: enabled 2024/10/21 19:17:15 net device setup: enabled 2024/10/21 19:17:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/21 19:17:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/21 19:17:15 USB emulation: enabled 2024/10/21 19:17:15 hci packet injection: enabled 2024/10/21 19:17:15 wifi device emulation: enabled 2024/10/21 19:17:15 802.15.4 emulation: enabled 2024/10/21 19:17:15 fetching corpus: 0, signal 0/0 (executing program) 2024/10/21 19:17:17 starting 8 fuzzer processes 19:17:17 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x604000, 0x0) ioctl$CDROMGETSPINDOWN(r1, 0x531d, &(0x7f00000000c0)) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3c, 0xfd, 0x1f, 0x1, 0x0, 0x2, 0x1002, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x2, @perf_config_ext={0x1, 0x7}, 0x8, 0x7, 0x6, 0x5, 0x2, 0x2, 0xf2, 0x0, 0x679, 0x0, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x9, 0xff, 0x3, 0x0, 0x2, 0x2000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf5dc, 0x1, @perf_bp={&(0x7f0000000180), 0x5}, 0x4000, 0x1, 0x9, 0x8, 0x0, 0x3, 0x6, 0x0, 0x8, 0x0, 0x8}, r2, 0x7, r3, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000300)=@ready={0x0, 0x0, 0x8, "fbd6d6cc", {0x1, 0x1000, 0xf001, 0x90, 0x89}}) openat$cgroup_type(r2, &(0x7f0000000340), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x6c, 0x2, 0x1, 0xf2, 0x0, 0x1000, 0x20, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffffffffffffe4bc, 0x9}, 0x1a000, 0x8, 0x4, 0x9, 0x7fffffff, 0xe98, 0x8b0, 0x0, 0x7f, 0x0, 0x2}, r4, 0x8, 0xffffffffffffffff, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x10, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4040044) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x3, 0x0, {0x2da4, 0x7, 0x0, 0x7f, 0x0, 0x1}, 0x1, 0x8, 0x3}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0x84}, @channel_switch={0x25, 0x3, {0x0, 0x68, 0x81}}, @dsss={0x3, 0x1, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004055}, 0x20040000) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff8, 0x14}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) socketpair(0x15, 0x3, 0x40, &(0x7f0000000840)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r5) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xbc, r9, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8000}, @NL80211_ATTR_IE={0x9f, 0x2a, [@perr={0x84, 0x75, {0x9, 0x7, [@ext={{}, @device_a, 0x200, @device_a, 0x20}, @ext={{}, @device_a, 0x1000, @device_a, 0x2f}, @ext={{}, @device_a, 0x5, @device_b, 0x34}, @ext={{}, @broadcast, 0x80000001, @device_b, 0x3c}, @not_ext={{}, @device_b, 0x3, "", 0xd}, @not_ext={{}, @device_a, 0x7ff, "", 0x2}, @not_ext={{}, @device_a, 0x400, "", 0x35}]}}, @ibss={0x6, 0x2, 0x2}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x1f, 0x3, @broadcast, 0x400, 0x80, 0x28}}, @supported_rates={0x1, 0x7, [{0x36}, {0x9, 0x1}, {0x36}, {0xc}, {0x24}, {0x60}, {0x36}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000000}, 0x20008000) 19:17:17 executing program 2: socketpair(0x11, 0x6, 0xffff2803, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "36aaf999b7827b9029e8759dbf6d315e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "6e7f41e95f40b293826f17cabbacd29c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "04759fc887f9be81dd27bccb8361799f"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x44845}, 0x20000000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x525000, 0x0) sendmsg$AUDIT_USER(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xdc, 0x3ed, 0x4, 0x70bd29, 0x25dfdbfe, "14d60644385dfca2ba955be0795a6417447d6f8a9da13a5d455ec83209d3ef4169ab5391b39da61e971365e419b4e14170119721274a40790db3da4de00fc2d4988ff80ad6da04315c6ca84c5ca472885c3c00ccfe6d70ea623ef9a838cba47e6727e6876ae94456772c118f195b3e4f5a5564c664d0f9558265ae861bdf4f06ed4bb758a27de655cf2b8ec9513500ae5638a2904c4031fda5a93a3bd5ff32aadf1315c06a089ad0adb69fee35a168521e95e5bd361fa70ef436bf213383bf4ed2784d1e32c895d304", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0xc001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x4}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000680)="8bfd07bc48a08937b65208c08768f6593cb4101506c40bf7b03c") r6 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) r7 = socket(0x26, 0xa, 0xffffffff) socketpair(0x29, 0x3, 0x6f5, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r8, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f8, 0x100, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40040) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x10, 0x3f6, 0x4, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}}, 0x48014) socket(0x28, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x134, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf23}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4f9}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @local, 0xd38}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xabf}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff7557}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x2000c810}, 0x44800) 19:17:17 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffffffd}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xff}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x8000}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x45c, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x280000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4c}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x100, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffff8000, @local, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4176}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x69, 0x3, "7360eb1878d887ea54423ff0be183a0b880403e4e0699a09d474ce1dd038df507606a9dd43e004b2e1077b3dfc4f871a5fd55c0ba7b58c1dae6e17bc406bb40cbd685dcfd7d86a81c12f7dad08d869f20974b1c59ad725582668317d1fff8b6fa6459122e9"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a219f123ab2180a176a9bc3d3b1dc7f4d579e4befe49316bfc477fb2f1ae"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa, 0x3, "9f3cb1c919fd"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "103274ff92eef1fc57e3afe66cf04a6b0ae46791b2eb639a25ad6356a5875cccec820d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "485a48be75e86a7297959ace190340ec2a789ded2f0202f2857ccc"}}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xefbf}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @empty, 0x70c5}}}}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "761700473c319f4ac33a67aa0dd1d46fa3c88af40954384487da3f0d67a5e770e5dfd28bc2f88925bbeddac7d238c378d64d20652b6699a74e8262f722d3825d4bb9e445c1b02984ed"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x90}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c7555dd2e01245ddd53b8a8372025c1ec3a43869894607daf8fa"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0x80}, 0x24050000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000c40), 0x101, 0x220401) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r0, 0x214, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88084}, 0x2810) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r0, 0x8, 0x93d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) r5 = syz_open_dev$vcsa(&(0x7f0000000e80), 0xffffffffffff7fff, 0x22000) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x35}, @NL80211_ATTR_PMKID={0x14, 0x55, "1049410be07a56ca49d265b57f0622fc"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x43}, @NL80211_ATTR_PMKID={0x14, 0x55, "174464de32bc9096b69630b5e229cc10"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x81}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x400c000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001000), 0x202002, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)={0x124, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9, 0x7, 0x33, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x200}, @NL80211_ATTR_IE={0xec, 0x2a, [@dsss={0x3, 0x1, 0xb4}, @challenge={0x10, 0x1, 0xca}, @gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xdd, 0x80}}, @perr={0x84, 0x88, {0x6, 0x8, [@not_ext={{}, @broadcast, 0x3, "", 0x3f}, @ext={{}, @device_b, 0x4, @device_a, 0x8}, @ext={{}, @device_b, 0x10001, @device_b, 0x2d}, @ext={{}, @device_a, 0x2, @broadcast, 0x12}, @not_ext={{}, @device_b, 0xa4c, "", 0x3e}, @ext={{}, @device_a, 0x14e0000, @broadcast, 0x16}, @ext={{}, @broadcast, 0x3, @device_a, 0xd}, @not_ext={{}, @broadcast, 0x3, "", 0x1c}]}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0xf6, 0x8, @broadcast, 0x0, 0x5, 0x4}}, @link_id={0x65, 0x12, {@random="65c69c81cd60", @broadcast, @broadcast}}, @rann={0x7e, 0x15, {{0x0, 0x5c}, 0x80, 0x2, @device_b, 0x7fff, 0x6, 0x4}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x2, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8001}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001240), 0x80, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000001280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000012c0)={'batadv_slave_0\x00'}) 19:17:17 executing program 4: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044000}, 0x11) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040815) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3dd}]}, 0x30}, 0x1, 0x0, 0x0, 0x40041}, 0x24004004) r2 = socket(0x6, 0x4, 0x20) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4044014) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x2, 0x70bd29, 0x2, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x6c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x824, 0x52}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1000}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4041}, 0x40) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x102a}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="eb710760ae51e2f62a91b4f5daa00ab3bd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="19d4c6692078"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7f}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24040000}, 0x80085) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000c80)='pids.current\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040844}, 0x104) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9ee1c0786b9dd323ad4261212350dd5b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "5f9e3ee6c710c6d8c76807bc033717f9"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "34e1c5f66d0c97427c6e603247cb57b2"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000001040), 0x2, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x3f8, 0x4, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc0005}, 0x10) 19:17:17 executing program 1: getuid() getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000240)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000400)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r0, 0x29, 0x81, 0x7, 0x3, 0x2, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x20, 0x0, 0x5}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, 0x24}}, 0x5) socketpair(0x3, 0x4, 0x100, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r3, 0x29, 0x36, 0xc6, 0x8, 0x14, @local, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7, 0x1, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'ip6tnl0\x00', r8, 0x2f, 0x0, 0x40, 0x9, 0x10, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1, 0x8, 0xb6df, 0x90000}}) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc4, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$packet(r6, &(0x7f0000000a00)={0x11, 0xd, r8, 0x1, 0x20, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40480}, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) 19:17:17 executing program 5: ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000200), 0x2, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000300), 0x2, 0x0) r2 = socket(0x8, 0x800, 0x1000) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9ac00000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="d885e03829a4"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x68}}, 0xc0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3f, 0x0, 0x7ff, 0x10, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x780, 0x7, 0xfff, 0x1}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x752}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x20) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) sendto$packet(r4, &(0x7f0000000700)="34e2b5fea01ae677101316a2a12932b0af2e309f5fec80096262ba91e748e422e272bd79c34e6981c34fd066c644b0f761674a4bd918c7c50ba52e653eb50f6635b095052465a15dc27bcffe551bfe4d5727500230a17710e0b9f5805b91e3e7047e822463c54d1e34834e3c3e6b38688531dd10268206644074eb8a59a516e5f3fc533b16b64017711aabd793506716c41a8e86c78a4127b5f915cadb9e54da495509f67966fbfe9f4f85783158c0411d0cdf89fe", 0xb5, 0x40000, &(0x7f00000007c0)={0x11, 0x1b, r3, 0x1, 0x80, 0x6, @remote}, 0x14) epoll_create(0x200) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000840)={'syztnl0\x00', r5, 0x0, 0x8, 0x4, 0x7, {{0x1a, 0x4, 0x1, 0x9, 0x68, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x2e}, @lsrr={0x83, 0x3, 0xf8}, @noop, @end, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x24, 0xd7, 0x3, 0x3, [{@local, 0x4}, {@multicast1, 0x8001}, {@empty, 0x101}, {@private=0xa010101, 0x6}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x6, 0x9, "dd08aa6fe892df"}]}, @lsrr={0x83, 0xf, 0x1d, [@rand_addr=0x64010101, @private=0xa010100, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'sit0\x00', r5, 0x0, 0xfd, 0x1, 0x0, 0x9, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x4, 0x2}}) syz_io_uring_setup(0x1bf2, &(0x7f0000000b40)={0x0, 0x4b0c, 0x4, 0x2, 0x2b4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000d80)=@IORING_OP_STATX={0x15, 0x3, 0x0, r1, &(0x7f0000000c40), &(0x7f0000000d40)='./file0\x00', 0x40, 0x400, 0x1}, 0x6) 19:17:17 executing program 6: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x43) syz_open_pts(0xffffffffffffffff, 0x2288c1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.max.burst\x00', 0x2, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) sendmsg$AUDIT_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10008400}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) [ 105.364409] audit: type=1400 audit(1729538237.251:7): avc: denied { execmem } for pid=276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:17:17 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x4040084) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000101}, 0x40048000) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x3ed, 0x2, 0x70bd2d, 0x25dfdbfb, "39c25756e6e02eedec69415240ee6ca900e76ac639f18917dc247f2c2ee5b4b4b8d6b14268eda012690402db376345c5aa01f017f7dfd2cf248070123d3ab37c3b06147a4b8b9f8fe19257fcc30703bcc5", ["", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x8014}, 0x5810) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r4, 0x509, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x8081) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x854) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x400, 0x70bd29, 0x7f, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000060}, 0x20000812) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x24048044) [ 106.763691] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.764926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.770143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.771559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.771794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.773061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.774447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.775152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.777933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.783530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.785278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.785488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.786173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.790927] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.794656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.794872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.803009] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.811024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.820976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.822690] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.823948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.843669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.846302] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.847534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.873086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.889284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.890556] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.894988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.897919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.898758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.899871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.903950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.904624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.907255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.921983] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.922376] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.923942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.926345] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.927991] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.929455] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.930433] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.931936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.935960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.938098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.938967] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 106.940852] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 106.942356] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.948054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 108.845560] Bluetooth: hci0: command tx timeout [ 108.847249] Bluetooth: hci2: command tx timeout [ 108.848911] Bluetooth: hci1: command tx timeout [ 108.909464] Bluetooth: hci3: command tx timeout [ 108.972865] Bluetooth: hci5: command tx timeout [ 108.974829] Bluetooth: hci4: command tx timeout [ 109.036944] Bluetooth: hci7: command tx timeout [ 109.038812] Bluetooth: hci6: command tx timeout [ 110.892988] Bluetooth: hci1: command tx timeout [ 110.894586] Bluetooth: hci0: command tx timeout [ 110.895899] Bluetooth: hci2: command tx timeout [ 110.956860] Bluetooth: hci3: command tx timeout [ 111.020871] Bluetooth: hci5: command tx timeout [ 111.022534] Bluetooth: hci4: command tx timeout [ 111.084840] Bluetooth: hci7: command tx timeout [ 111.086465] Bluetooth: hci6: command tx timeout [ 112.940916] Bluetooth: hci0: command tx timeout [ 112.942370] Bluetooth: hci1: command tx timeout [ 112.943790] Bluetooth: hci2: command tx timeout [ 113.004943] Bluetooth: hci3: command tx timeout [ 113.068983] Bluetooth: hci4: command tx timeout [ 113.070511] Bluetooth: hci5: command tx timeout [ 113.133247] Bluetooth: hci7: command tx timeout [ 113.134616] Bluetooth: hci6: command tx timeout [ 114.989035] Bluetooth: hci2: command tx timeout [ 114.990903] Bluetooth: hci1: command tx timeout [ 114.991058] Bluetooth: hci0: command tx timeout [ 115.052844] Bluetooth: hci3: command tx timeout [ 115.116942] Bluetooth: hci4: command tx timeout [ 115.116976] Bluetooth: hci5: command tx timeout [ 115.182911] Bluetooth: hci7: command tx timeout [ 115.183077] Bluetooth: hci6: command tx timeout [ 169.303356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.307122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.308345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.312911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.318917] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.320578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.348080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.349656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.352436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.355992] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.360028] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.362113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.413472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.418838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.420732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.421894] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.422953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.425915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.427726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.433214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.435531] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.436778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.442816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.466144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.472298] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.473186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.474671] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.477482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.479160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.480423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.484461] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.487505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.489932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.497376] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.514371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.525105] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.527590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.538432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.546943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.558938] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.561973] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.563225] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.578066] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.603757] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.605673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.627150] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.656950] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.658427] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.372865] Bluetooth: hci0: command tx timeout [ 171.436942] Bluetooth: hci1: command tx timeout [ 171.501044] Bluetooth: hci4: command tx timeout [ 171.565770] Bluetooth: hci2: command tx timeout [ 171.566535] Bluetooth: hci3: command tx timeout [ 171.628808] Bluetooth: hci5: command tx timeout [ 171.692786] Bluetooth: hci7: command tx timeout [ 171.756897] Bluetooth: hci6: command tx timeout [ 173.421781] Bluetooth: hci0: command tx timeout [ 173.484801] Bluetooth: hci1: command tx timeout [ 173.548796] Bluetooth: hci4: command tx timeout [ 173.612796] Bluetooth: hci3: command tx timeout [ 173.612889] Bluetooth: hci2: command tx timeout [ 173.676898] Bluetooth: hci5: command tx timeout [ 173.742096] Bluetooth: hci7: command tx timeout [ 173.806736] Bluetooth: hci6: command tx timeout [ 175.472031] Bluetooth: hci0: command tx timeout [ 175.533847] Bluetooth: hci1: command tx timeout [ 175.597868] Bluetooth: hci4: command tx timeout [ 175.660864] Bluetooth: hci2: command tx timeout [ 175.662373] Bluetooth: hci3: command tx timeout [ 175.724928] Bluetooth: hci5: command tx timeout [ 175.788805] Bluetooth: hci7: command tx timeout [ 175.852983] Bluetooth: hci6: command tx timeout [ 177.516984] Bluetooth: hci0: command tx timeout [ 177.581918] Bluetooth: hci1: command tx timeout [ 177.646767] Bluetooth: hci4: command tx timeout [ 177.708811] Bluetooth: hci3: command tx timeout [ 177.709858] Bluetooth: hci2: command tx timeout [ 177.772857] Bluetooth: hci5: command tx timeout [ 177.837799] Bluetooth: hci7: command tx timeout [ 177.900807] Bluetooth: hci6: command tx timeout [ 231.676392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.689368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.692639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.693120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.696818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.699842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.702968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.709881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.713973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.715425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.717495] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.719049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 231.720657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.722302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.736011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.755336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.761422] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.765381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.844371] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.851084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.857977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.866124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.868390] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 231.870879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.898157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.913026] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.016533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.016537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.031945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.035936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.037144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.044965] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.048486] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.063126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 232.069384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 232.081020] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 232.083138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 232.086902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 232.105059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.108897] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.118086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.119181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 232.133842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 232.133840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 232.135406] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 232.138189] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 232.139435] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 232.140630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.775799] Bluetooth: hci0: command tx timeout [ 233.776723] Bluetooth: hci1: command tx timeout [ 233.841343] Bluetooth: hci2: command tx timeout [ 233.901788] Bluetooth: hci3: command tx timeout [ 234.092834] Bluetooth: hci4: command tx timeout [ 234.220900] Bluetooth: hci5: command tx timeout [ 234.285794] Bluetooth: hci6: command tx timeout [ 234.286814] Bluetooth: hci7: command tx timeout [ 235.820785] Bluetooth: hci1: command tx timeout [ 235.823739] Bluetooth: hci0: command tx timeout [ 235.885496] Bluetooth: hci2: command tx timeout [ 235.948850] Bluetooth: hci3: command tx timeout [ 236.140815] Bluetooth: hci4: command tx timeout [ 236.269781] Bluetooth: hci5: command tx timeout [ 236.336924] Bluetooth: hci6: command tx timeout [ 236.337519] Bluetooth: hci7: command tx timeout [ 237.870740] Bluetooth: hci0: command tx timeout [ 237.870790] Bluetooth: hci1: command tx timeout [ 237.932784] Bluetooth: hci2: command tx timeout [ 237.996774] Bluetooth: hci3: command tx timeout [ 238.189777] Bluetooth: hci4: command tx timeout [ 238.316809] Bluetooth: hci5: command tx timeout [ 238.380997] Bluetooth: hci7: command tx timeout [ 238.381025] Bluetooth: hci6: command tx timeout [ 239.916773] Bluetooth: hci0: command tx timeout [ 239.917034] Bluetooth: hci1: command tx timeout [ 239.980890] Bluetooth: hci2: command tx timeout [ 240.044936] Bluetooth: hci3: command tx timeout [ 240.237995] Bluetooth: hci4: command tx timeout [ 240.364803] Bluetooth: hci5: command tx timeout [ 240.428840] Bluetooth: hci6: command tx timeout [ 240.428987] Bluetooth: hci7: command tx timeout [ 293.884877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.887195] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.889436] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.897131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.902278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.904591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.950979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.951984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.953331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.958069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.958269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.961558] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.963886] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.965892] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.967411] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.976890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.986255] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.987404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.139904] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.157588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.160600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.161487] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.165998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.174909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.180071] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.190411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.194905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.199850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.201811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.202896] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 294.206349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.213778] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.216894] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.217963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.226687] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.233014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.233232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.241448] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.259676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.262116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.263851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.268935] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 294.270305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.271499] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.272962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.290929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.294943] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 294.303964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.980790] Bluetooth: hci0: command tx timeout [ 296.045878] Bluetooth: hci2: command tx timeout [ 296.046558] Bluetooth: hci1: command tx timeout [ 296.236851] Bluetooth: hci5: command tx timeout [ 296.300827] Bluetooth: hci3: command tx timeout [ 296.364746] Bluetooth: hci4: command tx timeout [ 296.365179] Bluetooth: hci7: command tx timeout [ 296.428771] Bluetooth: hci6: command tx timeout [ 298.029010] Bluetooth: hci0: command tx timeout [ 298.092793] Bluetooth: hci1: command tx timeout [ 298.092815] Bluetooth: hci2: command tx timeout [ 298.285771] Bluetooth: hci5: command tx timeout [ 298.350692] Bluetooth: hci3: command tx timeout [ 298.413718] Bluetooth: hci4: command tx timeout [ 298.414222] Bluetooth: hci7: command tx timeout [ 298.478889] Bluetooth: hci6: command tx timeout [ 300.076723] Bluetooth: hci0: command tx timeout [ 300.141111] Bluetooth: hci1: command tx timeout [ 300.141207] Bluetooth: hci2: command tx timeout [ 300.333747] Bluetooth: hci5: command tx timeout [ 300.397741] Bluetooth: hci3: command tx timeout [ 300.460931] Bluetooth: hci7: command tx timeout [ 300.461409] Bluetooth: hci4: command tx timeout [ 300.541721] Bluetooth: hci6: command tx timeout [ 302.126780] Bluetooth: hci0: command tx timeout [ 302.188815] Bluetooth: hci2: command tx timeout [ 302.188912] Bluetooth: hci1: command tx timeout [ 302.383782] Bluetooth: hci5: command tx timeout [ 302.445870] Bluetooth: hci3: command tx timeout [ 302.509791] Bluetooth: hci7: command tx timeout [ 302.509873] Bluetooth: hci4: command tx timeout [ 302.573799] Bluetooth: hci6: command tx timeout [ 356.352429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.354176] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.355253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.362405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.365526] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.366771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.414203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.417903] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.419237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.426362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.428054] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.429981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.467568] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.469885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.471010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.475288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.479875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 356.481509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.537247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.548288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.551310] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.576772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.585750] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.588998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.616430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.622555] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.623690] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.626864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.636230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 356.637340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.677187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.682519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.684976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.693018] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.698148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.704819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.711205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.712528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 356.726031] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.727122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.731531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 356.733191] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 356.734478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 356.764852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.778851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 356.780016] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.786862] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 356.787917] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.380779] Bluetooth: hci0: command tx timeout [ 358.509129] Bluetooth: hci2: command tx timeout [ 358.510010] Bluetooth: hci1: command tx timeout [ 358.636734] Bluetooth: hci3: command tx timeout [ 358.700759] Bluetooth: hci4: command tx timeout [ 358.764792] Bluetooth: hci7: command tx timeout [ 358.828784] Bluetooth: hci6: command tx timeout [ 358.892800] Bluetooth: hci5: command tx timeout [ 360.430702] Bluetooth: hci0: command tx timeout [ 360.556927] Bluetooth: hci2: command tx timeout [ 360.557484] Bluetooth: hci1: command tx timeout [ 360.684790] Bluetooth: hci3: command tx timeout [ 360.748804] Bluetooth: hci4: command tx timeout [ 360.814705] Bluetooth: hci7: command tx timeout [ 360.876894] Bluetooth: hci6: command tx timeout [ 360.940720] Bluetooth: hci5: command tx timeout [ 362.476745] Bluetooth: hci0: command tx timeout [ 362.604769] Bluetooth: hci2: command tx timeout [ 362.605317] Bluetooth: hci1: command tx timeout [ 362.732954] Bluetooth: hci3: command tx timeout [ 362.797378] Bluetooth: hci4: command tx timeout [ 362.861569] Bluetooth: hci7: command tx timeout [ 362.924755] Bluetooth: hci6: command tx timeout [ 362.988726] Bluetooth: hci5: command tx timeout [ 364.524732] Bluetooth: hci0: command tx timeout [ 364.652788] Bluetooth: hci1: command tx timeout [ 364.653342] Bluetooth: hci2: command tx timeout [ 364.780755] Bluetooth: hci3: command tx timeout [ 364.844884] Bluetooth: hci4: command tx timeout [ 364.908896] Bluetooth: hci7: command tx timeout [ 364.972820] Bluetooth: hci6: command tx timeout [ 365.036749] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 19:22:19 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000001000 RCX=00000000000000f1 RDX=0000000000000000 RSI=0000000000000001 RDI=ffffffff84c71e84 RBP=ffff88806ce09cb8 RSP=ffff88806ce09c40 R8 =00000000000001e3 R9 =ffff88806ce3bac8 R10=0000000000000001 R11=00000000fa83b2da R12=ffff88806ce3ba40 R13=00000000000002d4 R14=00000000000000f1 R15=0000000000000004 RIP=ffffffff812b62ed RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6f0c15b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055965143f2b0 CR3=000000002cff6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81698212 RDX=ffff88802a0f8000 RSI=0000000000000008 RDI=ffffea0001b3a780 RBP=ffffea0001b3a780 RSP=ffff88802ac2fb68 R8 =0000000000000000 R9 =fffff940003674f0 R10=0000000000000001 R11=0000000000000001 R12=0000000000000044 R13=0000000000000000 R14=ffffea0001b3a780 R15=ffff88802ac2fd98 RIP=ffffffff818b3f70 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1972cbf540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1972ef0000 CR3=0000000034da6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000