Warning: Permanently added '[localhost]:58751' (ECDSA) to the list of known hosts.
2025/06/08 02:43:23 fuzzer started
syzkaller login: [  108.730151] gcc (262) used greatest stack depth: 24832 bytes left
2025/06/08 02:43:23 dialing manager at localhost:40003
[  109.154976] cgroup: Unknown subsys name 'net'
[  109.280628] cgroup: Unknown subsys name 'cpuset'
[  109.310065] cgroup: Unknown subsys name 'rlimit'
2025/06/08 02:43:46 syscalls: 202
2025/06/08 02:43:46 code coverage: enabled
2025/06/08 02:43:46 comparison tracing: enabled
2025/06/08 02:43:46 extra coverage: enabled
2025/06/08 02:43:46 setuid sandbox: enabled
2025/06/08 02:43:46 namespace sandbox: enabled
2025/06/08 02:43:46 Android sandbox: enabled
2025/06/08 02:43:46 fault injection: enabled
2025/06/08 02:43:46 leak checking: enabled
2025/06/08 02:43:46 net packet injection: enabled
2025/06/08 02:43:46 net device setup: enabled
2025/06/08 02:43:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/08 02:43:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/08 02:43:46 USB emulation: enabled
2025/06/08 02:43:46 hci packet injection: enabled
2025/06/08 02:43:46 wifi device emulation: enabled
2025/06/08 02:43:46 802.15.4 emulation: enabled
2025/06/08 02:43:46 fetching corpus: 0, signal 0/0 (executing program)
2025/06/08 02:43:47 starting 8 fuzzer processes
02:43:47 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "54159ff0543c7cbf5130c2eb26ad3531"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4b42fb2f3f9196f974a1fd67ad182544"}, @NL80211_ATTR_PMKID={0x14, 0x55, "26e31ad06b47e43fa0ba0c11e587177d"}, @NL80211_ATTR_SSID={0xb, 0x34, @random="5e0b4e7bb25616"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x90)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x581, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000300)={0xf8000014})
openat$cgroup_type(r0, &(0x7f0000000340), 0x2, 0x0)
r2 = epoll_create1(0x80000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd=r2, 0x8, 0x4, 0x6, 0x10, 0x1, {0x3}}, 0x6)
r3 = getpgrp(0x0)
r4 = gettid()
r5 = syz_io_uring_setup(0x1aca, &(0x7f00000003c0)={0x0, 0x650b, 0x0, 0x1, 0x2e0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480))
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f00000004c0)={r1, r5, 0x800})
perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0xfc, 0x7, 0x4, 0x0, 0x0, 0x8001, 0x1d000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000500)}, 0x20, 0x3, 0x6, 0x8, 0x4, 0x4, 0x8001, 0x0, 0x3ff, 0x0, 0x1}, r4, 0xc, r0, 0x0)
r6 = epoll_create(0x8)
epoll_pwait2(r6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000640)={0x77359400}, &(0x7f0000000680)={[0x80000001]}, 0x8)
syz_io_uring_setup(0x3e71, &(0x7f00000006c0)={0x0, 0xc9ea, 0x8, 0x1, 0x263, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000000740), &(0x7f0000000780))
ioctl$sock_ifreq(0xffffffffffffffff, 0x891d, &(0x7f00000007c0)={'geneve1\x00', @ifru_names})
r7 = syz_open_dev$sg(&(0x7f0000000800), 0x4, 0x4040)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000840)={0x80000000})
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000880))

02:43:47 executing program 1:
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2c}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8c4)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x37}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc094)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x4002010)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xf597d362f55fbfbe}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008084}, 0x80)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x50, r3, 0x22, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x40500c0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x804}, 0x20000030)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x24040801)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan4\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1f}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x4003)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x54}}, 0x4000800)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

02:43:47 executing program 2:
ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0x22, ""/34})
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x4d)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080))
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000000c0))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000140)=0x1)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x509000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x19})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0)
ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000240)=0x1)
r3 = syz_open_dev$sg(&(0x7f0000000280), 0xdc95, 0x80)
ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x40440, 0x0)
ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000300)=0x7)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000340))
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0)
ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f00000003c0))
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3)

02:43:47 executing program 3:
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1)
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x9)
r0 = syz_io_uring_setup(0x52b8, &(0x7f00000000c0)={0x0, 0xcd4c, 0x2, 0x1, 0x116}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0)="63114e0b438f17cdaeceaaee497f619ef66e91adb89d82c33b68aac3df7abe7069b95e0c495aac4e7a87ab573581459ab78adce11f220f845facc5cf72ad1d5f374596957022c8f5625a94a4f122121915dc3feef03c733575fb2b6c038dacfd5f456f025d35f33832f3362d26adce2541c9a21183541dc187739e54c62450f4c2", 0x81, r0}, 0x68)
r1 = syz_open_dev$sg(&(0x7f0000000300), 0xcd, 0x80)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000340))
r2 = syz_open_dev$sg(&(0x7f0000000380), 0x5c, 0x800)
ioctl$SCSI_IOCTL_SYNC(r2, 0x4)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000003c0))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0)
write$nbd(r3, &(0x7f0000000440)={0x67446698, 0x0, 0x3, 0x4, 0x4, "a503a7408e28f69fe654ff9b6f0a761bd50a59167ed136d56c60376e868f4a3569c35e9bb6261a48e080be6d6c6d43004748052e7c3ca084d4641bc5b8a67b10d560c2b61fa42a09f283d5ce82d84f9e6c8213436699b08cde6572c3cc5cfb99e217253b5746ee66f360cc8087979547c694cd51065d80bdb0de904b67bdfe931ade540a0418c2f526f553074f3d7dec5796736cc3db6a894d91759f0692456e77df98e526e03869d03a4a5f99fe2a1603e59596b12f86f1f4b33a4c0f0726516cfee2ad4ae692d30a50945a4843ff7e2b6a6591a590a160a31f157ac3f8525a009fbcbd2deaf9"}, 0xf7)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x2000, 0x0)
ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000580))
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000005c0)={0x68, ""/104})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008041}, 0x40080)

02:43:47 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xe8000, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x521880, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0))
r2 = epoll_create1(0x80000)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000100))
epoll_create1(0x0)
socketpair(0x23, 0x7, 0x7, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
r4 = syz_open_dev$sg(&(0x7f0000000180), 0x100000000, 0x50000)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f00000001c0))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$SCSI_IOCTL_SYNC(r5, 0x4)
epoll_pwait(r0, &(0x7f0000000240)=[{}, {}], 0x2, 0x6, &(0x7f0000000280)={[0xffff]}, 0x8)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0)
ioctl$SG_SET_COMMAND_Q(r7, 0x2271, &(0x7f0000000300))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000340))
syz_open_dev$sg(&(0x7f0000000380), 0xdf6, 0x22000)

02:43:47 executing program 5:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80380, 0x0)
ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000000c0))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x1010c0, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x10000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20100800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x68}}, 0x10)
socketpair(0x28, 0x4, 0x48, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0109a13}, 0xc, &(0x7f0000000940)={&(0x7f0000000300)={0x60c, r1, 0x6ee0d2e8e7d690ac, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x60}, @NL80211_ATTR_FRAME={0x173, 0x33, @data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @random="e57709fa8bb9", @broadcast, @broadcast, {0x7}}, {0xf, 0x0, 0x0, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xaa}, @device_a, @device_b, @random="35437a4e7992", {0x2, 0x6}}, {0xf, 0x1, 0x1, 0x1, 0x4}}}, @ver_80211n={0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x46f, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x0, 0x1}, {0xee}, @broadcast, @device_b, @device_a, {0x2, 0x76f}, @device_b}, {0x4, 0x1, 0x3, 0x0, 0x3}}, {@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @broadcast, @initial, {0x1, 0x4}}, {0x2, 0x0, 0x0, 0x1, 0x3f}}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x60c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00'})
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3800004, 0x100010, r3, 0x0)
r8 = syz_mount_image$iso9660(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0xfffffffffffffffd, 0x6, &(0x7f0000000e00)=[{&(0x7f0000000a80)="b3a9c834c92bcf741696b0bfe072ea6c634920cb4679499cd716a2b981ef8b506129948e33a1a9818c475319fa9242282a9e9db342c8553b11ba7e049514ab528321772b24185d63a00ef34e741bac5abd36a0ee5bf6a9cdcc7e462d0ad9e8f84e5877ca667bea8ecfe1fda33defba0f626369fc78eb41067b764f1d", 0x7c, 0xffffffffffff0001}, {&(0x7f0000000b00)="fb49215db39a710f5e69942f8ab70ef96f17eafbbe0a86b0d3b74066951477cf98861f82dfc02803d37590af8fa1298d82eb4322004308e98c05d793b477bffb1214ea6f6594e0427a806f3b73e1e5849028a05c9089dbdd3656e8a1c8ffa565eee0edcb7fd6bf601f4ed5f64c3a321e24ed376af32d2911fcbff62f518d40e7a0eb3c6c4f5480adb7ba285cbf235751dfe05d92d96dc9", 0x97, 0x2}, {&(0x7f0000000bc0)="ec7c290e52157f72059f2a98923db63e5513ad8190d3d999ac5d858e8c111140016af2e101457dc4fab2cf9bf521d74c672f95795cd2ddc0ff75377f66876c326310e0e1cd0a79472b9ed7f3bd4a088add68796d4acc548cc68a51b8371e926b5c5cd37a6460cfb9a50f26c6fa1be8452c1398a5d7d8774b126123ff6f26f7e830c46fce855fff24e9e01e5797d17b26fe4fb4a0aec8278f09b33e744b4f024dd27a87a55a8d5855d64e1bdf220f3357faf7b1d1c63bceeb3b10fd29244433f4d8f3c66e3333ee", 0xc7, 0x9}, {&(0x7f0000000cc0)="0ab5ae9d4d7d1e7acb0347b1c08ba9084461ff8ebc0014464614d13a21e160495ceb997b5309f52211692481f8538388f01164596091d21bd426166ff158e0e2d7046fe66b32bea8caa12d3ad019dc1ebfa008cf24106bdd546f8c9f18635e0e3fb3b474a77eada8f09103ee2f8245be56a07836a4ac100d91be32eae29bc98652b3acacadb7f76fc3fa36b6ee391c52d93c2b87e905b49ee64f1e09b27c57d4d1d434b198e535e36465cd5062a9e872460d5d8a7638b3ca26ec67bfbbe135", 0xbf, 0x2}, {&(0x7f0000000d80)="4ccc8c09fed2d86caf0f9be2a1e9dd8481ac6b647ec4c2a1d8b44c7b391480031baaabfa5730b500eac9148ceef640d32f79d53ffa997a9258affb42", 0x3c, 0x8}, {&(0x7f0000000dc0)="75e210dba6f995d3818447246dfffd3bf3071b27513a38aa6eee81790023148a4efe5e40f97515c11ce7ab8f3e795ab7f2ab9e02688ff66ad696f48200ee", 0x3e, 0xcef}], 0x1844000, &(0x7f0000000ec0)={[{@utf8}, {@check_strict}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x2}}], [{@dont_measure}, {@fowner_eq}]})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r8, &(0x7f0000000f40)={0x2002})
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f80), 0x1, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r9, 0x227b, &(0x7f0000000fc0)=0x1)
syz_io_uring_submit(r7, r4, &(0x7f0000001000)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffff)
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000001040))
ioctl$sock_ifreq(r6, 0x891c, &(0x7f0000001080)={'xfrm0\x00', @ifru_addrs=@nl=@unspec})

02:43:47 executing program 6:
r0 = syz_io_uring_setup(0x2a37, &(0x7f0000000000)={0x0, 0x553b, 0x10, 0x3, 0x1b8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0))
r1 = syz_io_uring_setup(0x5624, &(0x7f0000000100)={0x0, 0x227f, 0x8, 0x2, 0x180, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
shmget(0x2, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)
r2 = syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x204282)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3)
sigaltstack(&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000240))
mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x10000000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48040)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/248, 0xf8, 0x1, &(0x7f0000000540)=""/183, 0xb7}, &(0x7f0000000640)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/103, 0x67, 0x0, &(0x7f0000000700)=""/173, 0xad}, &(0x7f0000000800)=0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000840)={0xde, 0x7ff, 0x20000000, "22a4aa77c59629295c4309f24ba117ab3cab049ea80bf8cdbc54a2d54e749d7c042c166db0ed607745d6c0df09ae3f8238a7f8ce899c529c44d15aa322a48434dac377ad0689d549be77abe28fccd643ddd72c9f2696abbd02ba5234b7fb9c5e8bc59174b689be3aabd34d4835e3f4e2586fe965dc98213e165d9ab2bda721e8e06d2413602fbf01fafdf7edb39311e7a2cd551cbd2d99462ad618a99c6bfff711097d044d189bcb846595be12e0dca2eb153fc10aae2a506eeb22d80e1db10bdf5b19e45db17e9e4a77a8ec7096450e55518af7f0685f849aeb06872ad6"})
mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000)
io_uring_setup(0x721e, &(0x7f0000000940)={0x0, 0x1cfb, 0x20, 0x2, 0xd})
r6 = syz_open_dev$sg(&(0x7f00000009c0), 0xb4, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r6, 0x5385, &(0x7f0000000a00)={0x48, ""/72})
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ec0), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[  132.726181] audit: type=1400 audit(1749350627.793:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:43:47 executing program 7:
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @b}})
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc1}})
getdents(r0, &(0x7f0000000100)=""/113, 0x71)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000041)
getresuid(&(0x7f0000000480)=<r2=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=<r3=>0x0)
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)="9edd5f5c3400b4e1956e5ff6a546d48362d1ed3d207e5dc2aeb4bf6c8efeb3e5d492813a48f2e2af18e049f9cf162377c3cbbd2ac26bc96f97e69a8d5c3180c737bc9220caa5fa7a6881a0fc5c6f7dba97ac24bedcbe2cafa50ecc73d53118a7d966dafc5162dd077ac676a0eb51b5f9048320802e4b1d2e1adb3230aefed14b84ed5136143e27574eefb4f7bb2942e9c513055ffe8c41af1bdb1b1b511dc5c48e0fa6b30a3e2c43ef6305019ff641d58a7159d697fd821878a215d57465c614823bdcfb45af86147a1a2100a87e02254ef2f99d431ed91efca082d166e5d5aa91d613c6628d96cb84b4c162f0c1d2", 0xef, 0x5b}], 0x840, &(0x7f0000000600)={[{@cruft}, {@block={'block', 0x3d, 0x400}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@session={'session', 0x3d, 0x16}}, {@nocompress}, {@unhide}, {@check_strict}], [{@subj_type={'subj_type', 0x3d, '\x00\x00\x11\x11\"\"33'}}, {@euid_gt={'euid>', r2}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, '\x00\x00\x11\x11\"\"33'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x91*\xe5\x10\xa4Xr:\x83\x9a\x9f\xadp\x158\xac'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@uid_lt={'uid<', 0xee00}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq}]})
msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000780))
ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f00000007c0))
ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000800))
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x41}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5b, 0x1, "675b89fa9b3a0e52cfdf4f788df7fb060a66b98e115b14a8596ace074d5c8ea25d70064edd5f6b6adc1c838f60044f6057905e92bfc3237e41486b34a860a7352076eef5ac9766d7fdbaedc55864cfa41ab6fd96b9a9a6"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r4 = gettid()
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs2/custom1\x00', 0xa78da6162f36751, 0x0)
kcmp$KCMP_EPOLL_TFD(r4, 0xffffffffffffffff, 0x7, r5, &(0x7f0000000a00)={0xffffffffffffffff, r6, 0xe000000})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000e0}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40840)
symlinkat(&(0x7f0000000b40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00')

[  134.191370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.196350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.199315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.208672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.216032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.257720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.259330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  134.264454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  134.267500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.268025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  134.273185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.276928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  134.281871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.296012] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.306211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.376711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  134.396964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  134.405020] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  134.417266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  134.422984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  134.441059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  134.443002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  134.464113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  134.490791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  134.493913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  134.498245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  134.500402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  134.513521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  134.516677] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  134.519027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  134.522714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  134.523193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  134.525945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  134.535981] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  134.542032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.548097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  134.555100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  134.573064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  134.597332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  134.616023] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.269022] Bluetooth: hci0: command tx timeout
[  136.396545] Bluetooth: hci2: command tx timeout
[  136.397599] Bluetooth: hci1: command tx timeout
[  136.588795] Bluetooth: hci3: command tx timeout
[  136.653474] Bluetooth: hci4: command tx timeout
[  136.716568] Bluetooth: hci5: command tx timeout
[  136.716883] Bluetooth: hci6: command tx timeout
[  136.717132] Bluetooth: hci7: command tx timeout
[  138.317977] Bluetooth: hci0: command tx timeout
[  138.447472] Bluetooth: hci1: command tx timeout
[  138.447911] Bluetooth: hci2: command tx timeout
[  138.636564] Bluetooth: hci3: command tx timeout
[  138.700598] Bluetooth: hci4: command tx timeout
[  138.764584] Bluetooth: hci7: command tx timeout
[  138.767464] Bluetooth: hci6: command tx timeout
[  138.767894] Bluetooth: hci5: command tx timeout
[  140.364562] Bluetooth: hci0: command tx timeout
[  140.492520] Bluetooth: hci2: command tx timeout
[  140.492967] Bluetooth: hci1: command tx timeout
[  140.684530] Bluetooth: hci3: command tx timeout
[  140.748689] Bluetooth: hci4: command tx timeout
[  140.814468] Bluetooth: hci5: command tx timeout
[  140.814920] Bluetooth: hci6: command tx timeout
[  140.815344] Bluetooth: hci7: command tx timeout
[  142.412791] Bluetooth: hci0: command tx timeout
[  142.540553] Bluetooth: hci1: command tx timeout
[  142.541200] Bluetooth: hci2: command tx timeout
[  142.733764] Bluetooth: hci3: command tx timeout
[  142.796518] Bluetooth: hci4: command tx timeout
[  142.861725] Bluetooth: hci7: command tx timeout
[  142.862229] Bluetooth: hci6: command tx timeout
[  142.862967] Bluetooth: hci5: command tx timeout
[  194.109990] syz-executor.1 (284) used greatest stack depth: 24544 bytes left
[  197.032383] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.037260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.040995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.047987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.053517] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.107925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.111646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.118658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.122977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.128336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.135876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.140864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.146005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.151756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.156793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.165960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.173546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  197.176725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.186292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.192951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.248566] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.252755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.304012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.339409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  197.341833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  197.364126] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  197.365972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  197.377245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.400022] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  197.400537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  197.404213] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.408050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  197.410763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  197.415020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  197.448848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  197.456935] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  197.458144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  197.460338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.481009] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  197.491309] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  199.117102] Bluetooth: hci0: command tx timeout
[  199.180923] Bluetooth: hci1: command tx timeout
[  199.244568] Bluetooth: hci2: command tx timeout
[  199.310479] Bluetooth: hci3: command tx timeout
[  199.500767] Bluetooth: hci4: command tx timeout
[  199.564567] Bluetooth: hci6: command tx timeout
[  199.564677] Bluetooth: hci5: command tx timeout
[  199.565333] Bluetooth: hci7: command tx timeout
[  201.164630] Bluetooth: hci0: command tx timeout
[  201.229473] Bluetooth: hci1: command tx timeout
[  201.292857] Bluetooth: hci2: command tx timeout
[  201.356514] Bluetooth: hci3: command tx timeout
[  201.548562] Bluetooth: hci4: command tx timeout
[  201.612826] Bluetooth: hci7: command tx timeout
[  201.615474] Bluetooth: hci5: command tx timeout
[  201.615510] Bluetooth: hci6: command tx timeout
[  203.212704] Bluetooth: hci0: command tx timeout
[  203.276543] Bluetooth: hci1: command tx timeout
[  203.341021] Bluetooth: hci2: command tx timeout
[  203.404910] Bluetooth: hci3: command tx timeout
[  203.598506] Bluetooth: hci4: command tx timeout
[  203.661007] Bluetooth: hci5: command tx timeout
[  203.661054] Bluetooth: hci7: command tx timeout
[  203.661097] Bluetooth: hci6: command tx timeout
[  205.260625] Bluetooth: hci0: command tx timeout
[  205.325489] Bluetooth: hci1: command tx timeout
[  205.389547] Bluetooth: hci2: command tx timeout
[  205.454518] Bluetooth: hci3: command tx timeout
[  205.645522] Bluetooth: hci4: command tx timeout
[  205.708642] Bluetooth: hci6: command tx timeout
[  205.709655] Bluetooth: hci5: command tx timeout
[  205.710482] Bluetooth: hci7: command tx timeout
[  259.295369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.302050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.306304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.318872] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.330515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.492120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.504154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.508756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.522449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.532386] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.570093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.572241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.578252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.581075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.590023] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.598391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.607889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.611831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.618704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.628091] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.634674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.636861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.647910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.652613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.656155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.739349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.757065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.759915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.762209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.770940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  259.777219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.784371] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.795108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.796750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.796779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  259.822748] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.825011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  259.851089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.857737] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  259.900786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  261.389040] Bluetooth: hci0: command tx timeout
[  261.646499] Bluetooth: hci1: command tx timeout
[  261.708745] Bluetooth: hci4: command tx timeout
[  261.709686] Bluetooth: hci2: command tx timeout
[  261.836691] Bluetooth: hci3: command tx timeout
[  261.900516] Bluetooth: hci5: command tx timeout
[  261.964698] Bluetooth: hci7: command tx timeout
[  262.092569] Bluetooth: hci6: command tx timeout
[  263.436742] Bluetooth: hci0: command tx timeout
[  263.692505] Bluetooth: hci1: command tx timeout
[  263.756503] Bluetooth: hci2: command tx timeout
[  263.756956] Bluetooth: hci4: command tx timeout
[  263.885470] Bluetooth: hci3: command tx timeout
[  263.949762] Bluetooth: hci5: command tx timeout
[  264.012570] Bluetooth: hci7: command tx timeout
[  264.141690] Bluetooth: hci6: command tx timeout
[  265.485570] Bluetooth: hci0: command tx timeout
[  265.740736] Bluetooth: hci1: command tx timeout
[  265.805593] Bluetooth: hci4: command tx timeout
[  265.806092] Bluetooth: hci2: command tx timeout
[  265.932484] Bluetooth: hci3: command tx timeout
[  265.997519] Bluetooth: hci5: command tx timeout
[  266.063477] Bluetooth: hci7: command tx timeout
[  266.189766] Bluetooth: hci6: command tx timeout
[  267.533528] Bluetooth: hci0: command tx timeout
[  267.789857] Bluetooth: hci1: command tx timeout
[  267.852505] Bluetooth: hci2: command tx timeout
[  267.852991] Bluetooth: hci4: command tx timeout
[  267.981514] Bluetooth: hci3: command tx timeout
[  268.045548] Bluetooth: hci5: command tx timeout
[  268.109493] Bluetooth: hci7: command tx timeout
[  268.238719] Bluetooth: hci6: command tx timeout
[  321.444850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.456215] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.465108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.475867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.490719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.632383] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  321.635333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  321.641209] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  321.648801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  321.652351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.731974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.741869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.759977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.790750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.797069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.801181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.803717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.824075] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.829326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.837081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.909239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.909666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.938985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.947206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.947990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.956655] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.960194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.980926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.992069] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  322.016056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  322.028873] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  322.034311] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  322.041996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  322.047263] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  322.071642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  322.079376] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.102401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  322.126237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.148188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.175143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  323.532593] Bluetooth: hci0: command tx timeout
[  323.725052] Bluetooth: hci1: command tx timeout
[  323.916586] Bluetooth: hci3: command tx timeout
[  323.980579] Bluetooth: hci2: command tx timeout
[  324.109525] Bluetooth: hci4: command tx timeout
[  324.172933] Bluetooth: hci5: command tx timeout
[  324.301179] Bluetooth: hci7: command tx timeout
[  324.301207] Bluetooth: hci6: command tx timeout
[  325.580616] Bluetooth: hci0: command tx timeout
[  325.772623] Bluetooth: hci1: command tx timeout
[  325.965577] Bluetooth: hci3: command tx timeout
[  326.029497] Bluetooth: hci2: command tx timeout
[  326.156629] Bluetooth: hci4: command tx timeout
[  326.221612] Bluetooth: hci5: command tx timeout
[  326.350613] Bluetooth: hci6: command tx timeout
[  326.352554] Bluetooth: hci7: command tx timeout
[  327.628591] Bluetooth: hci0: command tx timeout
[  327.822669] Bluetooth: hci1: command tx timeout
[  328.012583] Bluetooth: hci3: command tx timeout
[  328.077470] Bluetooth: hci2: command tx timeout
[  328.206152] Bluetooth: hci4: command tx timeout
[  328.269900] Bluetooth: hci5: command tx timeout
[  328.396621] Bluetooth: hci7: command tx timeout
[  328.397638] Bluetooth: hci6: command tx timeout
[  329.676537] Bluetooth: hci0: command tx timeout
[  329.868496] Bluetooth: hci1: command tx timeout
[  330.060667] Bluetooth: hci3: command tx timeout
[  330.125580] Bluetooth: hci2: command tx timeout
[  330.253170] Bluetooth: hci4: command tx timeout
[  330.316671] Bluetooth: hci5: command tx timeout
[  330.444543] Bluetooth: hci6: command tx timeout
[  330.445753] Bluetooth: hci7: command tx timeout
[  383.779371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.785077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.789096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.802306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.811156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.096998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  384.101465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  384.104637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  384.115324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  384.121054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  384.185866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  384.197253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  384.201375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  384.214931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  384.224165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  384.347894] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.372607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.399984] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  384.404719] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  384.408135] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.416384] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.421814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.430256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.438937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.445177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.464126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  384.468702] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.472480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.487296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.496698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.518528] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.520007] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.539065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.546919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.564125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.635096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.643205] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.681563] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.691433] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.705088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  385.868848] Bluetooth: hci0: command tx timeout
[  386.188804] Bluetooth: hci1: command tx timeout
[  386.317517] Bluetooth: hci2: command tx timeout
[  386.509619] Bluetooth: hci5: command tx timeout
[  386.636530] Bluetooth: hci3: command tx timeout
[  386.892516] Bluetooth: hci6: command tx timeout
[  387.084726] Bluetooth: hci7: command tx timeout
[  387.085896] Bluetooth: hci4: command tx timeout
[  387.916683] Bluetooth: hci0: command tx timeout
[  388.236832] Bluetooth: hci1: command tx timeout
[  388.364497] Bluetooth: hci2: command tx timeout
[  388.556539] Bluetooth: hci5: command tx timeout
[  388.684491] Bluetooth: hci3: command tx timeout
[  388.940636] Bluetooth: hci6: command tx timeout
[  389.132792] Bluetooth: hci4: command tx timeout
[  389.133101] Bluetooth: hci7: command tx timeout
[  389.965664] Bluetooth: hci0: command tx timeout
[  390.285585] Bluetooth: hci1: command tx timeout
[  390.412678] Bluetooth: hci2: command tx timeout
[  390.605562] Bluetooth: hci5: command tx timeout
[  390.733688] Bluetooth: hci3: command tx timeout
[  390.989638] Bluetooth: hci6: command tx timeout
[  391.180720] Bluetooth: hci7: command tx timeout
[  391.181639] Bluetooth: hci4: command tx timeout
[  392.012475] Bluetooth: hci0: command tx timeout
[  392.333438] Bluetooth: hci1: command tx timeout
[  392.460979] Bluetooth: hci2: command tx timeout
[  392.653143] Bluetooth: hci5: command tx timeout
[  392.780636] Bluetooth: hci3: command tx timeout
[  393.036679] Bluetooth: hci6: command tx timeout
[  393.229560] Bluetooth: hci7: command tx timeout
[  393.229687] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
02:48:52  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81604870 RCX=ffff88806ce089cc RDX=1ffff1100d9c117d
RSI=ffffffff813b5ed4 RDI=ffff88806ce08a78 RBP=ffff88806ce08b10 RSP=ffff88806ce08a70
R8 =0000000000000001 R9 =ffff88806ce08ab8 R10=000000000003b6cd R11=000000000000862f
R12=ffff88806ce08b40 R13=0000000000000000 R14=ffff888034758000 R15=ffff88802bfb8a00
RIP=ffffffff81353d50 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe1600000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f03037e8000 CR3=00000000266a0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000042494c4700352e32
XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff888018067738 RCX=ffff88801806768c RDX=1ffff1100300cef2
RSI=ffffffff85c1cbc0 RDI=ffffffff81aebb48 RBP=ffff888018067790 RSP=ffff888018067720
R8 =ffffffff86875c06 R9 =ffff888018067778 R10=000000000003b6cd R11=0000000000024bbb
R12=ffff888018067800 R13=0000000000000000 R14=ffff8880263fd280 R15=ffff888030bc0640
RIP=ffffffff81353b32 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555866f1400 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f71ac490000 CR3=0000000024917000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000001000000010000000000000000
XMM02=000000ff000000ff000000ff000000ff XMM03=ff00000000000000ff0000000000ff00
XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000