Warning: Permanently added '[localhost]:35335' (ECDSA) to the list of known hosts.
2025/06/19 09:02:02 fuzzer started
2025/06/19 09:02:03 dialing manager at localhost:36157
syzkaller login: [   93.813747] cgroup: Unknown subsys name 'net'
[   93.949923] cgroup: Unknown subsys name 'cpuset'
[   93.993719] cgroup: Unknown subsys name 'rlimit'
2025/06/19 09:02:17 syscalls: 203
2025/06/19 09:02:17 code coverage: enabled
2025/06/19 09:02:17 comparison tracing: enabled
2025/06/19 09:02:17 extra coverage: enabled
2025/06/19 09:02:17 setuid sandbox: enabled
2025/06/19 09:02:17 namespace sandbox: enabled
2025/06/19 09:02:17 Android sandbox: enabled
2025/06/19 09:02:17 fault injection: enabled
2025/06/19 09:02:17 leak checking: enabled
2025/06/19 09:02:17 net packet injection: enabled
2025/06/19 09:02:17 net device setup: enabled
2025/06/19 09:02:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/19 09:02:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/19 09:02:17 USB emulation: enabled
2025/06/19 09:02:17 hci packet injection: enabled
2025/06/19 09:02:17 wifi device emulation: enabled
2025/06/19 09:02:17 802.15.4 emulation: enabled
2025/06/19 09:02:17 fetching corpus: 0, signal 0/0 (executing program)
2025/06/19 09:02:18 starting 8 fuzzer processes
09:02:18 executing program 0:
r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1c6d21038f86166bf683c2c6b331829cecb0bb717998f40a51babb85e1d003a494b571919270e1a045484db7696f968038700a3cf40b4ebb0a7b4d72501abfd190bfaa5db75695aa8ec965f1f4f346e702f129bbf4a2ea6fc3a8979753853e9c5ea7259856dafc73318afec85e73", 0x6e, 0xfffffffffffffffe)
r1 = getuid()
setresuid(0xee00, r1, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=@flushpolicy={0x2b4, 0x1d, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@sa={0xe4, 0x6, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x4e24, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x67, 0x0, r1}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x4, 0xd03, 0x80000001, 0xc4, 0xff, 0x7ff, 0x5, 0x1}, {0x8, 0x4, 0xffffffffffffff64, 0x714}, {0x800, 0x80, 0x9}, 0x70bd2d, 0x3501, 0x2, 0x1, 0x6, 0x21}}, @policy_type={0xa}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8001}, @extra_flags={0x8, 0x18, 0x1}, @offload={0xc}, @algo_auth={0xff, 0x1, {{'sha256-neon\x00'}, 0x5b8, "9e69f0e804bf5575a9ec04d4418f4053b63c09967de03111acc7e483be4032c3021a7efc1541c5ea1d02a4083a04cbdd110cc344b7eab6a06400914099c2e6fc9ad3ad3d3523293e21ccd286fb94b183d496bdbabfd813ea43359c11fa65e604f86ecba709a1b3a2b34ad876596fecf1a0cc5788477cc3e7d44a5e678eb82d7f49890a5a06f3c291ca8245391d106c818661f2317ad8a999d5d8a3b0412fbab92d41d57dee3969e77f99300f1fa6dde830d2dd7f12a6e2"}}, @algo_crypt={0x95, 0x2, {{'cbc-camellia-aesni\x00'}, 0x268, "9a75315fc8d484cf66acff31063bae80483656fff00f2143333236969dc627563805f8fdb2d0dda22eabdacf5cbd557e9da51c1a1067bb89c4e0b75d4f6901fa3e442033dd9f2248181315a5cf"}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4}, 0x4008001)
r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r0, &(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x1}, r2)
keyctl$clear(0x7, r2)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x70bd2d, 0x8, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000880)
keyctl$link(0x8, r2, r0)
r5 = add_key(&(0x7f00000006c0)='encrypted\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$clear(0x7, r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4008000)
r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000ac0)='ns/uts\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c80)={0x1a8, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x16c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc0000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd7bb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x64c2e27b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffff90f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x801}, 0x10080)

09:02:18 executing program 1:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0xa040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x114, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2c4b3cb6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x114}, 0x1, 0x0, 0x0, 0x2c020811}, 0x40800)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x114, r3, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xe4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "422a23c507df4b9148c152426515826d335c4326701d7a311369526776dde263"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2ce6}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e836df1dfd88c067bc9a54aab86c38c4"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0x100, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ee}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e12b11cfac8244c52db9f02c2bf92584"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cf59247ac807e4f591b0eb9cedc82e39"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x74, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "401ed6fd82260ff8c762828b3aed6d392616ce5d84b11c8898691d18e95a8256"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff01}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ed507b18dc6f9573947dbac3801887162d65b764809a4105f102b7e6b48953a6"}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x100c0}, 0x14)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000a40)={&(0x7f0000000980), 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x440d1}, 0x40000)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x5c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2008805)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c40)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000f40)={&(0x7f0000000e40), 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r5, 0x400, 0x70bd27, 0x101, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x40)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff)

[  109.475975] audit: type=1400 audit(1750323738.928:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:02:18 executing program 2:
r0 = epoll_create(0x80000001)
epoll_pwait2(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040400}, 0x8000)
semctl$GETPID(0x0, 0xdaa2865a6b6d0e56, 0xb, &(0x7f0000000200))
r2 = semget$private(0x0, 0x1, 0x4dc841c78f8b63b2)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000380)={{0x1, 0xee01, 0xffffffffffffffff, 0xee00, 0x0, 0x80, 0x8}, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
r4 = semget$private(0x0, 0x0, 0xa)
semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000400)=""/208)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000500)={{0x3f, 0x3f}, 'port0\x00', 0x80, 0x120007, 0x5, 0x0, 0x1000, 0x80000000, 0x8, 0x0, 0x4, 0xd9})
semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00000005c0)=""/4)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r5, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x46004)
semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000780)=""/160)
prctl$PR_GET_SECCOMP(0x15)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r5, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

09:02:18 executing program 3:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x30, 0xffffffffffffffff, 0x10000000)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000080)={r1, r2+60000000}, &(0x7f00000000c0)={[0x7f]}, 0x8)
io_pgetevents(0x0, 0x80000000, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8})
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000280)=""/242)
pselect6(0x40, &(0x7f0000000380)={0x5c, 0x8000, 0x2, 0x1, 0x3, 0x8, 0x3, 0x9}, &(0x7f00000003c0)={0x6, 0x4, 0x5, 0x2, 0x1ff, 0xdd1, 0x7fffffff}, &(0x7f0000000400)={0x8, 0x10001, 0xfff, 0x2, 0x100000001, 0x1, 0x5, 0x9}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x80000000]}, 0x8})
clock_gettime(0x0, &(0x7f00000005c0)={<r3=>0x0, <r4=>0x0})
pselect6(0x40, &(0x7f0000000500)={0x400, 0x5, 0x80, 0x401, 0x2, 0x8c, 0x8000, 0x1f}, &(0x7f0000000540)={0xd4, 0x9, 0xf07, 0x2, 0x3, 0x317, 0xb1c}, &(0x7f0000000580)={0x6, 0x8, 0x81, 0xaf6, 0x2, 0x3, 0x3, 0x7}, &(0x7f0000000600)={r3, r4+60000000}, &(0x7f0000000680)={&(0x7f0000000640)={[0x1]}, 0x8})
epoll_pwait(0xffffffffffffffff, &(0x7f00000006c0)=[{}, {}], 0x2, 0x0, &(0x7f0000000700)={[0x7]}, 0x8)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x1010, 0xffffffffffffffff, 0x0)
r6 = io_uring_setup(0x5738, &(0x7f0000000740)={0x0, 0x80e2, 0x0, 0x1, 0x14})
syz_io_uring_submit(r5, r0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3)
r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000800), 0x149400, 0x0)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x40010, r7, 0x8000000)
epoll_pwait(r7, &(0x7f0000000840)=[{}, {}, {}], 0x3, 0x7f, &(0x7f0000000880)={[0xfff]}, 0x8)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14, 0x110, r7, 0x8000000)
syz_io_uring_submit(r8, r0, &(0x7f0000000940)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r7, &(0x7f00000008c0)={0x400, 0x10, 0x2}, &(0x7f0000000900)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2)
pselect6(0x40, &(0x7f0000000980)={0x5, 0x3f, 0x5, 0x0, 0x3, 0x6, 0x101, 0x43}, &(0x7f00000009c0)={0x6, 0x22, 0xffffffff, 0xdaa, 0x7, 0x80000001, 0x52c, 0x4}, &(0x7f0000000a00)={0x80000000, 0xad02, 0x6, 0x7fffffff, 0x200, 0x4c, 0x3, 0x1}, &(0x7f0000000a40)={0x77359400}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x6]}, 0x8})
io_getevents(0x0, 0x7, 0x2, &(0x7f0000000b40)=[{}, {}], &(0x7f0000000b80)={0x77359400})

09:02:19 executing program 4:
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x2f, 0x2, 0x20, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x700, 0x10, 0x2, 0x80}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'gre0\x00', r0, 0x20, 0x700, 0x3f, 0x400, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x65, 0x0, 0x14, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x89, 0x4, "29a5"}, @ssrr={0x89, 0x1b, 0x5a, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @loopback]}]}}}}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x220, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x400}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xbef}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x120, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r2)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000540)={'wg0\x00'})
r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0)
r6 = getgid()
sendmsg$unix(r5, &(0x7f0000000dc0)={&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000600)="ab9c9e5b46175d25138e95330106d65047899805846a47d733b43f5150632601daea20af369d448f096cbaaede5e645d31bfe88395f868ed76b7a3c3eb75ece6fbcd2bc79eb851f307625f8bb414", 0x4e}, {&(0x7f0000000680)="01d08e9ac140cfd475ce6958086ff3ba21be22321d26ac994ab21d5e8b3d92ae4b809b4e9c2335fecd1cdcc6aab7", 0x2e}, {&(0x7f00000006c0)="61d0", 0x2}, {&(0x7f0000000700)="75912853458d6b9b333b807de6ed05a983339443e842af931f479197913373cdb6b0b097c750197ceca96f68b135e5788f77ea9c1fcf9eb5110a85140a14d9aa7cc88eb50690e17911d801fe6d70dd1802f1f89031aa9d747ec77527125ad54a07d3ebdbf93572ae1047aba8ee2e07f27e6584ce63a2982ee2d2f65c567913fda3823c84d4a889ae3c9a6042fdfc5dd7dc112d53d0a6e5ad2b95cdd8eafb82203a6706955791727edb4f23b0e226ac1442adf7e1c0", 0xb5}, {&(0x7f00000007c0)="73570740020fff430e21a44c2f344e5bef93b970f367a6eb1e2497e72ee50e53fa3e57a81040383d44ff2be5318222df6d7ec96eed0ee627d1abb46943b680cb3debb8e1444badd59f373c2dad4e03070f7d77e318740398cd5ec68e5096d36822b1969717fbb8478001389adcfb33d64790ade7a9d478e6cbee90b5f1b0ae334b844e126ebd997a948401100ee5c21dc5e5138f5d3a6b59102f1e2d54838cf8dbc5706a9a2970a4bb1c77d18b13df89c0f7e1e1368659901dd837466b95b46939a926fd96fef2694f2e70f1417a5e000335bdd8c604a68239943d54ceeea1492dd55de641c758e3a4006d07fc6c62170e80", 0xf2}], 0x5, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r4, r4, r1, r4, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}], 0xa0, 0x240440dd}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r2)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000e80)={0x254, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1b3817ec3651b84cdfedcc92656a16808747db012415c5d8a45ad73dde01eecb"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "10eb3d5b4711ee8f7e3938478d901fff"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "59f9c05269f59fc771a8427892986ef4c7c29c774c6e1cb29123a2d8bf65dd72"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "04f99853294246212feb36aa0e9bb9c5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7afeaeaea17ed813cbf98bb62f931bbe70a77513bd9e67d77d31960dfbfd2ea6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "91d6030022f2b053d1b64afa0dec7b86"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfa}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xcf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xa0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4004800}, 0x80)
r8 = syz_open_dev$evdev(&(0x7f0000001180), 0x20, 0x4103)
ioctl$EVIOCGLED(r8, 0x80404519, &(0x7f00000011c0)=""/134)
recvmsg$unix(r4, &(0x7f0000001580)={&(0x7f0000001280)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/41, 0x29}, {&(0x7f0000001340)=""/215, 0xd7}, {&(0x7f0000001440)=""/108, 0x6c}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x1000)
setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f00000015c0)={0x0, [0x401, 0x4], 0xffff}, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x5c, r3, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44041}, 0x0)

09:02:19 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x99, 0x380)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000240)=""/105)
r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x3, 0x800)
ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000300)=""/29)
syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xfa, 0x1, 0x1c, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x10, 0x3, 0x100}})
r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x101580, 0x0)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x4, 0xf7, 0x80, 0x4, 0x0, 0x6, 0x80830, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x401}, 0x22d8, 0xffffffffffffff81, 0x4, 0x9, 0x1ff, 0xed3, 0x45, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x6, r4, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000500), r4)
ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000540)=0x8001)
r5 = pidfd_getfd(r1, r2, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x1c}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000006c0)={0x81, 0x0, {0x3, 0x1, 0x8, 0x0, 0x808000}, 0x1})
r7 = getpgid(0xffffffffffffffff)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000007c0), 0x8d41, 0x0)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x6, 0x3, 0x4, 0x8, 0x0, 0xd3, 0x10000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x14000, 0x4, @perf_config_ext={0xfff, 0x3f}, 0x410e2, 0x2f33, 0x5, 0x2, 0x9, 0x5, 0x6, 0x0, 0xe7, 0x0, 0xffffffffffff48d5}, r7, 0xffffffffffffffff, r8, 0x3)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000800)={0x100, 0x5, 0x0, 'queue1\x00', 0x101})

09:02:19 executing program 6:
modify_ldt$write(0x1, &(0x7f0000000000)={0x46, 0x100000, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000040)={0x82b, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000080)={0x0, 0x9, 0x81, 0x10000, 0x400, 0x5})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000000100), 0x6e, &(0x7f0000002680)=[{&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/223, 0xdf}, {&(0x7f0000001400)=""/113, 0x71}, {&(0x7f0000001480)=""/194, 0xc2}, {&(0x7f0000001580)=""/234, 0xea}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x9, &(0x7f0000002740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}, 0x40)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000028c0)={0x3, 0x7, "80cd8b", 0x7d, 0x5})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000002900))
r4 = accept$unix(r2, &(0x7f0000002980)=@abs, &(0x7f0000002a00)=0x6e)
connect$unix(r4, &(0x7f0000002a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r5 = syz_io_uring_complete(0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, r5, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b00)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10c0}, 0x4000050)
r8 = syz_io_uring_complete(r6)
epoll_wait(r8, &(0x7f0000002c00)=[{}], 0x1, 0xf0ca)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000002c80)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000002dc0)={'wpan3\x00', <r11=>0x0})
recvmsg$unix(r3, &(0x7f0000003fc0)={&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000002e80)=""/4096, 0x1000}], 0x1, &(0x7f0000003ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}, 0x2000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f00000040c0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004000)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r12}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0xa9b1911ab26eaeba}, 0x40)

09:02:19 executing program 7:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xfb, 0x40}, {0x40, 0xfa}, 0x3f, 0x4, 0x5})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40882)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x5a5400)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000001c0)={0x5, 0x20, 0x9})
r2 = io_uring_setup(0x3c3d, &(0x7f0000000240)={0x0, 0xfa55, 0x2, 0x0, 0x29e})
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000002c0))
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000340))
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000400))
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x110, r2, 0x0)
syz_io_uring_setup(0x496f, &(0x7f00000004c0)={0x0, 0xce34, 0x10, 0x0, 0x390, 0x0, r2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7fffffff)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x27)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x9c, 0xffffffff, 0x101, 0xffffc4bb, 0xfffffff9, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000680)={0x0, 0x8, 0x9})
socket$inet6_udplite(0xa, 0x2, 0x88)
prctl$PR_GET_SECCOMP(0x15)

[  111.032691] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.035990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.038479] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.046877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.053052] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.096527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.099454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.101474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.107280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.110350] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.163536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.167480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.180781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.200766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.216771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.316718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.324005] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.326634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.372468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.380472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.391109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.403176] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.406363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.411467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.431747] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.437878] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.439898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.458406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.464291] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.466042] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  111.466851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.477015] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.486723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.493523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.503140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.508006] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.545779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.575561] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.619471] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.628700] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.109658] Bluetooth: hci0: command tx timeout
[  113.173299] Bluetooth: hci1: command tx timeout
[  113.301637] Bluetooth: hci2: command tx timeout
[  113.493556] Bluetooth: hci3: command tx timeout
[  113.556290] Bluetooth: hci5: command tx timeout
[  113.620389] Bluetooth: hci6: command tx timeout
[  113.620683] Bluetooth: hci4: command tx timeout
[  113.749979] Bluetooth: hci7: command tx timeout
[  115.156421] Bluetooth: hci0: command tx timeout
[  115.220265] Bluetooth: hci1: command tx timeout
[  115.349322] Bluetooth: hci2: command tx timeout
[  115.541305] Bluetooth: hci3: command tx timeout
[  115.604729] Bluetooth: hci5: command tx timeout
[  115.668464] Bluetooth: hci6: command tx timeout
[  115.668693] Bluetooth: hci4: command tx timeout
[  115.796272] Bluetooth: hci7: command tx timeout
[  117.204678] Bluetooth: hci0: command tx timeout
[  117.268423] Bluetooth: hci1: command tx timeout
[  117.396287] Bluetooth: hci2: command tx timeout
[  117.588396] Bluetooth: hci3: command tx timeout
[  117.652452] Bluetooth: hci5: command tx timeout
[  117.716510] Bluetooth: hci4: command tx timeout
[  117.716969] Bluetooth: hci6: command tx timeout
[  117.844304] Bluetooth: hci7: command tx timeout
[  119.253439] Bluetooth: hci0: command tx timeout
[  119.317298] Bluetooth: hci1: command tx timeout
[  119.445302] Bluetooth: hci2: command tx timeout
[  119.636417] Bluetooth: hci3: command tx timeout
[  119.701625] Bluetooth: hci5: command tx timeout
[  119.765718] Bluetooth: hci4: command tx timeout
[  119.765963] Bluetooth: hci6: command tx timeout
[  119.893609] Bluetooth: hci7: command tx timeout
[  170.741274] syz-executor.0 (281) used greatest stack depth: 24576 bytes left
[  173.278922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.282097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.283364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.288034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.290774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.425391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.429499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.440619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.446780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.449646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.459158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.470348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.479802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.483859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.485750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.636785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.638333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.642620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.651558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.658679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.680609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.695848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.700618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.710559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.721749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.775988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.798751] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.799610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.808031] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.817097] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.817782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.828909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.830246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.839173] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.854416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.856056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.871375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.895555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.903732] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.907716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.380827] Bluetooth: hci0: command tx timeout
[  175.508292] Bluetooth: hci1: command tx timeout
[  175.572282] Bluetooth: hci2: command tx timeout
[  175.700304] Bluetooth: hci3: command tx timeout
[  175.828432] Bluetooth: hci4: command tx timeout
[  175.956490] Bluetooth: hci5: command tx timeout
[  175.957165] Bluetooth: hci7: command tx timeout
[  176.021279] Bluetooth: hci6: command tx timeout
[  177.428278] Bluetooth: hci0: command tx timeout
[  177.557446] Bluetooth: hci1: command tx timeout
[  177.621248] Bluetooth: hci2: command tx timeout
[  177.749273] Bluetooth: hci3: command tx timeout
[  177.876264] Bluetooth: hci4: command tx timeout
[  178.004866] Bluetooth: hci5: command tx timeout
[  178.005342] Bluetooth: hci7: command tx timeout
[  178.068318] Bluetooth: hci6: command tx timeout
[  179.476297] Bluetooth: hci0: command tx timeout
[  179.604265] Bluetooth: hci1: command tx timeout
[  179.668272] Bluetooth: hci2: command tx timeout
[  179.796751] Bluetooth: hci3: command tx timeout
[  179.925233] Bluetooth: hci4: command tx timeout
[  180.052531] Bluetooth: hci5: command tx timeout
[  180.052962] Bluetooth: hci7: command tx timeout
[  180.117281] Bluetooth: hci6: command tx timeout
[  181.524488] Bluetooth: hci0: command tx timeout
[  181.654223] Bluetooth: hci1: command tx timeout
[  181.716323] Bluetooth: hci2: command tx timeout
[  181.844353] Bluetooth: hci3: command tx timeout
[  181.972261] Bluetooth: hci4: command tx timeout
[  182.100472] Bluetooth: hci5: command tx timeout
[  182.100902] Bluetooth: hci7: command tx timeout
[  182.165283] Bluetooth: hci6: command tx timeout
[  235.576751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.583630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.595838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.616744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.617744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.622123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.624125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.627025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.629766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.633838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.801053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.834674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.837778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.846775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.846853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.864012] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.874665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.877152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.879334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.884658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.888036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.890149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.905534] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.929410] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.943331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.984595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.027978] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.038767] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.054808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.060059] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.084606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.102662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.125493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.137027] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.185384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.185480] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.189038] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.202451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.223482] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.229888] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.652495] Bluetooth: hci0: command tx timeout
[  237.718237] Bluetooth: hci1: command tx timeout
[  237.972321] Bluetooth: hci2: command tx timeout
[  238.036695] Bluetooth: hci3: command tx timeout
[  238.165102] Bluetooth: hci4: command tx timeout
[  238.228277] Bluetooth: hci5: command tx timeout
[  238.292323] Bluetooth: hci7: command tx timeout
[  238.356557] Bluetooth: hci6: command tx timeout
[  239.701409] Bluetooth: hci0: command tx timeout
[  239.764266] Bluetooth: hci1: command tx timeout
[  240.020490] Bluetooth: hci2: command tx timeout
[  240.085229] Bluetooth: hci3: command tx timeout
[  240.213713] Bluetooth: hci4: command tx timeout
[  240.278233] Bluetooth: hci5: command tx timeout
[  240.341257] Bluetooth: hci7: command tx timeout
[  240.404579] Bluetooth: hci6: command tx timeout
[  241.748673] Bluetooth: hci0: command tx timeout
[  241.812413] Bluetooth: hci1: command tx timeout
[  242.068370] Bluetooth: hci2: command tx timeout
[  242.132613] Bluetooth: hci3: command tx timeout
[  242.261579] Bluetooth: hci4: command tx timeout
[  242.325255] Bluetooth: hci5: command tx timeout
[  242.388447] Bluetooth: hci7: command tx timeout
[  242.453254] Bluetooth: hci6: command tx timeout
[  243.796396] Bluetooth: hci0: command tx timeout
[  243.860451] Bluetooth: hci1: command tx timeout
[  244.116360] Bluetooth: hci2: command tx timeout
[  244.180611] Bluetooth: hci3: command tx timeout
[  244.308516] Bluetooth: hci4: command tx timeout
[  244.373220] Bluetooth: hci5: command tx timeout
[  244.436282] Bluetooth: hci7: command tx timeout
[  244.500839] Bluetooth: hci6: command tx timeout
[  295.914640] syz-executor.7 (5473) used greatest stack depth: 24544 bytes left
[  297.895684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.899523] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.902653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.909674] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.913733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.958899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.962760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.965119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.970063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.973784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.256908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.270917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.272837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.277137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.287020] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.290019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.299792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.304627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.309750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.324537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.430650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.440925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.448747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.450662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.453730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.458096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.460899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.463695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.465289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.478542] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.480997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.484769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.488373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.490292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.495775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.499316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  298.520981] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.526552] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.530919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.549955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.988441] Bluetooth: hci1: command tx timeout
[  299.988520] Bluetooth: hci0: command tx timeout
[  300.372379] Bluetooth: hci2: command tx timeout
[  300.436604] Bluetooth: hci3: command tx timeout
[  300.564332] Bluetooth: hci5: command tx timeout
[  300.564983] Bluetooth: hci7: command tx timeout
[  300.692273] Bluetooth: hci4: command tx timeout
[  300.693697] Bluetooth: hci6: command tx timeout
[  302.036753] Bluetooth: hci1: command tx timeout
[  302.037096] Bluetooth: hci0: command tx timeout
[  302.420409] Bluetooth: hci2: command tx timeout
[  302.486227] Bluetooth: hci3: command tx timeout
[  302.612837] Bluetooth: hci5: command tx timeout
[  302.613588] Bluetooth: hci7: command tx timeout
[  302.741520] Bluetooth: hci6: command tx timeout
[  302.741761] Bluetooth: hci4: command tx timeout
[  304.085086] Bluetooth: hci0: command tx timeout
[  304.085974] Bluetooth: hci1: command tx timeout
[  304.469236] Bluetooth: hci2: command tx timeout
[  304.532308] Bluetooth: hci3: command tx timeout
[  304.660377] Bluetooth: hci5: command tx timeout
[  304.661525] Bluetooth: hci7: command tx timeout
[  304.789317] Bluetooth: hci4: command tx timeout
[  304.789899] Bluetooth: hci6: command tx timeout
[  306.132309] Bluetooth: hci1: command tx timeout
[  306.133301] Bluetooth: hci0: command tx timeout
[  306.516328] Bluetooth: hci2: command tx timeout
[  306.580262] Bluetooth: hci3: command tx timeout
[  306.708443] Bluetooth: hci7: command tx timeout
[  306.708582] Bluetooth: hci5: command tx timeout
[  306.836432] Bluetooth: hci6: command tx timeout
[  306.838122] Bluetooth: hci4: command tx timeout
[  360.180037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.182907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.187713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.195846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.204897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.483582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.486962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.489956] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.499153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.505704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.525923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.537847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.550917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.563762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.568751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.593584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.601844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.607092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.627942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.635871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  360.686141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.692107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.695137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.701998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  360.707828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.897946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.906863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.945632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  361.005826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.065289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.300682] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  361.344913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.346809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  361.348843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  361.354534] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.357794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.370043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.392767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.408052] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.421325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.261297] Bluetooth: hci0: command tx timeout
[  362.580644] Bluetooth: hci1: command tx timeout
[  362.644430] Bluetooth: hci2: command tx timeout
[  362.709399] Bluetooth: hci3: command tx timeout
[  362.772275] Bluetooth: hci4: command tx timeout
[  363.284453] Bluetooth: hci5: command tx timeout
[  363.412304] Bluetooth: hci6: command tx timeout
[  363.476296] Bluetooth: hci7: command tx timeout
[  364.308553] Bluetooth: hci0: command tx timeout
[  364.628263] Bluetooth: hci1: command tx timeout
[  364.692510] Bluetooth: hci2: command tx timeout
[  364.756303] Bluetooth: hci3: command tx timeout
[  364.822222] Bluetooth: hci4: command tx timeout
[  365.332274] Bluetooth: hci5: command tx timeout
[  365.460426] Bluetooth: hci6: command tx timeout
[  365.524284] Bluetooth: hci7: command tx timeout
[  366.356433] Bluetooth: hci0: command tx timeout
[  366.676331] Bluetooth: hci1: command tx timeout
[  366.741596] Bluetooth: hci2: command tx timeout
[  366.804473] Bluetooth: hci3: command tx timeout
[  366.869300] Bluetooth: hci4: command tx timeout
[  367.380533] Bluetooth: hci5: command tx timeout
[  367.508288] Bluetooth: hci6: command tx timeout
[  367.572325] Bluetooth: hci7: command tx timeout
[  368.404258] Bluetooth: hci0: command tx timeout
[  368.724287] Bluetooth: hci1: command tx timeout
[  368.788415] Bluetooth: hci2: command tx timeout
[  368.852273] Bluetooth: hci3: command tx timeout
[  368.916490] Bluetooth: hci4: command tx timeout
[  369.429436] Bluetooth: hci5: command tx timeout
[  369.556304] Bluetooth: hci6: command tx timeout
[  369.620310] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
09:07:21  Registers:
info registers vcpu 0
RAX=ffff8880159a1b80 RBX=ffffffff816049e0 RCX=ffff88802f10f5a0 RDX=0000000000000070
RSI=0000000000000000 RDI=ffff88802f10f508 RBP=ffff8880159a1b80 RSP=ffff88802f10f4d0
R8 =0000000000000001 R9 =0000000000000000 R10=ffff88800eabf460 R11=0000000000000001
R12=0000000000000000 R13=ffff88802f10f530 R14=ffff8880159a1b80 R15=ffff88802f10f508
RIP=ffffffff813561d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b658006f4 CR3=000000002f2f2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f9b6580f47000007f9b6580ef20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff8787eb08 RBX=ffff8880336c5280 RCX=7935e0ea68068d10 RDX=00000000649236d1
RSI=0000000030168dfc RDI=ffff8880336c5d00 RBP=ffff8880336c5cd8 RSP=ffff8880255ef8f8
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff8880336c5d00 R13=0000000000001a36 R14=0000000000000001 R15=7935e0ea68068d10
RIP=ffffffff81519856 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe6300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555fdba9d4c8 CR3=00000000350f3000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000