Warning: Permanently added '[localhost]:36852' (ECDSA) to the list of known hosts.
2025/01/05 07:30:16 fuzzer started
2025/01/05 07:30:17 dialing manager at localhost:34561
syzkaller login: [   79.054058] cgroup: Unknown subsys name 'net'
[   79.134969] cgroup: Unknown subsys name 'cpuset'
[   79.166611] cgroup: Unknown subsys name 'rlimit'
2025/01/05 07:30:46 syscalls: 213
2025/01/05 07:30:46 code coverage: enabled
2025/01/05 07:30:46 comparison tracing: enabled
2025/01/05 07:30:46 extra coverage: enabled
2025/01/05 07:30:46 setuid sandbox: enabled
2025/01/05 07:30:46 namespace sandbox: enabled
2025/01/05 07:30:46 Android sandbox: enabled
2025/01/05 07:30:46 fault injection: enabled
2025/01/05 07:30:46 leak checking: enabled
2025/01/05 07:30:46 net packet injection: enabled
2025/01/05 07:30:46 net device setup: enabled
2025/01/05 07:30:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/05 07:30:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/05 07:30:46 USB emulation: enabled
2025/01/05 07:30:46 hci packet injection: enabled
2025/01/05 07:30:46 wifi device emulation: enabled
2025/01/05 07:30:46 802.15.4 emulation: enabled
2025/01/05 07:30:46 fetching corpus: 0, signal 0/0 (executing program)
2025/01/05 07:30:47 starting 8 fuzzer processes
07:30:47 executing program 0:
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008090}, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044090}, 0x4841)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40800d00}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x800)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044880}, 0x4004000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r4)
syz_extract_tcp_res$synack(&(0x7f0000000840), 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x10000}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'ip6_vti0\x00', <r6=>0x0, 0x29, 0x7, 0xc5, 0x5, 0x4a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, @private0, 0x20, 0x8000, 0x80000000, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', r6, 0x4, 0x20, 0x0, 0x6, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x0, 0x80, 0x400, 0x800}})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000a40)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x300}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x8000)

07:30:47 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x7, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x2c}}, 0x2004c081)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x81}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x200cc085)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r3)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x20008014)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r6, 0x205, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x14080}, 0x40800)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000940)=0x200, 0x2)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r8)
sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2230024}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008014}, 0x1)

07:30:47 executing program 1:
r0 = memfd_secret(0x80000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
r3 = memfd_secret(0x80000)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x18200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000100)={0x9, [0x6, 0xd02d], 0x7}, 0x10)
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x9, 0x101}}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', <r8=>0x0, 0x29, 0x9, 0x1, 0x1, 0x0, @mcast2, @private2, 0x20, 0x40, 0x6, 0xfd50}})
getpeername(r5, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000340)=0x80)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4012)
r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000480), 0x403, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r10}, './file0\x00'})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000500)=0x5, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', <r11=>r8, 0x29, 0x81, 0xb0, 0x8, 0x5d, @private1, @private1, 0x40, 0x7, 0x3, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r11, 0x2f, 0xff, 0xff, 0x400, 0x2c, @empty, @empty, 0x20, 0x7, 0x7fffffff, 0x1}})

07:30:47 executing program 2:
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FLOW={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = fork()
r3 = fork()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008805}, 0x4004810)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}}, 0x40)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000500)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xea}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4e}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000640)=r3)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = getpgid(r2)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000740)=r9)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000780))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x80}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x144}, 0x0)

07:30:47 executing program 5:
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, @phonet={0x23, 0x3, 0x1f, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='wg0\x00', 0x28d8523f, 0x401, 0x800})
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2}, './file1\x00'})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x8, 0x7fffffff, 0x1, 0x9, 0x8}, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000200))
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000240)=""/158)
r4 = syz_io_uring_complete(0x0)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=0x1000)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r5=>r1}, './file1/file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000001440)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x6, 0x4, 0x2, @private1, @mcast2, 0x10, 0x8, 0x3, 0x2}})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x42000, 0x0)
ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000001540))
clock_gettime(0x0, &(0x7f0000001580)={<r7=>0x0, <r8=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001600)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f00000015c0)={r7, r8+60000000}, 0x1, 0x1}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r9=>r4, {0xa4e2, 0x34}}, './file1/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r6, {0xffffffe1}}, './file1/file0\x00'})

07:30:47 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x3ff}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0/file0\x00'})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r2, {0x80}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r3, {0x4}}, './file0\x00'})
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14)
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000001c0), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r7=>r6, {0x6, 0xef}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file0/file0/file0\x00'})
r9 = io_uring_setup(0x393d, &(0x7f0000000280)={0x0, 0x35db, 0x1, 0x1, 0xd1, 0x0, r8})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r10=>r9}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0/file0/../file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

07:30:47 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x4, 0x4, 0x3a, 0x4e3a, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x80, 0x91b86d02d34bdf6a, 0x7, 0x1}})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r2=>r0, 0x2f, 0x55, 0x7, 0xb1d, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x1, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r3=>r2, 0x2f, 0x1f, 0x0, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x700, 0x1, 0xbd}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r4=>0x0, @dev, @local}, &(0x7f0000000400)=0xc)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', r4, 0x2f, 0x8, 0x40, 0xc6, 0x66, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7800, 0x90196ae0a67cd101, 0x101, 0x1f}})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r5=>r1, {0x20}}, './file0\x00'})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000540)={0x7, 'wg1\x00', {0x800}, 0x4})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000580)={0x7, 'macvlan0\x00', {0x7fffffff}, 0x2})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', <r6=>r4, 0x4, 0x91, 0x2, 0x7, 0x10, @local, @private1, 0x7800, 0x1, 0x9, 0x8}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000680)={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @local, 0x2, 0xc, 0x1, 0x400, 0x7, 0x0, r3})
getpeername(r5, &(0x7f0000000700)=@nfc, &(0x7f0000000780)=0x80)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6_vti0\x00', r6, 0x2f, 0xf2, 0x20, 0x1, 0x8, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x700, 0x2, 0x7fff}})
r7 = accept4$inet6(r1, &(0x7f00000008c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000900)=0x1c, 0x80800)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {<r8=>r7}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_SET_OP_VERSION(r9, 0x1, 0x53, &(0x7f00000009c0), &(0x7f0000000a00)=0x8)
ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000a40))

07:30:47 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000001)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40020}, 0x20008010)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x10000014)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r1)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r9, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x1000c810)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000884)

[  108.075530] audit: type=1400 audit(1736062247.576:7): avc:  denied  { execmem } for  pid=284 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[  109.578666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.583492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.595246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.605227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.615598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  109.622687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.626410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  109.647923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.653114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.655928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.658550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  109.661330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.663888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.666570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  109.672019] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.674147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  109.678658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  109.681745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.683334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.684919] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  109.689115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  109.695970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  109.703386] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  109.704849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.708974] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  109.711012] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  109.714564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.721715] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  109.723584] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  109.725649] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  109.730211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  109.730620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  109.732591] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  109.733959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  109.734485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  109.735711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.740230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  109.742729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.747391] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.749285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.757579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  109.762303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  109.770369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  109.780182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.797076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  109.807734] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  109.833927] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  109.836121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.724229] Bluetooth: hci1: command tx timeout
[  111.786881] Bluetooth: hci2: command tx timeout
[  111.786915] Bluetooth: hci5: command tx timeout
[  111.851145] Bluetooth: hci6: command tx timeout
[  111.851264] Bluetooth: hci4: command tx timeout
[  111.851942] Bluetooth: hci7: command tx timeout
[  111.914964] Bluetooth: hci0: command tx timeout
[  111.916023] Bluetooth: hci3: command tx timeout
[  113.772219] Bluetooth: hci1: command tx timeout
[  113.835591] Bluetooth: hci5: command tx timeout
[  113.836282] Bluetooth: hci2: command tx timeout
[  113.898950] Bluetooth: hci6: command tx timeout
[  113.899435] Bluetooth: hci7: command tx timeout
[  113.899900] Bluetooth: hci4: command tx timeout
[  113.962862] Bluetooth: hci0: command tx timeout
[  113.963325] Bluetooth: hci3: command tx timeout
[  115.818972] Bluetooth: hci1: command tx timeout
[  115.883284] Bluetooth: hci5: command tx timeout
[  115.884298] Bluetooth: hci2: command tx timeout
[  115.947686] Bluetooth: hci6: command tx timeout
[  115.949032] Bluetooth: hci7: command tx timeout
[  115.951143] Bluetooth: hci4: command tx timeout
[  116.011200] Bluetooth: hci0: command tx timeout
[  116.012157] Bluetooth: hci3: command tx timeout
[  117.867033] Bluetooth: hci1: command tx timeout
[  117.930977] Bluetooth: hci5: command tx timeout
[  117.932073] Bluetooth: hci2: command tx timeout
[  117.995071] Bluetooth: hci7: command tx timeout
[  117.996342] Bluetooth: hci4: command tx timeout
[  117.997548] Bluetooth: hci6: command tx timeout
[  118.059223] Bluetooth: hci3: command tx timeout
[  118.060029] Bluetooth: hci0: command tx timeout
[  169.350709] syz-executor.1 (291) used greatest stack depth: 23696 bytes left
[  172.092103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  172.098377] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  172.105029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  172.111878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  172.120605] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  172.128544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  172.217377] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.223532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.226341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.234247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.238682] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  172.240678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.300679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.307011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.315206] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.323633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.340969] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  172.347498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.376654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  172.388010] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  172.425467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  172.446048] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  172.447482] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  172.452640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  172.455151] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  172.460219] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  172.469631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  172.482463] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  172.512665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  172.515032] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  172.518323] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  172.535302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  172.543130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  172.545348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  172.552153] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  172.562327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  172.572606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  172.578037] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  172.578179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  172.580080] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  172.584454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  172.587250] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  172.589160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  172.600259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  172.608958] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  172.668397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  172.697083] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  172.710008] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.187889] Bluetooth: hci0: command tx timeout
[  174.316388] Bluetooth: hci1: command tx timeout
[  174.443953] Bluetooth: hci2: command tx timeout
[  174.571061] Bluetooth: hci3: command tx timeout
[  174.699293] Bluetooth: hci4: command tx timeout
[  174.763008] Bluetooth: hci5: command tx timeout
[  174.763044] Bluetooth: hci7: command tx timeout
[  174.892839] Bluetooth: hci6: command tx timeout
[  176.234860] Bluetooth: hci0: command tx timeout
[  176.363115] Bluetooth: hci1: command tx timeout
[  176.490963] Bluetooth: hci2: command tx timeout
[  176.619027] Bluetooth: hci3: command tx timeout
[  176.747814] Bluetooth: hci4: command tx timeout
[  176.810883] Bluetooth: hci5: command tx timeout
[  176.811937] Bluetooth: hci7: command tx timeout
[  176.940794] Bluetooth: hci6: command tx timeout
[  178.283144] Bluetooth: hci0: command tx timeout
[  178.410932] Bluetooth: hci1: command tx timeout
[  178.539017] Bluetooth: hci2: command tx timeout
[  178.667008] Bluetooth: hci3: command tx timeout
[  178.794864] Bluetooth: hci4: command tx timeout
[  178.858867] Bluetooth: hci7: command tx timeout
[  178.859349] Bluetooth: hci5: command tx timeout
[  178.986818] Bluetooth: hci6: command tx timeout
[  180.330909] Bluetooth: hci0: command tx timeout
[  180.459899] Bluetooth: hci1: command tx timeout
[  180.586843] Bluetooth: hci2: command tx timeout
[  180.714950] Bluetooth: hci3: command tx timeout
[  180.843253] Bluetooth: hci4: command tx timeout
[  180.906849] Bluetooth: hci5: command tx timeout
[  180.907317] Bluetooth: hci7: command tx timeout
[  181.034831] Bluetooth: hci6: command tx timeout
[  234.311593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.315261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.317697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.323229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.325317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.329261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.333684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.336307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.340081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  234.343999] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  234.344301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  234.349883] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.381193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  234.383873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  234.386963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  234.397947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  234.408694] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.409118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  234.416399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.421081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  234.429296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  234.433136] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  234.440416] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.445212] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  234.456356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  234.458610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.464520] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.466615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.498950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  234.500672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  234.504456] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  234.519661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  234.529987] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  234.538192] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  234.539908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  234.544290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  234.550591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  234.574457] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  234.587986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  234.590151] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.616589] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  234.621228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  234.632115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  234.635354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  234.637359] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  234.665286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.687145] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  234.691200] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.394882] Bluetooth: hci1: command tx timeout
[  236.460835] Bluetooth: hci0: command tx timeout
[  236.522840] Bluetooth: hci2: command tx timeout
[  236.587002] Bluetooth: hci4: command tx timeout
[  236.587109] Bluetooth: hci3: command tx timeout
[  236.715838] Bluetooth: hci7: command tx timeout
[  236.715855] Bluetooth: hci5: command tx timeout
[  236.779002] Bluetooth: hci6: command tx timeout
[  238.443112] Bluetooth: hci1: command tx timeout
[  238.506993] Bluetooth: hci0: command tx timeout
[  238.571778] Bluetooth: hci2: command tx timeout
[  238.634989] Bluetooth: hci3: command tx timeout
[  238.635012] Bluetooth: hci4: command tx timeout
[  238.762823] Bluetooth: hci7: command tx timeout
[  238.762849] Bluetooth: hci5: command tx timeout
[  238.827182] Bluetooth: hci6: command tx timeout
[  240.490881] Bluetooth: hci1: command tx timeout
[  240.554849] Bluetooth: hci0: command tx timeout
[  240.620683] Bluetooth: hci2: command tx timeout
[  240.682802] Bluetooth: hci3: command tx timeout
[  240.683893] Bluetooth: hci4: command tx timeout
[  240.810864] Bluetooth: hci7: command tx timeout
[  240.810950] Bluetooth: hci5: command tx timeout
[  240.875503] Bluetooth: hci6: command tx timeout
[  242.557449] Bluetooth: hci1: command tx timeout
[  242.622233] Bluetooth: hci0: command tx timeout
[  242.682503] Bluetooth: hci2: command tx timeout
[  242.739915] Bluetooth: hci4: command tx timeout
[  242.740098] Bluetooth: hci3: command tx timeout
[  242.878417] Bluetooth: hci7: command tx timeout
[  242.879692] Bluetooth: hci5: command tx timeout
[  242.924076] Bluetooth: hci6: command tx timeout
[  296.312660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  296.315608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  296.319073] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  296.329643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  296.334141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  296.336819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  296.510891] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  296.521440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  296.524658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  296.530629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  296.535220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  296.538318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  296.540544] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  296.542474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  296.545112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  296.560707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  296.573301] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  296.586225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  296.588677] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  296.599333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  296.599364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  296.615422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  296.619078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  296.624811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  296.629965] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  296.631318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.646943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.648367] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.656547] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  296.662388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  296.671873] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  296.673849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  296.688164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  296.703010] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  296.726264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  296.730359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  296.731878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  296.739446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  296.741078] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  296.743293] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  296.748806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.757273] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  296.763451] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.796302] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  296.804149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  296.811647] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  296.814565] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  296.821842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  298.410890] Bluetooth: hci0: command tx timeout
[  298.602869] Bluetooth: hci1: command tx timeout
[  298.669080] Bluetooth: hci2: command tx timeout
[  298.730829] Bluetooth: hci3: command tx timeout
[  298.795025] Bluetooth: hci5: command tx timeout
[  298.796559] Bluetooth: hci4: command tx timeout
[  298.859518] Bluetooth: hci6: command tx timeout
[  298.923786] Bluetooth: hci7: command tx timeout
[  300.458872] Bluetooth: hci0: command tx timeout
[  300.650898] Bluetooth: hci1: command tx timeout
[  300.714955] Bluetooth: hci2: command tx timeout
[  300.779223] Bluetooth: hci3: command tx timeout
[  300.842904] Bluetooth: hci5: command tx timeout
[  300.843832] Bluetooth: hci4: command tx timeout
[  300.907924] Bluetooth: hci6: command tx timeout
[  300.971797] Bluetooth: hci7: command tx timeout
[  302.506840] Bluetooth: hci0: command tx timeout
[  302.698945] Bluetooth: hci1: command tx timeout
[  302.763778] Bluetooth: hci2: command tx timeout
[  302.826929] Bluetooth: hci3: command tx timeout
[  302.891147] Bluetooth: hci4: command tx timeout
[  302.891172] Bluetooth: hci5: command tx timeout
[  302.956006] Bluetooth: hci6: command tx timeout
[  303.018888] Bluetooth: hci7: command tx timeout
[  304.554793] Bluetooth: hci0: command tx timeout
[  304.749746] Bluetooth: hci1: command tx timeout
[  304.810923] Bluetooth: hci2: command tx timeout
[  304.874952] Bluetooth: hci3: command tx timeout
[  304.939551] Bluetooth: hci4: command tx timeout
[  304.939568] Bluetooth: hci5: command tx timeout
[  305.003296] Bluetooth: hci6: command tx timeout
[  305.067845] Bluetooth: hci7: command tx timeout
[  358.390635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  358.395061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  358.401487] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  358.408625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  358.412354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  358.414197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  358.647465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  358.652938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  358.655130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  358.662983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  358.665258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  358.666549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  358.714927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  358.720458] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.724303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.737269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.742917] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  358.747235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  358.923471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  358.941144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  358.951196] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  358.959375] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  358.965087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  358.969200] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  358.970473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  358.972027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  358.975103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  358.978294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  358.979823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  358.980354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  358.997314] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  359.000945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  359.029383] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  359.032482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  359.041447] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  359.045301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  359.049308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  359.052243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  359.071975] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  359.090900] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  359.094036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  359.096422] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  359.103364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  359.105936] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  359.126273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  359.137330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  359.143219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  359.196460] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  360.490915] Bluetooth: hci0: command tx timeout
[  360.746789] Bluetooth: hci1: command tx timeout
[  360.811824] Bluetooth: hci2: command tx timeout
[  361.067809] Bluetooth: hci3: command tx timeout
[  361.130807] Bluetooth: hci6: command tx timeout
[  361.196817] Bluetooth: hci4: command tx timeout
[  361.259976] Bluetooth: hci7: command tx timeout
[  361.387837] Bluetooth: hci5: command tx timeout
[  362.538909] Bluetooth: hci0: command tx timeout
[  362.794791] Bluetooth: hci1: command tx timeout
[  362.858865] Bluetooth: hci2: command tx timeout
[  363.116195] Bluetooth: hci3: command tx timeout
[  363.179792] Bluetooth: hci6: command tx timeout
[  363.243760] Bluetooth: hci4: command tx timeout
[  363.307754] Bluetooth: hci7: command tx timeout
[  363.436754] Bluetooth: hci5: command tx timeout
[  364.587767] Bluetooth: hci0: command tx timeout
[  364.843820] Bluetooth: hci1: command tx timeout
[  364.907830] Bluetooth: hci2: command tx timeout
[  365.163792] Bluetooth: hci3: command tx timeout
[  365.226769] Bluetooth: hci6: command tx timeout
[  365.290791] Bluetooth: hci4: command tx timeout
[  365.355777] Bluetooth: hci7: command tx timeout
[  365.484160] Bluetooth: hci5: command tx timeout
[  366.635775] Bluetooth: hci0: command tx timeout
[  366.892767] Bluetooth: hci1: command tx timeout
[  366.955773] Bluetooth: hci2: command tx timeout
[  367.211780] Bluetooth: hci3: command tx timeout
[  367.275765] Bluetooth: hci6: command tx timeout
[  367.339895] Bluetooth: hci4: command tx timeout
[  367.404172] Bluetooth: hci7: command tx timeout
[  367.530900] Bluetooth: hci5: command tx timeout
[  415.720323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.721073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.962742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.963401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50

VM DIAGNOSIS:
07:35:55  Registers:
info registers vcpu 0
RAX=ffffffff81abd5b9 RBX=ffffffff815ee470 RCX=ffffffff86842801 RDX=1ffff11005809ee8
RSI=0000000000000000 RDI=ffffffff81abd5b9 RBP=ffff88802c04f780 RSP=ffff88802c04f6e8
R8 =ffffffff868428aa R9 =ffff88802c04f728 R10=000000000003aab6 R11=00000000000241b8
R12=ffff88802c04f7b0 R13=0000000000000000 R14=ffff888033ced340 R15=ffff888009ee9340
RIP=ffffffff812d1bed RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f444c78b8c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdc4132c6f4 CR3=00000000297b0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=3a6d697377685f313132303863616d2b XMM03=00356d697377683a6d697377685f3131
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000000020000000000005568c39969a0
XMM06=00005568c39812f00000000700000001 XMM07=00000000000000000000000000000000
XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000
XMM10=00000020200000000000002020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff8880225bf8a0 RCX=0000000000000000 RDX=0000000000000070
RSI=0000000000000000 RDI=ffff8880225bf808 RBP=ffff888026045340 RSP=ffff8880225bf7b0
R8 =0000000000000001 R9 =0000000000000000 R10=ffff8880225bf808 R11=0000000000000000
R12=0000000000000000 R13=ffff8880225bf830 R14=ffff888026045340 R15=ffff8880225bf808
RIP=ffffffff84a8399e RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f444c78b8c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7c0974620 CR3=0000000028e9e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c2c XMM01=00000000ff0000000000000000000000
XMM02=00000000ff0000000000000000000000 XMM03=32303863616d2f6c6175747269762f73
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005568c39d1a600000000000000000
XMM06=00005568c397ba1000005568c397b9d0 XMM07=00000000000000000000000000000000
XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000
XMM10=00000020200000000000002020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000