Warning: Permanently added '[localhost]:18052' (ECDSA) to the list of known hosts.
2025/06/12 14:09:56 fuzzer started
2025/06/12 14:09:57 dialing manager at localhost:45945
syzkaller login: [  112.597940] cgroup: Unknown subsys name 'net'
[  112.775874] cgroup: Unknown subsys name 'cpuset'
[  112.822184] cgroup: Unknown subsys name 'rlimit'
2025/06/12 14:10:15 syscalls: 205
2025/06/12 14:10:15 code coverage: enabled
2025/06/12 14:10:15 comparison tracing: enabled
2025/06/12 14:10:15 extra coverage: enabled
2025/06/12 14:10:15 setuid sandbox: enabled
2025/06/12 14:10:15 namespace sandbox: enabled
2025/06/12 14:10:15 Android sandbox: enabled
2025/06/12 14:10:15 fault injection: enabled
2025/06/12 14:10:15 leak checking: enabled
2025/06/12 14:10:15 net packet injection: enabled
2025/06/12 14:10:15 net device setup: enabled
2025/06/12 14:10:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/12 14:10:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/12 14:10:15 USB emulation: enabled
2025/06/12 14:10:15 hci packet injection: enabled
2025/06/12 14:10:15 wifi device emulation: enabled
2025/06/12 14:10:15 802.15.4 emulation: enabled
2025/06/12 14:10:15 fetching corpus: 0, signal 0/0 (executing program)
2025/06/12 14:10:16 starting 8 fuzzer processes
14:10:16 executing program 0:
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7fff)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x9)
r0 = memfd_secret(0x80000)
mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x9)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xbf)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0xe3a5)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/hid_ntrig', 0x100, 0x8)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x3, 0x2, 0x5c, 0x0, 0xda2, 0x2000, 0x7, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x8}, 0x402, 0x4, 0x4, 0x5, 0x0, 0x200, 0x3a, 0x0, 0x7ef3, 0x0, 0x401}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000200)=0x6)
dup(r3)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x100010, 0xffffffffffffffff, 0x0)
r5 = gettid()
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8, 0x1, 0xf9, 0x2, 0x0, 0x401, 0x4508a, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000240), 0xc}, 0x401, 0x5, 0x3, 0x2, 0x0, 0x1, 0x81, 0x0, 0x3, 0x0, 0xfffffffffffffffa}, r5, 0xd, r4, 0x8)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)

14:10:16 executing program 1:
keyctl$negate(0xd, 0x0, 0xff, 0xfffffffffffffffc)
keyctl$invalidate(0x15, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$unlink(0x9, r0, 0xfffffffffffffffe)
keyctl$negate(0xd, r0, 0x8c, r0)
r1 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$reject(0x13, 0x0, 0x0, 0x10001, r1)
r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x1000, r0)
keyctl$reject(0x13, r2, 0x0, 0x1, r0)
r3 = add_key$user(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x0}, &(0x7f0000001200)="5c60c3781d23b9f39a542fb50d1488e4fd6f2479c84ec17705b0f0fc031bd608a719cf922762612ba20c3dd57ce952c821d669c5295e00d87e988156a650df1cf8c3f57fd119a83690b271d5aaca22789ac5eb69652ffa691f895abf06726fd21605f86047f749489d5988abf6fa719246f3f67767556777dd6043790eba86bd9e0de0d4a71d3e8d07d8b01c832f703a8dbe466dc10e67b3421f3a106f836a81c0c67dbc3b70674d0da33436a7d55ad35d8d6c", 0xb3, r0)
r4 = add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @desc1}, &(0x7f0000001340)={0x0, "c1b363ce13e05023e4d9014060fada56b5549fd70c73988ce77f3dc6d5216bd37e8609da6d4e60e310737b4f37424b061fc163b58fc9d439a6c98607cef2343d", 0x28}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r3, r4)
r5 = add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x0}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x3}, 0x0, 0x0, r5)
r7 = add_key(&(0x7f00000015c0)='syzkaller\x00', &(0x7f0000001600)={'syz', 0x2}, 0x0, 0x0, r6)
r8 = add_key$fscrypt_v1(&(0x7f00000014c0), &(0x7f0000001500)={'fscrypt:', @desc3}, &(0x7f0000001540)={0x0, "8658b3494b9c4cd18913c70a4dffb78c931bbb5a15eca9babf45dfe2a278d36df7287d740fd13d6997d2b8eeea70ed29fe1533501c943eacddeb1483b520928d", 0x31}, 0x48, r7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup/syz1\x00', 0x200002, 0x0)
r9 = add_key$keyring(&(0x7f0000001680), &(0x7f00000016c0)={'syz', 0x1}, 0x0, 0x0, r7)
keyctl$KEYCTL_MOVE(0x1e, r9, r1, r7, 0x1)
keyctl$search(0xa, r7, &(0x7f0000001700)='rxrpc_s\x00', &(0x7f0000001740)={'syz', 0x2}, r8)

14:10:16 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xeb, 0x48d9, 0x0, 0xa6, 0x80000001, 0x2}, {0x3, 0x401, 0x1ff, 0x101, 0x4, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x3)
r1 = syz_open_dev$vcsn(&(0x7f0000000280), 0xdb3, 0xa6400)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_vlan\x00'})
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000340)={0x2, 0x80, 0x8e, 0x1f, 0x1, 0xc7, 0x0, 0xfffffffffffffffe, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000300)}, 0x2, 0x6, 0xfffffffb, 0x4, 0x3f, 0x1, 0x4, 0x0, 0x70f, 0x0, 0x401})
syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000440)=0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)={0x101080, 0x92, 0x4}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0xffffffff)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x10001, 0x5, 0x7fffffff, 0x0, 0x7, 0x1}, {0xb9, 0x20, 0xa63, 0x80000000, 0x2, 0x7fffffff}], ['\x00', '\x00']})
r3 = memfd_secret(0x80000)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x100, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000006c0)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000700)=0x2a8f5ca7, 0x4)
mmap$perf(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x52050, r4, 0x10000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00'})

14:10:16 executing program 3:
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x4c}}, 0x20000080)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x218, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x4000004)
r2 = socket(0x2a, 0x80000, 0x6)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4004)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000}, 0x14)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x1)
getpeername(r2, &(0x7f0000000640)=@nfc, &(0x7f00000006c0)=0x80)
sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x88845)
socket(0x14, 0xa, 0x283c)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000800)='\xff\xff\xff\xff\xff\xff')
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x801)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r5 = dup(r2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000b80)={0x3, 0x80, 0x76, 0x7f, 0xd5, 0x9, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffffffa0, 0x3}, 0x1, 0xfffffffffffffff7, 0x0, 0x6, 0x7ff, 0xdc31, 0x2, 0x0, 0x6, 0x0, 0x6})

14:10:17 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)
ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040))
getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
getuid()
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "5158a60ced729d2f3c1a3b6f"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3367f9d9f9e2c51cb1860b197b"}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20008005)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xfffffffb}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffc566}, {0x6, 0x16, 0xfcc3}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000580)="d4ca215c73770709d8ad3a8e046815d0bc4cd3ef71fb054bdfa985abe8cf94c2c4f0", 0x22)
request_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='0000:00:10.0\x00', 0xffffffffffffffff)
pidfd_getfd(r0, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg0\x00'})
r3 = syz_open_dev$vcsn(&(0x7f00000006c0), 0x148, 0x98080)
ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000700)={0x0, @hci={0x1f, 0x1}, @ethernet={0x1}, @l2tp={0x2, 0x0, @loopback}, 0xfff8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x13fd, 0xff})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x80e0)

[  131.894707] audit: type=1400 audit(1749737417.003:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:10:17 executing program 5:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
io_uring_setup(0x490f, &(0x7f0000000080)={0x0, 0x803a, 0x4, 0x0, 0x8c})
r1 = memfd_secret(0x80000)
dup(r1)
pipe2(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r4=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x458, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PEERS={0x3f4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f0401e148dd50bbe62706a5a2e97953b157823f52f6bb37d9ec3afc6d428257"}]}, {0x388, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x384, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @loopback, 0x2}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x458}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r5 = socket$netlink(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5)
r6 = epoll_create1(0x0)
pidfd_getfd(r2, r6, 0x0)
r7 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x0, 0x5, 0x0, 0x7, 0x0, 0x1, 0xdffa7981109cc108, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7b, 0x4, @perf_bp={&(0x7f0000000cc0)}, 0x180c, 0x80, 0x1, 0x4, 0x9, 0x7fff, 0x7ff, 0x0, 0x9, 0x0, 0x100}, 0xffffffffffffffff, 0xc, r2, 0x2)
fallocate(r7, 0x49, 0xd5, 0x17f7a4a0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000e40), 0x2400, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004090}, 0x80)
r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
pidfd_getfd(r10, r5, 0x0)

14:10:17 executing program 6:
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]})
r0 = dup(0xffffffffffffffff)
r1 = syz_io_uring_setup(0x16e9, &(0x7f0000000040)={0x0, 0xa36, 0x20, 0x0, 0x68, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x0, 0x7, 0xf0, 0x40000}, 0x10)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x4, 0x80000000, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9a6, 0x8}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000800)
r2 = dup(r0)
mmap$perf(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x9, 0x10010, r2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280))
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x12b9df3}]}, 0x20}}, 0x8)
r3 = dup(r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000003c0)='}-\x00')
r4 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x4, 0x81, 0x7, 0x40, 0x0, 0x5, 0x42c78, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x2, @perf_bp={&(0x7f0000000400), 0x3}, 0x1200, 0x7, 0x6, 0x2, 0x200, 0x5, 0x6, 0x0, 0x9, 0x0, 0x20}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x8)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffb, &(0x7f00000004c0)='user\x00', &(0x7f0000000500)='{j:%\x00')
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000540), 0x622000, 0x0)
r6 = pidfd_getfd(r5, r3, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x0, 0x1000, 0x5, 0x3f, 0x65, 0x1, 0x8, 0x101, 0xe, 0x1000]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, [{0x1b}, {0xb}, {0x6}, {0x9}, {0x24, 0x1}, {0x18, 0x1}, {0x5, 0x1}, {0x7}, {0xc, 0x1}, {0x6c, 0x1}, {0x1}, {0x36, 0x1}, {0x5, 0x1}, {0x18, 0x1}, {0x6}, {0x36, 0x1}, {0x36}, {0x41, 0x1}, {0x1}, {0x36}, {0x6c, 0x1}, {0x6}, {0xb, 0x1}, {0x12}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x6c}}, 0x20000040)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000700)={0x4, 0x80, 0x2, 0x1, 0x33, 0x1, 0x0, 0x3, 0x1e820, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffd2b, 0x5, @perf_bp={&(0x7f00000006c0), 0xa}, 0x41580, 0x7fff, 0x6488, 0x1, 0xbbb, 0xfffffff7, 0x3f, 0x0, 0x10000, 0x0, 0x8})

14:10:17 executing program 7:
r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='*\x00', r0)
r2 = add_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2)
keyctl$assume_authority(0x10, r2)
r3 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='*\x00', 0xfffffffffffffffc)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)='-,/].)/\'{!/\x00')
r4 = add_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="0522daaacae6ac3b59bb875598aea57cdf46e3b5c7bff522ce3ff0d4959a9f02ef32590a2ac9633f44488d70e9fa3ca54ba83c09f7dce82318f794a93992a961959157a3b86e4738b3", 0x49, r3)
r5 = request_key(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='trusted\x00', 0xfffffffffffffffd)
r6 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f0000000500)={0x0, "48ae829832b7713db03a8531ab0453e355d08b9b30d114db2f4d95740a2faf8752e60e67f3d1cb5fa9e0dbdb7073fbfaf4abae0d2407a715c044eda9e16a8a76", 0x23}, 0x48, r5)
r7 = request_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)='\x00', r4)
keyctl$search(0xa, r7, &(0x7f0000000700)='syzkaller\x00', &(0x7f0000000740)={'syz', 0x0}, r2)
ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4)
r8 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, r6)
keyctl$assume_authority(0x10, r8)
keyctl$clear(0x7, r6)
keyctl$search(0xa, r4, &(0x7f0000000800)='big_key\x00', &(0x7f0000000840)={'syz', 0x0}, r0)
add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, r6)
r9 = syz_open_dev$sg(&(0x7f0000000900), 0x4, 0x280202)
ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000940))

[  133.288457] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.290058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  133.291668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.294422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.295161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.296992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.298974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.303757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.309337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.312164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.337327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.340497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.344885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.352760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.357657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.381258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  133.387047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  133.398902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  133.404797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  133.413614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  133.435404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  133.442679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.457053] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  133.458131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  133.465923] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.473927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  133.479838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  133.481066] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  133.486580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.488051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.490025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  133.496107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  133.506772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.507620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.514812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.515647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.523423] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  133.525171] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.528041] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.531611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  135.339484] Bluetooth: hci1: command tx timeout
[  135.402712] Bluetooth: hci0: command tx timeout
[  135.405942] Bluetooth: hci2: command tx timeout
[  135.468091] Bluetooth: hci3: command tx timeout
[  135.530796] Bluetooth: hci5: command tx timeout
[  135.595321] Bluetooth: hci6: command tx timeout
[  135.595420] Bluetooth: hci4: command tx timeout
[  135.596021] Bluetooth: hci7: command tx timeout
[  137.386992] Bluetooth: hci1: command tx timeout
[  137.451041] Bluetooth: hci2: command tx timeout
[  137.451647] Bluetooth: hci0: command tx timeout
[  137.515213] Bluetooth: hci3: command tx timeout
[  137.579102] Bluetooth: hci5: command tx timeout
[  137.642660] Bluetooth: hci7: command tx timeout
[  137.642885] Bluetooth: hci6: command tx timeout
[  137.644775] Bluetooth: hci4: command tx timeout
[  139.435626] Bluetooth: hci1: command tx timeout
[  139.499660] Bluetooth: hci0: command tx timeout
[  139.499692] Bluetooth: hci2: command tx timeout
[  139.562657] Bluetooth: hci3: command tx timeout
[  139.626636] Bluetooth: hci5: command tx timeout
[  139.692646] Bluetooth: hci4: command tx timeout
[  139.693126] Bluetooth: hci7: command tx timeout
[  139.694302] Bluetooth: hci6: command tx timeout
[  141.484393] Bluetooth: hci1: command tx timeout
[  141.546901] Bluetooth: hci2: command tx timeout
[  141.547994] Bluetooth: hci0: command tx timeout
[  141.610975] Bluetooth: hci3: command tx timeout
[  141.674630] Bluetooth: hci5: command tx timeout
[  141.739189] Bluetooth: hci7: command tx timeout
[  141.740606] Bluetooth: hci4: command tx timeout
[  141.740653] Bluetooth: hci6: command tx timeout
[  193.755080] syz-executor.4 (288) used greatest stack depth: 24640 bytes left
[  196.143909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.178099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.179553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.181370] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.184757] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.187840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  196.199367] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.200852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.203971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.207067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.219384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.221465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.224787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.235634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.237595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.273135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  196.277157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.301851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.312268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.316112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.321865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.323422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.324948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.331130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.333121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.334088] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.347224] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.348152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.355877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.357722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.357827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.359971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  196.375618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  196.377911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.381805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.384052] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.385308] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  196.453461] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.454828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.467685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.252818] Bluetooth: hci1: command tx timeout
[  198.253762] Bluetooth: hci0: command tx timeout
[  198.315811] Bluetooth: hci3: command tx timeout
[  198.507495] Bluetooth: hci4: command tx timeout
[  198.508204] Bluetooth: hci5: command tx timeout
[  198.508819] Bluetooth: hci2: command tx timeout
[  198.509371] Bluetooth: hci7: command tx timeout
[  198.574069] Bluetooth: hci6: command tx timeout
[  200.299808] Bluetooth: hci0: command tx timeout
[  200.300020] Bluetooth: hci1: command tx timeout
[  200.365592] Bluetooth: hci3: command tx timeout
[  200.554661] Bluetooth: hci5: command tx timeout
[  200.554772] Bluetooth: hci7: command tx timeout
[  200.555223] Bluetooth: hci2: command tx timeout
[  200.555717] Bluetooth: hci4: command tx timeout
[  200.620646] Bluetooth: hci6: command tx timeout
[  202.346740] Bluetooth: hci1: command tx timeout
[  202.347878] Bluetooth: hci0: command tx timeout
[  202.410920] Bluetooth: hci3: command tx timeout
[  202.602888] Bluetooth: hci4: command tx timeout
[  202.604640] Bluetooth: hci2: command tx timeout
[  202.606365] Bluetooth: hci7: command tx timeout
[  202.606654] Bluetooth: hci5: command tx timeout
[  202.667612] Bluetooth: hci6: command tx timeout
[  204.394706] Bluetooth: hci0: command tx timeout
[  204.397695] Bluetooth: hci1: command tx timeout
[  204.459669] Bluetooth: hci3: command tx timeout
[  204.650913] Bluetooth: hci4: command tx timeout
[  204.651469] Bluetooth: hci5: command tx timeout
[  204.651611] Bluetooth: hci7: command tx timeout
[  204.652175] Bluetooth: hci2: command tx timeout
[  204.715113] Bluetooth: hci6: command tx timeout
[  258.754864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.761989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.765247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.779129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.782916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.874277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.878906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.882387] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.888362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.891731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.936470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.942238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.945499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.950129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.952881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.099321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  259.106040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  259.109851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  259.111202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  259.118727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  259.120356] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  259.125309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  259.152164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  259.161861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  259.171488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  259.172481] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  259.176953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  259.192675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  259.198459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  259.217015] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  259.246337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.266788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.272728] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.273138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  259.282842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  259.287487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.299827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.312962] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  259.375834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  259.410095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  260.843756] Bluetooth: hci0: command tx timeout
[  260.906804] Bluetooth: hci1: command tx timeout
[  261.034617] Bluetooth: hci2: command tx timeout
[  261.291087] Bluetooth: hci4: command tx timeout
[  261.355848] Bluetooth: hci3: command tx timeout
[  261.356780] Bluetooth: hci5: command tx timeout
[  261.483236] Bluetooth: hci7: command tx timeout
[  261.546850] Bluetooth: hci6: command tx timeout
[  262.890733] Bluetooth: hci0: command tx timeout
[  262.955598] Bluetooth: hci1: command tx timeout
[  263.083884] Bluetooth: hci2: command tx timeout
[  263.340599] Bluetooth: hci4: command tx timeout
[  263.402614] Bluetooth: hci3: command tx timeout
[  263.403109] Bluetooth: hci5: command tx timeout
[  263.530863] Bluetooth: hci7: command tx timeout
[  263.594684] Bluetooth: hci6: command tx timeout
[  264.938781] Bluetooth: hci0: command tx timeout
[  265.002817] Bluetooth: hci1: command tx timeout
[  265.130883] Bluetooth: hci2: command tx timeout
[  265.386968] Bluetooth: hci4: command tx timeout
[  265.451065] Bluetooth: hci5: command tx timeout
[  265.451721] Bluetooth: hci3: command tx timeout
[  265.578600] Bluetooth: hci7: command tx timeout
[  265.643057] Bluetooth: hci6: command tx timeout
[  266.988863] Bluetooth: hci0: command tx timeout
[  267.050980] Bluetooth: hci1: command tx timeout
[  267.178678] Bluetooth: hci2: command tx timeout
[  267.435900] Bluetooth: hci4: command tx timeout
[  267.498741] Bluetooth: hci3: command tx timeout
[  267.499237] Bluetooth: hci5: command tx timeout
[  267.626742] Bluetooth: hci7: command tx timeout
[  267.690864] Bluetooth: hci6: command tx timeout
[  321.351793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.355110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.359993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.366864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.373362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.524310] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  321.531606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  321.535268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  321.542074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  321.545373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  321.674296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  321.680808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  321.683346] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  321.690159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  321.693969] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  321.734141] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  321.746074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  321.748110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  321.751457] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  321.755865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  321.793264] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  321.794932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  321.803890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  321.808490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  321.813204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  321.813501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.817865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  321.820360] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.822879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.843961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  321.844255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  321.866150] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  321.874709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.880976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  321.882061] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.882302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  321.903643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.940855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  322.025909] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  322.072255] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  323.434751] Bluetooth: hci0: command tx timeout
[  323.631640] Bluetooth: hci1: command tx timeout
[  323.757602] Bluetooth: hci2: command tx timeout
[  323.882682] Bluetooth: hci3: command tx timeout
[  323.946759] Bluetooth: hci6: command tx timeout
[  324.010864] Bluetooth: hci4: command tx timeout
[  324.074848] Bluetooth: hci5: command tx timeout
[  324.138673] Bluetooth: hci7: command tx timeout
[  325.484335] Bluetooth: hci0: command tx timeout
[  325.676063] Bluetooth: hci1: command tx timeout
[  325.802612] Bluetooth: hci2: command tx timeout
[  325.933543] Bluetooth: hci3: command tx timeout
[  325.995654] Bluetooth: hci6: command tx timeout
[  326.058868] Bluetooth: hci4: command tx timeout
[  326.122835] Bluetooth: hci5: command tx timeout
[  326.187673] Bluetooth: hci7: command tx timeout
[  327.531610] Bluetooth: hci0: command tx timeout
[  327.724028] Bluetooth: hci1: command tx timeout
[  327.852657] Bluetooth: hci2: command tx timeout
[  327.979629] Bluetooth: hci3: command tx timeout
[  328.042900] Bluetooth: hci6: command tx timeout
[  328.107659] Bluetooth: hci4: command tx timeout
[  328.170772] Bluetooth: hci5: command tx timeout
[  328.235621] Bluetooth: hci7: command tx timeout
[  329.578627] Bluetooth: hci0: command tx timeout
[  329.770597] Bluetooth: hci1: command tx timeout
[  329.900482] Bluetooth: hci2: command tx timeout
[  330.026596] Bluetooth: hci3: command tx timeout
[  330.091771] Bluetooth: hci6: command tx timeout
[  330.154590] Bluetooth: hci4: command tx timeout
[  330.219046] Bluetooth: hci5: command tx timeout
[  330.283599] Bluetooth: hci7: command tx timeout
[  383.940241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.014251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.021784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.046158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.049349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.121832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  384.125845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  384.128419] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  384.132765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  384.136374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  384.323082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  384.331071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  384.334737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  384.342100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  384.345608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  384.441776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  384.445884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  384.478819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  384.493997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  384.503024] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  384.505479] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  384.518061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  384.523183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  384.531448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  384.538457] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  384.540702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  384.542468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  384.545398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  384.563759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  384.568837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  384.671751] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  384.684137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  384.709442] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  384.731641] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  384.823875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  384.838149] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  384.839732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  384.843937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  384.845915] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.851855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  386.090868] Bluetooth: hci0: command tx timeout
[  386.154899] Bluetooth: hci1: command tx timeout
[  386.413025] Bluetooth: hci2: command tx timeout
[  386.616296] Bluetooth: hci5: command tx timeout
[  386.617437] Bluetooth: hci4: command tx timeout
[  386.682258] Bluetooth: hci3: command tx timeout
[  386.922661] Bluetooth: hci6: command tx timeout
[  386.923499] Bluetooth: hci7: command tx timeout
[  388.138649] Bluetooth: hci0: command tx timeout
[  388.202871] Bluetooth: hci1: command tx timeout
[  388.458735] Bluetooth: hci2: command tx timeout
[  388.650870] Bluetooth: hci4: command tx timeout
[  388.651402] Bluetooth: hci5: command tx timeout
[  388.715611] Bluetooth: hci3: command tx timeout
[  388.971810] Bluetooth: hci7: command tx timeout
[  388.972398] Bluetooth: hci6: command tx timeout
[  390.186889] Bluetooth: hci0: command tx timeout
[  390.253417] Bluetooth: hci1: command tx timeout
[  390.506626] Bluetooth: hci2: command tx timeout
[  390.698921] Bluetooth: hci5: command tx timeout
[  390.699467] Bluetooth: hci4: command tx timeout
[  390.762637] Bluetooth: hci3: command tx timeout
[  391.018946] Bluetooth: hci6: command tx timeout
[  391.019494] Bluetooth: hci7: command tx timeout
[  392.234698] Bluetooth: hci0: command tx timeout
[  392.298623] Bluetooth: hci1: command tx timeout
[  392.554960] Bluetooth: hci2: command tx timeout
[  392.747592] Bluetooth: hci4: command tx timeout
[  392.748164] Bluetooth: hci5: command tx timeout
[  392.810614] Bluetooth: hci3: command tx timeout
[  393.066686] Bluetooth: hci7: command tx timeout
[  393.067234] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
14:15:26  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff888035d40000 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000020 RDI=0000000000000001 RBP=ffff888035d40a58 RSP=ffff88806ce088a8
R8 =0000000000000000 R9 =0000000000000005 R10=0000000000000001 R11=0000000000000000
R12=ffff888035d40a80 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81519342 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555f4e9400 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe6b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe4e3d2f78 CR3=00000000172a7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000ff000000000000ff00000000
XMM02=ff0000000000ff00000000000000ff00 XMM03=000000000000000000ff000000000000
XMM04=000000ff0000000000ff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000002 RBX=0000000000000001 RCX=ffff88806cf089cc RDX=0000000000000000
RSI=ffffffff81aea954 RDI=ffff88800f14bafc RBP=ffff88806cf08ad0 RSP=ffff88806cf08a08
R8 =ffffffff86868a0c R9 =ffff88806cf08ab8 R10=000000000003b4bd R11=000000000002497a
R12=0000000000000000 R13=ffff88806cf08ac0 R14=ffff88800f14b700 R15=ffff88806cf08a78
RIP=ffffffff81353d0c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fe8ae21a540 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8ae405620 CR3=0000000029eb8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000