Warning: Permanently added '[localhost]:37050' (ECDSA) to the list of known hosts.
2025/06/25 04:24:59 fuzzer started
2025/06/25 04:25:00 dialing manager at localhost:42423
syzkaller login: [   93.160042] cgroup: Unknown subsys name 'net'
[   93.304129] cgroup: Unknown subsys name 'cpuset'
[   93.342203] cgroup: Unknown subsys name 'rlimit'
2025/06/25 04:25:17 syscalls: 200
2025/06/25 04:25:17 code coverage: enabled
2025/06/25 04:25:17 comparison tracing: enabled
2025/06/25 04:25:17 extra coverage: enabled
2025/06/25 04:25:17 setuid sandbox: enabled
2025/06/25 04:25:17 namespace sandbox: enabled
2025/06/25 04:25:17 Android sandbox: enabled
2025/06/25 04:25:17 fault injection: enabled
2025/06/25 04:25:17 leak checking: enabled
2025/06/25 04:25:17 net packet injection: enabled
2025/06/25 04:25:17 net device setup: enabled
2025/06/25 04:25:17 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/25 04:25:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/25 04:25:17 USB emulation: enabled
2025/06/25 04:25:17 hci packet injection: enabled
2025/06/25 04:25:17 wifi device emulation: enabled
2025/06/25 04:25:17 802.15.4 emulation: enabled
2025/06/25 04:25:17 fetching corpus: 0, signal 0/0 (executing program)
2025/06/25 04:25:18 starting 8 fuzzer processes
04:25:18 executing program 0:
ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000000))
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), 0x4)
r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x3ff, 0x280000)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000140)={0xffffe19d, 0x9, 0x0, 0x7fffffff, 0xa15, 0x1, 0x8ed})
bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x4000097)
r2 = gettid()
r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x5, 0x3, 0x81, 0x4, 0x0, 0x1f, 0xc068, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x40000, 0x1, 0xb4e, 0x9, 0x6, 0x85, 0x6c, 0x0, 0x100, 0x0, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x7bb)
r4 = pidfd_getfd(r0, r3, 0x0)
getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000480)={&(0x7f0000000440)="44ce01bdd62728e07e612dfbf56890d92aa9c3b9ac55aae7d3ba5479aeb842725e4862068270e1f0aa", 0x29}, 0x1, 0x0, 0x0, 0x4000000}, 0x10814)
r5 = accept(r0, 0x0, &(0x7f0000000500))
getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4)

04:25:18 executing program 1:
r0 = getgid()
r1 = syz_io_uring_complete(0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x682080)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
getgroups(0x6, &(0x7f0000000040)=[<r3=>0xee01, <r4=>r0, <r5=>r0, <r6=>r0, <r7=>r0, <r8=>r0])
r9 = getegid()
r10 = getegid()
getgroups(0x6, &(0x7f00000000c0)=[<r11=>r4, r0, <r12=>r0, <r13=>r9, r0, r10])
r14 = getgid()
getgroups(0x4, &(0x7f0000000100)=[r6, r5, r3, <r15=>r13])
r16 = getgid()
r17 = getegid()
getgroups(0xa, &(0x7f0000000140)=[<r18=>r3, r0, r6, r14, r15, r16, <r19=>r17, r11, <r20=>r8, r7])
syz_open_dev$rtc(&(0x7f0000000180), 0x81, 0x802080)
r21 = getgid()
r22 = getegid()
getgroups(0x7, &(0x7f0000000200)=[r21, r22, r20, r12, r18, 0x0, r19])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0)
r23 = getegid()
getgroups(0x7, &(0x7f0000000280)=[r23, 0xee01, r20, r13, 0x0, 0xffffffffffffffff, 0x0])

04:25:18 executing program 2:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x6, 0xbc, 0x0, 0x9, 0x5}, 0x400)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockname(r0, &(0x7f0000000100)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x80)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=0x2, 0x4)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x2, @any, 0xf62}, 0xe)
r1 = accept(r0, 0x0, &(0x7f0000000380))
getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x2000888c)
gettid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r4)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x100010, r2, 0x10000000)
syz_io_uring_submit(0x0, r5, &(0x7f00000005c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index=0x9, 0x4, 0x9, 0x6, 0x3, 0x1, {0x3}}, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r6, &(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x80)

04:25:18 executing program 3:
getgroups(0x8, &(0x7f0000000040)=[0x0, 0xee00, 0x0, <r0=>0xee00, 0x0, 0xee00, 0xee01, <r1=>0x0])
r2 = getegid()
getgroups(0x8, &(0x7f0000000080)=[r1, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0x0, 0x0, r2])
getegid()
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2192, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r3, &(0x7f0000000640)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x9b8, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/19, 0x13}, {&(0x7f0000000540)=""/50, 0x32}], 0x9, 0x10, 0x1}, 0x6)
getgroups(0x1, &(0x7f0000000680)=[r0])
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x50, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r4, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x5)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f0000000700)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x200}, 0x1}, 0x9)
accept(0xffffffffffffffff, &(0x7f0000000740)=@l2={0x1f, 0x0, @none}, &(0x7f00000007c0)=0x80)
getegid()
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000840)={0x3, 0x80, 0x2, 0x1e, 0x80, 0x80, 0x0, 0x7f, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000800), 0x4}, 0x2090, 0x1, 0xffffffff, 0x0, 0x7ff, 0x5, 0x3ff, 0x0, 0x200, 0x0, 0x80000}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ustat(0x4, &(0x7f00000008c0))
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/custom0\x00')
ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000940))
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000980))

[  111.318445] audit: type=1400 audit(1750825518.828:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:25:18 executing program 4:
getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x3, 0x7, 0x0, 0x1000, 0x0, 0x1}, 0x10000)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept(r1, &(0x7f0000000300)=@hci, &(0x7f0000000380)=0x80)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x0, 0x600, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r0}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/bus/clockevents', 0x20800, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x92081f0494f14cac}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40044}, 0x14)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000006c0), 0x4)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/boot_params', 0x484000, 0x42)
getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4)
io_uring_setup(0x3d02, &(0x7f00000007c0)={0x0, 0xaa90, 0x2, 0x3, 0x258, 0x0, r5})
getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000840), &(0x7f0000000880)=0x6)
mq_getsetattr(0xffffffffffffffff, &(0x7f00000008c0)={0x100, 0xbdd, 0x4, 0x100}, 0x0)

04:25:18 executing program 5:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0xa0c, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2010)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r1)
r3 = accept4$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x0, @fixed}, &(0x7f00000002c0)=0xe, 0x800)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000480)={0x0, 0x0, {0x8, 0x26, 0x4, 0x2, 0x9, 0x5, 0x4, 0xba}})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000081)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000005c0)=0x2, 0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}}, 0x800)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000009c0)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x20000840)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x6)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b80), 0x20a01, 0x0)

04:25:18 executing program 6:
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop6', 0x400, 0xe9)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0x54, 0xa7f, 0x2, 0x0, 0x5, 0x2, 0x3})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = accept4$bt_l2cap(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x32, 0x21, 0x9, 0x15, 0x4, 0x80000000, 0x5, 0x9, 0x1})
ioctl$RTC_WIE_ON(r1, 0x700f)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000200)={0x1f, 0x3, 0x4, 0x18, 0xa, 0x7f, 0x3, 0x2e})
openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x408000, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44014}, 0x1)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000400)=0x7)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r4)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20152000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r8, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xaa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4040)

04:25:18 executing program 7:
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x5)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000440)={0x1, 0x0, {0x13, 0x1d, 0x15, 0x1c, 0x9, 0x4, 0x2, 0x36, 0xffffffffffffffff}})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x805)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff})
socketpair(0x6, 0x6, 0x1f, &(0x7f00000006c0)={<r8=>0xffffffffffffffff})
r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x793d3bab385a1aab, 0x0)
socketpair(0x1a, 0x2, 0x7, &(0x7f0000000740)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa4, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x31ab}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x84)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1000}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4000051)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000009c0)=@ready={0x0, 0x0, 0x8, "44975122", {0x1, 0x1, 0x20, 0x7, 0x5}})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc024}, 0x0)

[  112.628673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  112.640223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  112.644278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  112.659133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  112.670062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  112.727033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.732234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.735308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.750154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.755287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.759398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.774211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.784832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.805394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.814994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  112.818544] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.822191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  112.828560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  112.851483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  112.863529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.882494] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  112.894879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  112.897774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  112.925154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  112.931396] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  112.931608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  112.938430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  112.953633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  112.961364] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  112.965885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  112.979364] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  112.986635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  112.988775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.003355] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.025472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.030700] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.034205] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.059842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.074069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.099517] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.756714] Bluetooth: hci0: command tx timeout
[  114.818996] Bluetooth: hci1: command tx timeout
[  114.883021] Bluetooth: hci2: command tx timeout
[  114.947031] Bluetooth: hci3: command tx timeout
[  115.075159] Bluetooth: hci4: command tx timeout
[  115.075197] Bluetooth: hci5: command tx timeout
[  115.139379] Bluetooth: hci6: command tx timeout
[  115.140358] Bluetooth: hci7: command tx timeout
[  116.803074] Bluetooth: hci0: command tx timeout
[  116.868978] Bluetooth: hci1: command tx timeout
[  116.932169] Bluetooth: hci2: command tx timeout
[  116.995018] Bluetooth: hci3: command tx timeout
[  117.123222] Bluetooth: hci4: command tx timeout
[  117.125471] Bluetooth: hci5: command tx timeout
[  117.187056] Bluetooth: hci7: command tx timeout
[  117.188894] Bluetooth: hci6: command tx timeout
[  118.851007] Bluetooth: hci0: command tx timeout
[  118.915387] Bluetooth: hci1: command tx timeout
[  118.978993] Bluetooth: hci2: command tx timeout
[  119.043149] Bluetooth: hci3: command tx timeout
[  119.171156] Bluetooth: hci5: command tx timeout
[  119.171347] Bluetooth: hci4: command tx timeout
[  119.236954] Bluetooth: hci6: command tx timeout
[  119.237024] Bluetooth: hci7: command tx timeout
[  120.911045] Bluetooth: hci0: command tx timeout
[  120.962998] Bluetooth: hci1: command tx timeout
[  121.027165] Bluetooth: hci2: command tx timeout
[  121.091013] Bluetooth: hci3: command tx timeout
[  121.220071] Bluetooth: hci4: command tx timeout
[  121.220117] Bluetooth: hci5: command tx timeout
[  121.283103] Bluetooth: hci7: command tx timeout
[  121.285945] Bluetooth: hci6: command tx timeout
[  174.879377] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.883446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  174.885835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  174.891561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  174.896203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.004330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.008292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.020775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.040172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.051382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.165874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.179540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.182118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.191271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.198413] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.242481] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  175.253445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  175.259603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  175.282281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  175.291747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.328693] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  175.354200] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  175.360417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  175.384741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  175.387431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  175.441811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  175.459563] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  175.486519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  175.518266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  175.539662] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  175.541801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.554103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  175.573216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  175.614421] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  175.620216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.948336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  175.961302] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  175.978645] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.020629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.033760] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.963064] Bluetooth: hci0: command tx timeout
[  177.091274] Bluetooth: hci1: command tx timeout
[  177.283122] Bluetooth: hci2: command tx timeout
[  177.348077] Bluetooth: hci3: command tx timeout
[  177.475202] Bluetooth: hci4: command tx timeout
[  177.603220] Bluetooth: hci6: command tx timeout
[  177.731059] Bluetooth: hci5: command tx timeout
[  178.180028] Bluetooth: hci7: command tx timeout
[  179.011162] Bluetooth: hci0: command tx timeout
[  179.139334] Bluetooth: hci1: command tx timeout
[  179.331283] Bluetooth: hci2: command tx timeout
[  179.395197] Bluetooth: hci3: command tx timeout
[  179.522995] Bluetooth: hci4: command tx timeout
[  179.650987] Bluetooth: hci6: command tx timeout
[  179.779115] Bluetooth: hci5: command tx timeout
[  180.227596] Bluetooth: hci7: command tx timeout
[  181.059189] Bluetooth: hci0: command tx timeout
[  181.187104] Bluetooth: hci1: command tx timeout
[  181.379011] Bluetooth: hci2: command tx timeout
[  181.442970] Bluetooth: hci3: command tx timeout
[  181.570968] Bluetooth: hci4: command tx timeout
[  181.699942] Bluetooth: hci6: command tx timeout
[  181.828143] Bluetooth: hci5: command tx timeout
[  182.275133] Bluetooth: hci7: command tx timeout
[  183.107306] Bluetooth: hci0: command tx timeout
[  183.235124] Bluetooth: hci1: command tx timeout
[  183.426987] Bluetooth: hci2: command tx timeout
[  183.492936] Bluetooth: hci3: command tx timeout
[  183.619352] Bluetooth: hci4: command tx timeout
[  183.747377] Bluetooth: hci6: command tx timeout
[  183.875039] Bluetooth: hci5: command tx timeout
[  184.323214] Bluetooth: hci7: command tx timeout
[  237.133554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.137607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.140969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.146242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.149525] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.209323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  237.219192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  237.221315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  237.230867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  237.234188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  237.325814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  237.331203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  237.332735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  237.337159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  237.339162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  237.419682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.428835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.434260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.437574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.439327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  237.494890] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  237.501837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  237.506077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  237.521296] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  237.522533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  237.523968] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  237.526333] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  237.528104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  237.553268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  237.557205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  237.587516] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  237.605706] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  237.612091] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  237.617540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  237.628635] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  237.629793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  237.654656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  237.656111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  237.668178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.669780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.171988] Bluetooth: hci0: command tx timeout
[  239.300015] Bluetooth: hci1: command tx timeout
[  239.365151] Bluetooth: hci2: command tx timeout
[  239.492003] Bluetooth: hci3: command tx timeout
[  239.555002] Bluetooth: hci5: command tx timeout
[  239.619120] Bluetooth: hci4: command tx timeout
[  239.811126] Bluetooth: hci6: command tx timeout
[  239.811187] Bluetooth: hci7: command tx timeout
[  241.221291] Bluetooth: hci0: command tx timeout
[  241.347056] Bluetooth: hci1: command tx timeout
[  241.413936] Bluetooth: hci2: command tx timeout
[  241.539499] Bluetooth: hci3: command tx timeout
[  241.603996] Bluetooth: hci5: command tx timeout
[  241.668941] Bluetooth: hci4: command tx timeout
[  241.859053] Bluetooth: hci7: command tx timeout
[  241.859075] Bluetooth: hci6: command tx timeout
[  243.267068] Bluetooth: hci0: command tx timeout
[  243.395093] Bluetooth: hci1: command tx timeout
[  243.459156] Bluetooth: hci2: command tx timeout
[  243.589172] Bluetooth: hci3: command tx timeout
[  243.651141] Bluetooth: hci5: command tx timeout
[  243.715208] Bluetooth: hci4: command tx timeout
[  243.908955] Bluetooth: hci7: command tx timeout
[  243.909020] Bluetooth: hci6: command tx timeout
[  245.318188] Bluetooth: hci0: command tx timeout
[  245.444010] Bluetooth: hci1: command tx timeout
[  245.508286] Bluetooth: hci2: command tx timeout
[  245.635972] Bluetooth: hci3: command tx timeout
[  245.700255] Bluetooth: hci5: command tx timeout
[  245.764942] Bluetooth: hci4: command tx timeout
[  245.955201] Bluetooth: hci6: command tx timeout
[  245.955708] Bluetooth: hci7: command tx timeout
[  299.547229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.552536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.555876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.562508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.567263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.678111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.690856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.694445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.703745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.708823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.811458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.822488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.835639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.855536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.870500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.075175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.083446] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.094516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.102593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.143804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.149609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.156221] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.176393] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.187535] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.196442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.213316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.222969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.230854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.234414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.234461] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.237237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.245048] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.253260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.278429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.300583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.316263] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.329591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.340632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.384430] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.403049] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.636308] Bluetooth: hci0: command tx timeout
[  301.827249] Bluetooth: hci1: command tx timeout
[  301.955246] Bluetooth: hci2: command tx timeout
[  302.339121] Bluetooth: hci4: command tx timeout
[  302.403620] Bluetooth: hci3: command tx timeout
[  302.404949] Bluetooth: hci6: command tx timeout
[  302.467449] Bluetooth: hci5: command tx timeout
[  302.531450] Bluetooth: hci7: command tx timeout
[  303.683954] Bluetooth: hci0: command tx timeout
[  303.876053] Bluetooth: hci1: command tx timeout
[  304.004069] Bluetooth: hci2: command tx timeout
[  304.387053] Bluetooth: hci4: command tx timeout
[  304.451033] Bluetooth: hci3: command tx timeout
[  304.451077] Bluetooth: hci6: command tx timeout
[  304.517063] Bluetooth: hci5: command tx timeout
[  304.580202] Bluetooth: hci7: command tx timeout
[  305.731987] Bluetooth: hci0: command tx timeout
[  305.923978] Bluetooth: hci1: command tx timeout
[  306.052126] Bluetooth: hci2: command tx timeout
[  306.437109] Bluetooth: hci4: command tx timeout
[  306.499001] Bluetooth: hci6: command tx timeout
[  306.500085] Bluetooth: hci3: command tx timeout
[  306.563191] Bluetooth: hci5: command tx timeout
[  306.627042] Bluetooth: hci7: command tx timeout
[  307.779133] Bluetooth: hci0: command tx timeout
[  307.970965] Bluetooth: hci1: command tx timeout
[  308.101082] Bluetooth: hci2: command tx timeout
[  308.483962] Bluetooth: hci4: command tx timeout
[  308.547408] Bluetooth: hci3: command tx timeout
[  308.547436] Bluetooth: hci6: command tx timeout
[  308.612199] Bluetooth: hci5: command tx timeout
[  308.675777] Bluetooth: hci7: command tx timeout
[  362.002743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.007594] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.010491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.020493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.026332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.087061] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.091622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.095623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  362.101594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  362.120843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  362.268247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  362.277394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  362.302475] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  362.309729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  362.314613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  362.393278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.399441] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.403162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.411888] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.414269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  362.421263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.440717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  362.460173] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  362.472334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  362.497553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.508200] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.529709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  362.533693] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.593154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.605460] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.610102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.616478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.622788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.631499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.667407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.671474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.717669] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.730140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.732280] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.818653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  364.099191] Bluetooth: hci0: command tx timeout
[  364.163002] Bluetooth: hci1: command tx timeout
[  364.355072] Bluetooth: hci2: command tx timeout
[  364.482997] Bluetooth: hci4: command tx timeout
[  364.739156] Bluetooth: hci5: command tx timeout
[  364.739206] Bluetooth: hci3: command tx timeout
[  364.868016] Bluetooth: hci6: command tx timeout
[  364.931191] Bluetooth: hci7: command tx timeout
[  366.148028] Bluetooth: hci0: command tx timeout
[  366.210973] Bluetooth: hci1: command tx timeout
[  366.403640] Bluetooth: hci2: command tx timeout
[  366.532975] Bluetooth: hci4: command tx timeout
[  366.787377] Bluetooth: hci3: command tx timeout
[  366.787444] Bluetooth: hci5: command tx timeout
[  366.914994] Bluetooth: hci6: command tx timeout
[  366.979163] Bluetooth: hci7: command tx timeout
[  368.196180] Bluetooth: hci0: command tx timeout
[  368.260666] Bluetooth: hci1: command tx timeout
[  368.451018] Bluetooth: hci2: command tx timeout
[  368.579089] Bluetooth: hci4: command tx timeout
[  368.836013] Bluetooth: hci5: command tx timeout
[  368.836862] Bluetooth: hci3: command tx timeout
[  368.963135] Bluetooth: hci6: command tx timeout
[  369.026991] Bluetooth: hci7: command tx timeout
[  370.243098] Bluetooth: hci0: command tx timeout
[  370.307967] Bluetooth: hci1: command tx timeout
[  370.499178] Bluetooth: hci2: command tx timeout
[  370.628967] Bluetooth: hci4: command tx timeout
[  370.884035] Bluetooth: hci5: command tx timeout
[  370.884529] Bluetooth: hci3: command tx timeout
[  371.012039] Bluetooth: hci6: command tx timeout
[  371.076070] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:30:28  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=0000000000000001 RCX=ffffffff81b2398c RDX=000000000000b239
RSI=000000000000b239 RDI=ffffffff86c8e3c4 RBP=ffff88802ecc7600 RSP=ffff88802ecc7538
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b53d R11=0000000000000001
R12=ffff88802ecc7608 R13=ffff88802ecc75f0 R14=ffff88802ecc75e9 R15=ffff88802ecc75a8
RIP=ffffffff81353e5e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0759f70540 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c35b964fa8 CR3=000000001c979000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff888015d46e48 RBX=ffff8880316d7778 RCX=ffffffff84ac0012 RDX=0000000000000008
RSI=ffff888015d47450 RDI=ffff888015d46e48 RBP=ffff8880316d7b18 RSP=ffff8880316d7450
R8 =00007ffd96894fff R9 =00007ffd96894fff R10=ffff888015d46e4f R11=0000000000000000
R12=0000000000000048 R13=ffff888015d46e00 R14=0000000000000009 R15=ffff888015d46e48
RIP=ffffffff84ac0017 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a22022d080 CR3=0000000035026000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ff00000000000000ff0000000000
XMM02=ff000000000000ff0000000000000000 XMM03=ff0000000000000000ff000000000000
XMM04=0000000000ff00000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000