Warning: Permanently added '[localhost]:5057' (ECDSA) to the list of known hosts.
2025/05/26 08:28:36 fuzzer started
2025/05/26 08:28:37 dialing manager at localhost:46087
syzkaller login: [   98.918634] cgroup: Unknown subsys name 'net'
[   99.040272] cgroup: Unknown subsys name 'cpuset'
[   99.079077] cgroup: Unknown subsys name 'rlimit'
2025/05/26 08:28:53 syscalls: 2214
2025/05/26 08:28:53 code coverage: enabled
2025/05/26 08:28:53 comparison tracing: enabled
2025/05/26 08:28:53 extra coverage: enabled
2025/05/26 08:28:53 setuid sandbox: enabled
2025/05/26 08:28:53 namespace sandbox: enabled
2025/05/26 08:28:53 Android sandbox: enabled
2025/05/26 08:28:53 fault injection: enabled
2025/05/26 08:28:53 leak checking: enabled
2025/05/26 08:28:53 net packet injection: enabled
2025/05/26 08:28:53 net device setup: enabled
2025/05/26 08:28:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/26 08:28:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/26 08:28:53 USB emulation: enabled
2025/05/26 08:28:53 hci packet injection: enabled
2025/05/26 08:28:53 wifi device emulation: enabled
2025/05/26 08:28:53 802.15.4 emulation: enabled
2025/05/26 08:28:53 fetching corpus: 0, signal 0/0 (executing program)
2025/05/26 08:28:54 starting 8 fuzzer processes
08:28:54 executing program 0:
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000))
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x80)
write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x6, 0x9, 0x800, 0x1, 0x3, 0x400, 0x378, 0x38, 0x10b, 0x7, 0x8, 0x20, 0x1, 0x4a3, 0x9, 0x7fff}, [{0x7, 0x42, 0x4a, 0x1, 0x7f, 0x775, 0xea0, 0x1f}, {0x70000000, 0x7fff, 0x4, 0x6, 0x8000, 0x80, 0x2, 0xffffffff}], "465fe4aa4c2dc9656902cf3a0734a0e84050b09951a023582d1a37c598184b91a822f15cb7b0763f8767d981ae113b2c6532b5b9d6a8585ab5e9f62e80ceaa697bb9c8caa50fd7464e53f22ee942d41ab36ed7476541009583b896c190cfa8bfa2b32516d12bf2d0da26f9266d2fbe0ccba1c62a5e3b51ca34762378745ce69c832584c07c9d563cf1a550e86d3e44b510a8461094401b465fc0f65165fc6367e9b23bf3acf5b50a290adeb37d8c2fe490a76b08628af8d703e600fae0523e61f3b16bd5dfaca7a09f4328d33c1437758ca526fa508826875fe56ea360b81a5fc213162327ab3d71a2ac67bc55c546dabef786a071a4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb6e)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000c80))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000cc0)=0x10001, 0x12)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000d00)={'b', ' *:* ', 'r\x00'}, 0x8)
r1 = syz_open_dev$vcsn(&(0x7f0000000d40), 0x2, 0xa100)
ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r1)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb82}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x54)
r3 = syz_open_dev$mouse(&(0x7f0000000ec0), 0x8, 0x4080)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x68, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x94)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001040)={"5cb026696fb6057e901f729b30e49837", 0x0, 0x0, {0x4, 0x9}, {0x8, 0x401}, 0x5, [0x8, 0x7ff, 0x200, 0x95310c8, 0x7, 0x7, 0xff, 0x1, 0x2, 0x80, 0xbc80, 0x2, 0x45, 0x8, 0x0, 0x2]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r4=>r0, {<r5=>0xffffffffffffffff}}, './file0\x00'})
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000001180)=0x3)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r6=>r4, {r1}}, './file0\x00'})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, r2, 0xfff7de1421c83af3, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x32}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000080)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000001340)='batadv_slave_0\x00')
ioctl$KDADDIO(r4, 0x4b34, 0x9)
recvfrom(0xffffffffffffffff, &(0x7f0000001400)=""/66, 0x42, 0x120, &(0x7f0000001480)=@generic={0x21, "10e5336dee50581010d90903458b7b736ce8bc84e921228d25ff1071361e7ddb5d21204e879503ba97db1874db73a719bc51270d633ce2b8a63f799423746a384e4a53063d03b038829eb921a7577c0d6f5e7a4eb4e231cb5ba04f65efd6f94715c6b799ea25e5fe695e94ac17bb53998e4a964cf24ec62b896f00f2d33d"}, 0x80)

08:28:54 executing program 1:
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)={@multicast1, @broadcast}, &(0x7f0000000040)=0xc)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x0, @dev}})
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f00000000c0)={'geneve1\x00', 0xe821})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'dummy0\x00', {'virt_wifi0\x00'}, 0x5})
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000140)={0x200, 0x1})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f00000001c0)="c382e0c49be2f92a58c521d093a0fc0691fd669a7d4f9104e1f110d543d264f1c1350548f8a72edc2283640443954bcc6862140b03847258975cd127f647195d99793df7629d880820204ab064d41bc314d6153035c74016c5bb99fab036726b585c2d1cb394dd0e85a4ef1115dce3cb14d042aeb648f9d98c7cefd3068bbefec9794ab8a79b09b337d3253c07ddf79787aedc80aac027a0328fb9d4", 0x9c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r1, {0x1000}}, './file0\x00'})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0xee00, 0xee01}}, './file0/file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x2d7}}, './file0\x00'})
r5 = dup3(r0, r4, 0x80000)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x27ff6da60dc99cca}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000440)=0x5)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0xffffff8a}}, './file0/file0\x00'})
accept(r6, 0x0, &(0x7f00000004c0))
openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0)
r7 = syz_open_dev$vcsn(&(0x7f0000000540), 0x5, 0x48001)
getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000580)={@loopback, @initdev, @multicast2}, &(0x7f00000005c0)=0xc)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000006c0))

08:28:54 executing program 2:
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x6, 0xfffffffe, 0x0, 0xbb4d}}, 0x410000)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x1000, 0x5, 0x100})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x4)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000180))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f00000001c0)=@ethtool_gfeatures={0x3a, 0xa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}})
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f00000002c0)={'\x00', 0xbb7, 0x2})
pipe2(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000380))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000400)={0xfe, 0x8, 0x5, "ada83a830ec16180f666ce592a542779b1f1eced88565253b3159c145dbb7c5eda8e17aea8bfcee2113617331dad2a46f017361be8ecdb73fffffa54e20445e09d8c8936160d6b81e65f024ff6dab9205e8f78164e57432ffe9a170fcf2c85a1de44ff2bb85d205939ffc31c159845bcdac617b1f7efb7fc7588661fd777dcb02ab80fdd51779db09dc194ad72a58d950434464edd0f592a9b168e7800409711a9429e33886f890de7ac2021a0eb18774c3867b2845cc8e825851bb905f7332a5905abec754c3b788610c276dfa5bad6c271a22444bac0186e2fe3a3bb129f7933cbebb8794d96be12e459b06f727a62e19a2faa0440b2f53948221177be"})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r4=>r1, {0x5}}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x51000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x15f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x6004090}, 0x80)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001e40)={'syztnl2\x00', &(0x7f0000001dc0)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x1, 0x2, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x22}, @remote, 0x7, 0x20, 0xfffff800, 0x9}})
getsockname$packet(r3, &(0x7f0000001e80)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001ec0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000002000)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000002200)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000021c0)={&(0x7f0000002080)={0x134, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x24008000)

[  116.135058] audit: type=1400 audit(1748248134.952:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:28:55 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/5, 0x5}], 0x4, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r11=>0x0}}}], 0x180}, 0x0)
keyctl$chown(0x4, r0, r1, r11)
setxattr$incfs_id(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), &(0x7f0000000740)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3)
r12 = syz_open_dev$mouse(&(0x7f0000000780), 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f00000007c0)={0x67, @loopback, 0x4e24, 0x1, 'lblcr\x00', 0x4, 0x5, 0x61}, 0x2c)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x40084)
getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000900), &(0x7f0000000940)=0xc)
r13 = accept$inet6(r8, &(0x7f0000000980)={0xa, 0x0, 0x0, @private0}, &(0x7f00000009c0)=0x1c)
flock(r13, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r14=>r5, {0x1f}}, './file0\x00'})
execveat(r14, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)=[&(0x7f0000000a80)='\xff\xff\xff\xff\xff\xff'], &(0x7f0000000c00)=[&(0x7f0000000b00)='\xea$:\\]\x00', &(0x7f0000000b40)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000b80)='[^\x00', &(0x7f0000000bc0)='/dev/input/mouse#\x00'], 0x1000)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
lsetxattr(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=@known='trusted.overlay.origin\x00', &(0x7f0000000d40)='\x00', 0x1, 0x3)
r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r9)
sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf8, r15, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}]}, 0xf8}}, 0x2000c890)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r6, {<r16=>0xffffffffffffffff}}, './file0\x00'})
setsockopt$inet6_udp_encap(r16, 0x11, 0x64, &(0x7f0000000fc0)=0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000010c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8c}}, './file0\x00'})

08:28:55 executing program 4:
ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c)
r0 = fsmount(0xffffffffffffffff, 0x1, 0x5)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004041)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x80)
r3 = dup2(r0, r0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$FITHAW(r4, 0xc0045878)
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbe000000, 0x51}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r7=>r5}, './file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000440)={0x8, 0x7, 0x0, 'queue1\x00', 0xa1})
r8 = accept$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000540)=0x1c)
ioctl$BTRFS_IOC_LOGICAL_INO(r8, 0xc0389424, &(0x7f00000005c0)={0xffffffff, 0x30, '\x00', 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r9 = getpgrp(0xffffffffffffffff)
kcmp$KCMP_EPOLL_TFD(r9, 0x0, 0x7, r6, &(0x7f0000000600)={r0, r4, 0x8000})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc8, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x14, 0x17, [0x0, 0x1, 0x2, 0x0]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc800}, 0x4010)

08:28:55 executing program 5:
bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="8c9a5dec397c692e432bc0af4b81bebd6873e9d04159e33ba89b2df93a7cd63c7eb255c55f0b95c11036d0592d678dae7380e2", 0x33}, 0x1, 0x0, 0x0, 0x4}, 0x6004c811)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x121901, 0x0)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x2)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70fafd982edcc8db88e70413251dccad7b289af49848ea5c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c70b2603ea7b1bb01e3fe669138b4b9c45d222e06756d5f"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040001}, 0x850)
r2 = dup(r0)
ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000003c0))
epoll_wait(0xffffffffffffffff, &(0x7f0000000400)=[{}, {}, {}, {}], 0x4, 0xdb4)
read(r0, &(0x7f0000000440)=""/203, 0xcb)
r3 = accept4(r0, &(0x7f0000000540)=@nl=@unspec, &(0x7f00000005c0)=0x80, 0x80000)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xf5f, 0xf}}}}, ["", "", ""]}, 0x20}}, 0x24000850)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/key-users\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x0, 0x462, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040801}, 0xc080)
r5 = syz_open_dev$vcsu(&(0x7f0000000840), 0xe0bf, 0x14402)
ioctl$HIDIOCSUSAGES(r5, 0x501c4814, &(0x7f0000000880)={{0x2, 0x100, 0x10001, 0x1, 0x5, 0x8001}, 0x119, [0x7fff, 0x9, 0x6, 0x8000, 0xbdb, 0xf7, 0x7f, 0xffff, 0x0, 0xfffffffc, 0x5, 0x8, 0xfffffff7, 0xfff, 0x4c3, 0x6, 0x3, 0x6, 0x6, 0x80, 0x10001, 0x1, 0x7, 0xfffffff9, 0x1, 0x9, 0x80, 0x81, 0xdc6, 0xfffffff8, 0x0, 0x20, 0x6, 0x1, 0x6, 0xfffffffb, 0x3ff, 0x1, 0x3, 0x1, 0x1f, 0x2, 0x9, 0x5, 0x3ff, 0xaa8, 0x7ff, 0x5, 0x2, 0x1, 0x80, 0x8, 0x2c61, 0x3, 0xb1, 0x1, 0x8, 0x9, 0x6, 0xffffffff, 0x9, 0xd418, 0xbfb, 0x3, 0x1ff, 0x0, 0x0, 0x24, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0x800, 0x2, 0x2, 0x3, 0x5, 0x0, 0x6, 0xfffeffff, 0x2, 0x3, 0x1, 0x7ff, 0x3, 0x0, 0x0, 0x0, 0x4d30e1ad, 0x7f, 0x10001, 0x7, 0x9, 0x5, 0xff, 0x401, 0x5, 0x7, 0x6, 0x80000000, 0x9, 0x7, 0x2, 0x1, 0xfffffff8, 0x3ff, 0x1f, 0x4, 0x4, 0x80000001, 0x401, 0x3, 0x1f, 0x3, 0x2, 0x0, 0x1, 0x0, 0x80000001, 0xffffff00, 0x2, 0x2, 0x8a3c, 0x39, 0x7ff, 0x8c1f, 0x7f, 0xffff, 0x40, 0x7, 0x7, 0x7fffffff, 0x1ff, 0xffffffff, 0x7, 0x5, 0x4, 0x3, 0x9, 0x8, 0x2, 0x3, 0x43bf, 0x0, 0x7, 0xea, 0xdf, 0x1, 0x4, 0x7da, 0x7, 0x5, 0x5, 0x0, 0x5b, 0x81, 0x6, 0x1ff, 0xb02, 0x7ff, 0x6, 0x2, 0xffffffff, 0x7ff, 0xffffffff, 0x7, 0x0, 0x2, 0x1ff, 0x8, 0x6, 0x9, 0x80, 0x9, 0x4, 0xfffffeff, 0x2, 0x2, 0x7, 0x7fff, 0x6d, 0x3ff, 0x3ff, 0xffff0001, 0x8, 0x5, 0x96, 0x2, 0x1, 0x3ff, 0x7, 0xfff, 0x7fff, 0x400, 0x80000001, 0x20, 0x6, 0x10001, 0xe9f, 0x6, 0x4, 0x17, 0x100, 0x8, 0x7, 0x2, 0x0, 0xfffffffc, 0x5b, 0x5, 0x7fffffff, 0x3f, 0xfffffff8, 0x5, 0x80000000, 0x80000000, 0x0, 0x0, 0x8cd, 0x100, 0x6, 0x1, 0x10000, 0x0, 0xffffff81, 0x5, 0x5b8, 0x16d6, 0xff, 0x7, 0x84000000, 0x7, 0x401, 0x3, 0x0, 0x0, 0x3, 0x56a, 0x9, 0x8, 0x0, 0x1, 0x85, 0x2000000, 0x3, 0xe83, 0xfff, 0x3, 0x8, 0x1, 0xc4, 0x7, 0x1, 0x9, 0x2, 0x0, 0x4, 0x7f, 0x5, 0x1, 0x2, 0x0, 0x20, 0x7, 0x4, 0xc0b9, 0x6, 0x2, 0x8001, 0x7, 0x7fff, 0xa2b3, 0x7, 0x1, 0x800, 0x0, 0x8, 0x9, 0x9a87, 0x5, 0x0, 0x0, 0x1f, 0x4, 0x7ff, 0x40, 0xcd, 0x1, 0xfff, 0x100, 0x8001, 0x7, 0x0, 0x5, 0x4, 0x0, 0x4, 0x7, 0x40, 0x2, 0x0, 0x7, 0x6, 0xffffffff, 0x3, 0xd43, 0xfffffffc, 0xfffffff9, 0x7, 0x0, 0x4, 0x0, 0x8000, 0x3, 0x1, 0x81, 0x401, 0x259, 0x8, 0x1, 0x81, 0x101, 0x2, 0x44, 0x9, 0x5, 0x5, 0xe0, 0x401, 0x4, 0x2, 0x5, 0x640, 0x0, 0x6, 0xca6, 0x0, 0x8001, 0x9, 0x48000, 0xfffffff8, 0x315e, 0x1f, 0x4, 0x40, 0xfffffffe, 0x2, 0xa3, 0x54b5, 0x400, 0xfffffffb, 0x6, 0x7e, 0x81, 0x80000000, 0x8, 0x80000000, 0x8, 0x5, 0x1f, 0x6, 0xfbee, 0x20, 0x3f, 0x2f74, 0xffffffff, 0x1, 0xd0, 0x80000000, 0xb624, 0x8001, 0x7fffffff, 0xf0, 0x0, 0x4, 0x1, 0x5, 0x40, 0x9, 0x7, 0xfffffff7, 0x100, 0x2, 0x5, 0x7, 0x3, 0x1, 0x5, 0x2c67, 0x50, 0x4, 0x389, 0x3, 0x4, 0x9, 0x84, 0xcc, 0x2a, 0x0, 0x7f, 0x750, 0x7, 0x80000000, 0xe0, 0x7, 0x2, 0x9, 0x8000, 0x5, 0xeb, 0x1, 0x4, 0x8, 0x4, 0x80, 0xff, 0x3, 0x2, 0x4, 0x22fd, 0x10001, 0x300, 0x17e1, 0x1f, 0x1, 0x9, 0x5, 0x1, 0x101, 0x800, 0x81, 0x9, 0x4, 0xa69, 0x5, 0x4, 0x1f, 0x3, 0x2, 0x3, 0x4, 0x1, 0x0, 0xfbdb, 0x8, 0x2, 0xbaa5ea6f, 0x2, 0x5, 0x8, 0x8, 0x6, 0x2f7, 0xce, 0x4c5, 0x0, 0x3040e9db, 0x8001, 0x800, 0x56, 0x5, 0x5, 0x6, 0x7fff, 0x524e, 0x1000, 0x0, 0xa8, 0x1, 0x322, 0x1, 0x101, 0x80000001, 0x9, 0x20, 0x7fff, 0x7ff, 0x4, 0x8, 0x1f, 0x332b, 0x8001, 0x8000, 0x0, 0x64, 0x8, 0x1, 0x1ff, 0x1000, 0x6, 0x80, 0xfa, 0x6, 0xc4, 0xfa46235, 0xffff91c5, 0x4f32d6b5, 0x7ff, 0x7fffffff, 0x8, 0x5, 0x7, 0x8, 0x0, 0xfffffc01, 0xffffffff, 0x7, 0x3ff, 0x7, 0x6, 0x7fffffff, 0x0, 0x6, 0x7b, 0x75, 0x40, 0x8, 0x4, 0x4, 0x0, 0x80000000, 0x10000, 0x2, 0x0, 0x4, 0x3, 0x1f, 0x9, 0x4, 0x4, 0x9, 0x10000, 0x9, 0x80000000, 0x10001, 0x800, 0x7, 0xa6e9814, 0x7ff, 0x4, 0x30, 0x800, 0x401, 0x6, 0x10000, 0x2, 0x4, 0x0, 0x0, 0x7fff, 0x1000, 0x9, 0x3, 0x200, 0x7fff, 0x4, 0xfffffffb, 0x1f, 0x8, 0xcb8, 0xfffffcc3, 0x7f, 0x1, 0x1c, 0x7f1059ff, 0x5f, 0x6, 0xfffff100, 0x10001, 0x3ff, 0x6, 0x43, 0x2, 0x1, 0x8, 0x4, 0x7f, 0x555d2af6, 0x1, 0x1, 0x3, 0xecf, 0x9, 0x200, 0x6, 0x9, 0x14, 0x9, 0x5, 0x1, 0xfff, 0x3, 0x0, 0x9, 0x0, 0xfffffd1e, 0x39, 0x8, 0x1ff, 0x6, 0x3ff, 0x9, 0xffff, 0x1f, 0x1, 0x8, 0x1, 0x1, 0x5, 0x1, 0x3, 0x3, 0x6, 0x5, 0xb05, 0x80000001, 0x6, 0x9, 0xfffffffe, 0x1000, 0x10000, 0x6, 0x4, 0x7, 0x2, 0x74, 0x80, 0x663, 0x2, 0x3, 0x1f, 0xffffffff, 0xfa6c, 0x2, 0x40a2, 0x7, 0x20, 0x5, 0x1ff, 0xffffffff, 0x7, 0x1, 0x10001, 0xb9, 0x0, 0x101, 0x4, 0x0, 0x2, 0x4, 0x3f, 0x1, 0x6, 0x10001, 0x40, 0x47d13329, 0xfffffff8, 0x0, 0x7, 0x3, 0x3, 0x81, 0x80000000, 0x100, 0x8000, 0xfffff000, 0x0, 0xffffffff, 0x8, 0x3, 0x3, 0x0, 0xffffcea1, 0x9, 0x4, 0x50c, 0x2, 0x4, 0x1, 0xd3, 0x4000000, 0x4, 0x4, 0x0, 0x1, 0x8, 0x8001, 0x400, 0x7ff, 0x1f, 0xffffffff, 0x3, 0xff, 0x8, 0x2, 0x4, 0xa0, 0x39, 0x1, 0x0, 0xcbcd, 0x81, 0x4, 0x9, 0x7fffffff, 0xc27, 0x1, 0x3, 0x1ff, 0x2, 0x3, 0x200, 0x0, 0x1, 0x1ff, 0x5d, 0x5, 0x3, 0x8, 0x490, 0x0, 0x80, 0x4, 0x4, 0xfff, 0xffffffb2, 0x200, 0xfffffeff, 0x222, 0x4, 0x8000, 0x0, 0x7ff, 0x9, 0x7, 0x5, 0x9, 0x8, 0x6, 0x1, 0x0, 0xf834, 0xfffff001, 0x20, 0x0, 0x0, 0x6, 0x101, 0xfffffc00, 0x9, 0x6, 0x6, 0xfffff001, 0x9, 0xffffffff, 0x5, 0xf4, 0x8001, 0x7, 0x4, 0x9, 0x3, 0x98f, 0x0, 0x1ff, 0x9, 0x68f62ba0, 0x7, 0x1, 0x0, 0x800, 0x3, 0x2, 0x3, 0x6, 0x1, 0x1000, 0x9, 0x4, 0x1f, 0x1f, 0xa418, 0x8, 0x3, 0x1, 0x7fff, 0x3e, 0x7, 0x2b5e, 0x7, 0x8000, 0x8c, 0x5, 0x5, 0x20, 0x8, 0x40, 0x6, 0x3, 0x5, 0x0, 0x80, 0xf8, 0x7, 0x3ff, 0x9, 0x6, 0x9, 0x8000, 0x11b4, 0x7, 0x200, 0x0, 0x6, 0x4, 0x4, 0x4, 0x401, 0x401, 0x8, 0x6, 0x8, 0xfffffffb, 0xa5, 0xff1, 0x80, 0x10000, 0x4, 0xec4, 0x9c, 0x64d, 0x7, 0x1, 0x2000, 0x7, 0xa96d, 0xfffffffd, 0x5, 0x20, 0x81, 0x3, 0x8, 0x8, 0x7, 0x8000, 0x6, 0x400, 0x1f, 0x5, 0x1f, 0x3a09bb2a, 0x4, 0x1, 0x500, 0x41, 0x3, 0xfff, 0x1000, 0x7, 0x80000001, 0xf6, 0x795, 0x3, 0x3, 0x4, 0xdd, 0x9, 0x1b, 0x4, 0x0, 0x6, 0xc89, 0x5, 0x101, 0x2, 0x1cc9, 0xfffffffb, 0x1, 0x65a9a2a6, 0x72f, 0xfffffff9, 0xfffffffe, 0x575, 0x40, 0x7, 0x3, 0x8, 0x0, 0x800, 0x1, 0x250, 0x7fff, 0x8, 0x7, 0x76fb, 0xfff, 0xffffffff, 0xd7, 0x8001, 0x400, 0x3ff, 0x4, 0x0, 0x1, 0x1, 0x7fff, 0x6, 0xffffffff, 0x4, 0x2, 0x0, 0x8, 0xff, 0x4, 0x10000000, 0x80000000, 0xa3a0, 0x1, 0x3, 0x7, 0xc57, 0xb2d7, 0x0, 0x20, 0x7fff, 0x9, 0x1f, 0x100, 0x3, 0x7, 0xffffffff, 0xffffbd23, 0x5, 0x800, 0x9, 0x2, 0x1ff, 0x8, 0x0, 0x4, 0x9, 0x529, 0x3, 0x0, 0x6, 0x9, 0xffffff81, 0xfffffff9, 0x0, 0x40, 0x6, 0xfffffffc, 0x2, 0x3, 0x3a30, 0x2, 0x80, 0xfffff001, 0x3, 0x40, 0x1, 0x81, 0x80000001, 0x45, 0x1f, 0x1, 0x0, 0x40, 0xe127, 0x2c3e, 0x31ad0307, 0x8000, 0x8, 0x6, 0x0, 0x10001, 0x0, 0x4, 0x0, 0xfffffc01, 0x7, 0xff0, 0x6, 0x29, 0x7, 0x8e43, 0x8, 0x7, 0xa1, 0x7, 0x3f, 0x1, 0xffff021b, 0x4c, 0x8000, 0x3, 0x2, 0x8b0, 0x8, 0xffffffff, 0x2eae5911, 0x5, 0xc4, 0x3, 0x1f, 0x9, 0x1ff, 0x4, 0x5, 0x1000, 0x0, 0x3f, 0x0, 0x26f9, 0x7dab, 0x7, 0x1461, 0x3, 0x8, 0x0, 0xfffffff9]})
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000001900), 0x22000, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001940)={{r7}, 0x0, 0x32, @unused=[0x1000, 0x2, 0x0, 0x8], @subvolid=0x100000001})

08:28:55 executing program 6:
getrusage(0xffffffffffffffff, &(0x7f0000000000))
waitid(0x1, 0xffffffffffffffff, &(0x7f00000000c0), 0x2, &(0x7f0000000140))
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000200))
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x20001, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000280)=""/57, &(0x7f00000002c0)=0x39)
r1 = dup2(r0, 0xffffffffffffffff)
fremovexattr(r1, &(0x7f0000000300)=@known='trusted.overlay.nlink\x00')
waitid(0x1, 0x0, &(0x7f0000000340), 0x1000000, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f00000003c0), 0x0, 0x20000)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={0x0, 0xffff, 0x0, [0xfff, 0x5a3825a9, 0x9, 0xfffffffffffff000, 0x3d80], [0x1, 0x80, 0x7, 0x2, 0x6, 0x8, 0x8001, 0x7, 0x0, 0x1, 0xffffffff, 0x80000001, 0x7, 0xff, 0x8, 0xab23, 0x5, 0x8000, 0x6, 0x9, 0xf7, 0x3, 0x9, 0x9, 0x1, 0x0, 0x8, 0x6, 0x5, 0x2, 0x20, 0x100000000, 0x7, 0xac5, 0x8000, 0x7, 0x401, 0x0, 0x200, 0x3f, 0xfffffffffffffff9, 0x0, 0x7fffffff, 0x100, 0x7, 0x101, 0x554, 0x7, 0x9, 0xf246, 0x3, 0xfffffffffffffffe, 0x100, 0x45, 0x14fab143, 0x0, 0xa12, 0x6, 0x2, 0x1, 0x8, 0x8, 0x8, 0x9, 0x8, 0xe335, 0x1, 0x100000001, 0x4, 0x8, 0x559, 0x400, 0xfffffffffffffff9, 0x7fff, 0x2, 0x846, 0x2, 0x100, 0xfff, 0x1ff, 0x0, 0x4, 0x9, 0x1, 0x4, 0x8, 0x2, 0x7fff, 0x1, 0x2, 0x6, 0xffffffff, 0x3, 0x0, 0x100000001, 0xffffffff, 0x8000, 0xfff, 0x100, 0x5, 0x100000001, 0x2, 0x10000, 0x1, 0x10001, 0x6, 0x1, 0x4c2, 0x443e0936, 0x4, 0x1f, 0x80, 0x7fffffff, 0x4, 0x8fc8, 0x0, 0x3ff, 0x0, 0x9, 0x6, 0x4be]})
r3 = openat$cgroup_ro(r0, &(0x7f0000000880)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r3)
ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f00000008c0)={0x2, 0x5, 0x0, 0x3, 0xf8, 0x1, @msf={0x40, 0x9, 0x4}, @lba})
r4 = openat2(r3, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x200000, 0x120, 0x9}, 0x18)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x88, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x88}, 0x1, 0x0, 0x0, 0x48010}, 0x40004)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0)
ioctl$FICLONE(r3, 0x40049409, r5)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000b40)={0x7, 0x1, 0x2}, &(0x7f0000000b80)=[{}, {}])
pread64(r2, &(0x7f0000000c80)=""/4096, 0x1000, 0x6)

08:28:55 executing program 7:
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810010}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5e8, 0x6e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xb}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "351d64c8e54dc5ef357106adc5ff9b18"}]}, 0x90}}, 0x24000000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x5}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8044)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000081)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7ff, 0x4e, 0xfffffffe, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x10080)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c040}, 0x8000)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000040)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x37, 0x3, "b62fbe27ce280e7c726236f451c3af1c96cf9944317de83003f35c14ccace1425e8c614d5a2624d084328674be6b85a232b57b"}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f0000000b80)={'ip_vti0\x00', {0x2, 0x0, @multicast2}})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f0000000bc0)={0x7, 'macsec0\x00', {0xecd}, 0x5ce0})

[  117.441697] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.449670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.452625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.464497] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.476646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.543304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.547559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.551139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.557886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.564390] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.613786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.616592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.618833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.626595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.630407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.817752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  117.829484] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  117.860508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  117.877309] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  117.894359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  117.934136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  117.935878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  117.939131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  117.951496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  117.954352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  117.959540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  117.966375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  117.975302] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  117.979113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  117.979502] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  117.983573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  117.986401] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  117.994166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  117.996574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  118.001260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.003362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.016842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  118.042524] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  118.120415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  118.133417] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  119.511652] Bluetooth: hci0: command tx timeout
[  119.638359] Bluetooth: hci1: command tx timeout
[  119.702161] Bluetooth: hci2: command tx timeout
[  120.022004] Bluetooth: hci3: command tx timeout
[  120.086053] Bluetooth: hci6: command tx timeout
[  120.086657] Bluetooth: hci5: command tx timeout
[  120.149995] Bluetooth: hci4: command tx timeout
[  120.214197] Bluetooth: hci7: command tx timeout
[  121.558504] Bluetooth: hci0: command tx timeout
[  121.687000] Bluetooth: hci1: command tx timeout
[  121.751001] Bluetooth: hci2: command tx timeout
[  122.070276] Bluetooth: hci3: command tx timeout
[  122.134216] Bluetooth: hci6: command tx timeout
[  122.136001] Bluetooth: hci5: command tx timeout
[  122.198305] Bluetooth: hci4: command tx timeout
[  122.263503] Bluetooth: hci7: command tx timeout
[  123.654015] Bluetooth: hci0: command tx timeout
[  123.733999] Bluetooth: hci1: command tx timeout
[  123.797988] Bluetooth: hci2: command tx timeout
[  124.118201] Bluetooth: hci3: command tx timeout
[  124.183122] Bluetooth: hci6: command tx timeout
[  124.183618] Bluetooth: hci5: command tx timeout
[  124.246061] Bluetooth: hci4: command tx timeout
[  124.310269] Bluetooth: hci7: command tx timeout
[  125.718746] Bluetooth: hci0: command tx timeout
[  125.783140] Bluetooth: hci1: command tx timeout
[  125.846055] Bluetooth: hci2: command tx timeout
[  126.166220] Bluetooth: hci3: command tx timeout
[  126.230219] Bluetooth: hci5: command tx timeout
[  126.230712] Bluetooth: hci6: command tx timeout
[  126.294276] Bluetooth: hci4: command tx timeout
[  126.360083] Bluetooth: hci7: command tx timeout
[  180.073438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.075027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.077624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.084519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.090403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.196753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.203541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.214315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.221297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.234730] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.258765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.265810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.266763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.268671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.270218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.274193] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.275114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.281280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.300318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.304480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.334175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  180.360704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  180.390390] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  180.397638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.404487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  180.408084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.417725] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.421362] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  180.424680] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.426694] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.712556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  180.713981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  180.716316] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  180.719616] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  180.721757] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  180.793265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  180.794816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  180.796407] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  180.803686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  180.807564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.166071] Bluetooth: hci0: command tx timeout
[  182.293999] Bluetooth: hci1: command tx timeout
[  182.358009] Bluetooth: hci2: command tx timeout
[  182.358115] Bluetooth: hci3: command tx timeout
[  182.486160] Bluetooth: hci6: command tx timeout
[  182.551027] Bluetooth: hci4: command tx timeout
[  182.806019] Bluetooth: hci7: command tx timeout
[  182.935047] Bluetooth: hci5: command tx timeout
[  184.214983] Bluetooth: hci0: command tx timeout
[  184.342004] Bluetooth: hci1: command tx timeout
[  184.406106] Bluetooth: hci2: command tx timeout
[  184.406571] Bluetooth: hci3: command tx timeout
[  184.534980] Bluetooth: hci6: command tx timeout
[  184.598064] Bluetooth: hci4: command tx timeout
[  184.854306] Bluetooth: hci7: command tx timeout
[  184.982032] Bluetooth: hci5: command tx timeout
[  186.262147] Bluetooth: hci0: command tx timeout
[  186.391932] Bluetooth: hci1: command tx timeout
[  186.454059] Bluetooth: hci3: command tx timeout
[  186.454546] Bluetooth: hci2: command tx timeout
[  186.583023] Bluetooth: hci6: command tx timeout
[  186.646043] Bluetooth: hci4: command tx timeout
[  186.903015] Bluetooth: hci7: command tx timeout
[  187.030392] Bluetooth: hci5: command tx timeout
[  188.311175] Bluetooth: hci0: command tx timeout
[  188.438078] Bluetooth: hci1: command tx timeout
[  188.503147] Bluetooth: hci2: command tx timeout
[  188.504043] Bluetooth: hci3: command tx timeout
[  188.629986] Bluetooth: hci6: command tx timeout
[  188.694110] Bluetooth: hci4: command tx timeout
[  188.950004] Bluetooth: hci7: command tx timeout
[  189.078447] Bluetooth: hci5: command tx timeout
[  242.304143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  242.308416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  242.312088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  242.321744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  242.325438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  242.465414] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.469277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.471737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.478982] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.485538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  242.608437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  242.614155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  242.618439] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  242.630371] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  242.636356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  242.676981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.686035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.691079] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.701469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.710462] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.781402] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  242.790665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  242.799624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  242.827712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  242.831469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  242.994448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  242.999788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.021602] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.033522] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.040823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  243.042585] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.045318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  243.051882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  243.052870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  243.053293] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.056946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  243.063184] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.064357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.100273] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.149344] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  244.374514] Bluetooth: hci0: command tx timeout
[  244.565986] Bluetooth: hci1: command tx timeout
[  244.694376] Bluetooth: hci2: command tx timeout
[  244.822252] Bluetooth: hci3: command tx timeout
[  244.885983] Bluetooth: hci4: command tx timeout
[  245.143967] Bluetooth: hci5: command tx timeout
[  245.144665] Bluetooth: hci6: command tx timeout
[  245.270408] Bluetooth: hci7: command tx timeout
[  246.421984] Bluetooth: hci0: command tx timeout
[  246.614977] Bluetooth: hci1: command tx timeout
[  246.744048] Bluetooth: hci2: command tx timeout
[  246.870964] Bluetooth: hci3: command tx timeout
[  246.934960] Bluetooth: hci4: command tx timeout
[  247.190998] Bluetooth: hci6: command tx timeout
[  247.191450] Bluetooth: hci5: command tx timeout
[  247.318216] Bluetooth: hci7: command tx timeout
[  248.470235] Bluetooth: hci0: command tx timeout
[  248.663386] Bluetooth: hci1: command tx timeout
[  248.790016] Bluetooth: hci2: command tx timeout
[  248.918176] Bluetooth: hci3: command tx timeout
[  248.982131] Bluetooth: hci4: command tx timeout
[  249.240061] Bluetooth: hci5: command tx timeout
[  249.240516] Bluetooth: hci6: command tx timeout
[  249.366536] Bluetooth: hci7: command tx timeout
[  250.519016] Bluetooth: hci0: command tx timeout
[  250.710231] Bluetooth: hci1: command tx timeout
[  250.837973] Bluetooth: hci2: command tx timeout
[  250.966051] Bluetooth: hci3: command tx timeout
[  251.031156] Bluetooth: hci4: command tx timeout
[  251.286103] Bluetooth: hci6: command tx timeout
[  251.286574] Bluetooth: hci5: command tx timeout
[  251.413964] Bluetooth: hci7: command tx timeout
[  304.690517] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  304.695381] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  304.707612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  304.715666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  304.726787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  304.808294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  304.813471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  304.817316] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  304.824862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  304.828609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  304.948757] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  304.953621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  304.961664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  304.973204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  304.991885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.015333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.020142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.024499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.030123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.033163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.139556] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.155779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.173725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.210817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.238729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.508227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  305.521734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  305.531629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  305.547763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.563284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  305.569843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.581413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.599486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.601720] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.605566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.611683] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.616242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  305.638886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.666162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  305.760165] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  306.775505] Bluetooth: hci0: command tx timeout
[  306.901999] Bluetooth: hci1: command tx timeout
[  307.094233] Bluetooth: hci3: command tx timeout
[  307.095265] Bluetooth: hci2: command tx timeout
[  307.287095] Bluetooth: hci4: command tx timeout
[  307.735007] Bluetooth: hci7: command tx timeout
[  307.863016] Bluetooth: hci6: command tx timeout
[  307.927948] Bluetooth: hci5: command tx timeout
[  308.822965] Bluetooth: hci0: command tx timeout
[  308.951137] Bluetooth: hci1: command tx timeout
[  309.143259] Bluetooth: hci3: command tx timeout
[  309.143769] Bluetooth: hci2: command tx timeout
[  309.336167] Bluetooth: hci4: command tx timeout
[  309.783181] Bluetooth: hci7: command tx timeout
[  309.911220] Bluetooth: hci6: command tx timeout
[  309.974959] Bluetooth: hci5: command tx timeout
[  310.871001] Bluetooth: hci0: command tx timeout
[  310.999194] Bluetooth: hci1: command tx timeout
[  311.191731] Bluetooth: hci3: command tx timeout
[  311.192211] Bluetooth: hci2: command tx timeout
[  311.383108] Bluetooth: hci4: command tx timeout
[  311.831005] Bluetooth: hci7: command tx timeout
[  311.958040] Bluetooth: hci6: command tx timeout
[  312.023241] Bluetooth: hci5: command tx timeout
[  312.919084] Bluetooth: hci0: command tx timeout
[  313.046207] Bluetooth: hci1: command tx timeout
[  313.239096] Bluetooth: hci2: command tx timeout
[  313.239535] Bluetooth: hci3: command tx timeout
[  313.430012] Bluetooth: hci4: command tx timeout
[  313.878974] Bluetooth: hci7: command tx timeout
[  314.007084] Bluetooth: hci6: command tx timeout
[  314.071008] Bluetooth: hci5: command tx timeout
[  367.214751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.230794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.237294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.246149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.253458] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.468312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  367.474579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  367.481455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  367.496866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  367.507947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.558752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.565402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.567952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  367.580289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  367.588317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  367.631386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  367.659764] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  367.664341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  367.683466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  367.714563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.744034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  367.748491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  367.750741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  367.756646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  367.760769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  367.814788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  367.824659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.829715] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.831882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.838334] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.839325] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  367.843680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  367.846215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.851129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.893324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  367.896534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  367.902498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.908537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  367.915271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  367.921459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  369.302080] Bluetooth: hci0: command tx timeout
[  369.558272] Bluetooth: hci1: command tx timeout
[  369.686045] Bluetooth: hci2: command tx timeout
[  369.750187] Bluetooth: hci3: command tx timeout
[  369.814012] Bluetooth: hci4: command tx timeout
[  370.006126] Bluetooth: hci6: command tx timeout
[  370.071312] Bluetooth: hci5: command tx timeout
[  370.072343] Bluetooth: hci7: command tx timeout
[  371.350168] Bluetooth: hci0: command tx timeout
[  371.607004] Bluetooth: hci1: command tx timeout
[  371.735270] Bluetooth: hci2: command tx timeout
[  371.798993] Bluetooth: hci3: command tx timeout
[  371.863936] Bluetooth: hci4: command tx timeout
[  372.054024] Bluetooth: hci6: command tx timeout
[  372.119055] Bluetooth: hci7: command tx timeout
[  372.119517] Bluetooth: hci5: command tx timeout
[  373.399922] Bluetooth: hci0: command tx timeout
[  373.655156] Bluetooth: hci1: command tx timeout
[  373.783331] Bluetooth: hci2: command tx timeout
[  373.845982] Bluetooth: hci3: command tx timeout
[  373.910151] Bluetooth: hci4: command tx timeout
[  374.102173] Bluetooth: hci6: command tx timeout
[  374.168011] Bluetooth: hci7: command tx timeout
[  374.168463] Bluetooth: hci5: command tx timeout
[  375.447933] Bluetooth: hci0: command tx timeout
[  375.703466] Bluetooth: hci1: command tx timeout
[  375.832128] Bluetooth: hci2: command tx timeout
[  375.895095] Bluetooth: hci3: command tx timeout
[  375.959344] Bluetooth: hci4: command tx timeout
[  376.151084] Bluetooth: hci6: command tx timeout
[  376.215018] Bluetooth: hci5: command tx timeout
[  376.215484] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:33:55  Registers:
info registers vcpu 0
RAX=ffffffff812d99e2 RBX=0000000000000002 RCX=0000000000000002 RDX=ffff88806ce08a01
RSI=ffff88806ce08a70 RDI=ffff88806ce08ad0 RBP=ffff88806ce08ad0 RSP=ffff88806ce089b8
R8 =ffffffff867c2182 R9 =ffff88806ce08ab8 R10=000000000003b67d R11=0000000000006be9
R12=ffff88806ce08ad8 R13=ffff88806ce08ac0 R14=ffff88806ce08a78 R15=ffff88806ce08a78
RIP=ffffffff81354740 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f312d9fb8e0 CR3=0000000027258000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffffffff85c75180 RCX=ffffffff81740875 RDX=ffff888009dc9b80
RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88803859f0d0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=00007fbbf8c69d82 R13=0000000000000000 R14=ffff888009dc9b80 R15=0000000000000cc0
RIP=ffffffff81737be6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbbf873e368 CR3=0000000033a39000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000