Warning: Permanently added '[localhost]:15273' (ECDSA) to the list of known hosts.
2024/12/18 13:18:45 fuzzer started
syzkaller login: [   67.867341] hrtimer: interrupt took 4448936 ns
2024/12/18 13:18:45 dialing manager at localhost:44261
[   68.942082] cgroup: Unknown subsys name 'net'
[   69.097003] cgroup: Unknown subsys name 'cpuset'
[   69.117368] cgroup: Unknown subsys name 'rlimit'
2024/12/18 13:19:02 syscalls: 208
2024/12/18 13:19:02 code coverage: enabled
2024/12/18 13:19:02 comparison tracing: enabled
2024/12/18 13:19:02 extra coverage: enabled
2024/12/18 13:19:02 setuid sandbox: enabled
2024/12/18 13:19:02 namespace sandbox: enabled
2024/12/18 13:19:02 Android sandbox: enabled
2024/12/18 13:19:02 fault injection: enabled
2024/12/18 13:19:02 leak checking: enabled
2024/12/18 13:19:02 net packet injection: enabled
2024/12/18 13:19:02 net device setup: enabled
2024/12/18 13:19:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/12/18 13:19:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/12/18 13:19:02 USB emulation: enabled
2024/12/18 13:19:02 hci packet injection: enabled
2024/12/18 13:19:02 wifi device emulation: enabled
2024/12/18 13:19:02 802.15.4 emulation: enabled
2024/12/18 13:19:02 fetching corpus: 0, signal 0/0 (executing program)
2024/12/18 13:19:03 starting 8 fuzzer processes
13:19:03 executing program 0:
r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "4c3775d326f43e20d17413d0a43435ae016201f974a897591a7f2810f1a233230d89d6895162bdc9f23a24e72253a0c65d93a0e2f7e7efce317412d226c54ccb", 0x17}, 0x48, r0)
r2 = add_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffff9, r1, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x2)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)={0x2, 0x0, @auto=[0x24]}, 0x9, 0xfffffffffffffffd)
keyctl$search(0xa, r3, &(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x2}, r1)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000340)={0x3, 0x6, 0x7})
mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000380)=""/107)
r4 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r0)
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r4)
request_key(&(0x7f0000000500)='logon\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)='-(^{\xa4^)^&]),)[]%\x00', r2)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x100)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000600)={0x1, 0x5, 0x4, {0x4, 0xfffff800}, 0x9, 0x5})
openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000006c0), 0x80140, 0x0)
r7 = add_key(&(0x7f0000000700)='encrypted\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="4a61d3a2b0653020e45c6940799fa225f523680f27026c443991989c8cd72e678376d518a4646555011d58931913cea7ad94d2ec4e75cc5d3821c3a69c0368538c64", 0x42, 0xfffffffffffffff8)
keyctl$get_persistent(0x16, 0xee01, r7)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000800)={{0x1, 0xcd}, 'port1\x00', 0x10, 0x100004, 0x25f1bfc3, 0x17, 0x5, 0x1000, 0x101, 0x0, 0x6, 0xc1})
keyctl$get_persistent(0x16, 0xee01, r2)

13:19:03 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x880)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0xc880)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000000}, 0x4004014)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r2)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x80000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x2404c081)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x40010)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}}, 0x40000)
ptrace$setsig(0x4203, 0x0, 0x3ff, &(0x7f0000000b00)={0x36, 0x7ff, 0x6})
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x48}, 0x1, 0x0, 0x0, 0xbb322cee1bd3dbd4}, 0x80)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x21}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008091}, 0x10)

13:19:03 executing program 2:
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x9, &(0x7f0000000000)=""/190)
r0 = fork()
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000240)=""/163)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'})
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7, 0x0, 0x9, 0x8, 0x0, 0x2, 0x10, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0xc084, 0x81, 0x3, 0x8, 0x8, 0x7fffffff, 0x3, 0x0, 0x283, 0x0, 0x401}, 0x0, 0x1, r1, 0xd)
recvmsg$unix(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/67, 0x43}, {&(0x7f0000001480)=""/69, 0x45}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}], 0xc0}, 0xc0010120)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f00000016c0)={0x1})
syz_open_procfs$namespace(r5, &(0x7f0000001700)='ns/net\x00')
setpriority(0x2, r5, 0x5)
perf_event_open$cgroup(&(0x7f0000001740)={0x5, 0x80, 0x40, 0x3, 0xa2, 0x7, 0x0, 0x0, 0x10200, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x40082, 0x7fff, 0x1, 0x7, 0x7, 0xffff7fff, 0x9, 0x0, 0x6, 0x0, 0x3}, r4, 0x4, r7, 0x4)
times(&(0x7f00000017c0))
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001800)={<r9=>0x0}, &(0x7f0000001840)=0xc)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r9, 0x10, &(0x7f0000001880)={0xde3})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x800)
openat$urandom(0xffffffffffffff9c, &(0x7f00000019c0), 0x101000, 0x0)
r10 = getegid()
setfsgid(r10)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001a00)={@empty, 0x10000, 0x2, 0x1, 0x1, 0x81, 0x6}, &(0x7f0000001a40)=0x20)

13:19:03 executing program 3:
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@mcast2, 0x58})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x4})
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x24000000, 0x1, 0x2, 0x2, 0x9, 0xf800}, &(0x7f0000000140)=0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@empty, 0x7b, r1})
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa5ecabe50860435a}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r1}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4000800)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000400), 0x4)
sched_yield()
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14)
mlockall(0x1)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, @sco={0x1f, @none}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0x5, 0x0, 0x0, 0x0, 0x800, &(0x7f00000004c0)='veth1_vlan\x00', 0xc281, 0x6})
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x7, {{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}}, 0x8a9044daded98c69, 0x6, [{{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}}, {{0xa, 0x4e22, 0x8, @local, 0xa02}}, {{0xa, 0x4e24, 0x4, @mcast2, 0x561325b9}}, {{0xa, 0x4e23, 0x7ff, @loopback, 0x8}}, {{0xa, 0x4e22, 0x3, @local, 0x3ff}}, {{0xa, 0x4e20, 0x8001, @remote, 0x8000}}]}, 0x390)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/238, 0xee}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x2000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000000d40)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000d80)={@local, 0x52, r6})
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8010, r2, 0x0)
syz_io_uring_setup(0x263d, &(0x7f0000000dc0)={0x0, 0x267a, 0x1, 0x3, 0x43}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000e40), &(0x7f0000000e80)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000ec0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000f00)={'vxcan0\x00'})

13:19:03 executing program 4:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x17})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private0, @in6}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x1, 0x5}, @rc={0x1f, @any, 0x9}, @nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x9, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x5, 0x14, 0x200})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x3, 0x6c, 0x0, 0xb5d4, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x1d24, 0x8}, 0x40, 0x5, 0xcadd, 0x3, 0x51dc, 0x8, 0x3, 0x0, 0x16, 0x0, 0x100000000})
ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={0x0, @isdn={0x22, 0x9, 0x1, 0x0, 0x5}, @vsock={0x28, 0x0, 0x0, @my=0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, 0xda6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)='vlan1\x00', 0x6, 0xffffffff, 0x5})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x200)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={0x0, @llc={0x1a, 0x334, 0x8, 0x49, 0x0, 0x81, @multicast}, @nfc={0x27, 0x0, 0x2, 0x2}, @sco, 0x58, 0x0, 0x0, 0x0, 0x62, &(0x7f0000000340)='dummy0\x00', 0x10000, 0x1, 0x3})
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000440)={0x1, 0x80, 0x4, 0x0, 0x3, 0xff, 0x0, 0x7ff, 0xa800, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000400)}, 0x4207, 0x2, 0x4, 0x5, 0x1, 0x7, 0x9c07, 0x0, 0xfffffffb, 0x0, 0x4})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x40)
r0 = perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x3, 0x1, 0x5, 0x4, 0x0, 0x7, 0x52006, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0xd10b, 0x2}, 0x840, 0x9, 0x4, 0x6, 0x80000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffd18b88b6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x20100, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3)

[   86.718783] audit: type=1400 audit(1734527943.964:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:19:03 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r1 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/sr0\x00', 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10001)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000feb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000fe9000/0x4000)=nil, &(0x7f0000000140)="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", 0x1000, r0}, 0x68)
r3 = add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @desc2}, &(0x7f00000012c0)={0x0, "21f562a4d70c13f8a096acbc496982953546e0a202268d6d332e5359b8871b2f34c24fa0d27170909245cf8fc4946af987da281effdba0f42f81e9faf6e90dd2", 0x2c}, 0x48, r1)
keyctl$search(0xa, r1, &(0x7f00000011c0)='.request_key_auth\x00', &(0x7f0000001200)={'syz', 0x3}, r3)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001340)={'binder0\x00'})
clock_getres(0x5, &(0x7f0000001480))
mmap$binder(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x27)
keyctl$unlink(0x9, r1, r3)
capset(&(0x7f00000014c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000001500)={0x81, 0x5, 0x8e, 0x7cc, 0x2, 0x1})
r4 = socket$inet(0x2, 0x1, 0x81)
mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x2, 0x50, r4, 0xed4f6000)
r5 = syz_open_dev$hiddev(&(0x7f0000001540), 0x6, 0x6000)
read$hiddev(r5, &(0x7f0000001580)=""/60, 0x3c)
mmap$binder(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000015c0)={'binder1\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001700)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000001800)=0xe8)
setresuid(0x0, r6, 0x0)

13:19:04 executing program 7:
epoll_create1(0x0)
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x13, r0, 0xff457000)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x12, 0xffffffffffffffff, 0x10000000)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xfffffffe)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1, &(0x7f00000001c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x45)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x30, 0xffffffffffffffff, 0x8000000)
clock_gettime(0x0, &(0x7f0000000240)={<r6=>0x0, <r7=>0x0})
syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000280)={r6, r7+60000000}, 0x1, 0x1, 0x2}, 0xc59)
sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300))
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000340)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000380)='-&*/%)\x00')
epoll_create1(0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r8, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000400)=0xffffffc1)
get_mempolicy(&(0x7f0000000440), &(0x7f0000000480), 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x1)
keyctl$restrict_keyring(0x1d, 0xfffffffffffffff9, &(0x7f00000004c0)='syzkaller\x00', 0x0)
ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0xfffffffb, 0x5d, "381c84496600f36e7986a3d6e2c3b8ab67262859d68c6d74335c1144428fe550c0c9d0c969208ad368b767a5de606d6b25ccba005b3ebcb779fa041e528f2ef6c6b76a42040da2be0314bf34ba9710987ceb4614407dbb2f9f70074424"})

13:19:04 executing program 6:
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffc000/0x1000)=nil)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x0)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000)
epoll_create1(0x80000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r0, 0x7b5a0000)
r1 = socket(0x6, 0x800, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/189, 0xbd}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/42, 0x2a}], 0x5, &(0x7f0000000600)=""/102, 0x66}, 0x0, 0x20, 0x1, {0x2}}, 0x7fffffff)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), r1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan0\x00', <r3=>0x0})
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_create1(0x80000)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000880)={0x800, 0x8000, 0x1, 'queue1\x00', 0x7fffffff})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000003, 0x30, r0, 0x8000000)
ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000940)=0x2)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xb33057baf93bbb40}, 0x20044051)

[   88.064051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.065524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.066611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.077625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.080459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.081543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.086065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.088422] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.092005] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.093157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.095033] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.095462] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.100071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.100610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.102073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.107790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.119521] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.120536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.151346] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.154960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.160428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.162408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.163306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.164446] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.165661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.168813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.170033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.172943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.174202] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.175430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.176428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.181511] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.182885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.189036] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.191214] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.193150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.211630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.214022] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.215446] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.217811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.219441] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.220556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.227896] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.233959] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.235812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.250130] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.276000] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.285226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.180294] Bluetooth: hci2: command tx timeout
[   90.180317] Bluetooth: hci1: command tx timeout
[   90.180534] Bluetooth: hci0: command tx timeout
[   90.244520] Bluetooth: hci5: command tx timeout
[   90.244556] Bluetooth: hci3: command tx timeout
[   90.245231] Bluetooth: hci4: command tx timeout
[   90.307805] Bluetooth: hci6: command tx timeout
[   90.370902] Bluetooth: hci7: command tx timeout
[   92.226781] Bluetooth: hci2: command tx timeout
[   92.228161] Bluetooth: hci0: command tx timeout
[   92.228208] Bluetooth: hci1: command tx timeout
[   92.291212] Bluetooth: hci3: command tx timeout
[   92.291245] Bluetooth: hci5: command tx timeout
[   92.292255] Bluetooth: hci4: command tx timeout
[   92.356831] Bluetooth: hci6: command tx timeout
[   92.419815] Bluetooth: hci7: command tx timeout
[   94.274835] Bluetooth: hci0: command tx timeout
[   94.275372] Bluetooth: hci1: command tx timeout
[   94.276379] Bluetooth: hci2: command tx timeout
[   94.338780] Bluetooth: hci5: command tx timeout
[   94.339260] Bluetooth: hci4: command tx timeout
[   94.340634] Bluetooth: hci3: command tx timeout
[   94.403866] Bluetooth: hci6: command tx timeout
[   94.467778] Bluetooth: hci7: command tx timeout
[   96.322774] Bluetooth: hci2: command tx timeout
[   96.322821] Bluetooth: hci1: command tx timeout
[   96.323356] Bluetooth: hci0: command tx timeout
[   96.386790] Bluetooth: hci3: command tx timeout
[   96.387279] Bluetooth: hci4: command tx timeout
[   96.387841] Bluetooth: hci5: command tx timeout
[   96.450751] Bluetooth: hci6: command tx timeout
[   96.514973] Bluetooth: hci7: command tx timeout
[  150.993306] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.000082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.001209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.002386] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.006245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.008264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.011943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.013588] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.013694] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.015116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.016366] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  151.018975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.020229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.020548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.028883] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  151.031830] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  151.032593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.033848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.072981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.079281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.080582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.120991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.126975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.129551] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.131024] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.150976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.153320] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  151.154951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  151.156238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  151.157132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.160311] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  151.162073] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  151.165939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  151.171315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  151.174508] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  151.178102] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  151.183824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.189104] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.191120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.192321] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.195316] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.196488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.203014] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.204933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.210090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.219946] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.233979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.243025] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  153.090923] Bluetooth: hci1: command tx timeout
[  153.092049] Bluetooth: hci0: command tx timeout
[  153.093956] Bluetooth: hci2: command tx timeout
[  153.218796] Bluetooth: hci4: command tx timeout
[  153.220579] Bluetooth: hci3: command tx timeout
[  153.282817] Bluetooth: hci5: command tx timeout
[  153.283799] Bluetooth: hci6: command tx timeout
[  153.347001] Bluetooth: hci7: command tx timeout
[  155.139862] Bluetooth: hci2: command tx timeout
[  155.140440] Bluetooth: hci1: command tx timeout
[  155.141071] Bluetooth: hci0: command tx timeout
[  155.266781] Bluetooth: hci3: command tx timeout
[  155.267344] Bluetooth: hci4: command tx timeout
[  155.331873] Bluetooth: hci5: command tx timeout
[  155.332436] Bluetooth: hci6: command tx timeout
[  155.395799] Bluetooth: hci7: command tx timeout
[  157.187993] Bluetooth: hci2: command tx timeout
[  157.188562] Bluetooth: hci0: command tx timeout
[  157.189157] Bluetooth: hci1: command tx timeout
[  157.315780] Bluetooth: hci3: command tx timeout
[  157.316339] Bluetooth: hci4: command tx timeout
[  157.378852] Bluetooth: hci6: command tx timeout
[  157.379402] Bluetooth: hci5: command tx timeout
[  157.442745] Bluetooth: hci7: command tx timeout
[  159.235897] Bluetooth: hci0: command tx timeout
[  159.236464] Bluetooth: hci1: command tx timeout
[  159.237730] Bluetooth: hci2: command tx timeout
[  159.363827] Bluetooth: hci4: command tx timeout
[  159.364377] Bluetooth: hci3: command tx timeout
[  159.429056] Bluetooth: hci5: command tx timeout
[  159.429619] Bluetooth: hci6: command tx timeout
[  159.491792] Bluetooth: hci7: command tx timeout
[  213.272588] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.279202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  213.282263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  213.284211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  213.287098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.290956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.295110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  213.297976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.300918] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  213.300933] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  213.303280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.303314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.454324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  213.459940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  213.463249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  213.471957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  213.475351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  213.482815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.594360] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.602460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.607135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.609223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.613027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.614056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.616725] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.618798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.633995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.661015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.676303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.678976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.680792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.682427] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.706312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.711945] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.718791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.746855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.747088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.779987] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.803199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.805827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.806006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.814331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.833948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.838162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.844266] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.851371] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.861197] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  213.863206] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  215.362796] Bluetooth: hci1: command tx timeout
[  215.364512] Bluetooth: hci0: command tx timeout
[  215.554837] Bluetooth: hci2: command tx timeout
[  215.684769] Bluetooth: hci4: command tx timeout
[  215.811132] Bluetooth: hci3: command tx timeout
[  215.876718] Bluetooth: hci5: command tx timeout
[  216.003803] Bluetooth: hci6: command tx timeout
[  216.005859] Bluetooth: hci7: command tx timeout
[  217.411746] Bluetooth: hci1: command tx timeout
[  217.413241] Bluetooth: hci0: command tx timeout
[  217.603828] Bluetooth: hci2: command tx timeout
[  217.731788] Bluetooth: hci4: command tx timeout
[  217.859820] Bluetooth: hci3: command tx timeout
[  217.923457] Bluetooth: hci5: command tx timeout
[  218.052824] Bluetooth: hci7: command tx timeout
[  218.053312] Bluetooth: hci6: command tx timeout
[  219.458801] Bluetooth: hci0: command tx timeout
[  219.459336] Bluetooth: hci1: command tx timeout
[  219.652721] Bluetooth: hci2: command tx timeout
[  219.778854] Bluetooth: hci4: command tx timeout
[  219.907775] Bluetooth: hci3: command tx timeout
[  219.971851] Bluetooth: hci5: command tx timeout
[  220.099782] Bluetooth: hci7: command tx timeout
[  220.100273] Bluetooth: hci6: command tx timeout
[  221.507913] Bluetooth: hci1: command tx timeout
[  221.509785] Bluetooth: hci0: command tx timeout
[  221.698811] Bluetooth: hci2: command tx timeout
[  221.826729] Bluetooth: hci4: command tx timeout
[  221.955912] Bluetooth: hci3: command tx timeout
[  222.019989] Bluetooth: hci5: command tx timeout
[  222.148065] Bluetooth: hci6: command tx timeout
[  222.148551] Bluetooth: hci7: command tx timeout
[  275.853857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  275.856875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  275.858245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  275.876889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  275.879455] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  275.880583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  275.922186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  275.928894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  275.933035] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  275.936797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  275.938565] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  275.939823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.045622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  276.051341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  276.053004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  276.053084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  276.056190] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  276.059083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  276.062571] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  276.064157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  276.071967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  276.086774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  276.092230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  276.094192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  276.143034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  276.147901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  276.151378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  276.154021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  276.181435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  276.182996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.196788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  276.200995] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  276.211866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.215989] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  276.220980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.230425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  276.238925] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  276.243079] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  276.244355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  276.248420] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  276.250411] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  276.251982] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.296101] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  276.304833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  276.316928] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  276.318397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  276.347905] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  276.356926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  277.891747] Bluetooth: hci0: command tx timeout
[  278.018879] Bluetooth: hci1: command tx timeout
[  278.146761] Bluetooth: hci3: command tx timeout
[  278.211456] Bluetooth: hci2: command tx timeout
[  278.276611] Bluetooth: hci7: command tx timeout
[  278.338789] Bluetooth: hci5: command tx timeout
[  278.339906] Bluetooth: hci4: command tx timeout
[  278.466786] Bluetooth: hci6: command tx timeout
[  279.938723] Bluetooth: hci0: command tx timeout
[  280.066839] Bluetooth: hci1: command tx timeout
[  280.194875] Bluetooth: hci3: command tx timeout
[  280.258715] Bluetooth: hci2: command tx timeout
[  280.322871] Bluetooth: hci7: command tx timeout
[  280.386759] Bluetooth: hci5: command tx timeout
[  280.388760] Bluetooth: hci4: command tx timeout
[  280.516437] Bluetooth: hci6: command tx timeout
[  281.987734] Bluetooth: hci0: command tx timeout
[  282.115942] Bluetooth: hci1: command tx timeout
[  282.243735] Bluetooth: hci3: command tx timeout
[  282.307829] Bluetooth: hci2: command tx timeout
[  282.372672] Bluetooth: hci7: command tx timeout
[  282.434813] Bluetooth: hci5: command tx timeout
[  282.436262] Bluetooth: hci4: command tx timeout
[  282.563755] Bluetooth: hci6: command tx timeout
[  284.035880] Bluetooth: hci0: command tx timeout
[  284.163537] Bluetooth: hci1: command tx timeout
[  284.291916] Bluetooth: hci3: command tx timeout
[  284.354745] Bluetooth: hci2: command tx timeout
[  284.418720] Bluetooth: hci7: command tx timeout
[  284.485403] Bluetooth: hci4: command tx timeout
[  284.485466] Bluetooth: hci5: command tx timeout
[  284.611765] Bluetooth: hci6: command tx timeout
[  338.102319] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  338.118099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  338.126890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  338.129945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  338.133287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  338.145206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  338.189226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  338.196317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  338.203911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  338.212533] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  338.225685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  338.229460] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.379414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  338.383119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  338.384915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  338.387986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  338.389945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  338.391063] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  338.585687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  338.596508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  338.601049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  338.607409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  338.613988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  338.616550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  338.618367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  338.619797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  338.621113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  338.622564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  338.625180] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  338.627163] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  338.630844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  338.634451] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  338.637486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.668929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  338.672105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  338.672705] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  338.676073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  338.689945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  338.691143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  338.693540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  338.694654] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  338.741512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  338.789749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  338.803885] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  338.839145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  338.841310] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  338.864923] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  338.904537] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  340.162843] Bluetooth: hci0: command tx timeout
[  340.291694] Bluetooth: hci1: command tx timeout
[  340.420700] Bluetooth: hci2: command tx timeout
[  340.674980] Bluetooth: hci5: command tx timeout
[  340.739786] Bluetooth: hci3: command tx timeout
[  340.741693] Bluetooth: hci4: command tx timeout
[  341.058766] Bluetooth: hci6: command tx timeout
[  341.059719] Bluetooth: hci7: command tx timeout
[  342.210701] Bluetooth: hci0: command tx timeout
[  342.338790] Bluetooth: hci1: command tx timeout
[  342.466816] Bluetooth: hci2: command tx timeout
[  342.723432] Bluetooth: hci5: command tx timeout
[  342.787082] Bluetooth: hci3: command tx timeout
[  342.787674] Bluetooth: hci4: command tx timeout
[  343.107729] Bluetooth: hci7: command tx timeout
[  343.108289] Bluetooth: hci6: command tx timeout
[  344.258697] Bluetooth: hci0: command tx timeout
[  344.388723] Bluetooth: hci1: command tx timeout
[  344.514825] Bluetooth: hci2: command tx timeout
[  344.770952] Bluetooth: hci5: command tx timeout
[  344.836714] Bluetooth: hci4: command tx timeout
[  344.837190] Bluetooth: hci3: command tx timeout
[  345.154754] Bluetooth: hci6: command tx timeout
[  345.156155] Bluetooth: hci7: command tx timeout
[  346.306727] Bluetooth: hci0: command tx timeout
[  346.434855] Bluetooth: hci1: command tx timeout
[  346.562717] Bluetooth: hci2: command tx timeout
[  346.818893] Bluetooth: hci5: command tx timeout
[  346.884734] Bluetooth: hci3: command tx timeout
[  346.885227] Bluetooth: hci4: command tx timeout
[  347.202739] Bluetooth: hci6: command tx timeout
[  347.203251] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
13:24:05  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff84a43ce3 RDX=ffff88800dbc9bc0
RSI=ffffffff84a43d02 RDI=ffff88806ce2d3d8 RBP=ffff88806ce2d3d8 RSP=ffff88806ce09e08
R8 =0000000000000000 R9 =fffffbfff0c7f8f2 R10=0000000000000001 R11=0000000000000000
R12=ffff88806ce2cac0 R13=0000000000000003 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff816029ae RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1a095f6540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1a097e1620 CR3=0000000033f76000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff
XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f
XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000336 RCX=ffffffff814f5d3e RDX=fffffbfff0fdf7e9
RSI=0000000000000008 RDI=ffffffff87efbf40 RBP=ffff88800dbcd340 RSP=ffff88800cf37808
R8 =0000000000000000 R9 =fffffbfff0fdf7e8 R10=ffffffff87efbf47 R11=0000000000000000
R12=61c8864680b583eb R13=ffff88800dbcddd2 R14=0000000000000000 R15=ffff88800dbcddb0
RIP=ffffffff814f5d46 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3f1ed6e6f4 CR3=0000000035740000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f3f1ed7d47000007f3f1ed7cf20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000