Warning: Permanently added '[localhost]:24648' (ECDSA) to the list of known hosts.
2025/01/18 14:34:35 fuzzer started
2025/01/18 14:34:35 dialing manager at localhost:44245
syzkaller login: [   66.366434] cgroup: Unknown subsys name 'net'
[   66.485025] cgroup: Unknown subsys name 'cpuset'
[   66.520745] cgroup: Unknown subsys name 'rlimit'
[   71.796580] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/18 14:34:51 syscalls: 2217
2025/01/18 14:34:51 code coverage: enabled
2025/01/18 14:34:51 comparison tracing: enabled
2025/01/18 14:34:51 extra coverage: enabled
2025/01/18 14:34:51 setuid sandbox: enabled
2025/01/18 14:34:51 namespace sandbox: enabled
2025/01/18 14:34:51 Android sandbox: enabled
2025/01/18 14:34:51 fault injection: enabled
2025/01/18 14:34:51 leak checking: enabled
2025/01/18 14:34:51 net packet injection: enabled
2025/01/18 14:34:51 net device setup: enabled
2025/01/18 14:34:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/18 14:34:51 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/18 14:34:51 USB emulation: enabled
2025/01/18 14:34:51 hci packet injection: enabled
2025/01/18 14:34:51 wifi device emulation: enabled
2025/01/18 14:34:51 802.15.4 emulation: enabled
2025/01/18 14:34:51 fetching corpus: 0, signal 0/2000 (executing program)
2025/01/18 14:34:51 fetching corpus: 50, signal 27086/30050 (executing program)
2025/01/18 14:34:51 fetching corpus: 100, signal 36063/39995 (executing program)
2025/01/18 14:34:52 fetching corpus: 150, signal 43021/47757 (executing program)
2025/01/18 14:34:52 fetching corpus: 200, signal 50061/55366 (executing program)
2025/01/18 14:34:52 fetching corpus: 250, signal 53523/59550 (executing program)
2025/01/18 14:34:52 fetching corpus: 300, signal 57541/63999 (executing program)
2025/01/18 14:34:52 fetching corpus: 350, signal 63212/69716 (executing program)
2025/01/18 14:34:52 fetching corpus: 400, signal 65706/72577 (executing program)
2025/01/18 14:34:53 fetching corpus: 450, signal 69144/76176 (executing program)
2025/01/18 14:34:53 fetching corpus: 500, signal 73297/80134 (executing program)
2025/01/18 14:34:53 fetching corpus: 550, signal 77321/83867 (executing program)
2025/01/18 14:34:53 fetching corpus: 600, signal 80801/87108 (executing program)
2025/01/18 14:34:53 fetching corpus: 650, signal 84089/90073 (executing program)
2025/01/18 14:34:53 fetching corpus: 700, signal 85827/91742 (executing program)
2025/01/18 14:34:54 fetching corpus: 750, signal 87809/93528 (executing program)
2025/01/18 14:34:54 fetching corpus: 800, signal 90332/95650 (executing program)
2025/01/18 14:34:54 fetching corpus: 850, signal 92502/97303 (executing program)
2025/01/18 14:34:54 fetching corpus: 900, signal 94334/98757 (executing program)
2025/01/18 14:34:54 fetching corpus: 950, signal 95788/99861 (executing program)
2025/01/18 14:34:55 fetching corpus: 1000, signal 97142/100896 (executing program)
2025/01/18 14:34:55 fetching corpus: 1050, signal 98680/101977 (executing program)
2025/01/18 14:34:55 fetching corpus: 1100, signal 99805/102769 (executing program)
2025/01/18 14:34:55 fetching corpus: 1150, signal 101398/103770 (executing program)
2025/01/18 14:34:55 fetching corpus: 1200, signal 102985/104718 (executing program)
2025/01/18 14:34:55 fetching corpus: 1250, signal 104337/105464 (executing program)
2025/01/18 14:34:55 fetching corpus: 1264, signal 104923/105786 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/105823 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/105855 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/105893 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/105933 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/105972 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106001 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106027 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106065 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106094 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106120 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106151 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106180 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106215 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106251 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106281 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106316 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106354 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106379 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106406 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106440 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106467 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106505 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106541 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106566 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106605 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106645 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106655 (executing program)
2025/01/18 14:34:56 fetching corpus: 1264, signal 104923/106655 (executing program)
2025/01/18 14:35:00 starting 8 fuzzer processes
14:35:00 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local'}}}]})

14:35:00 executing program 2:
r0 = memfd_create(&(0x7f0000000500)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b(\x96\xe1\a0\v!\xf7\xa1I\xce\xceC\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xb9\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb6\x83 \x00\x00[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\f\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,\x96\x19y\xd3\xa9\x90\x94\xa4\xdd!s\x83\xdeF\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65\xad\a\xbcm&59\xf7_G\xb9g\xa8\x01((\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae\x8d\xd7\xb0\xfe\xfe0\xc2\x81 q]N\xe4\xfe@\x8eV\xd9\x81\f{7&', 0x9)
fchmod(r0, 0xc)

14:35:00 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x0, &(0x7f0000013e00))

14:35:00 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15e)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0)
ioctl$FITRIM(r1, 0xc020660b, &(0x7f0000000180))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe35f}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20000009)
ioctl$FITRIM(r2, 0xc020660b, &(0x7f0000000180))
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x200)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

14:35:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x34}}, 0x0)

[   90.757613] audit: type=1400 audit(1737210900.481:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:35:00 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x2a, 0x0, 0x0)

14:35:00 executing program 6:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

14:35:00 executing program 7:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c80)='/sys/kernel/oops_count', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1, 0x0, 0x0)

[   92.173613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.178875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.181247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.185888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.189551] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.201320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.210795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.211459] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.212383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.218553] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.219283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.220387] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.220927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.227872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.228309] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.229048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.233583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.237516] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.240124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.243368] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.243719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.249329] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.249668] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.253951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.257361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.261364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.266601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.274826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.279297] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.282488] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.283351] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.286011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.288473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.291363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.293491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.294504] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.296896] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.303184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.309487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.327189] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.335182] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.338581] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.350443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.360306] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.363389] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.366875] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.375287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.410273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.300669] Bluetooth: hci0: command tx timeout
[   94.364092] Bluetooth: hci5: command tx timeout
[   94.364145] Bluetooth: hci3: command tx timeout
[   94.429346] Bluetooth: hci1: command tx timeout
[   94.429516] Bluetooth: hci6: command tx timeout
[   94.429672] Bluetooth: hci2: command tx timeout
[   94.492180] Bluetooth: hci4: command tx timeout
[   94.492560] Bluetooth: hci7: command tx timeout
[   96.348685] Bluetooth: hci0: command tx timeout
[   96.412105] Bluetooth: hci5: command tx timeout
[   96.415178] Bluetooth: hci3: command tx timeout
[   96.476297] Bluetooth: hci2: command tx timeout
[   96.476337] Bluetooth: hci6: command tx timeout
[   96.476455] Bluetooth: hci1: command tx timeout
[   96.540080] Bluetooth: hci7: command tx timeout
[   96.540109] Bluetooth: hci4: command tx timeout
[   98.396142] Bluetooth: hci0: command tx timeout
[   98.460160] Bluetooth: hci3: command tx timeout
[   98.460202] Bluetooth: hci5: command tx timeout
[   98.524140] Bluetooth: hci1: command tx timeout
[   98.524283] Bluetooth: hci6: command tx timeout
[   98.524429] Bluetooth: hci2: command tx timeout
[   98.589037] Bluetooth: hci7: command tx timeout
[   98.589120] Bluetooth: hci4: command tx timeout
[  100.445171] Bluetooth: hci0: command tx timeout
[  100.508244] Bluetooth: hci3: command tx timeout
[  100.509056] Bluetooth: hci5: command tx timeout
[  100.572164] Bluetooth: hci2: command tx timeout
[  100.572209] Bluetooth: hci6: command tx timeout
[  100.572315] Bluetooth: hci1: command tx timeout
[  100.636091] Bluetooth: hci4: command tx timeout
[  100.636168] Bluetooth: hci7: command tx timeout
[  141.872883] modprobe (3024) used greatest stack depth: 24216 bytes left
[  151.856343] syz-executor.3 (280) used greatest stack depth: 24016 bytes left
[  154.282293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.290117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.298761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.306693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.315492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.317396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.612707] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.614219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.615761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.623203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.626134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.627996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  154.668322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  154.670740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  154.672847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  154.677872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  154.680079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  154.682702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  154.724879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  154.743404] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  154.777416] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  154.778677] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  154.779754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  154.785791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  154.787342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  154.788425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  154.799639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  154.801747] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  154.803830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  154.804899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  154.807192] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  154.808571] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  154.809666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  154.813475] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  154.817324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  154.821320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  154.822533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  154.833308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  154.840360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  154.851766] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  154.853665] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  154.856526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  154.863724] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  154.866207] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  154.867791] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.883768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  154.885493] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  154.886583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  156.380129] Bluetooth: hci0: command tx timeout
[  156.701234] Bluetooth: hci1: command tx timeout
[  156.765360] Bluetooth: hci2: command tx timeout
[  156.892029] Bluetooth: hci6: command tx timeout
[  156.892862] Bluetooth: hci4: command tx timeout
[  156.956339] Bluetooth: hci7: command tx timeout
[  156.956513] Bluetooth: hci5: command tx timeout
[  156.956669] Bluetooth: hci3: command tx timeout
[  158.428037] Bluetooth: hci0: command tx timeout
[  158.750059] Bluetooth: hci1: command tx timeout
[  158.812014] Bluetooth: hci2: command tx timeout
[  158.941104] Bluetooth: hci6: command tx timeout
[  158.941227] Bluetooth: hci4: command tx timeout
[  159.004066] Bluetooth: hci3: command tx timeout
[  159.004600] Bluetooth: hci5: command tx timeout
[  159.005269] Bluetooth: hci7: command tx timeout
[  160.476025] Bluetooth: hci0: command tx timeout
[  160.796033] Bluetooth: hci1: command tx timeout
[  160.860999] Bluetooth: hci2: command tx timeout
[  160.988229] Bluetooth: hci4: command tx timeout
[  160.989418] Bluetooth: hci6: command tx timeout
[  161.052083] Bluetooth: hci7: command tx timeout
[  161.052656] Bluetooth: hci5: command tx timeout
[  161.052745] Bluetooth: hci3: command tx timeout
[  162.524764] Bluetooth: hci0: command tx timeout
[  162.845037] Bluetooth: hci1: command tx timeout
[  162.908043] Bluetooth: hci2: command tx timeout
[  163.036154] Bluetooth: hci6: command tx timeout
[  163.036177] Bluetooth: hci4: command tx timeout
[  163.100187] Bluetooth: hci7: command tx timeout
[  163.100364] Bluetooth: hci3: command tx timeout
[  163.100461] Bluetooth: hci5: command tx timeout
[  214.339873] syz-executor.4 (3598) used greatest stack depth: 23896 bytes left
[  216.423287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.425397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.426277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.429745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.431221] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  216.431852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.614037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.622271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.627629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.638298] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.640639] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  216.643253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.874586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.878815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.880563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  216.883903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  216.886080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  216.887447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  216.941512] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  216.945967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  216.950641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  216.954255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  216.956211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  216.960148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  216.961898] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  216.963276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  216.969734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  216.993509] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.013242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.022527] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.038449] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.039780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.041107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.043200] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.044492] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.045840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.066731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.111639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.148094] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.149606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.150715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.159103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.172114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.174052] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.187610] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.189139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.198275] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.204861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  218.460557] Bluetooth: hci0: command tx timeout
[  218.716052] Bluetooth: hci1: command tx timeout
[  218.973050] Bluetooth: hci2: command tx timeout
[  219.036144] Bluetooth: hci4: command tx timeout
[  219.100057] Bluetooth: hci3: command tx timeout
[  219.166087] Bluetooth: hci5: command tx timeout
[  219.293125] Bluetooth: hci7: command tx timeout
[  219.293489] Bluetooth: hci6: command tx timeout
[  220.507988] Bluetooth: hci0: command tx timeout
[  220.764260] Bluetooth: hci1: command tx timeout
[  221.021336] Bluetooth: hci2: command tx timeout
[  221.084051] Bluetooth: hci4: command tx timeout
[  221.148803] Bluetooth: hci3: command tx timeout
[  221.212161] Bluetooth: hci5: command tx timeout
[  221.341007] Bluetooth: hci7: command tx timeout
[  221.341097] Bluetooth: hci6: command tx timeout
[  222.556263] Bluetooth: hci0: command tx timeout
[  222.812262] Bluetooth: hci1: command tx timeout
[  223.068112] Bluetooth: hci2: command tx timeout
[  223.132085] Bluetooth: hci4: command tx timeout
[  223.196110] Bluetooth: hci3: command tx timeout
[  223.260264] Bluetooth: hci5: command tx timeout
[  223.388295] Bluetooth: hci6: command tx timeout
[  223.389809] Bluetooth: hci7: command tx timeout
[  224.605176] Bluetooth: hci0: command tx timeout
[  224.861325] Bluetooth: hci1: command tx timeout
[  225.116177] Bluetooth: hci2: command tx timeout
[  225.180550] Bluetooth: hci4: command tx timeout
[  225.244029] Bluetooth: hci3: command tx timeout
[  225.308068] Bluetooth: hci5: command tx timeout
[  225.436171] Bluetooth: hci7: command tx timeout
[  225.436292] Bluetooth: hci6: command tx timeout
[  279.594304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.596844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.601558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.609559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.613648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  279.616684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.787654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  279.791101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  279.797584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  279.805457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  279.812513] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  279.818381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  279.852875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.857270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.862782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.871761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.875342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.886618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.991025] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  280.008449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  280.030341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  280.038444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  280.070379] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  280.072591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.147283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  280.164643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.178744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  280.183677] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.193326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  280.205337] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  280.216297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  280.223229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.225186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  280.248361] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  280.266831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  280.267523] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  280.269974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.270039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  280.273441] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  280.307270] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  280.307834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  280.308393] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  280.312351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  280.331611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  280.349557] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  280.357404] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  280.370576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  280.381582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  281.692059] Bluetooth: hci0: command tx timeout
[  281.884081] Bluetooth: hci1: command tx timeout
[  281.947999] Bluetooth: hci2: command tx timeout
[  282.140137] Bluetooth: hci3: command tx timeout
[  282.396986] Bluetooth: hci6: command tx timeout
[  282.460084] Bluetooth: hci4: command tx timeout
[  282.460129] Bluetooth: hci5: command tx timeout
[  282.524152] Bluetooth: hci7: command tx timeout
[  283.739992] Bluetooth: hci0: command tx timeout
[  283.932163] Bluetooth: hci1: command tx timeout
[  283.996858] Bluetooth: hci2: command tx timeout
[  284.188094] Bluetooth: hci3: command tx timeout
[  284.444285] Bluetooth: hci6: command tx timeout
[  284.508194] Bluetooth: hci4: command tx timeout
[  284.509581] Bluetooth: hci5: command tx timeout
[  284.572013] Bluetooth: hci7: command tx timeout
[  285.788110] Bluetooth: hci0: command tx timeout
[  285.980001] Bluetooth: hci1: command tx timeout
[  286.045056] Bluetooth: hci2: command tx timeout
[  286.236034] Bluetooth: hci3: command tx timeout
[  286.491990] Bluetooth: hci6: command tx timeout
[  286.557057] Bluetooth: hci5: command tx timeout
[  286.557484] Bluetooth: hci4: command tx timeout
[  286.620409] Bluetooth: hci7: command tx timeout
[  287.836562] Bluetooth: hci0: command tx timeout
[  288.028047] Bluetooth: hci1: command tx timeout
[  288.093998] Bluetooth: hci2: command tx timeout
[  288.284022] Bluetooth: hci3: command tx timeout
[  288.539980] Bluetooth: hci6: command tx timeout
[  288.603996] Bluetooth: hci4: command tx timeout
[  288.604097] Bluetooth: hci5: command tx timeout
[  288.669175] Bluetooth: hci7: command tx timeout
[  341.742852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.746691] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.749158] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.754384] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.757612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  341.760519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.930469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.937417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.940314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.947743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.950746] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  341.954505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.063062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.070505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.086107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.096202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.105260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.107327] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.150144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.151341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.154467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.157648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.159363] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  342.160274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.199617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.204880] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.212065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.212361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.215952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.216198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.222665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.224477] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.227525] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.234650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.257307] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.259304] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.260422] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.265338] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  342.271871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.292590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.318259] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.319459] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.367226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.370400] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.382250] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  342.384349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.412310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.414364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  343.836042] Bluetooth: hci0: command tx timeout
[  344.028069] Bluetooth: hci1: command tx timeout
[  344.156151] Bluetooth: hci2: command tx timeout
[  344.220062] Bluetooth: hci3: command tx timeout
[  344.348292] Bluetooth: hci5: command tx timeout
[  344.348309] Bluetooth: hci6: command tx timeout
[  344.477313] Bluetooth: hci4: command tx timeout
[  344.541999] Bluetooth: hci7: command tx timeout
[  345.885294] Bluetooth: hci0: command tx timeout
[  346.076983] Bluetooth: hci1: command tx timeout
[  346.204965] Bluetooth: hci2: command tx timeout
[  346.267988] Bluetooth: hci3: command tx timeout
[  346.397990] Bluetooth: hci6: command tx timeout
[  346.398073] Bluetooth: hci5: command tx timeout
[  346.524110] Bluetooth: hci4: command tx timeout
[  346.587966] Bluetooth: hci7: command tx timeout
[  347.933952] Bluetooth: hci0: command tx timeout
[  348.123972] Bluetooth: hci1: command tx timeout
[  348.253247] Bluetooth: hci2: command tx timeout
[  348.318936] Bluetooth: hci3: command tx timeout
[  348.445024] Bluetooth: hci5: command tx timeout
[  348.445122] Bluetooth: hci6: command tx timeout
[  348.572013] Bluetooth: hci4: command tx timeout
[  348.636017] Bluetooth: hci7: command tx timeout
[  349.981932] Bluetooth: hci0: command tx timeout
[  350.172316] Bluetooth: hci1: command tx timeout
[  350.300962] Bluetooth: hci2: command tx timeout
[  350.364054] Bluetooth: hci3: command tx timeout
[  350.493978] Bluetooth: hci6: command tx timeout
[  350.494050] Bluetooth: hci5: command tx timeout
[  350.621099] Bluetooth: hci4: command tx timeout
[  350.686035] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:40:04  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffffffff813a0c79 RCX=0000000000000001 RDX=1ffff11005e56ede
RSI=ffff88802f2b7de8 RDI=ffffffff813a0c79 RBP=ffffffff813a0c79 RSP=ffff88802f2b7648
R8 =0000000000000001 R9 =ffff88802f2b76d8 R10=000000000003ab4d R11=0000000000007af8
R12=0000000000000001 R13=0000000000000000 R14=ffff8880374b5340 R15=ffff88800b4c9ae0
RIP=ffffffff81421e92 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8589f73368 CR3=0000000019aa6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff88802f22f698 RCX=ffffffff86849201 RDX=1ffff11005e45ede
RSI=0000000000000000 RDI=ffffffff81abaeca RBP=ffff88802f22f6f0 RSP=ffff88802f22f680
R8 =ffffffff86849246 R9 =ffff88802f22f6d8 R10=000000000003ab4d R11=000000000002414a
R12=ffff88802f22f760 R13=0000000000000000 R14=ffff88800ebb1bc0 R15=ffff88800b99b4e0
RIP=ffffffff81348c1b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ea19f3f9a0 CR3=0000000036d28000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000