syzkaller login: [   92.986534] hrtimer: interrupt took 3784536 ns
Warning: Permanently added '[localhost]:1451' (ECDSA) to the list of known hosts.
2025/04/24 14:30:03 fuzzer started
2025/04/24 14:30:03 dialing manager at localhost:37747
[  102.963911] cgroup: Unknown subsys name 'net'
[  103.179353] cgroup: Unknown subsys name 'cpuset'
[  103.238928] cgroup: Unknown subsys name 'rlimit'
2025/04/24 14:30:24 syscalls: 204
2025/04/24 14:30:24 code coverage: enabled
2025/04/24 14:30:24 comparison tracing: enabled
2025/04/24 14:30:24 extra coverage: enabled
2025/04/24 14:30:24 setuid sandbox: enabled
2025/04/24 14:30:24 namespace sandbox: enabled
2025/04/24 14:30:24 Android sandbox: enabled
2025/04/24 14:30:24 fault injection: enabled
2025/04/24 14:30:24 leak checking: enabled
2025/04/24 14:30:24 net packet injection: enabled
2025/04/24 14:30:24 net device setup: enabled
2025/04/24 14:30:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/24 14:30:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/24 14:30:24 USB emulation: enabled
2025/04/24 14:30:24 hci packet injection: enabled
2025/04/24 14:30:24 wifi device emulation: enabled
2025/04/24 14:30:24 802.15.4 emulation: enabled
2025/04/24 14:30:24 fetching corpus: 0, signal 0/0 (executing program)
2025/04/24 14:30:25 starting 8 fuzzer processes
14:30:25 executing program 0:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$CDROMSTOP(r0, 0x5307)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0)
ioctl$CDROMPLAYTRKIND(r1, 0x5304, &(0x7f0000000080)={0x1f, 0x4, 0x0, 0x9})
getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8841}, 0x4005)
ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000280)={0x0, 0x5, 0x1, 0x8, 0x1, 0x1, @msf={0x8, 0x1f, 0xa9}, @lba=0x1000})
ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f00000003c0)={"96e0118338b40ff38745ea0a", &(0x7f00000002c0)="9acf17f2e7f22187aae2fa6b07a524ac6c2331e028b960b48c4bf01de5e75cd9c9cdbc6bae9aa6bf6c9386e4e20a154965fd1349eb0e21d3918f64b21264ad68194a40c34e98ab9ef97b82dd6767ae06040d", 0x52, 0x2ea, &(0x7f0000000340)={0x1, 0x1, 0x20, 0xb, 0x0, 0x1, 0x0, "ee961216", 0xfc, "2e70d171", 0x7, 0xc0, 0x2, "4ba396", "cfcb253cec8d908787493eef1764e967fec8c188f98346754207026560997411a48ed9d2470d9dddc460d6ae753b"}, 0x3, 0x6, 0x5, &(0x7f0000000380)})
ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000400))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/module/hid_generic', 0x208c0, 0x14)
ioctl$CDROM_GET_CAPABILITY(r2, 0x5331)
ioctl$CDROMSTART(r1, 0x5308)
r3 = accept(r2, &(0x7f0000000540)=@qipcrtr, &(0x7f00000005c0)=0x80)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000600)=0x7, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000640))
ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f00000007c0)={"e2e208a83dd9ee61c6257855", &(0x7f0000000680)="ecf035660bbdcaa32e7387a4753f8de3dab7cd21a99d19da7f4a0bee691469aa74aca03d61d126abf448dc22448687724ade5b5e231ad163f58e0b89b99bbd7cf648438859ce728cf1ff557b46544732862abb993ce814231c0448570e51f5b6f0011da6a2814d109da60353d7d7e2f12fe06dff33cd0f4a5cdc5efd225eeb7c355554230167010afde8d28ebc6e9a6f1702b79f7b4c47b2df8abf69838d040185da45ef12ea8600032d6205a017552ac7228aac24e6d087f1ee", 0xba, 0xff, &(0x7f0000000740)={0x6, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, "ecb2fabe", 0x5, "0412b68f", 0x3, 0x2, 0x1f, "29f003", "fcec7d97f2fb3083c3f9311b771324bd75a1df12bd10eeb735aad398331098716e0b941882aef58e36bf67a7e5b7"}, 0x1, 0x4, 0x9, &(0x7f0000000780)})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000800)={0x7, 0x5, 0x0, 'queue0\x00', 0x8})
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000008c0)={0x0, @rc, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000000}, @in={0x2, 0x4e21, @multicast2}, 0x3, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x9, 0x8000})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000009c0)={'gretap0\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x7, 0xfffff389, {{0xc, 0x4, 0x1, 0x30, 0x30, 0x68, 0x0, 0xc0, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0xe, [{@local, 0x4}, {@loopback}, {@local, 0x6}]}]}}}}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000a40)={0x5, 0x3f, 0x6})

14:30:25 executing program 1:
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x7ff, 0x80000000]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040040)
r0 = getpgid(0x0)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4803)
r1 = syz_open_pts(0xffffffffffffffff, 0x1c3302)
ioctl$VT_WAITACTIVE(r1, 0x5607)
timer_create(0x3, &(0x7f00000005c0)={0x0, 0x16, 0x2, @thr={&(0x7f0000000400)="213a3e9d1401ac91ce04dd116b8671cd91b862f38cadbddb28747fe479ce1cbe73e9da2420a8906572837559d71b9fb3c117d058d707699768ef774e3835e171aefbfcebb62443e3704a711efa229b410fe374ad5bfd61e31db56e0f0fa372392d0e14854d71a6e16cccfc8fa4325d81ecc07a7b32a20843694d60832cd4056e3d101fb96ebde4a1d8b4f3b5c8ed96772f81202e765d540f670be9a251e75f0057a310f12431f5248afdcb0d612276b0bf2995", &(0x7f00000004c0)="887a500a43f45704403ddac8a61a9337ce8601ef12eaed6b30b096469a6a3f65be3f9452b922bfc341772eaa7cc12d4a1d4564482da95f776b95c33bc4b7b21da2271980eaa27be39d5e7ca32b47808f5455dff9d4db14ab8bf50b260007e746126da261eb1194bd9cd8f88f9e6f5a40a002478e57a5e9da8b4de3d160adfd56ab34c0162dbaee84707da5c894e7658bf938972795ae2cc7a574e48fb2f06275b968575b360b512b40ebe54b4d7bc4a7dd279ac7086cf4c96e111e0f14b8a3c20fa054b2fb341e6eb180727c84a9e3fbd3c900a850758d52be8c3dbe219e52ada3ddc11ec2bd480f5596d48c2606cf4d25b368397d24f64c43"}}, &(0x7f0000000600)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x54)
sched_rr_get_interval(r0, &(0x7f0000000880))
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x1, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @local, 0x7800, 0x8, 0x9, 0x40}})
timer_getoverrun(r2)
recvmsg(r5, &(0x7f0000000e00)={&(0x7f0000000980)=@phonet, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a00)=""/225, 0xe1}, {&(0x7f0000000b00)=""/133, 0x85}, {&(0x7f0000000bc0)=""/217, 0xd9}], 0x3, &(0x7f0000000d00)=""/232, 0xe8}, 0x10061)
timer_create(0x7, &(0x7f0000000fc0)={0x0, 0x25, 0x1, @thr={&(0x7f0000000e40)="09d23e09ec4b4f555b215d810ce2e96b6929c7ccc8d41016cf5fe94c606a41f37f2b61f9c1ad59a7a6af9af167e4a5c72b71f2534636969925a49b583dba058b847050dff957c0038539aae8ee1cb95b3ae5c2aab7afd937d4bd07cbeeb3fe2660d7037a263bafdbe02b8ad93d1737798306676a8b86edaf2a150d037ba8e95846015f2d9af16142b8991ac883ca94", &(0x7f0000000f00)="5cc65e6bb35aa6308c0c68e7985185fb57c03bc73b2b293ae7aa852a634e26235051e3a9fc3a2a0c4d7cfee96f5e3e8ee820cf36b1c7c4fd29e158ca0b71443d573779a580259995819455db8c717939578b6355f665279cb5bce4a96b7d0f5bffe5414be171f93d6e227db0c3ed58477d7a087aaa006b95cf8291881b22b4001e820bb9b7c16a6ac6cb29556d2c11ee8a55eccb11"}}, &(0x7f0000001000)=<r6=>0x0)
clock_gettime(0x0, &(0x7f0000001040)={<r7=>0x0, <r8=>0x0})
timer_settime(r6, 0x1, &(0x7f0000001080)={{0x77359400}, {r7, r8+60000000}}, &(0x7f00000010c0))

14:30:25 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xhci_hcd', 0x101000, 0x20)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x2, @time={0x6, 0x1}, 0x0, {0x2, 0x9}, 0x40, 0x1, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x2, 0x1}, {0x0, 0xa4}, 0x40, 0x4, 0x3f})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000140)={0x1, 0x0, 0x80})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000740), 0x4)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000780)=0x3)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x4008000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000008c0)={{0x5, 0x8c}, 0x1, 0x1ff, 0x6, {0x1f, 0x1}, 0xff, 0x43})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000940)={0x2, 0x4, 0x0, 'queue0\x00', 0x800})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000a00)={0xfffffffb, 0x2, 'client0\x00', 0x0, "12eb6e98ef332ca9", "02ff34d506178b1f776e777e1a411b7f544f83f7436aaa48a0a38d857fcc2c2c", 0x1f, 0x7})
syz_open_pts(r0, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x644042, 0x0)
ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000b00)=0x400)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000b40), 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000c00)={0xfffffffffffffffd, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x4, 0x70bd29, 0x6, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000c40)=0x101)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000c80)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x20}}}, 0x5)

14:30:25 executing program 3:
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r0=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4004841)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)
r4 = accept4(r3, &(0x7f0000000640)=@l2, &(0x7f00000006c0)=0x80, 0x80800)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), r3)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xe000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x0)
accept(r4, &(0x7f0000000980)=@qipcrtr, &(0x7f0000000a00)=0x80)
r8 = accept(r3, &(0x7f0000000a40)=@alg, &(0x7f0000000ac0)=0x80)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000b00)={0x5, 0x2, 0x800, 0x6}, 0x10)

14:30:25 executing program 4:
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004044}, 0x20008000)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x2, 0x70bd27, 0x80000000, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x40000)
r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f00000002c0)=0x80)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x720, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r1 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x15}, 0x20008891)
mount_setattr(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x9000, &(0x7f0000000600)={0x4, 0x2}, 0x20)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000640)={0x8, 0x1000, 0xfffffff9, 0x7ff}, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x202180, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000700))
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8004)
getsockopt$netlink(r0, 0x10e, 0x2, &(0x7f0000000840)=""/118, &(0x7f00000008c0)=0x76)
syz_80211_join_ibss(&(0x7f0000000900)='wlan0\x00', &(0x7f0000000940)=@random="aeb9326c5028782f10a349af", 0xc, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000980))
r3 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000e80)=0x3ff, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000ec0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc)

[  124.964983] audit: type=1400 audit(1745505025.947:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:30:25 executing program 5:
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', <r0=>0x0, 0x80, 0x40, 0x7, 0x3, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x66, 0x0, 0xff, 0x29, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0x34, 0x22, 0x1, 0x4, [{@private=0xa010100, 0x1000}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0xb}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10d}, {@broadcast, 0xba}, {@private=0xa010100, 0x3f}]}, @lsrr={0x83, 0x13, 0x4c, [@multicast1, @remote, @private=0xa010102, @multicast2]}]}}}}})
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000180))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/block/loop1', 0x80, 0x5)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6)
socketpair(0x1a, 0xa, 0x740e, &(0x7f0000002000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000002080), r1)
sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x78, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x78}}, 0x40000000)
r6 = accept4(r3, &(0x7f00000021c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f0000002240)=0x80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000002300)={'sit0\x00', &(0x7f0000002280)={'ip6gre0\x00', r0, 0x29, 0x3, 0x6, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x40, 0x8, 0x3}})
clock_gettime(0x0, &(0x7f0000002340)={<r7=>0x0, <r8=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000002380)={{0x77359400}, {r7, r8+10000000}}, &(0x7f00000023c0))
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002400), 0x484000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r9, 0x404c534a, &(0x7f0000002440)={0x2, 0x42e09aec})
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000024c0)={0xed, 0x1, 0x40})
ioctl$TCSETA(r1, 0x5406, &(0x7f0000002500)={0x9, 0x47a, 0x9, 0x55, 0x14, "d1e19fed7b605ccb"})
accept4(r4, &(0x7f0000002540)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000025c0)=0x80, 0x80c00)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000002600))
socketpair(0x26, 0x0, 0x8, &(0x7f0000002640)={<r10=>0xffffffffffffffff})
setsockopt$bt_hci_HCI_DATA_DIR(r10, 0x0, 0x1, &(0x7f0000002680)=0x9, 0x4)

14:30:25 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/usbhid', 0x200, 0x20)
ioctl$VT_WAITACTIVE(r0, 0x5607)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0xc0, 0x66})
ioctl$TCSBRKP(r0, 0x5425, 0x6)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/xhci_pci', 0x301840, 0x1)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000100)={0x3, 0x1, 0x3f})
ioctl$TCSBRK(r2, 0x5409, 0x8000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x6, 0x0, 0x0, 0xffff52bb, 0x3f, "de400302144dc85ab03566aac9781e09bd1e8a", 0x3ff, 0x1})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000001c0)={0x3, 0x7f})
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0x10000, 0x1000, 0x7ff, 0x1, 0x81, "76b99733091fe94a532310d739a6b832cb5c51", 0x10001})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', <r4=>0x0, 0x2f, 0xc4, 0x5b, 0x0, 0x6, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0xb1, 0x81}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', r4, 0x2f, 0xc1, 0x6, 0xffffff01, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x20, 0x1, 0xfe}})
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)=0xa0, 0x4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/snd_seq_dummy', 0x40, 0x4)
ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000440)={0xffffffff, 0x5d})
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000480)=""/107)

14:30:26 executing program 7:
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x7)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000881}, 0x20008010)
ioctl$TCFLSH(r0, 0x540b, 0x1)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800000000000)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000180)={0x6, 0x2, 0x9, 0x1, 0x1, "247f5da4a32392899dfb7ec10570d0c4cf9e3e", 0x1, 0x1e})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x81)
r3 = syz_open_pts(r0, 0x80)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x880)
r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r1)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x70}}, 0x20000000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/tty', 0x311400, 0x20)
sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r5, 0x600, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000680)={0x0, 0x26, "4d18c5c31c6dcb1f0e70f59b9e27ee07e57704be7ba2d55a49fc79d03e50d4b9d679b61fecc4"})

[  126.408556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.416960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.418737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  126.420446] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.422570] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  126.435724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  126.438984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  126.440184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.441115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.443235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.447594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.454004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.456917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  126.457892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  126.466629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.469633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  126.471532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  126.473404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.482315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.483194] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.483452] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  126.491514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  126.493739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  126.499805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.510911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  126.514594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  126.519826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  126.529736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  126.531640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  126.534891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  126.554374] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  126.555725] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  126.556927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.559383] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  126.574282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  126.576313] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  126.585926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  126.588635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  126.593340] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  126.602646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  128.548883] Bluetooth: hci2: command tx timeout
[  128.549956] Bluetooth: hci0: command tx timeout
[  128.551087] Bluetooth: hci1: command tx timeout
[  128.612517] Bluetooth: hci4: command tx timeout
[  128.613535] Bluetooth: hci3: command tx timeout
[  128.613989] Bluetooth: hci7: command tx timeout
[  128.676165] Bluetooth: hci5: command tx timeout
[  128.740394] Bluetooth: hci6: command tx timeout
[  130.596519] Bluetooth: hci2: command tx timeout
[  130.597035] Bluetooth: hci0: command tx timeout
[  130.597269] Bluetooth: hci1: command tx timeout
[  130.660160] Bluetooth: hci4: command tx timeout
[  130.660729] Bluetooth: hci7: command tx timeout
[  130.660792] Bluetooth: hci3: command tx timeout
[  130.724163] Bluetooth: hci5: command tx timeout
[  130.788585] Bluetooth: hci6: command tx timeout
[  132.645497] Bluetooth: hci2: command tx timeout
[  132.645627] Bluetooth: hci1: command tx timeout
[  132.646005] Bluetooth: hci0: command tx timeout
[  132.709288] Bluetooth: hci4: command tx timeout
[  132.709318] Bluetooth: hci3: command tx timeout
[  132.709769] Bluetooth: hci7: command tx timeout
[  132.773479] Bluetooth: hci5: command tx timeout
[  132.837106] Bluetooth: hci6: command tx timeout
[  134.692153] Bluetooth: hci0: command tx timeout
[  134.693207] Bluetooth: hci1: command tx timeout
[  134.693241] Bluetooth: hci2: command tx timeout
[  134.756437] Bluetooth: hci3: command tx timeout
[  134.756591] Bluetooth: hci7: command tx timeout
[  134.756912] Bluetooth: hci4: command tx timeout
[  134.820212] Bluetooth: hci5: command tx timeout
[  134.884783] Bluetooth: hci6: command tx timeout
[  186.413882] syz-executor.3 (294) used greatest stack depth: 23800 bytes left
[  188.931474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  188.934424] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  188.937513] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  188.948430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  188.957721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.051563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.061837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.063913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.071008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.080576] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  189.084720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  189.086614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  189.088931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  189.099798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  189.101538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  189.103493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  189.130525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  189.135472] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  189.142321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  189.143592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.147660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.150734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.152989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  189.159524] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  189.162987] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.168239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.170168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.173626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  189.173921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.176424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.187262] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  189.192368] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  189.194416] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  189.227525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.236443] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  189.239423] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  189.241806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  189.243355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.260965] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  189.279486] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  191.012165] Bluetooth: hci0: command tx timeout
[  191.140166] Bluetooth: hci1: command tx timeout
[  191.204141] Bluetooth: hci3: command tx timeout
[  191.268676] Bluetooth: hci4: command tx timeout
[  191.333663] Bluetooth: hci2: command tx timeout
[  191.334492] Bluetooth: hci6: command tx timeout
[  191.334412] Bluetooth: hci7: command tx timeout
[  191.334952] Bluetooth: hci5: command tx timeout
[  193.060298] Bluetooth: hci0: command tx timeout
[  193.188126] Bluetooth: hci1: command tx timeout
[  193.254107] Bluetooth: hci3: command tx timeout
[  193.318490] Bluetooth: hci4: command tx timeout
[  193.380182] Bluetooth: hci7: command tx timeout
[  193.380732] Bluetooth: hci5: command tx timeout
[  193.381583] Bluetooth: hci2: command tx timeout
[  193.382074] Bluetooth: hci6: command tx timeout
[  195.108376] Bluetooth: hci0: command tx timeout
[  195.237220] Bluetooth: hci1: command tx timeout
[  195.300244] Bluetooth: hci3: command tx timeout
[  195.364587] Bluetooth: hci4: command tx timeout
[  195.428597] Bluetooth: hci7: command tx timeout
[  195.429408] Bluetooth: hci2: command tx timeout
[  195.429638] Bluetooth: hci6: command tx timeout
[  195.429858] Bluetooth: hci5: command tx timeout
[  197.156769] Bluetooth: hci0: command tx timeout
[  197.284408] Bluetooth: hci1: command tx timeout
[  197.348362] Bluetooth: hci3: command tx timeout
[  197.412442] Bluetooth: hci4: command tx timeout
[  197.476978] Bluetooth: hci5: command tx timeout
[  197.477570] Bluetooth: hci7: command tx timeout
[  197.478022] Bluetooth: hci6: command tx timeout
[  197.478528] Bluetooth: hci2: command tx timeout
[  251.387219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.390880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.393567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.406430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.432404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.534355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.564143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.584194] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.605878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.609276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  251.706428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.707847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.710143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.713581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.715282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.718758] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.720792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.726903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.743374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.752412] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.790236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.793739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.795428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.802940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.805650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.865455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  251.877894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  251.879595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  251.890464] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  251.900929] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  251.913355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  251.932228] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  251.953938] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  251.954179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  251.964663] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  252.085757] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.147403] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.154532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.187325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  252.214770] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.540366] Bluetooth: hci0: command tx timeout
[  253.668182] Bluetooth: hci1: command tx timeout
[  253.796167] Bluetooth: hci2: command tx timeout
[  253.860502] Bluetooth: hci3: command tx timeout
[  253.861361] Bluetooth: hci4: command tx timeout
[  254.180146] Bluetooth: hci7: command tx timeout
[  254.180173] Bluetooth: hci5: command tx timeout
[  254.308387] Bluetooth: hci6: command tx timeout
[  255.589155] Bluetooth: hci0: command tx timeout
[  255.717119] Bluetooth: hci1: command tx timeout
[  255.845298] Bluetooth: hci2: command tx timeout
[  255.908266] Bluetooth: hci3: command tx timeout
[  255.909102] Bluetooth: hci4: command tx timeout
[  256.228533] Bluetooth: hci7: command tx timeout
[  256.228651] Bluetooth: hci5: command tx timeout
[  256.357331] Bluetooth: hci6: command tx timeout
[  257.637316] Bluetooth: hci0: command tx timeout
[  257.764309] Bluetooth: hci1: command tx timeout
[  257.892256] Bluetooth: hci2: command tx timeout
[  257.956472] Bluetooth: hci4: command tx timeout
[  257.956947] Bluetooth: hci3: command tx timeout
[  258.276456] Bluetooth: hci5: command tx timeout
[  258.277165] Bluetooth: hci7: command tx timeout
[  258.404112] Bluetooth: hci6: command tx timeout
[  259.684439] Bluetooth: hci0: command tx timeout
[  259.814098] Bluetooth: hci1: command tx timeout
[  259.940234] Bluetooth: hci2: command tx timeout
[  260.004397] Bluetooth: hci3: command tx timeout
[  260.005782] Bluetooth: hci4: command tx timeout
[  260.324250] Bluetooth: hci7: command tx timeout
[  260.325814] Bluetooth: hci5: command tx timeout
[  260.452119] Bluetooth: hci6: command tx timeout
[  314.577702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  314.580474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  314.583986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  314.588168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  314.591423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  314.594267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  314.596926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  314.610635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.617549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.623177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.625417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  314.628400] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  314.631017] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.643638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.648108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  314.650189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  314.654212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.655481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  314.658893] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.670422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  314.676529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  314.681431] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.682617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.685612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  314.692745] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  314.695690] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  314.701104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  314.734583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  314.735208] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  314.737207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  314.740217] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  314.740874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  314.758426] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  314.765423] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  314.768557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  314.791533] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  314.794626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  314.796944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  314.815907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  314.818583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.708384] Bluetooth: hci1: command tx timeout
[  316.708400] Bluetooth: hci0: command tx timeout
[  316.772227] Bluetooth: hci3: command tx timeout
[  316.836550] Bluetooth: hci2: command tx timeout
[  316.836608] Bluetooth: hci7: command tx timeout
[  316.837617] Bluetooth: hci6: command tx timeout
[  316.838399] Bluetooth: hci4: command tx timeout
[  316.900340] Bluetooth: hci5: command tx timeout
[  318.757088] Bluetooth: hci1: command tx timeout
[  318.757602] Bluetooth: hci0: command tx timeout
[  318.821151] Bluetooth: hci3: command tx timeout
[  318.885449] Bluetooth: hci4: command tx timeout
[  318.886234] Bluetooth: hci7: command tx timeout
[  318.886689] Bluetooth: hci6: command tx timeout
[  318.887191] Bluetooth: hci2: command tx timeout
[  318.949102] Bluetooth: hci5: command tx timeout
[  320.805586] Bluetooth: hci0: command tx timeout
[  320.806632] Bluetooth: hci1: command tx timeout
[  320.869317] Bluetooth: hci3: command tx timeout
[  320.932194] Bluetooth: hci7: command tx timeout
[  320.932855] Bluetooth: hci4: command tx timeout
[  320.933972] Bluetooth: hci6: command tx timeout
[  320.933997] Bluetooth: hci2: command tx timeout
[  320.997199] Bluetooth: hci5: command tx timeout
[  322.854162] Bluetooth: hci1: command tx timeout
[  322.854708] Bluetooth: hci0: command tx timeout
[  322.916415] Bluetooth: hci3: command tx timeout
[  322.980701] Bluetooth: hci2: command tx timeout
[  322.981516] Bluetooth: hci4: command tx timeout
[  322.981968] Bluetooth: hci6: command tx timeout
[  322.982488] Bluetooth: hci7: command tx timeout
[  323.044499] Bluetooth: hci5: command tx timeout
[  376.890964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  376.898582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  376.900915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  376.907408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  376.911436] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  377.013799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  377.018527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  377.019873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  377.037120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  377.042405] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  377.149701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  377.154199] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  377.159883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  377.164663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  377.167783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  377.173341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  377.177739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  377.184937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  377.189989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  377.223205] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  377.223365] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  377.237419] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  377.246521] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  377.265813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  377.275354] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  377.289197] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.305627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.314478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.324102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  377.329455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  377.358808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.364484] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  377.366650] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  377.373544] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  377.379725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  377.382615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  377.385456] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.394338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  377.429446] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  377.431717] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.980245] Bluetooth: hci0: command tx timeout
[  379.108140] Bluetooth: hci1: command tx timeout
[  379.236160] Bluetooth: hci2: command tx timeout
[  379.300924] Bluetooth: hci3: command tx timeout
[  379.365157] Bluetooth: hci4: command tx timeout
[  379.431155] Bluetooth: hci6: command tx timeout
[  379.492544] Bluetooth: hci5: command tx timeout
[  379.556578] Bluetooth: hci7: command tx timeout
[  381.028405] Bluetooth: hci0: command tx timeout
[  381.156279] Bluetooth: hci1: command tx timeout
[  381.284126] Bluetooth: hci2: command tx timeout
[  381.349101] Bluetooth: hci3: command tx timeout
[  381.412191] Bluetooth: hci4: command tx timeout
[  381.478087] Bluetooth: hci6: command tx timeout
[  381.541397] Bluetooth: hci5: command tx timeout
[  381.604407] Bluetooth: hci7: command tx timeout
[  383.078088] Bluetooth: hci0: command tx timeout
[  383.204489] Bluetooth: hci1: command tx timeout
[  383.332874] Bluetooth: hci2: command tx timeout
[  383.398133] Bluetooth: hci3: command tx timeout
[  383.460586] Bluetooth: hci4: command tx timeout
[  383.524379] Bluetooth: hci6: command tx timeout
[  383.588142] Bluetooth: hci5: command tx timeout
[  383.653521] Bluetooth: hci7: command tx timeout
[  385.124124] Bluetooth: hci0: command tx timeout
[  385.252438] Bluetooth: hci1: command tx timeout
[  385.380118] Bluetooth: hci2: command tx timeout
[  385.444479] Bluetooth: hci3: command tx timeout
[  385.508189] Bluetooth: hci4: command tx timeout
[  385.572336] Bluetooth: hci6: command tx timeout
[  385.638077] Bluetooth: hci5: command tx timeout
[  385.700255] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
14:35:32  Registers:
info registers vcpu 0
RAX=ffffffff87a225c8 RBX=ffff88802fd4d340 RCX=0000000000022000 RDX=0000000000000001
RSI=0000000000000020 RDI=ffffffff85c1bac0 RBP=0000000000000000 RSP=ffff88806ce088f0
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000000 R11=0000000000000003
R12=ffff88802fd4ddc0 R13=0000000000000003 R14=0000000000000000 R15=ffff88802fd4dd98
RIP=ffffffff815165f2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc6aecb9540 00000000 00000000
GS =0000 ffff8880e564e000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ca708214c8 CR3=000000002afac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080010001 RBX=ffff88806cf280c8 RCX=ffffffff81621027 RDX=ffff888034e81bc0
RSI=ffffffff81621216 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88806cf08ec0
R8 =0000000000000002 R9 =0000000000000001 R10=0000000000000001 R11=ffff88806cf08ff8
R12=0000000000000046 R13=dffffc0000000000 R14=0000000000000000 R15=00000000000c66ff
RIP=ffffffff81621218 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa97c4a9540 00000000 00000000
GS =0000 ffff8880e574e000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa97c96e000 CR3=000000002b2ac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000