Warning: Permanently added '[localhost]:18629' (ECDSA) to the list of known hosts.
2025/05/27 04:47:30 fuzzer started
2025/05/27 04:47:30 dialing manager at localhost:33805
syzkaller login: [   94.549236] cgroup: Unknown subsys name 'net'
[   94.701645] cgroup: Unknown subsys name 'cpuset'
[   94.737705] cgroup: Unknown subsys name 'rlimit'
2025/05/27 04:47:47 syscalls: 206
2025/05/27 04:47:47 code coverage: enabled
2025/05/27 04:47:47 comparison tracing: enabled
2025/05/27 04:47:47 extra coverage: enabled
2025/05/27 04:47:47 setuid sandbox: enabled
2025/05/27 04:47:47 namespace sandbox: enabled
2025/05/27 04:47:47 Android sandbox: enabled
2025/05/27 04:47:47 fault injection: enabled
2025/05/27 04:47:47 leak checking: enabled
2025/05/27 04:47:47 net packet injection: enabled
2025/05/27 04:47:47 net device setup: enabled
2025/05/27 04:47:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/27 04:47:47 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/27 04:47:47 USB emulation: enabled
2025/05/27 04:47:47 hci packet injection: enabled
2025/05/27 04:47:47 wifi device emulation: enabled
2025/05/27 04:47:47 802.15.4 emulation: enabled
2025/05/27 04:47:47 fetching corpus: 0, signal 0/0 (executing program)
2025/05/27 04:47:49 starting 8 fuzzer processes
04:47:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0xf)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000200)=0x9, 0x4)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x203280, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x41)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20001}, 0x20000000)
socket$inet_udp(0x2, 0x2, 0x0)
openat$cgroup_type(r1, &(0x7f0000000540), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x4)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r5)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r9, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="8a326a0f5867"}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x8800)

04:47:49 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000000)={{0x2, 0xcb}, {0x2, 0x7f}, 0x3ff, 0xa, 0xdc})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0xfe, 0x1f}, {0x40, 0x9}, 0x91, 0x7, 0xfc})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x6, 0x6, 0x0, 'queue1\x00', 0x5a93})
read$snapshot(0xffffffffffffffff, &(0x7f00000001c0)=""/216, 0xd8)
write$snapshot(0xffffffffffffffff, &(0x7f00000002c0)="4582bcf37efd2c004f78fa0702c247a046085a6898b0826a5077ebae5a41516ceadbf144d594d95b975e4643924b9579dca101a0ccf355e86b32aca2785b9dd05c139e45be90f37a50a18acfbd693c72efa6821e0f23ad4d6de193a4372e4b1ce2ab2d2a7f9949d14087e03e05cc9299e55fcaa1408ad486db4a6548aeaf8f5340e2597a70aff9ab57e8e6eeeef8af79cca24fa1f868fa480728aa1bbdd699b6a62494cc71983a26f4ede493871f7272c398898232210ed3", 0xb8)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0)
read$snapshot(r0, &(0x7f00000003c0)=""/45, 0x2d)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400))
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x1595)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x28c2, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x700000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000005c0))
read$snapshot(0xffffffffffffffff, &(0x7f0000000600)=""/133, 0x85)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000006c0)={0x20003014})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg2\x00', <r3=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', <r4=>r3, 0x0, 0x80, 0x100, 0x7ff, {{0x2b, 0x4, 0x0, 0x2e, 0xac, 0x66, 0x0, 0x4, 0x2f, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x24, 0x7c, 0x0, 0x6, [0x4d, 0x8, 0x101, 0x6, 0x7, 0x8, 0x3, 0x2]}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x3f}, {@rand_addr=0x64010101, 0x4}, {@empty, 0xb22}]}, @lsrr={0x83, 0x23, 0xd6, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @private=0xa010102, @multicast2, @remote, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0xe, [{@multicast1, 0xffffff80}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x80}, {@empty, 0x5}, {@rand_addr=0x64010101, 0x10001}, {@remote, 0x92}, {@multicast1, 0x7}]}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'syztnl0\x00', r4, 0x700, 0x15ffe1e1d2f60735, 0x5, 0x20, {{0xd, 0x4, 0x2, 0x9, 0x34, 0x65, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x1f, 0xf1, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @empty, @broadcast, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}}})

04:47:49 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0)
r2 = epoll_create(0x36)
r3 = socket(0x9, 0x80000, 0x7fffffff)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x20, &(0x7f00000000c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, 0x0, 0x0, {0x0, r4}}, 0x1f)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r5 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x800)
ioctl$BLKTRACESTOP(r5, 0x1275, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
r7 = socket$netlink(0x10, 0x3, 0xf)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440)={0x1000, 0x0, 0x7, {0xbb, 0x5}, 0x9, 0x101})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f00000004c0)=0xf, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11910, 0xffffffffffffffff, 0x0)

[  112.648331] audit: type=1400 audit(1748321269.191:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:47:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x709, 0x7, 0x4, {0x3ff, 0x1}, 0x8, 0xc})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000100)={{0x5, 0x56}, {0x3, 0x80}, 0x8001, 0x2, 0xf8})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x6}, 'port0\x00', 0xa1, 0x260, 0x93, 0x5136, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0xff})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x40002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000280))
ioctl$DVD_AUTH(r0, 0x5390, &(0x7f00000002c0)=@type=0xa)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x8020, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000340)={{0x2, 0x8}, 'port0\x00', 0x2, 0x20, 0x4709a557, 0x9cd6, 0x72e36707, 0xffff, 0x6, 0x0, 0x4, 0x5})
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x86080, 0x0)
ioctl$CDROM_DEBUG(r2, 0x5330, 0x0)
geteuid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x101600)
clock_gettime(0x3, &(0x7f0000000480))
ioctl$CDROM_DISC_STATUS(r2, 0x5327)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000004c0)={0x3, 0x0, 'client1\x00', 0x1, "3f58cee4ce5ccf7a", "b3063c3145cf785a4e8a6545aedd311fe025079ce2057c9bec6192e856b59f4e", 0x5, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000580)={{0x0, 0xab}, {0x66, 0x4}, 0x41be, 0x1, 0x40})
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xc880)

04:47:49 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0xfffffffd, 0x10000, 0xfffffff7, {0xed0, 0x8bf}, 0xfffffffd})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000001c0)={0x5, 0x8, 0x1, 'queue0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000280)={{0xe2, 0x47}, 'port1\x00', 0x42, 0x1001, 0x0, 0x8, 0x4, 0x80000001, 0x9, 0x0, 0x2, 0x4})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x250000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000380)={0x20000000})
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x22000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000400)={0x4, 0x80, 0x7ff, {0x2, 0x8}, 0x3, 0x5fc0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname(r4, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000540)=0x80)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000700)={'gre0\x00', &(0x7f0000000680)={'gre0\x00', <r7=>0x0, 0x7, 0x7, 0x7, 0x2, {{0xb, 0x4, 0x1, 0x1f, 0x2c, 0x64, 0x0, 0xe3, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}, {[@timestamp={0x44, 0x18, 0x40, 0x0, 0x3, [0x1000, 0xff, 0xc08, 0x3, 0x2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000740)={'gretap0\x00', r7, 0x10, 0x7, 0x7fff, 0xfffff2cb, {{0x5, 0x4, 0x2, 0xc, 0x14, 0x65, 0x0, 0xc0, 0x6, 0x0, @loopback, @loopback}}}})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000007c0)={0x30a, @time={0x1e, 0x4}, 0x81, {0xd4, 0x3f}, 0x6, 0x1, 0x7})
getsockname(r3, &(0x7f0000000800)=@qipcrtr, &(0x7f0000000880)=0x80)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f00000008c0))

04:47:49 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x300}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x200400c4)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0xc040}, 0x40000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', <r3=>0x0})
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}}, 0x4008845)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000600)=0x4, 0x4)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe8, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x59, 0x81, {0x4e21, 0x4e24, [0x6, 0xc06d, 0x7, 0x52c5], [0x800, 0x0, 0x9, 0xffffb5c1], r3, [0x1, 0xc87b]}, 0x80, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x99, 0x1, "76fb242797c426bfcfd0752d73ff60fc819b03cb76200158fbf01108693466a9027d30e457105158b761dba8c1b96e4aaa0e56f17a2d99daf443fa358be461032bcf3fb22977ebcb89b7de280d9cdc77e76e097046c08b9a1d165459621e80eed8c416da5d4d095c436cad034025c5976a1c685743e33e095b3a238a5764d107396664548a180cad9b581b1d1e70f5b5dd45d2877e"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008005}, 0x24000000)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}]}, 0x2c}}, 0x20000081)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl2\x00', r2, 0x7, 0x700, 0x1000, 0x6ef0, {{0x17, 0x4, 0x2, 0x35, 0x5c, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x7, 0x14, [@local]}, @timestamp={0x44, 0x20, 0x99, 0x0, 0x4, [0xffff, 0x0, 0x202c, 0x0, 0x1ff, 0x80000001, 0x3925fb4b]}, @generic={0x86, 0x5, "48cb74"}, @ssrr={0x89, 0x1b, 0xfc, [@dev={0xac, 0x14, 0x14, 0x8}, @empty, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000b00), r6)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000b40))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}}, 0x4040)

04:47:49 executing program 6:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8040801)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7f5a67ea1da9b2bd}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40c5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040051)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x45)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r2)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x80)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x48420}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2c000008}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40085}, 0x800)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r4, 0x100, 0x80000000, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r9, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8040)

04:47:49 executing program 7:
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/192)
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
r1 = shmget(0x2, 0x4000, 0x78000003, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/67)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000140)=""/182)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xa200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000240)={0xfffff87c, 0x2, 0x36e2})
r3 = shmget(0x3, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_STAT(r3, 0xd, &(0x7f00000002c0)=""/213)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x420001)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000400)={{0x6, 0xf9}, {0x7, 0xbb}, 0x10001, 0x5, 0x4})
r5 = shmget(0x1, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000480)=""/116)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_UNLOCK(0x0, 0xc)

[  113.840634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.842145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.843228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.845657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.847214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.022478] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.039488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.046170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.052495] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.056334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.058709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.061497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.063565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.065298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.066774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.224417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.225777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.228912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.233255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.236133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.354586] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.364294] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.398418] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.415286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.455605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.510244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.514527] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.517643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.522972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.531695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.535538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.543138] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.548268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.564253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.570186] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.572624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  114.585973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.599266] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.611164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.624800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.869199] Bluetooth: hci0: command tx timeout
[  116.125208] Bluetooth: hci2: command tx timeout
[  116.125775] Bluetooth: hci1: command tx timeout
[  116.252899] Bluetooth: hci3: command tx timeout
[  116.573973] Bluetooth: hci4: command tx timeout
[  116.636951] Bluetooth: hci7: command tx timeout
[  116.637494] Bluetooth: hci5: command tx timeout
[  116.700931] Bluetooth: hci6: command tx timeout
[  117.917609] Bluetooth: hci0: command tx timeout
[  118.173877] Bluetooth: hci1: command tx timeout
[  118.174357] Bluetooth: hci2: command tx timeout
[  118.300950] Bluetooth: hci3: command tx timeout
[  118.621898] Bluetooth: hci4: command tx timeout
[  118.685755] Bluetooth: hci5: command tx timeout
[  118.686232] Bluetooth: hci7: command tx timeout
[  118.749201] Bluetooth: hci6: command tx timeout
[  119.966870] Bluetooth: hci0: command tx timeout
[  120.221213] Bluetooth: hci2: command tx timeout
[  120.221690] Bluetooth: hci1: command tx timeout
[  120.348980] Bluetooth: hci3: command tx timeout
[  120.669082] Bluetooth: hci4: command tx timeout
[  120.734116] Bluetooth: hci7: command tx timeout
[  120.734540] Bluetooth: hci5: command tx timeout
[  120.797168] Bluetooth: hci6: command tx timeout
[  122.013042] Bluetooth: hci0: command tx timeout
[  122.270885] Bluetooth: hci1: command tx timeout
[  122.271333] Bluetooth: hci2: command tx timeout
[  122.397024] Bluetooth: hci3: command tx timeout
[  122.716964] Bluetooth: hci4: command tx timeout
[  122.781004] Bluetooth: hci5: command tx timeout
[  122.781781] Bluetooth: hci7: command tx timeout
[  122.846647] Bluetooth: hci6: command tx timeout
[  174.644179] syz-executor.5 (285) used greatest stack depth: 24944 bytes left
[  176.824292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  176.828563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  176.831558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.836390] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.838949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  176.840531] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.849066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.856148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.858786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  176.866115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  176.908583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.927347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.930679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.936737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.939589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.944272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.945908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.949169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.970422] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.979000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.032528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.035623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.045222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.060924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.083501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.085308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.094697] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.097271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.100404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.115731] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.116466] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.137103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.141546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.143524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.173203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  177.189422] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.196113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.202143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.227996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.279893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.910883] Bluetooth: hci0: command tx timeout
[  178.973956] Bluetooth: hci1: command tx timeout
[  179.038280] Bluetooth: hci3: command tx timeout
[  179.039055] Bluetooth: hci2: command tx timeout
[  179.164966] Bluetooth: hci4: command tx timeout
[  179.229605] Bluetooth: hci6: command tx timeout
[  179.230344] Bluetooth: hci5: command tx timeout
[  179.356922] Bluetooth: hci7: command tx timeout
[  180.957015] Bluetooth: hci0: command tx timeout
[  181.021107] Bluetooth: hci1: command tx timeout
[  181.086029] Bluetooth: hci2: command tx timeout
[  181.087589] Bluetooth: hci3: command tx timeout
[  181.213124] Bluetooth: hci4: command tx timeout
[  181.277543] Bluetooth: hci5: command tx timeout
[  181.279123] Bluetooth: hci6: command tx timeout
[  181.404970] Bluetooth: hci7: command tx timeout
[  183.006479] Bluetooth: hci0: command tx timeout
[  183.069374] Bluetooth: hci1: command tx timeout
[  183.133018] Bluetooth: hci3: command tx timeout
[  183.133770] Bluetooth: hci2: command tx timeout
[  183.260926] Bluetooth: hci4: command tx timeout
[  183.326007] Bluetooth: hci6: command tx timeout
[  183.327106] Bluetooth: hci5: command tx timeout
[  183.452914] Bluetooth: hci7: command tx timeout
[  185.052982] Bluetooth: hci0: command tx timeout
[  185.118590] Bluetooth: hci1: command tx timeout
[  185.181882] Bluetooth: hci2: command tx timeout
[  185.182379] Bluetooth: hci3: command tx timeout
[  185.309123] Bluetooth: hci4: command tx timeout
[  185.375995] Bluetooth: hci5: command tx timeout
[  185.376408] Bluetooth: hci6: command tx timeout
[  185.500910] Bluetooth: hci7: command tx timeout
[  239.173262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.175344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.179325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.187286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.191587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.282794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.287700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.292639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.294917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.299076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.302488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.318473] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.333759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.359335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.360378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.361685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.363223] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.366138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.368327] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.374268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.406621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  239.407656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.414223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  239.417153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.432399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  239.439175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.463322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.468665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  239.472623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  239.486778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.540921] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  239.543871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  239.546983] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  239.555054] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  239.561280] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  239.608555] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  239.616247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  239.646073] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  239.658702] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  239.673483] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  241.245112] Bluetooth: hci0: command tx timeout
[  241.372973] Bluetooth: hci1: command tx timeout
[  241.436960] Bluetooth: hci2: command tx timeout
[  241.437501] Bluetooth: hci3: command tx timeout
[  241.629899] Bluetooth: hci7: command tx timeout
[  241.630047] Bluetooth: hci5: command tx timeout
[  241.630547] Bluetooth: hci4: command tx timeout
[  241.757907] Bluetooth: hci6: command tx timeout
[  243.292948] Bluetooth: hci0: command tx timeout
[  243.421104] Bluetooth: hci1: command tx timeout
[  243.485091] Bluetooth: hci3: command tx timeout
[  243.487897] Bluetooth: hci2: command tx timeout
[  243.677058] Bluetooth: hci4: command tx timeout
[  243.677337] Bluetooth: hci5: command tx timeout
[  243.677482] Bluetooth: hci7: command tx timeout
[  243.806134] Bluetooth: hci6: command tx timeout
[  245.341144] Bluetooth: hci0: command tx timeout
[  245.469161] Bluetooth: hci1: command tx timeout
[  245.533022] Bluetooth: hci2: command tx timeout
[  245.533427] Bluetooth: hci3: command tx timeout
[  245.726948] Bluetooth: hci5: command tx timeout
[  245.726977] Bluetooth: hci7: command tx timeout
[  245.727048] Bluetooth: hci4: command tx timeout
[  245.852896] Bluetooth: hci6: command tx timeout
[  247.388957] Bluetooth: hci0: command tx timeout
[  247.517139] Bluetooth: hci1: command tx timeout
[  247.580891] Bluetooth: hci2: command tx timeout
[  247.581880] Bluetooth: hci3: command tx timeout
[  247.772942] Bluetooth: hci7: command tx timeout
[  247.773432] Bluetooth: hci5: command tx timeout
[  247.774559] Bluetooth: hci4: command tx timeout
[  247.902193] Bluetooth: hci6: command tx timeout
[  301.236661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  301.240209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  301.242571] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  301.255456] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  301.259636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  301.306896] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  301.310706] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  301.313966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  301.324458] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  301.327719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  301.417126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.450130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.455998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.480544] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.491581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.501976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.508048] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.542022] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.563410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.572675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.576239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  301.586363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  301.636000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  301.646059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  301.660404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  301.669646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  301.675073] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  301.677641] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  301.699020] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  301.699547] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  301.706465] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  301.708231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  301.711587] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  301.719348] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  301.761720] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  301.763761] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  301.779526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  301.849390] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  301.852069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  301.894437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.326562] Bluetooth: hci0: command tx timeout
[  303.389029] Bluetooth: hci1: command tx timeout
[  303.581362] Bluetooth: hci2: command tx timeout
[  303.646846] Bluetooth: hci3: command tx timeout
[  303.836953] Bluetooth: hci4: command tx timeout
[  303.837209] Bluetooth: hci5: command tx timeout
[  303.964909] Bluetooth: hci7: command tx timeout
[  303.965053] Bluetooth: hci6: command tx timeout
[  305.372959] Bluetooth: hci0: command tx timeout
[  305.437966] Bluetooth: hci1: command tx timeout
[  305.628908] Bluetooth: hci2: command tx timeout
[  305.693044] Bluetooth: hci3: command tx timeout
[  305.885195] Bluetooth: hci5: command tx timeout
[  305.885426] Bluetooth: hci4: command tx timeout
[  306.013271] Bluetooth: hci7: command tx timeout
[  306.013739] Bluetooth: hci6: command tx timeout
[  307.423099] Bluetooth: hci0: command tx timeout
[  307.485018] Bluetooth: hci1: command tx timeout
[  307.677317] Bluetooth: hci2: command tx timeout
[  307.742007] Bluetooth: hci3: command tx timeout
[  307.932905] Bluetooth: hci4: command tx timeout
[  307.932921] Bluetooth: hci5: command tx timeout
[  308.061454] Bluetooth: hci6: command tx timeout
[  308.061896] Bluetooth: hci7: command tx timeout
[  309.469021] Bluetooth: hci0: command tx timeout
[  309.532977] Bluetooth: hci1: command tx timeout
[  309.726864] Bluetooth: hci2: command tx timeout
[  309.788982] Bluetooth: hci3: command tx timeout
[  309.981891] Bluetooth: hci5: command tx timeout
[  309.981914] Bluetooth: hci4: command tx timeout
[  310.109007] Bluetooth: hci7: command tx timeout
[  310.111894] Bluetooth: hci6: command tx timeout
[  363.702555] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.710295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.713563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.723734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.730013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.906134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  363.915504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  363.918411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.933113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.943780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.023322] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.035323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  364.039708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.047209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  364.054341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  364.056621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.080455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  364.082519] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.084637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  364.090001] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  364.099381] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.103122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  364.120082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  364.215094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  364.219090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.248508] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  364.263749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  364.271162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  364.286120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.302789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.307391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  364.312189] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  364.365297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.380387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.386606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  364.462565] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  364.466642] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  364.476457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  364.484326] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  364.493360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  365.788995] Bluetooth: hci0: command tx timeout
[  365.981282] Bluetooth: hci1: command tx timeout
[  366.236922] Bluetooth: hci3: command tx timeout
[  366.303920] Bluetooth: hci2: command tx timeout
[  366.365906] Bluetooth: hci6: command tx timeout
[  366.365940] Bluetooth: hci4: command tx timeout
[  366.428933] Bluetooth: hci5: command tx timeout
[  366.557783] Bluetooth: hci7: command tx timeout
[  367.838844] Bluetooth: hci0: command tx timeout
[  368.029058] Bluetooth: hci1: command tx timeout
[  368.284890] Bluetooth: hci3: command tx timeout
[  368.348900] Bluetooth: hci2: command tx timeout
[  368.412943] Bluetooth: hci6: command tx timeout
[  368.413002] Bluetooth: hci4: command tx timeout
[  368.477107] Bluetooth: hci5: command tx timeout
[  368.604934] Bluetooth: hci7: command tx timeout
[  369.885114] Bluetooth: hci0: command tx timeout
[  370.078111] Bluetooth: hci1: command tx timeout
[  370.333144] Bluetooth: hci3: command tx timeout
[  370.396956] Bluetooth: hci2: command tx timeout
[  370.460891] Bluetooth: hci4: command tx timeout
[  370.460953] Bluetooth: hci6: command tx timeout
[  370.524978] Bluetooth: hci5: command tx timeout
[  370.652875] Bluetooth: hci7: command tx timeout
[  371.934868] Bluetooth: hci0: command tx timeout
[  372.127904] Bluetooth: hci1: command tx timeout
[  372.381969] Bluetooth: hci3: command tx timeout
[  372.445889] Bluetooth: hci2: command tx timeout
[  372.509265] Bluetooth: hci4: command tx timeout
[  372.510388] Bluetooth: hci6: command tx timeout
[  372.572908] Bluetooth: hci5: command tx timeout
[  372.701061] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
04:52:59  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff88806ce08b60 RCX=ffff88806ce089ec RDX=1ffff1100d9c1192
RSI=ffffffff81b62bef RDI=ffff88806ce08b6c RBP=ffff88806ce08c90 RSP=ffff88806ce08a78
R8 =0000000000000001 R9 =ffff88806ce08ad8 R10=000000000003b6ad R11=0000000000027334
R12=ffff88806ce08b60 R13=0000000000000000 R14=ffff8880184fd280 R15=0000000000000000
RIP=ffffffff81604837 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0dd8b78540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0dd8d134a1 CR3=0000000034f69000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000296 RBX=ffff88801a421b80 RCX=0000000000000100 RDX=0000000000000008
RSI=ffff88801a422650 RDI=ffff88801a422650 RBP=ffff88801a4225d8 RSP=ffff88802a0efa08
R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff88801a422650 R13=b200e5e250f23b01 R14=0000000000000001 R15=0000000000000003
RIP=ffffffff815145f3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f505547f540 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f505593f000 CR3=0000000034932000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000