Warning: Permanently added '[localhost]:19709' (ECDSA) to the list of known hosts.
2025/05/25 06:48:22 fuzzer started
2025/05/25 06:48:23 dialing manager at localhost:46087
syzkaller login: [   99.228588] cgroup: Unknown subsys name 'net'
[   99.303332] cgroup: Unknown subsys name 'cpuset'
[   99.325958] cgroup: Unknown subsys name 'rlimit'
2025/05/25 06:48:39 syscalls: 205
2025/05/25 06:48:39 code coverage: enabled
2025/05/25 06:48:39 comparison tracing: enabled
2025/05/25 06:48:39 extra coverage: enabled
2025/05/25 06:48:39 setuid sandbox: enabled
2025/05/25 06:48:39 namespace sandbox: enabled
2025/05/25 06:48:39 Android sandbox: enabled
2025/05/25 06:48:39 fault injection: enabled
2025/05/25 06:48:39 leak checking: enabled
2025/05/25 06:48:39 net packet injection: enabled
2025/05/25 06:48:39 net device setup: enabled
2025/05/25 06:48:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/25 06:48:39 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/25 06:48:39 USB emulation: enabled
2025/05/25 06:48:39 hci packet injection: enabled
2025/05/25 06:48:39 wifi device emulation: enabled
2025/05/25 06:48:39 802.15.4 emulation: enabled
2025/05/25 06:48:39 fetching corpus: 0, signal 0/0 (executing program)
2025/05/25 06:48:41 starting 8 fuzzer processes
06:48:41 executing program 0:
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000))
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000004c0))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/ipc\x00')
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000540))
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000580)={0xfe, ""/254})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x440600, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)
r3 = eventfd(0x9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r4=>r3, {0x2000000}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, <r5=>r4, {0x0, 0xee01}}, './file0/file0\x00'})
ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000880)={0x7})
r6 = eventfd2(0x100, 0x80800)
flock(r6, 0x1)
ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000bc0))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000c00)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000c40)={0x2e, 0x6, 0x80000000, 0xf862, 0x1, 0x80})

06:48:41 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, './file0\x00'})
r2 = epoll_create(0x2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, @in_args={0x2}}, './file0\x00'})
fallocate(r3, 0x0, 0x8b58, 0x1ff)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>r4}, './file0\x00'})
getsockname(r4, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x4010, r0, 0x0)
r6 = eventfd2(0xcb6, 0x1)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r6)
eventfd2(0x7f, 0x80001)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000002c0)={0x56, 0x805, 0x1, {0xf250, 0x7}, {0x5, 0x7}, @rumble={0x8, 0x400}})
fallocate(r1, 0x0, 0x9, 0xff)
ioctl$PTP_SYS_OFFSET_EXTENDED(r5, 0xc4c03d09, &(0x7f0000000300)={0x5})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r7=>r4, {0x4}}, './file0\x00'})
r8 = eventfd(0x1)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r8, 0x80047213, &(0x7f0000000800))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000880), 0x1)

06:48:41 executing program 2:
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x1a05, 0xf1, 0x2, 0x17af, 0x1, [{0x4, 0x3, 0xfff, '\x00', 0x9}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x8001, 0x8}}, './file0\x00'})
r2 = eventfd(0xb4c)
fcntl$getflags(r2, 0x401)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/154)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1}, './file0/file0\x00'})
ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000001c0)=0xffff)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r2}, '.\x00'})
r5 = fsmount(r4, 0x1, 0x7d)
r6 = eventfd(0x464)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6}, './file0/file0\x00'})
r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
r8 = fsopen(&(0x7f0000000300)='devtmpfs\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r9=>r8, {0x2}}, './file0/file0\x00'})
ioctl$PTP_SYS_OFFSET(r9, 0x43403d05, &(0x7f0000000380)={0x10})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r10=>r8, {0x2}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r10, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

06:48:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000))
ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000040)=""/213)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140))
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2a000, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000240)={0x11, 0x70, &(0x7f00000001c0)="750829ce173da3c5277da45bd92dfe0196ca50f46b4802eb74d2479224e770f8c6e82dec962bab32092659bba7adbdd5650e4139d517d30fc18761ff57a54eea78c1487da22834761e416e279fe1281ab2032a3544302c46a5e4cf595451810fa00f24643f6a4734cf4685942d33b428"})
r3 = dup3(r1, r1, 0x72175bc47173099d)
r4 = epoll_create1(0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f00000002c0)=""/141)
socketpair(0x8, 0x6, 0x1000, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x81, 0xc6}}, './file0\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, <r7=>r5, {0x2}}, './file0\x00'})
openat$cgroup_subtree(r7, &(0x7f0000000840), 0x2, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000c00)={0x0, 0x7, 0x0, 0x79, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/121, 0x79}]}, &(0x7f0000000ac0), &(0x7f0000000b00)=""/183, 0x2, 0x30, 0x3, &(0x7f0000000bc0)})
ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000c80)=""/230)
openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x40b00, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x79)

[  117.478441] audit: type=1400 audit(1748155721.752:7): avc:  denied  { execmem } for  pid=281 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:48:41 executing program 3:
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x200)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000000c0)=""/37)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0], 0x1)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000180)={0x53, 0x101, 0x17c, {0x9, 0xffce}, {0x7f, 0x31}, @period={0x58, 0xfffe, 0x3ff, 0x80, 0xb89c, {0x3, 0x7, 0x3, 0xfff}, 0x2, &(0x7f0000000140)=[0x7, 0xa1]}})
r2 = socket$inet(0x2, 0x80000, 0x2)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000001c0))
fork()
r3 = dup3(0xffffffffffffffff, r2, 0x80000)
r4 = syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffffff31, 0x2)
ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000240))
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000280)={0x6d9, 0x5, 0x4, 0x8, 0x7f})
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0x2000000, 0xffffffff, 0x9})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001e40)={{0x1, 0x1, 0x18, <r5=>r3, @out_args}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001ec0)={'wg2\x00', <r6=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003c80)={{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000003d80)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000003dc0)={'wg2\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e00)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f00000078c0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000007880)={&(0x7f0000006d00)={0xb54, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x7, 0x6, 0x1f, 0x400}, {0x0, 0x9, 0x1, 0x7}, {0x4, 0x6, 0x8, 0x3}, {0x0, 0xff, 0x80, 0x1}, {0x0, 0x4, 0xd4, 0xfffffff7}, {0xfff, 0x6, 0x7f, 0x8}, {0x4d3d, 0xff, 0x7, 0x756}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x20, 0x7}, {0x2, 0x1, 0x6, 0x80000000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x75f6582d}}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2400, 0x3f, 0x8, 0x38b}, {0x8000, 0x7, 0x7f, 0x8}, {0x0, 0x1, 0x4, 0xfb9}, {0x9, 0x4b, 0x2, 0xffff7bce}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff7f}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca95}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x9, 0x7, 0x200}, {0x1, 0x6, 0xc4, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x238, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x0, 0x9, 0x80, 0x401}, {0x200, 0xb5, 0x0, 0x9be9}, {0x6, 0x7, 0x8, 0x81}, {0x20, 0xb2, 0x3, 0x400}, {0x3, 0x3, 0x20, 0x6}, {0x3, 0x40, 0x8}, {0x2, 0x6}, {0x1c, 0x0, 0x7, 0x3415}, {0x4, 0x4, 0x20}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1000, 0xc4, 0x8, 0xab}, {0xff, 0x5c, 0x80, 0x9}, {0x5, 0x1, 0x1, 0x9}, {0x7ff, 0x1, 0xe3, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xb54}, 0x1, 0x0, 0x0, 0xc0}, 0x4000)

06:48:41 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x41)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7c}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}]}, 0x54}}, 0x5)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4b0f132761b38f0479d1e92c521db903"}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x4801)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r3)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
r7 = gettid()
r8 = fork()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r5, 0x701, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44000)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, r9, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000091}, 0x20040080)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r11, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)

06:48:41 executing program 6:
ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x4)
ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000040)=""/125)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x40)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/29)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000140)=0x52b1)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x10401, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = dup3(r0, r2, 0x0)
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000200)=""/29)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>r2, {0x4}}, './file0\x00'})
ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000280)=""/98)
ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000300))
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000340)=""/167)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040015}, 0x8000)
fallocate(r3, 0x60, 0x2, 0x41)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001c80), 0x400, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001cc0)={'vxcan0\x00'})

06:48:41 executing program 7:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x60040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {<r2=>0xffffffffffffffff, <r3=>0xee00}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xee00, <r5=>r3}}, './file0\x00'})
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000000c0)=0x5)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = fsmount(r1, 0x0, 0x7b)
pipe(&(0x7f0000000280)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000002c0)=[r6, r7, r9, 0xffffffffffffffff], 0x4)
ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000300))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r10=>r9}, './file1\x00'})
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000380)={0x7fff, 0x94b})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {r2, r5}}, './file1\x00'})
ioctl$IOC_PR_CLEAR(r11, 0x401070cd, &(0x7f0000000400)={0x7})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r12}, './file0/file0\x00'})
fork()
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)

[  118.914360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.915433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.917559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.919458] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.924185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.926651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.927888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.930406] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.961439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.967813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.979131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  118.981317] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  118.983244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  118.990469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  118.994574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.004181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.015512] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.033087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.038734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.050130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.063030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.072956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.079029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.081319] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.082983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.098648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.100266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.104386] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.106688] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.113836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.115494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.115807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.129316] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.130342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.131111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.160914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.163729] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.171107] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.180196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  119.197781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  121.007137] Bluetooth: hci1: command tx timeout
[  121.069413] Bluetooth: hci2: command tx timeout
[  121.071046] Bluetooth: hci0: command tx timeout
[  121.133964] Bluetooth: hci3: command tx timeout
[  121.200177] Bluetooth: hci5: command tx timeout
[  121.201202] Bluetooth: hci4: command tx timeout
[  121.261943] Bluetooth: hci7: command tx timeout
[  121.263056] Bluetooth: hci6: command tx timeout
[  123.053920] Bluetooth: hci1: command tx timeout
[  123.117437] Bluetooth: hci2: command tx timeout
[  123.118149] Bluetooth: hci0: command tx timeout
[  123.180913] Bluetooth: hci3: command tx timeout
[  123.245313] Bluetooth: hci4: command tx timeout
[  123.245793] Bluetooth: hci5: command tx timeout
[  123.309044] Bluetooth: hci6: command tx timeout
[  123.309485] Bluetooth: hci7: command tx timeout
[  125.101202] Bluetooth: hci1: command tx timeout
[  125.166052] Bluetooth: hci0: command tx timeout
[  125.166546] Bluetooth: hci2: command tx timeout
[  125.229096] Bluetooth: hci3: command tx timeout
[  125.292964] Bluetooth: hci5: command tx timeout
[  125.293460] Bluetooth: hci4: command tx timeout
[  125.357297] Bluetooth: hci7: command tx timeout
[  125.357789] Bluetooth: hci6: command tx timeout
[  127.149075] Bluetooth: hci1: command tx timeout
[  127.213190] Bluetooth: hci2: command tx timeout
[  127.213622] Bluetooth: hci0: command tx timeout
[  127.278299] Bluetooth: hci3: command tx timeout
[  127.340993] Bluetooth: hci4: command tx timeout
[  127.341473] Bluetooth: hci5: command tx timeout
[  127.405029] Bluetooth: hci6: command tx timeout
[  127.405516] Bluetooth: hci7: command tx timeout
[  181.459179] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.470451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.473207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.479388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.490045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  181.492447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.512176] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  181.523137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  181.537208] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  181.556128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  181.565815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  181.572561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  181.576559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  181.579279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  181.586020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  181.591097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  181.609177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  181.612348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  181.617427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  181.626645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  181.644375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  181.664187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.669067] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  181.676606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  181.687423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.711649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.733122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.755452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.766053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.772380] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.870086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  181.878157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  181.882403] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  181.894417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  181.901403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  181.909534] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.922627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.941547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.955049] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.963099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  183.532928] Bluetooth: hci0: command tx timeout
[  183.660983] Bluetooth: hci4: command tx timeout
[  183.661765] Bluetooth: hci1: command tx timeout
[  183.725150] Bluetooth: hci2: command tx timeout
[  183.725990] Bluetooth: hci3: command tx timeout
[  183.853466] Bluetooth: hci5: command tx timeout
[  183.981636] Bluetooth: hci6: command tx timeout
[  184.045304] Bluetooth: hci7: command tx timeout
[  185.581013] Bluetooth: hci0: command tx timeout
[  185.708943] Bluetooth: hci1: command tx timeout
[  185.710140] Bluetooth: hci4: command tx timeout
[  185.773045] Bluetooth: hci3: command tx timeout
[  185.773098] Bluetooth: hci2: command tx timeout
[  185.901893] Bluetooth: hci5: command tx timeout
[  186.030279] Bluetooth: hci6: command tx timeout
[  186.093174] Bluetooth: hci7: command tx timeout
[  187.629028] Bluetooth: hci0: command tx timeout
[  187.757898] Bluetooth: hci4: command tx timeout
[  187.757916] Bluetooth: hci1: command tx timeout
[  187.821901] Bluetooth: hci2: command tx timeout
[  187.821978] Bluetooth: hci3: command tx timeout
[  187.948916] Bluetooth: hci5: command tx timeout
[  188.079902] Bluetooth: hci6: command tx timeout
[  188.140932] Bluetooth: hci7: command tx timeout
[  189.677227] Bluetooth: hci0: command tx timeout
[  189.805395] Bluetooth: hci4: command tx timeout
[  189.806281] Bluetooth: hci1: command tx timeout
[  189.870446] Bluetooth: hci3: command tx timeout
[  189.871111] Bluetooth: hci2: command tx timeout
[  189.997006] Bluetooth: hci5: command tx timeout
[  190.125520] Bluetooth: hci6: command tx timeout
[  190.189565] Bluetooth: hci7: command tx timeout
[  243.792812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.797935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.801202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.806619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.813404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.816199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.818575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.826508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.829402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.850549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.061959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  244.067607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  244.069628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  244.074356] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  244.093369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  244.101440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  244.120878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  244.125102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  244.126710] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  244.130481] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.144373] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  244.163624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  244.194043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  244.220578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  244.237654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  244.241404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  244.268452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  244.276665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  244.281284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  244.283478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  244.291663] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  244.304341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  244.311614] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  244.320572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.324381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.361382] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  244.406701] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  244.409699] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  244.475133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  244.486142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  245.934008] Bluetooth: hci0: command tx timeout
[  245.934730] Bluetooth: hci1: command tx timeout
[  246.381031] Bluetooth: hci5: command tx timeout
[  246.381973] Bluetooth: hci4: command tx timeout
[  246.445007] Bluetooth: hci2: command tx timeout
[  246.446275] Bluetooth: hci6: command tx timeout
[  246.508930] Bluetooth: hci3: command tx timeout
[  246.703158] Bluetooth: hci7: command tx timeout
[  247.980942] Bluetooth: hci1: command tx timeout
[  247.981025] Bluetooth: hci0: command tx timeout
[  248.428977] Bluetooth: hci4: command tx timeout
[  248.429004] Bluetooth: hci5: command tx timeout
[  248.493212] Bluetooth: hci6: command tx timeout
[  248.493374] Bluetooth: hci2: command tx timeout
[  248.557144] Bluetooth: hci3: command tx timeout
[  248.748940] Bluetooth: hci7: command tx timeout
[  250.029142] Bluetooth: hci0: command tx timeout
[  250.029161] Bluetooth: hci1: command tx timeout
[  250.477033] Bluetooth: hci5: command tx timeout
[  250.478971] Bluetooth: hci4: command tx timeout
[  250.540934] Bluetooth: hci6: command tx timeout
[  250.542171] Bluetooth: hci2: command tx timeout
[  250.604964] Bluetooth: hci3: command tx timeout
[  250.797254] Bluetooth: hci7: command tx timeout
[  252.076967] Bluetooth: hci0: command tx timeout
[  252.077009] Bluetooth: hci1: command tx timeout
[  252.525009] Bluetooth: hci4: command tx timeout
[  252.525277] Bluetooth: hci5: command tx timeout
[  252.589030] Bluetooth: hci2: command tx timeout
[  252.589197] Bluetooth: hci6: command tx timeout
[  252.654199] Bluetooth: hci3: command tx timeout
[  252.846205] Bluetooth: hci7: command tx timeout
[  306.433033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  306.436981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  306.440061] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  306.450517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  306.458670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  306.618385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  306.622514] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  306.625496] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  306.635357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  306.641301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  306.752169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  306.762416] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  306.769326] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  306.782333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  306.796485] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  306.866313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.886424] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.892253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.900525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  306.924671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  306.943973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  306.964516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.000824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.013482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.026179] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  307.034402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  307.041367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  307.046446] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  307.070100] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  307.073396] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.115439] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.117758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.120075] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.125492] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.129161] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  307.203505] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.233452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.267166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.320053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.328458] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  308.525952] Bluetooth: hci0: command tx timeout
[  308.717960] Bluetooth: hci1: command tx timeout
[  308.846104] Bluetooth: hci2: command tx timeout
[  309.101953] Bluetooth: hci3: command tx timeout
[  309.166032] Bluetooth: hci6: command tx timeout
[  309.229261] Bluetooth: hci4: command tx timeout
[  309.230167] Bluetooth: hci7: command tx timeout
[  309.421003] Bluetooth: hci5: command tx timeout
[  310.573895] Bluetooth: hci0: command tx timeout
[  310.764907] Bluetooth: hci1: command tx timeout
[  310.893123] Bluetooth: hci2: command tx timeout
[  311.149064] Bluetooth: hci3: command tx timeout
[  311.214064] Bluetooth: hci6: command tx timeout
[  311.277002] Bluetooth: hci4: command tx timeout
[  311.277460] Bluetooth: hci7: command tx timeout
[  311.470215] Bluetooth: hci5: command tx timeout
[  312.622210] Bluetooth: hci0: command tx timeout
[  312.812954] Bluetooth: hci1: command tx timeout
[  312.942071] Bluetooth: hci2: command tx timeout
[  313.197010] Bluetooth: hci3: command tx timeout
[  313.260888] Bluetooth: hci6: command tx timeout
[  313.324935] Bluetooth: hci4: command tx timeout
[  313.325381] Bluetooth: hci7: command tx timeout
[  313.516956] Bluetooth: hci5: command tx timeout
[  314.668948] Bluetooth: hci0: command tx timeout
[  314.862390] Bluetooth: hci1: command tx timeout
[  314.989096] Bluetooth: hci2: command tx timeout
[  315.245172] Bluetooth: hci3: command tx timeout
[  315.308925] Bluetooth: hci6: command tx timeout
[  315.372953] Bluetooth: hci7: command tx timeout
[  315.373422] Bluetooth: hci4: command tx timeout
[  315.564947] Bluetooth: hci5: command tx timeout
[  369.218627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.222698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.225513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.233397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.239623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.608111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.616121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.622387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.636690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.642240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  369.645776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.647727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  369.652143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.653950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  369.658378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.664667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.678482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.681283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  369.691442] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  369.714089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  369.768029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  369.772474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  369.778754] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  369.784100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  369.791969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  369.807045] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  369.815464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  369.822299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  369.827479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  369.828392] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  369.849792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  369.871996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  369.872160] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  369.886324] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  369.894323] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  369.899388] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  369.916742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  369.922343] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  369.953160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.955979] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  371.308998] Bluetooth: hci0: command tx timeout
[  371.757138] Bluetooth: hci3: command tx timeout
[  371.822099] Bluetooth: hci1: command tx timeout
[  371.822526] Bluetooth: hci2: command tx timeout
[  371.949230] Bluetooth: hci4: command tx timeout
[  372.078089] Bluetooth: hci7: command tx timeout
[  372.078213] Bluetooth: hci5: command tx timeout
[  372.079213] Bluetooth: hci6: command tx timeout
[  373.357028] Bluetooth: hci0: command tx timeout
[  373.806880] Bluetooth: hci3: command tx timeout
[  373.869023] Bluetooth: hci2: command tx timeout
[  373.869975] Bluetooth: hci1: command tx timeout
[  373.998083] Bluetooth: hci4: command tx timeout
[  374.124888] Bluetooth: hci5: command tx timeout
[  374.125941] Bluetooth: hci6: command tx timeout
[  374.126272] Bluetooth: hci7: command tx timeout
[  375.406698] Bluetooth: hci0: command tx timeout
[  375.852969] Bluetooth: hci3: command tx timeout
[  375.917295] Bluetooth: hci2: command tx timeout
[  375.917317] Bluetooth: hci1: command tx timeout
[  376.045114] Bluetooth: hci4: command tx timeout
[  376.172945] Bluetooth: hci6: command tx timeout
[  376.172980] Bluetooth: hci5: command tx timeout
[  376.174161] Bluetooth: hci7: command tx timeout
[  377.453635] Bluetooth: hci0: command tx timeout
[  377.901062] Bluetooth: hci3: command tx timeout
[  377.964919] Bluetooth: hci2: command tx timeout
[  377.964966] Bluetooth: hci1: command tx timeout
[  378.094903] Bluetooth: hci4: command tx timeout
[  378.221082] Bluetooth: hci7: command tx timeout
[  378.221257] Bluetooth: hci5: command tx timeout
[  378.221579] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
06:53:42  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000046 RCX=ffffffff81617d20 RDX=0000000000000000
RSI=ffffffff8161b460 RDI=ffff88806ce31850 RBP=ffff88806ce28098 RSP=ffff88806ce08ed8
R8 =0000000000000000 R9 =fffffbfff0c83eca R10=000000613e1e4980 R11=0000000000000001
R12=ffffffff8161b460 R13=ffff88806ce280cc R14=0000000000000000 R15=ffff88806ce28080
RIP=ffffffff8151ad89 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f75e0bc83c0 CR3=0000000036809000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffffffff813b5d04 RCX=ffff88806cf0897c RDX=1ffff1100d9e1150
RSI=ffffffff85c1d1c0 RDI=ffffffff813b5d04 RBP=ffffffff813b5d04 RSP=ffff88806cf089e8
R8 =0000000000000001 R9 =ffff88806cf08a68 R10=000000000003b67d R11=0000000000008645
R12=ffff88806cf08af0 R13=0000000000000000 R14=ffff8880155b9b80 R15=ffff888024340600
RIP=ffffffff8142fa73 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3afc0b81f0 CR3=000000001508e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000