Warning: Permanently added '[localhost]:42691' (ECDSA) to the list of known hosts. 2025/06/25 09:26:01 fuzzer started 2025/06/25 09:26:01 dialing manager at localhost:42423 syzkaller login: [ 105.235051] cgroup: Unknown subsys name 'net' [ 105.398921] cgroup: Unknown subsys name 'cpuset' [ 105.499825] cgroup: Unknown subsys name 'rlimit' 2025/06/25 09:26:21 syscalls: 212 2025/06/25 09:26:21 code coverage: enabled 2025/06/25 09:26:21 comparison tracing: enabled 2025/06/25 09:26:21 extra coverage: enabled 2025/06/25 09:26:21 setuid sandbox: enabled 2025/06/25 09:26:21 namespace sandbox: enabled 2025/06/25 09:26:21 Android sandbox: enabled 2025/06/25 09:26:21 fault injection: enabled 2025/06/25 09:26:21 leak checking: enabled 2025/06/25 09:26:21 net packet injection: enabled 2025/06/25 09:26:21 net device setup: enabled 2025/06/25 09:26:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/25 09:26:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/25 09:26:21 USB emulation: enabled 2025/06/25 09:26:21 hci packet injection: enabled 2025/06/25 09:26:21 wifi device emulation: enabled 2025/06/25 09:26:21 802.15.4 emulation: enabled 2025/06/25 09:26:21 fetching corpus: 0, signal 0/0 (executing program) 2025/06/25 09:26:22 starting 8 fuzzer processes 09:26:22 executing program 1: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x1800) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x3c, 0x4) r1 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffff9c}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008000) syz_io_uring_setup(0x5626, &(0x7f0000000280)={0x0, 0xf8a7, 0x4, 0x3, 0x352}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_setup(0x2eeb, &(0x7f0000000380)={0x0, 0x816c, 0x1, 0x2, 0x246}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000004c0)) move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000500)=[&(0x7f0000ff5000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil], &(0x7f0000000540)=[0x80000000, 0x7, 0x6, 0xffff64ca, 0x80000000], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000005c0)={0x1, "fece53"}, 0x6) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000600)=0x63, 0x2) connect$bt_l2cap(r0, &(0x7f0000000640)={0x1f, 0x2, @none, 0x6, 0x2}, 0xe) r5 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x80000, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r6 = accept4$bt_l2cap(r1, &(0x7f0000000740)={0x1f, 0x0, @fixed}, &(0x7f0000000780)=0xe, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000007c0)=0x6, 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000800), 0x105080, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x602, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4081) getsockname(0xffffffffffffffff, &(0x7f0000000940)=@rc={0x1f, @fixed}, &(0x7f00000009c0)=0x80) 09:26:22 executing program 0: pselect6(0x40, &(0x7f0000000000)={0xde4, 0xffffffff, 0x8001, 0x2, 0x9, 0x8f, 0x0, 0x2}, &(0x7f0000000040)={0x4, 0xffffffff, 0x13b6, 0x7c, 0x400, 0x1, 0x3, 0x9}, &(0x7f0000000080)={0xafb7, 0x3, 0x1, 0x2, 0x6, 0x200, 0x1, 0x6}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0xfffffffffffffffb]}, 0x8}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, &(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)={[0x1]}, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') sysinfo(&(0x7f0000000300)=""/144) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2081, 0x190, 0x7}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r3 = accept4$bt_l2cap(r2, &(0x7f0000000480)={0x1f, 0x0, @fixed}, &(0x7f00000004c0)=0xe, 0x80800) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000500)=0x6, &(0x7f0000000540)=0x4) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000580)=0x2, 0x4) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c884) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/ipc\x00') pidfd_open(0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x10) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000800)=0x5, 0x2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x7c, r4, 0x512, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3a0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x4c}}, 0x8000) 09:26:22 executing program 2: io_uring_setup(0x3546, &(0x7f0000000000)={0x0, 0x54ec, 0x0, 0x2, 0x29c}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) timer_create(0x7, &(0x7f0000000780)={0x0, 0x6, 0x0, @thr={&(0x7f0000000700)="b0a98b1a17a6d0d2a0346ed7c4b37bf17df891bf64e673b5bb6fe55e6c2af0fdef504d349a79ca0e250bc1770e", &(0x7f0000000740)="77334009bf6bde4f4378d12ba709c76a9c7f3f5e89b2bbc8678c9079131ed9929fc1a9e64584a62bc6745c"}}, &(0x7f00000007c0)=0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000800)=0x7f, &(0x7f0000000840)=0x2) r3 = openat(0xffffffffffffffff, &(0x7f0000000880)='./file0\x00', 0x18b040, 0x5) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x10000000) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x200200, 0x0) timer_create(0x5, &(0x7f0000000a00)={0x0, 0x18, 0x4, @thr={&(0x7f0000000900)="a3f812822ba1713f19ea", &(0x7f0000000940)="d895e25b61b31df35d1dc340b101c822c32134fb4a70f2665b554af2dc35f59d9c010b073e053bc3ce763555a7e5250bb860aac6f3a301feecc23d53cce083e57c74b9fc084ec2aed4688fa057efb58d4843a59494ba1f9654b5fe9bd35938c58c545679a91dbdb97853b94636938bf9239a1d79ca112359d8d9841f21940eb098292558ef392e856ab682089bd83f073ae41d55fcfcf37949bc09291d750a0d33d561fa9a80dea89c"}}, &(0x7f0000000a40)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x10000000) timer_gettime(r2, &(0x7f0000000c00)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000c40)=0x1, 0x4) syz_io_uring_setup(0x3c1d, &(0x7f0000000c80)={0x0, 0x6fd0, 0x20, 0x1, 0x389, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000d00), &(0x7f0000000d40)) read$hiddev(r3, &(0x7f0000000d80)=""/163, 0xa3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20600001}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x6c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44041}, 0x41) 09:26:22 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x800, 0x84, 0x8}, 0x18) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), 0xfffffffffffffffe) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x5, &(0x7f00000004c0)=""/47, 0x2f}, 0x40000042) set_thread_area(&(0x7f0000000540)={0x55f, 0x0, 0x1000, 0x0, 0x3, 0x1, 0x1, 0x1}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x1d754000) lsetxattr$security_evm(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), &(0x7f0000000600)=@md5={0x1, "f425646dd5092dfb4cbeb64357a81b34"}, 0x11, 0x2) sysinfo(&(0x7f0000000640)=""/98) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x5d}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x14) syz_emit_vhci(&(0x7f0000000800)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x1, 0x9, "e7f288", 0xeee, 0x8, "93183205af7f63515896b910da02046a9149b730b58b479eafde67fe7cfc726d3e649576d74f6c59742f31492a770c50d99ac6f329af5e66b81c6d682e00583e524c451ffdbcef3c89356c2b84b880bad332c5745b7681e29fad66f0eb5ae83939e9b2444d7ee5663143c3c40e74df7c5b35e14fd22341b225e45cd838961ee7b7eefe08bb4a1b73f70ec138b56f193b7e2e5be2e62db3d02c91cbb8edecf7df1e4e23887659a3831d0eacaec82c20376129b33cbf6875b0ecad437e940ead4ccfcc637ae9d6a9358b009cf33f48c23f21c34e20a694e3bc0a31b3472884e00ebfa271725119c364ada6ee3a245a95c5"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80, 0xb9, "92826e", 0x1, 0x78, "43b1084726c3cec1d0c3112b37ac04d73f9aa3789a486d00e1d111ab95e115d783e0b74e90b11774bf4f8afe881fe4bcb6f11ab550bfc5e6b2542b6ff517624d0324b28b9008a3da2d4abf4eccaf8ca3c27a8d854c48b57857ed6d752247ef5127f90a0fb4fb3f1f688ab995ef7887ff6245c65c26507a98de571a56756972c84f43d29a633ea0eb046510e17a718770e874d4222094fba39c486753b843e54da34d64112c7c4b22bbf50b7a09950551efb1096f8d9e3caea812b055947359063eb36cda46eff5df0e397b4f45488b40aeea65de851e745d8786ea7cd55e63cfde7ee9ecc227df507ff8d9e36c556bc5"}]}}}, 0x200) r3 = openat(r1, &(0x7f0000000a00)='./file0\x00', 0xb0081, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x50, r4, 0xe0f5531650006f58, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x8840) pipe2$9p(&(0x7f0000000bc0), 0x4000) r5 = accept4$bt_l2cap(r3, &(0x7f0000000c00)={0x1f, 0x0, @none}, &(0x7f0000000c40)=0xe, 0x80000) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000c80)=0x8, 0x1) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000001f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000d00)={0x118c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x52}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10dc, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xaf, 0x2, "0a242350938c3e604e945903ae44b64b172636858833f6d5ddc79a17043801581ea9b9bc08cde5083c0c0b4167da20dde1d865e70f0a68bc58493bd9e10e80098994b3546c87c88f80a8899b3c1aa0fb480dab13c5d6caf8515bf270a68acc916d4d3054a8582b88f8f727c1f1cd65254e7ac4e3221e1c0e0db4f053ce8e45b81149608b8e1c00dbd3bce56ffa0152a001c8780355559c8fc237e0644ae6824696de605f5014e44b0920f5"}}, {0x1c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x15, 0x2, "9eaf1faea84150bce168ee591b0511d2d5"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "1bc1763fcda71ab82b2208c4b42edca7f0856d79d2dd6a92d0bad2343b55d15d118e86c4b6b022b6d1d6e0a1a7e2c2cacebef7f1ba4708e14d5198d1e43f105ce2b9d8866f460c8897b86ae499abf2604e26d9b662e42e9be34b695121a055b7a4dc9e0e9e98cb4149344d85984bef5240ff62004cc26f95f5e491b7ac0ab860f76dccb17404d46561acfbd6134fbd7985796200326421c30a5c0667c33732b6e635296607de931cb17b8908abbaba4bcf2fcb94185dfac5b2019c40a7c4af7d82135e06b43dd0a5272dc5116dfb3908c9fc77d0e2d96529db78f0b06faec132960fbb7ab6594bb1e8740c56ce11a9812c5d54aeac531b8186269a25cf445e21dfef4ca6b15cc105da302f810bcad5ff13322205d5d4baabf2431eb059a9956ded0f20e516929646a5da4dd1d31a49a45963e3bd361c108292639afac0954396998b19516f692ff3a89a0b82588d51c21e264660389cb899a2e4e6995dfcd51ba7767d1d439c9b92f7ae14f6d33bdf4ada2af3632cef5abfa87955bf60ee458b299ebd066ce5a96d7583e38424bb875f0c0191f001079112c5b04054d9c29473c59c9f9985bb971898e824a07ec86f340e05dfe32310ac7925ee88944a1295da28b107317b276762810a4ad71988d330870ca7125b21c59834a8d54eada916d904110a23e4a7af2f212cd4e22015398dc3035ceccf5fb1763ae16b3318c0df0fa77bd81992cf71388f93da8b799dd3a3d9f138ac323f79c2e0aded14f105cc28a014fa9a082b2a563bb47bfe14a49018b483ee804566a77b92affb431e761ff004e5bfdcced5cc2f303ba4ebb7a2fd32efb4902a2344058453932eb4bd062f6d83946614085254e4bcaaa89ac73aa3c6a015f04ffbad2e6b4dc9e3504ba499f0d860efaa134ea62c96891afca122b91349208f784d75c6f7be0d54c8c435186a18e58701360d9028cb3094daffcc22e3999e53027eb4567b6302394541d47f1411ad137e7bee52f5ad727420e03965d6da8ab153f4ebbc5c4613c1f6e1d1e9ca9d54bd1c162f872645307ee89e6a229b5367123c88056bba8c2894971953cb1fc3ed6964ca637b63f2c3ea16edd20bae3e730ff0768c9424392cd38150291b56b738f8ede902e4a0efa5bf5a102a0e952418e4dc736d5505cf2b65ebacd5d6262770fda4da901890ef9e05ca55c8f74b4e59946c2fea575256ca61733015c3dd223c5b4187e54adfb58215397f9306429fa6993ce8c2fe4627da5a02445da890d5c0fb06e291f4d4469b9bb76a9549f254bc1e26c623d1388f3083da92e5b9539e6371fee17c686f91ca8fac5515f736905f45c09defa7320db1caf2d6d5e7ca5a17bb969e19464e2978f90c81201e5a3f04103f6dd6aefa6f0232d40f26c58e7497901e399d5831df2a97e6b26931f6cc2f44bf23a7414cd6858557ab33dee738f30098f81f1d04a2b0c9125f8888da24a2d08c7476dca0517a58342983ad336045a48b17deee162e8403ed0a2359a3635f4a530faf9b1849c5f46d03260412a62e3bc984239d7632a40d8600e6639929845ccd038b0752715ad21e8a35d79ec62672263ba123e7e53056da1104b99cce5be88d8100a72a8da297063f4bbba6579940a16712193afba3d96ea6d4765c14c441406d890c868341deb92d89864dd81398edfc92520174331c3a7c8f17a9082f8e9443e601bc02c07e4db285827bcbf6734e13f2d363ddb54c922c7a9b88df4a66b744cc8593180dc944b11a11f7ba2fae238e1402448389ffd4f7c83a0eae0310de93ff94163f33f35b1ccbd34adb54307acdb4d00d7d6a608523cd1677858bf57e4c4f9a8107dbf60ae7df9d9a8738214c7ac66c8a13c59a386e8e5987be11999876d43b3529f07ae5bff4eef7f7207b618296d5e048c8ad93d726c15879b96bc4cef0de2a9fc63b27dacc05278693e926307feefa165b70c0f096e41512d517e9b3d0c55c13b9b2a6032d5a70d4c649d28f65a196d04dfda7304de1e0be3c75b40fbd17e865608e86447dfa9dcd12681cd18519fc25890b348124d5d4a66c7fc8d853e4a8ccd5a74c50406d39e5637015798dc6b63e17f9fee1b8c8212265325b101139fb3e37b891efd40b7149db50494839a1cb2eb3c433d9fb0d66b4d95574465f4d9275076491b9b01bd8711f02f15afc6f26e0cfe04971140264a92114ce6a74e7ddbe475c375a0b97708e41229397929dc4fa00e8772b0639dc9e98778f2228c1db8d459aa95f331ccd1f4f2fd236ce061a60c1d72d4ef0eaba263cdf9f09c4e3ab66ce2059c6b50efa4b7a5164e3ecf480da68d99bb062a62aca571f5e9d0c2040746f8f99439eca445ab6602fc7a2e6f4e017a6bdca5dd1bdcf1f1a58812b7eeb5bc4ba01cd3560880ffa05fad8ad33498d73e78f6ca816242229df6ca7d9d88b56f7a7966958c39bfb1993bb69fb3ac9d923b0b95009dc3b95cdf0f11621b85459d61d384a9d5f1fba62079a6e294b349e17a65e6565311f358a1cbdd255c0240d0d6df1bd6049e57a4cc651079961c1c69142e121d159230800b445d85cb872e65f1d92cef390cd5b1d6f27c03dd8c4930bd989b1f59377bbf5f866601d26b6d2c3459a923dfef40b4dbb06a3256d45658c1a91729941cad1302ec3d2cbe5464e531df3f8223bc60f57b6ad53dad26116c6534326dd2d948640f99eb37e6efc5cd173c07b4dfc2e62eba39a25099633060fa7fd279c268955f34fd70302d710e55bfc65b1b855c9de4b819def560bc7b3095792278f8dd9417abed4eab6d8d310c89ac15b72cf9db70b4f10ec96d3efe6c7b7982d4e6ed5711202468b2e584d838bc9b3e7ab7ab102de9f8057b8b888a2567d4e862b7d1d5c301716578512b1952d9eeadb6003fe329ea7ed43ec51e5ad1941ee169334ef52fa159ea5eb422e966ede92218e0b3f8779152ed39e12f789e05efe4b9715b2328e787f39f93816fc4c9cc95dbd67dc530b3e419f01e8556996f71e959fa3b2cd60c20266f0b8e24cc91ed3418e72b3ead32188bf41f2c6152e9c8e07fb86e4e7242521213bb891a873fdad4fbe4dbbd5a8d49131514368fc45489ec7b4299bc6da7ac5c3e6e52379a0b90731446a46d985c686a50a1d38d2bc894a569c737b05beea8b61d3027295d3631e483589d85493dfa2c1df37b23be9644b24029d99f4d76aec1c0cd7475e7660fb36f892c88cd242cae87222396529499311b8694ad11c3721abd5a4144c5d574b83e6b38c18612af0c48bcf9f247cbc0b92f2852627120b4ec61c78a8dd55afab47d92e2f09e5b57e99dfb51b5146272f9cfecaa00c776a2c4f8bf36ccea718a89baab6d0153929e7a8842dd72ea2aa022f8fdc9c676fc911975f26f562d788b57fde851dff93b2c99bc7b17e748faa40a49bb27ab39e18f9e478b3d82532c16b8297c8e101574ce55ef9004c9c82fcafa3e23608b1ce0e35ae5707152c41dfdadbc5a934e982e01deb302b4ab093312ba0720e3b76074898518a506c8befaf826c926282d3bc6b3e6534341938e81789fb75c910194d3192212fdb9484afaadf982131008597718ff6b340dd57067488975d81e8bcdca946cdc0830794618ffa4c6682479552b92678b79d571ea4f07fda11c0f407d63615a69c5fe068bf3e187d62903d327722f7e5990b5e6f95edddf9b5af9f420c2b41adf12d38a71bfa0fda16afcc7eacf8c2e5071396c24bf59ed319c712002c50806cbb35c304cc8d8663338e0f3b0e5c0dfee945d40ea4c69e48b3ced717143258b5ddf648ec5221cccfb0da39f3c9cceb98f7703db884310c029749fb6f7ad785de9710fc98394b5a6c0abf8914f010ae3796ac71ac2360757a7f787695ab84460da3127814cf6773ba1226f80e979008da4351669b287db77df3764aa7f8dd8d791ec5dd8c3695674848319fb8eede62e36497d8d9cc4d7194c1bcf8daff5d3575dbd7ba7d100da5cd01a35b6d82624e50eaf855c41eabe697bfe2870680de1bfa7a29322b81c238b464ea1487e679f7f4de4f9bc9cc0a621a1bfc85149c643f04bce16ad5d09024d58c7e3b7284d613b4cf2a9262f0af0cc8446081e9b5cda398891b5ff31a96798487a5df742b1c150c3c5a5a40c0d71f79e859b621465d232976912229be500d7876e3d7bccd92cb376bf9488f1481beca9950e7b15ef51c768b633ee4d12cccb6b9675e359861800a0c6e3e9e433b7be949a726f9de01a80e5d8c0f4834d8df53009c770a4875200ebf228707bf0f0c0e6c8cd997279074818e1c77995c94004e45d578a1f3de3b87796a615f88e639497e51e36ec6238cbaeb7ac419b9a729373ef6a67abb1d4965a126874daf3cad18dc3c1962b61ab3d9a157844473a01878f942b54371be444f2f94621b430abdae7e740362b9799a26cf73d34a73aca3834c1b811d862b5af2459a38704a59288257743a181bcaa3d437d7bff3f1ebfb724a8cf6d4a2dc455b35e13a04e39a718b447badb6aa40c3b26b1cc21a7ed855820a258c2e433e43bd35d501b8179c4ac3271625e3e80e3fbd65a4a1638a235cd47a66ce94a920db248a21268ada7000e57ecc688b8619ce3b40d0720a2bc99fae7859e23455ec009253329bb40ed2209322d7b48b3ca02bfe04080ed9298bdfbce9a67fa36413296cf2cbd5fbca699697984144f37978bdd29776029babe25243080866d37f755a23675c26e77a2e22a9afb48c51ff022bec781a3a57b523f6c03ed44bb1f2bef4f72b07f2adc22a1d0bef44e9ae20fe3862140c2098b1aa5306e01e2df2401c5dffbea74da098e541654044f6807bbba136c9ff18497ef0262925b2e2bc7a6a1b8ecc8c9cdd9fd882ba55d19276b2bed6c084680dbbc61c4ed6755903942fa235a20106e68f25e0f3707e8f3a28928343ff9e9fabd1483c71d6416388aabafbc20fe8f806911396eca035fb4f84614db86440e915412154f5878b5e4093a89b260b959a1033e24b4387082e7a289279157624765b5a041c4a9776f994811e08d896f84d97235ae756780cd058de99808ab5cf31b0a628962050fff676dd55f983c941d51445d626cc9ceb2f0145d52883b8b077a55ac05982224526bed4c72010ea0eff22f967c132634c186c724267408314a2a04f41c27963e167e6dc8c5c86b2cc766ca87feaf4d258c38cf416cdd6487982c10647c11c7f5be6bfb19dc421425d514dc7852b0802663f1498d72e44bce551d10f7eb8507cfd0b150435f60d0554e68450c683cbcd4b79bbbc0dc9c90415d5515a3cc8643f8bffacc054ed75889ad70ff52b70bec94b7c7ba4755dd0f9e7a8ecf87d0e09362d2ccff260a7a8ee457aeef9db92e03a033914ebd46c4d922858b58f0c37cd4dad945cbe67d5364b4c252f73f64fe072ae9cdd7c905ec53d3b99b12246b7bcd0dfdb6502fe74a414d6f6bb8b17297c9e1c6782fcf72434c399b3e0400f76d545f5cd635731d5bad7ea4b2bb32de1eda4fafab2fb75f21f15f31dd94c85467d1b0accbcd0856bd3324ee99d6ab8d85a11a4265b5f55492f1d28ce11178bd12efddabe970c6970f13ea49f6a3b356a6acb34e838bfb4c9b09a5d97a903ea7cec47d7b2f00757cc266fc4d7fe943a9bc43fc0e6b936026d582212757f35fb1989abeb786bfcd96ac887ac6275e93f7d2da4848280277cf5243f88b2208de5519ae47b2d39f60e90ec9c8683868cd0ffc95e08bfa281b036682d575335b4152a69559307ce438d090f4f990fe8da6fffa84bdde7bdef41aad4d5eaf7f677b0682522d63746"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xd8fb}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x60, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe4}}, {0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4b, 0x1, "4cde4e46a630d07878639e8f7bd1034d8917638b403333dbbf8aec62ab55510f20a363ff90c601d82859081b03b058d81370f33d13e83e586e192cdc046c34ed29a1b54afa2a95"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x44}]}, 0x118c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r3) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40021}, 0xc040) [ 126.292902] audit: type=1400 audit(1750843582.977:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:26:23 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r2) keyctl$unlink(0x9, r2, r0) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x56, 0x62, 0x33, 0x37, 0x65, 0x38, 0x34, 0x62, 0x36, 0x34, 0x36, 0x33, 0x64, 0x65, 0x38]}, &(0x7f0000000280)={0x0, "9e04dd5054984710e5b7353dc335d5e760a1ea97a773a927715e2757f4d5b5d6d5a03ce690a6b3865f3cad1a3603bd7638fbff3cef974baf1dc8c4bedc77557e", 0x5}, 0x48, r2) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "6dd6dab75a0e6e2702dc6a5d0cd80dadac817175998314c6e950b528571f40c47344413b321ce9c04b9bb29ed6ce6ea6b85454c4d21f4cf0b2c2d1a205f451a5", 0x12}, 0x48, r5) keyctl$clear(0x7, r1) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r1) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$get_persistent(0x16, 0x0, r6) keyctl$clear(0x7, r3) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$link(0x8, r7, r1) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000600)=0x2c, 0x4) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "830abc0cb2395c41c352f4b4d7333c69e845f26af63b3ac80bbb8f5648cd85d1d9b008b569bdc1ae030d86658e6dfa3eb9252dd3d70524dbc8cb9c9b8f05ab03", 0x2d}, 0x48, r4) keyctl$get_persistent(0x16, 0xffffffffffffffff, r8) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r5) 09:26:23 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x80000001, &(0x7f0000000040)={[0x80]}, 0x8) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000001c0)={0x10000012}) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@sco={0x1f, @none}, &(0x7f0000000280)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x4000010, 0xffffffffffffffff, 0x10000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r3, 0x0, &(0x7f0000000340)="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", 0xfc, 0x21}, 0x4) recvmsg(r3, &(0x7f0000000740)={&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f00000005c0)=""/142, 0x8e}], 0x2, &(0x7f00000006c0)=""/84, 0x54}, 0x10102) mount$9p_fd(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x2000000, &(0x7f0000000800)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0x3}}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_any}, {@access_any}, {@version_u}, {@noextend}], [{@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@obj_type={'obj_type', 0x3d, '{}'}}, {@smackfsdef={'smackfsdef', 0x3d, ','}}]}}) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x30, 0xffffffffffffffff, 0x2) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000940)) r7 = pidfd_getfd(r5, r3, 0x0) syz_io_uring_setup(0x3a4d, &(0x7f0000000980)={0x0, 0x7cf2, 0x2, 0x1, 0x1aa, 0x0, r7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) 09:26:23 executing program 6: getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/72, &(0x7f0000000080)=0x48) r0 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x80500, 0x10, 0x28}, 0x18) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1884}, 0x4) r2 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x101802, 0x10d}, 0x18) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000c, 0x80010, r2, 0x5) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) r4 = pidfd_getfd(r0, r2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000004c0)=0x7fffffff, &(0x7f0000000500)=0x4) syz_io_uring_setup(0x6997, &(0x7f0000000540)={0x0, 0x41bf, 0x2, 0x1, 0x189, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) r6 = socket(0xb, 0x6, 0x5) syz_io_uring_submit(r5, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x3, 0x4007, @fd=r6, 0x8, &(0x7f0000000640)="24fd3d65621b4a57fae9bee4ff4dd71437cd4dbcfcc067221263211347704c5810fe6adb8bf24da64fa358a34c54ac1962f40c2796e1db5e24e6928a9f3896c65409219ec37a8e5911853cd0c75d648a09a03c8974f160992b92c6dbb3ac8cfb9a0374d4e94463", 0x67, 0x19, 0x1}, 0x8) connect$bt_sco(r6, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r7 = epoll_create(0x37c) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r4) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000740)=0x7f, 0x1) r8 = clone3(&(0x7f00000009c0)={0x10110000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x1c}, &(0x7f0000000840)=""/41, 0x29, &(0x7f0000000880)=""/196, &(0x7f0000000980)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r0, &(0x7f0000000a40)={r7, r7, 0x807}) 09:26:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2c10202c}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x58, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x3b}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "60251ce93976e41e15d1fc51dbaed882"}]}, 0x34}}, 0xc880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r2 = socket(0x3e, 0x3, 0x101) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1000}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004834}, 0x4040) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001840)={0x10000000}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x12, r1, 0x3648a000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001940)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/74, 0x4a, 0x1, &(0x7f0000001900)=""/9, 0x9}, &(0x7f0000001980)=0x40) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x40) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x104, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xe0, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @initial, @device_a, @broadcast, {0x8, 0xf01}}, @random="02f388bbae4fd54bf79216eb7eda2360d0b55e1771b5305b0e809a8e66592213ce7cf30808516547c9dd0e0a7ad6cb24b40f22a663e96a62bb13670bdadea3eea451c2cf97076c1667666a3423fe58886b18dc7aa994a2faf8b7b7bdf0a10263184a0dd07754457da88d430c28e84ec03f674a1ed10628aa92ad843dd68a9ad46e9bd225ac699c7136cf8ed24ea5964dc60aec85008db548626221466092ba33e6d0e591d854b77a21db024796530d77094c7b1ddf72034d816fbd2263f19065603fe1b8"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}]}, 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x40051) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2763b2a0a426b1c078aebade1c134d18"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e8480337b93c95efc9e182bc0d2a543b"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "4add1053d007d7fef11c7d23a9f1fd49"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001e40)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x90, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x17, 0x34, @random="2aecaf227a93a09375cc32a48a8343b661523b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_SSID={0xf, 0x34, @random="061f574e06811a17ddde6b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1490}, @NL80211_ATTR_IE={0x29, 0x2a, [@ht={0x2d, 0x1a, {0x300, 0x1, 0x2, 0x0, {0x15, 0x1df0, 0x0, 0x7f, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x7ff, 0x3}}, @chsw_timing={0x68, 0x4, {0x0, 0xb7}}, @dsss={0x3, 0x1, 0x64}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0xfffffffffffffffc, 0x4000000) syz_io_uring_setup(0x1aaf, &(0x7f0000002000)={0x0, 0x386a, 0x8, 0x3, 0x270}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000002080), &(0x7f00000020c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000002100), 0x1) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000008}, 0x24000013) [ 127.732250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.736093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.737408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.739008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.739997] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.742881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.756038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.759005] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.761825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.762683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.766449] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.767252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.774788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.802706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.825592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.838056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.847074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.848072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.851532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.857579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.859627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.867691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.869618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.872571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.876032] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.883496] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.884820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.887087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.905213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.907129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.911710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.912796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.916924] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.920737] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.921311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.923205] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 127.925595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.929678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.935646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.937722] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 129.844496] Bluetooth: hci0: command tx timeout [ 129.844548] Bluetooth: hci1: command tx timeout [ 129.906738] Bluetooth: hci2: command tx timeout [ 129.971118] Bluetooth: hci5: command tx timeout [ 129.971171] Bluetooth: hci3: command tx timeout [ 129.972043] Bluetooth: hci4: command tx timeout [ 130.034499] Bluetooth: hci7: command tx timeout [ 130.035212] Bluetooth: hci6: command tx timeout [ 131.890487] Bluetooth: hci1: command tx timeout [ 131.891051] Bluetooth: hci0: command tx timeout [ 131.954491] Bluetooth: hci2: command tx timeout [ 132.018921] Bluetooth: hci4: command tx timeout [ 132.020442] Bluetooth: hci3: command tx timeout [ 132.020471] Bluetooth: hci5: command tx timeout [ 132.083101] Bluetooth: hci7: command tx timeout [ 132.083802] Bluetooth: hci6: command tx timeout [ 133.939666] Bluetooth: hci0: command tx timeout [ 133.939694] Bluetooth: hci1: command tx timeout [ 134.003585] Bluetooth: hci2: command tx timeout [ 134.066530] Bluetooth: hci5: command tx timeout [ 134.069457] Bluetooth: hci4: command tx timeout [ 134.069937] Bluetooth: hci3: command tx timeout [ 134.130657] Bluetooth: hci6: command tx timeout [ 134.130684] Bluetooth: hci7: command tx timeout [ 135.987463] Bluetooth: hci1: command tx timeout [ 135.989083] Bluetooth: hci0: command tx timeout [ 136.050461] Bluetooth: hci2: command tx timeout [ 136.115856] Bluetooth: hci3: command tx timeout [ 136.116232] Bluetooth: hci4: command tx timeout [ 136.117235] Bluetooth: hci5: command tx timeout [ 136.178543] Bluetooth: hci7: command tx timeout [ 136.178886] Bluetooth: hci6: command tx timeout [ 190.720436] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.723263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.724673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.730889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.733129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.853849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.856730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.858793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.864131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.866679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.939549] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.941336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.948526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.956529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.958884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.961903] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.969292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.974140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.979693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.981028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.983582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.985261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.996625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.010105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.016148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 191.020927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.022847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 191.024240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.024504] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.041765] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.041888] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 191.046713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.066730] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.069742] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.080752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.088629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 191.094782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.097907] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.104046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 191.112076] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.754839] Bluetooth: hci0: command tx timeout [ 192.947417] Bluetooth: hci1: command tx timeout [ 193.074527] Bluetooth: hci5: command tx timeout [ 193.075458] Bluetooth: hci2: command tx timeout [ 193.138555] Bluetooth: hci4: command tx timeout [ 193.202537] Bluetooth: hci6: command tx timeout [ 193.203860] Bluetooth: hci3: command tx timeout [ 193.204585] Bluetooth: hci7: command tx timeout [ 194.802634] Bluetooth: hci0: command tx timeout [ 194.997675] Bluetooth: hci1: command tx timeout [ 195.125411] Bluetooth: hci2: command tx timeout [ 195.125970] Bluetooth: hci5: command tx timeout [ 195.188487] Bluetooth: hci4: command tx timeout [ 195.250677] Bluetooth: hci3: command tx timeout [ 195.250891] Bluetooth: hci7: command tx timeout [ 195.251239] Bluetooth: hci6: command tx timeout [ 196.851396] Bluetooth: hci0: command tx timeout [ 197.042772] Bluetooth: hci1: command tx timeout [ 197.170663] Bluetooth: hci5: command tx timeout [ 197.170928] Bluetooth: hci2: command tx timeout [ 197.236460] Bluetooth: hci4: command tx timeout [ 197.300762] Bluetooth: hci6: command tx timeout [ 197.301422] Bluetooth: hci7: command tx timeout [ 197.302559] Bluetooth: hci3: command tx timeout [ 198.898874] Bluetooth: hci0: command tx timeout [ 199.090747] Bluetooth: hci1: command tx timeout [ 199.218532] Bluetooth: hci5: command tx timeout [ 199.220188] Bluetooth: hci2: command tx timeout [ 199.282729] Bluetooth: hci4: command tx timeout [ 199.346445] Bluetooth: hci3: command tx timeout [ 199.346932] Bluetooth: hci7: command tx timeout [ 199.347444] Bluetooth: hci6: command tx timeout [ 253.449220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.455611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.459295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.467982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.477006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 253.566678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.571941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.573805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.583773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.594010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.827076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.836544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.838929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.844625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.847385] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.857212] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.859968] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.865692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.868513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.869025] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.872895] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.880878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.886334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.886341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.889898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.906541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.906629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.924217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.936072] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.941948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.944194] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.949158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.951224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.953368] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.960706] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.962808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.980175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.983436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.986981] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.992569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.539944] Bluetooth: hci0: command tx timeout [ 255.667817] Bluetooth: hci1: command tx timeout [ 255.923168] Bluetooth: hci3: command tx timeout [ 255.987916] Bluetooth: hci2: command tx timeout [ 256.051832] Bluetooth: hci6: command tx timeout [ 256.053824] Bluetooth: hci7: command tx timeout [ 256.055251] Bluetooth: hci5: command tx timeout [ 256.114624] Bluetooth: hci4: command tx timeout [ 257.586507] Bluetooth: hci0: command tx timeout [ 257.715531] Bluetooth: hci1: command tx timeout [ 257.971805] Bluetooth: hci3: command tx timeout [ 258.035720] Bluetooth: hci2: command tx timeout [ 258.098868] Bluetooth: hci6: command tx timeout [ 258.100448] Bluetooth: hci5: command tx timeout [ 258.101753] Bluetooth: hci7: command tx timeout [ 258.165306] Bluetooth: hci4: command tx timeout [ 259.634490] Bluetooth: hci0: command tx timeout [ 259.763735] Bluetooth: hci1: command tx timeout [ 260.018557] Bluetooth: hci3: command tx timeout [ 260.083446] Bluetooth: hci2: command tx timeout [ 260.147636] Bluetooth: hci7: command tx timeout [ 260.148163] Bluetooth: hci6: command tx timeout [ 260.148693] Bluetooth: hci5: command tx timeout [ 260.212136] Bluetooth: hci4: command tx timeout [ 261.683457] Bluetooth: hci0: command tx timeout [ 261.810498] Bluetooth: hci1: command tx timeout [ 262.069426] Bluetooth: hci3: command tx timeout [ 262.130456] Bluetooth: hci2: command tx timeout [ 262.194517] Bluetooth: hci7: command tx timeout [ 262.194854] Bluetooth: hci6: command tx timeout [ 262.195030] Bluetooth: hci5: command tx timeout [ 262.258814] Bluetooth: hci4: command tx timeout [ 315.914859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.917020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.918677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.933796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.938182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.963520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.969984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.972799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.984143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.989523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.166087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.171899] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.179705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.189249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.196721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.238605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.240121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.243295] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.249057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.253435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 316.318188] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.322728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.324321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.328074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.329911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.331918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.343729] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.362824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.398650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.413153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 316.415676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.421924] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 316.434728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 316.477799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 316.509749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.680784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.683806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.687574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.724119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.731259] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.002505] Bluetooth: hci1: command tx timeout [ 318.003329] Bluetooth: hci0: command tx timeout [ 318.258497] Bluetooth: hci2: command tx timeout [ 318.322681] Bluetooth: hci3: command tx timeout [ 318.386692] Bluetooth: hci4: command tx timeout [ 318.770469] Bluetooth: hci7: command tx timeout [ 318.771156] Bluetooth: hci5: command tx timeout [ 318.898607] Bluetooth: hci6: command tx timeout [ 320.050499] Bluetooth: hci1: command tx timeout [ 320.051055] Bluetooth: hci0: command tx timeout [ 320.306805] Bluetooth: hci2: command tx timeout [ 320.370652] Bluetooth: hci3: command tx timeout [ 320.434847] Bluetooth: hci4: command tx timeout [ 320.818461] Bluetooth: hci5: command tx timeout [ 320.818982] Bluetooth: hci7: command tx timeout [ 320.946432] Bluetooth: hci6: command tx timeout [ 322.099136] Bluetooth: hci0: command tx timeout [ 322.101489] Bluetooth: hci1: command tx timeout [ 322.355383] Bluetooth: hci2: command tx timeout [ 322.418795] Bluetooth: hci3: command tx timeout [ 322.482441] Bluetooth: hci4: command tx timeout [ 322.866464] Bluetooth: hci7: command tx timeout [ 322.867005] Bluetooth: hci5: command tx timeout [ 322.994470] Bluetooth: hci6: command tx timeout [ 324.147421] Bluetooth: hci0: command tx timeout [ 324.147954] Bluetooth: hci1: command tx timeout [ 324.402437] Bluetooth: hci2: command tx timeout [ 324.466854] Bluetooth: hci3: command tx timeout [ 324.530439] Bluetooth: hci4: command tx timeout [ 324.914881] Bluetooth: hci7: command tx timeout [ 324.915570] Bluetooth: hci5: command tx timeout [ 325.042538] Bluetooth: hci6: command tx timeout [ 379.018705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.020325] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.021771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.028312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.030654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.083433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.085606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.091859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.093317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.095178] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.096633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.100604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.104657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.107144] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.108978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 379.153042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.160853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.164962] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.170999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.179008] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.183787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.184611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.207869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 379.227687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.236698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 379.250002] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.252228] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.258107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.262535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.265525] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.269588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.274685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.275781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 379.285978] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 379.297609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.302516] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 379.341885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.342918] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.362538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.367191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 381.042458] Bluetooth: hci0: command tx timeout [ 381.170749] Bluetooth: hci1: command tx timeout [ 381.235622] Bluetooth: hci2: command tx timeout [ 381.298459] Bluetooth: hci3: command tx timeout [ 381.369024] Bluetooth: hci4: command tx timeout [ 381.426560] Bluetooth: hci5: command tx timeout [ 381.426708] Bluetooth: hci6: command tx timeout [ 381.427171] Bluetooth: hci7: command tx timeout [ 383.090707] Bluetooth: hci0: command tx timeout [ 383.218496] Bluetooth: hci1: command tx timeout [ 383.282506] Bluetooth: hci2: command tx timeout [ 383.347432] Bluetooth: hci3: command tx timeout [ 383.410525] Bluetooth: hci4: command tx timeout [ 383.474659] Bluetooth: hci7: command tx timeout [ 383.475617] Bluetooth: hci6: command tx timeout [ 383.476074] Bluetooth: hci5: command tx timeout [ 385.139403] Bluetooth: hci0: command tx timeout [ 385.266430] Bluetooth: hci1: command tx timeout [ 385.330860] Bluetooth: hci2: command tx timeout [ 385.394733] Bluetooth: hci3: command tx timeout [ 385.458423] Bluetooth: hci4: command tx timeout [ 385.523525] Bluetooth: hci6: command tx timeout [ 385.524051] Bluetooth: hci5: command tx timeout [ 385.524729] Bluetooth: hci7: command tx timeout [ 387.186723] Bluetooth: hci0: command tx timeout [ 387.315623] Bluetooth: hci1: command tx timeout [ 387.378750] Bluetooth: hci2: command tx timeout [ 387.442435] Bluetooth: hci3: command tx timeout [ 387.506469] Bluetooth: hci4: command tx timeout [ 387.570733] Bluetooth: hci7: command tx timeout [ 387.571271] Bluetooth: hci5: command tx timeout [ 387.571585] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 09:31:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88806ce08a78 RCX=ffff88806ce08b18 RDX=1ffff1100d9c115a RSI=ffffffff85c1cc40 RDI=ffffffff81604d6e RBP=ffff88806ce08ad0 RSP=ffff88806ce08a60 R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b53d R11=00000000000043f8 R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff888031615280 R15=ffff8880169c96f0 RIP=ffffffff81353a2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5630000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c3f3d31f0 CR3=00000000247fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000c576317a RBX=00000000f3456e44 RCX=00000000700c145d RDX=0000000000000010 RSI=ffff88800a5e782c RDI=0000000000000011 RBP=0000000000000001 RSP=ffff88800a5e7788 R8 =0000000069ba85db R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000092800 R14=ffff88800a5e77f0 R15=0000000000000010 RIP=ffffffff825b3518 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5730000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa2b88674a1 CR3=000000002c826000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000