Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:47237' (ECDSA) to the list of known hosts.
2024/12/20 15:08:57 fuzzer started
2024/12/20 15:08:58 dialing manager at localhost:37257
syzkaller login: [   76.754669] cgroup: Unknown subsys name 'net'
[   76.878862] cgroup: Unknown subsys name 'cpuset'
[   76.918800] cgroup: Unknown subsys name 'rlimit'
2024/12/20 15:09:24 syscalls: 202
2024/12/20 15:09:24 code coverage: enabled
2024/12/20 15:09:24 comparison tracing: enabled
2024/12/20 15:09:24 extra coverage: enabled
2024/12/20 15:09:24 setuid sandbox: enabled
2024/12/20 15:09:24 namespace sandbox: enabled
2024/12/20 15:09:24 Android sandbox: enabled
2024/12/20 15:09:24 fault injection: enabled
2024/12/20 15:09:24 leak checking: enabled
2024/12/20 15:09:24 net packet injection: enabled
2024/12/20 15:09:24 net device setup: enabled
2024/12/20 15:09:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/12/20 15:09:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/12/20 15:09:24 USB emulation: enabled
2024/12/20 15:09:24 hci packet injection: enabled
2024/12/20 15:09:24 wifi device emulation: enabled
2024/12/20 15:09:24 802.15.4 emulation: enabled
2024/12/20 15:09:24 fetching corpus: 0, signal 0/0 (executing program)
2024/12/20 15:09:26 starting 8 fuzzer processes
15:09:26 executing program 0:
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000040)={@msf={0x3, 0x40, 0x58}, 0x1, 0x1b, &(0x7f0000000000)=""/27})
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x8)
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000080)={0xf9, 0x5, 0x8, 0x7c})
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0xfffffffffffeffff)
ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x5)
ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000140)={@lba=0x1})
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x837}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb62}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4841}, 0x4840)
r2 = socket(0x54, 0x800, 0x1)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000300))
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x7)
syz_open_dev$usbmon(&(0x7f0000000340), 0x9, 0x101400)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xc8, 0xffff, 0x43, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8000, 0x3, 0x1f}})
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$CDROMPAUSE(r3, 0x5301)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'})

15:09:26 executing program 1:
mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x700000f, 0x50, 0xffffffffffffffff, 0xd5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r2=>r1, 0x0, 0x18, 0x8b, 0x20, 0x40, @private1, @loopback, 0x1, 0x10, 0xa7, 0x4}})
ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000140)={@lba=0xffff, 0x0, 0x1})
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r0)
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r5 = pidfd_getfd(r4, r0, 0x0)
r6 = pidfd_getfd(r5, r5, 0x0)
ioctl$CDROMREADRAW(r6, 0x5314, &(0x7f00000001c0)={0x9, 0xff, 0x5f, 0x3f})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', <r7=>r2, 0x2f, 0x9, 0x3, 0x1, 0x5f, @private1, @empty, 0x7, 0x7800, 0xfffffffc, 0x6}})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x128, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x43c}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x28000044}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000f00))
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'ip6tnl0\x00', r7, 0x29, 0x8, 0x6, 0x7, 0xc, @remote, @mcast1, 0x8, 0x40, 0x81, 0xe77}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001000)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000010c0)={'ip6gre0\x00', &(0x7f0000001040)={'syztnl2\x00', r8, 0x2f, 0x81, 0x3f, 0x4, 0x59, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast1, 0x8, 0x1, 0x7, 0x3}})
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000013c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x214, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f87553ec8167716a973f7bb49fafa4bcbe9096be23d1be63d9f3ef2e"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5a3154954446ad377fcaa276daf05b8959c7f2467e9aba56"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7bfa90b50b932a022ee54d96cf750951b04a75270ae7c24be8"}}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "c610fbb8b66cad399a30a88affa6e12b177065198dc753c6cec4e8fa6bbca89cde77fd64ee444e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3bc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a3d5c8f8f91955e3fbf384af6f4b08281bca3ac5c58d5ddf831e38bd"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
syz_genetlink_get_family_id$fou(&(0x7f0000001400), r5)
ioctl$CDROM_SELECT_SPEED(r5, 0x5322, 0x115)

15:09:26 executing program 2:
prctl$PR_CAPBSET_DROP(0x18, 0x2)
prctl$PR_CAPBSET_DROP(0x18, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r0)
prctl$PR_CAPBSET_DROP(0x18, 0x21)
prctl$PR_CAPBSET_DROP(0x18, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000000c0)=r0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000001c0)=r2)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
ioctl$CDROM_DEBUG(r3, 0x5330, 0x0)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xc002, 0x0)
ioctl$CDROM_DISC_STATUS(r4, 0x5327)
getitimer(0x2, &(0x7f0000000280))
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000002c0))
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000000340)=@physical={0x0, 0x3, [{0x6, 0x1, 0xc, 0x9, 0x1, 0x0, 0x0, 0x7, 0xc, 0x1, 0x4, 0x2, 0x5}, {0x5, 0x8, 0x1, 0x7, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x20, 0x5d}, {0xb, 0x2, 0x9, 0x2, 0x8, 0x0, 0x0, 0x8, 0x5, 0x0, 0x5, 0x2, 0x9}, {0xf, 0x4, 0x8, 0x5, 0xb, 0x0, 0x2, 0x2, 0x7, 0x1, 0x5, 0x7f, 0x20}]})

15:09:26 executing program 3:
ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000000)={0x1, 0x1f, 0x81, 0x3f, 0x2, 0x7})
ioctl$CDROM_DEBUG(r0, 0x5330, 0x0)
ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000a80)=@disckey={0x2, 0x1, "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"})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000012c0), 0x40000, 0x0)
ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f0000001300)=@copyright={0x1, 0x3, 0x4, 0x6})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001b40), 0x280, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000001b80)='io.pressure\x00', 0x2, 0x0)
ioctl$CDROMRESUME(r0, 0x5302)
ioctl$CDROMPAUSE(r1, 0x5301)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001bc0), 0x400, 0x0)
ioctl$CDROMEJECT(r4, 0x5309)
ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000001c00)={@msf={0x6, 0x2, 0x1}, 0x0, 0x3})
openat$cdrom(0xffffffffffffff9c, &(0x7f0000001c40), 0x20100, 0x0)
r5 = pidfd_getfd(r2, r3, 0x0)
ioctl$CDROMPLAYTRKIND(r5, 0x5304, &(0x7f0000001c80)={0x1, 0x8, 0x2, 0x80})
ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000001cc0)=@hsk={0x4, 0x3, "3b9e35756c"})
ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000001d00))
inotify_rm_watch(r0, 0x0)

15:09:26 executing program 5:
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000), 0x4)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x3, 0x4, 0x5, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0xb}, 0x20, 0x80, 0x31b, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', r0, 0x8000, 0x7, 0xccc, 0x5, {{0x1f, 0x4, 0x1, 0x7, 0x7c, 0x67, 0x0, 0x80, 0x2f, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x7, 0xf8, [@multicast1]}, @timestamp_prespec={0x44, 0x4c, 0x34, 0x3, 0xd, [{@multicast1, 0x6}, {@rand_addr=0x64010102, 0x7}, {@private=0xa010100, 0x3}, {@loopback, 0x80}, {@broadcast, 0x7}, {@local, 0x9}, {@multicast2, 0x40}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8622}]}, @lsrr={0x83, 0xb, 0x7c, [@rand_addr=0x64010100, @multicast2]}, @generic={0x82, 0x7, "0d69d0be0e"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', r0, 0x2f, 0x7f, 0x6, 0x81, 0x10, @remote, @loopback, 0x8000, 0x10, 0x9, 0x9}})
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r1 = socket(0x36, 0x4, 0x800)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x2, &(0x7f0000000480)=[{0xa54e, 0x20, 0x4, 0x5}, {0x14be, 0xd3, 0x4, 0x1}]})
r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
inotify_add_watch(r4, &(0x7f0000000500)='./file0\x00', 0x80)
r5 = pidfd_getfd(r1, r4, 0x0)
write$nbd(r5, &(0x7f0000000540)={0x67446698, 0x0, 0x3, 0x3, 0x4, "e85d3398d6e17ece1af896073b109bb992f4331df66feb6234a80266421b2f0142decd38d3e06ec3d32aabff4c9d2bef0231f9ffd8a1f292a08261b70f"}, 0x4d)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x2, 0xcf, 0x7}]})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x3e}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
r8 = pidfd_getfd(r5, r6, 0x0)
ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f00000007c0))
syz_genetlink_get_family_id$fou(&(0x7f0000000800), 0xffffffffffffffff)

15:09:26 executing program 4:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x40000000, 0x0)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x4802, 0x0)
ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0xada)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', <r1=>0x0, 0x4, 0x3f, 0x0, 0x7, 0x1, @mcast2, @remote, 0x40, 0x10, 0x6, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r1, 0x29, 0x4, 0x40, 0x1, 0x44, @mcast1, @remote, 0x8, 0x8, 0x2, 0xf5}})
inotify_rm_watch(0xffffffffffffffff, 0x0)
ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000240)={@lba=0x9, 0x0, 0x3})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'gretap0\x00', <r2=>0x0, 0x0, 0x8, 0x75, 0xfffffe00, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x66, 0x0, 0x20, 0x4, 0x0, @empty, @empty, {[@end, @rr={0x7, 0xb, 0xbb, [@broadcast, @private=0xa010100]}, @generic={0x44, 0x8, "cdee5fca4323"}, @end, @noop, @timestamp={0x44, 0x8, 0xfc, 0x0, 0xf, [0x9]}, @lsrr={0x83, 0x27, 0x44, [@rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @empty, @local, @multicast1, @empty, @multicast2, @loopback]}]}}}}})
ioctl$CDROMEJECT(r0, 0x5309)
ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000340))
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80000, 0x0)
ioctl$DVD_WRITE_STRUCT(r3, 0x5390, &(0x7f0000000e00)=@manufact={0x4, 0x3, 0x800, "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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x99}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x62c8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x3c}}, 0x1)
ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000001880))
ioctl$CDROMCLOSETRAY(r0, 0x5319)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000018c0), 0x10000, 0x0)
ioctl$CDROMPLAYTRKIND(r6, 0x5304, &(0x7f0000001900)={0xc0, 0x28, 0xc7, 0x5c})

[  104.008143] audit: type=1400 audit(1734707366.202:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:09:26 executing program 6:
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x4000888)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x2, @any, 0x2, 0x1}, 0xe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80108080}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8881)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x1)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c000}, 0x10810)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40c0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80100050}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r3, 0x4, 0x70bd26, 0x6, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffe7de}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x1)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xae}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd0, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1063}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9664}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @remote, 0x4}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1af800, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
connect$bt_l2cap(r4, &(0x7f0000000c80)={0x1f, 0x350, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x59, 0x2}, 0xe)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000cc0))

15:09:26 executing program 7:
r0 = inotify_init1(0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfffffffffffffffc)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x30001, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000000080))
bind$bt_l2cap(r2, &(0x7f0000000b00)={0x1f, 0x1, @any, 0x1ff, 0x2}, 0xe)
accept4$bt_l2cap(r2, &(0x7f0000000b40)={0x1f, 0x0, @none}, &(0x7f0000000b80)=0xe, 0x0)
r3 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000c40)={'ip6tnl0\x00', &(0x7f0000000bc0)={'syztnl2\x00', <r4=>0x0, 0x4, 0x0, 0xc1, 0x2, 0x40, @local, @mcast1, 0x700, 0x80, 0x1efc000, 0xf7d}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r4, 0x29, 0xff, 0x0, 0x8, 0x46e46302990ec5bf, @loopback, @loopback, 0x8000, 0x700, 0x853, 0x707}})
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d40), 0x204000, 0x0)
ioctl$CDROMREADRAW(r5, 0x5314, &(0x7f0000000d80)={0x4, 0x1, 0x40, 0x8})
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001800), 0x200, 0x0)
ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000001840)=@bca={0x3, 0xbc, "4ca70416d8fccf5df3ee184eb89ff160b7ed4b46c5f4d09a691f1e07e08222a36b10c4c9faaeffcb9333b203f4bbb1f970ebec1e8f2d2b0ff8a839dc6384035c5c255339e0a3fd618bca725478c3c39de5d46c4002a3a1e58f687a379af0c272148aa560c2df525b41aa60e8ea519b7fddb1832ac55f3c7285a392d69302dc826ac6052bcdc8d89b9d68c64737350217cc780b5f497356cb7a3046d54719701524c9db11b2f993b59bdbcdeb9b0a6f0f3f7caaed4c16e5d604265d04"})
process_mrelease(r2, 0x0)
ioctl$CDROM_DISC_STATUS(r3, 0x5327)
ioctl$CDROM_DEBUG(r3, 0x5330, 0x1)
r7 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
ioctl$CDROMCLOSETRAY(r7, 0x5319)

[  105.472948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.475605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.478363] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.480304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.484190] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.490355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.498777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.500868] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  105.502481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.531444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.532631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.547006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.573569] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  105.577366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.581977] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  105.585341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  105.587818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  105.599653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.603097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  105.606131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  105.609026] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.611705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.613894] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  105.617326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  105.619741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.625360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  105.628038] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  105.631271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.633714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.637369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.641210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.643449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.645475] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  105.649681] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  105.652157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.657022] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  105.662586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  105.675040] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  105.682998] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  105.692464] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.696284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.698398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.709930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.712860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  105.715786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.731147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.732924] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  105.734637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  107.546541] Bluetooth: hci0: command tx timeout
[  107.609459] Bluetooth: hci1: command tx timeout
[  107.738178] Bluetooth: hci3: command tx timeout
[  107.739026] Bluetooth: hci6: command tx timeout
[  107.739757] Bluetooth: hci4: command tx timeout
[  107.739816] Bluetooth: hci7: command tx timeout
[  107.801186] Bluetooth: hci5: command tx timeout
[  107.801248] Bluetooth: hci2: command tx timeout
[  109.593583] Bluetooth: hci0: command tx timeout
[  109.658147] Bluetooth: hci1: command tx timeout
[  109.785473] Bluetooth: hci7: command tx timeout
[  109.785532] Bluetooth: hci6: command tx timeout
[  109.786143] Bluetooth: hci3: command tx timeout
[  109.786508] Bluetooth: hci4: command tx timeout
[  109.849496] Bluetooth: hci2: command tx timeout
[  109.851186] Bluetooth: hci5: command tx timeout
[  111.641211] Bluetooth: hci0: command tx timeout
[  111.705185] Bluetooth: hci1: command tx timeout
[  111.833211] Bluetooth: hci7: command tx timeout
[  111.833294] Bluetooth: hci3: command tx timeout
[  111.833729] Bluetooth: hci6: command tx timeout
[  111.834994] Bluetooth: hci4: command tx timeout
[  111.897282] Bluetooth: hci2: command tx timeout
[  111.897311] Bluetooth: hci5: command tx timeout
[  113.690128] Bluetooth: hci0: command tx timeout
[  113.753353] Bluetooth: hci1: command tx timeout
[  113.881430] Bluetooth: hci6: command tx timeout
[  113.881960] Bluetooth: hci3: command tx timeout
[  113.883010] Bluetooth: hci4: command tx timeout
[  113.883235] Bluetooth: hci7: command tx timeout
[  113.945220] Bluetooth: hci2: command tx timeout
[  113.945250] Bluetooth: hci5: command tx timeout
[  168.121107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.143181] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.145662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.153893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.157402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  168.158944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.180355] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  168.181511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  168.181788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  168.189515] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  168.190767] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  168.192020] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  168.193610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  168.196416] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  168.197849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  168.198959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.200276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  168.205508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  168.209653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  168.211700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  168.214702] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  168.219099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.235191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  168.236503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  168.238399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  168.241838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  168.244886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  168.246948] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  168.247257] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  168.250359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  168.251547] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  168.253338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  168.254393] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  168.269787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  168.273789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  168.279229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  168.279284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  168.282812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  168.284112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  168.285454] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  168.289704] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  168.297290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  168.303958] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  168.315992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  168.318772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  168.320685] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  168.322940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  168.328157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  170.202330] Bluetooth: hci0: command tx timeout
[  170.266625] Bluetooth: hci2: command tx timeout
[  170.330266] Bluetooth: hci6: command tx timeout
[  170.331259] Bluetooth: hci1: command tx timeout
[  170.331877] Bluetooth: hci7: command tx timeout
[  170.336854] Bluetooth: hci3: command tx timeout
[  170.393364] Bluetooth: hci5: command tx timeout
[  170.395190] Bluetooth: hci4: command tx timeout
[  172.249281] Bluetooth: hci0: command tx timeout
[  172.313224] Bluetooth: hci2: command tx timeout
[  172.377326] Bluetooth: hci7: command tx timeout
[  172.378882] Bluetooth: hci3: command tx timeout
[  172.380332] Bluetooth: hci6: command tx timeout
[  172.381816] Bluetooth: hci1: command tx timeout
[  172.441203] Bluetooth: hci5: command tx timeout
[  172.443173] Bluetooth: hci4: command tx timeout
[  174.297426] Bluetooth: hci0: command tx timeout
[  174.361132] Bluetooth: hci2: command tx timeout
[  174.425247] Bluetooth: hci6: command tx timeout
[  174.426723] Bluetooth: hci7: command tx timeout
[  174.428248] Bluetooth: hci1: command tx timeout
[  174.430212] Bluetooth: hci3: command tx timeout
[  174.489706] Bluetooth: hci5: command tx timeout
[  174.491409] Bluetooth: hci4: command tx timeout
[  176.347128] Bluetooth: hci0: command tx timeout
[  176.409123] Bluetooth: hci2: command tx timeout
[  176.474271] Bluetooth: hci3: command tx timeout
[  176.475784] Bluetooth: hci7: command tx timeout
[  176.477156] Bluetooth: hci6: command tx timeout
[  176.478497] Bluetooth: hci1: command tx timeout
[  176.537310] Bluetooth: hci4: command tx timeout
[  176.538798] Bluetooth: hci5: command tx timeout
[  230.627543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  230.648055] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.649672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  230.658709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  230.659885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.663166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.667355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  230.669760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.672846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  230.672949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.676924] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.679262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  230.698246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  230.701300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  230.703736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  230.727015] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  230.730494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  230.732956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  230.834664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.854541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.858448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.865939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.870291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.872619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.894349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.905405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.908663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.912577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  230.928264] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  230.940721] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  230.942471] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.959667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  230.961915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  230.968526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.974221] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  230.976787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  230.978890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  230.988303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  230.991932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  231.001691] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  231.027407] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  231.030507] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  231.043169] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  231.063282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  231.073432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  231.077776] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  231.084589] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  231.087289] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  232.731266] Bluetooth: hci1: command tx timeout
[  232.733551] Bluetooth: hci0: command tx timeout
[  232.793673] Bluetooth: hci2: command tx timeout
[  232.922133] Bluetooth: hci3: command tx timeout
[  233.113192] Bluetooth: hci7: command tx timeout
[  233.113199] Bluetooth: hci4: command tx timeout
[  233.178339] Bluetooth: hci5: command tx timeout
[  233.178368] Bluetooth: hci6: command tx timeout
[  234.777156] Bluetooth: hci0: command tx timeout
[  234.780216] Bluetooth: hci1: command tx timeout
[  234.841133] Bluetooth: hci2: command tx timeout
[  234.970238] Bluetooth: hci3: command tx timeout
[  235.161204] Bluetooth: hci4: command tx timeout
[  235.161420] Bluetooth: hci7: command tx timeout
[  235.225275] Bluetooth: hci6: command tx timeout
[  235.226937] Bluetooth: hci5: command tx timeout
[  236.825408] Bluetooth: hci1: command tx timeout
[  236.825443] Bluetooth: hci0: command tx timeout
[  236.890337] Bluetooth: hci2: command tx timeout
[  237.019073] Bluetooth: hci3: command tx timeout
[  237.209115] Bluetooth: hci7: command tx timeout
[  237.210170] Bluetooth: hci4: command tx timeout
[  237.273153] Bluetooth: hci6: command tx timeout
[  237.274490] Bluetooth: hci5: command tx timeout
[  238.875132] Bluetooth: hci0: command tx timeout
[  238.875670] Bluetooth: hci1: command tx timeout
[  238.937191] Bluetooth: hci2: command tx timeout
[  239.065100] Bluetooth: hci3: command tx timeout
[  239.257236] Bluetooth: hci7: command tx timeout
[  239.258139] Bluetooth: hci4: command tx timeout
[  239.321121] Bluetooth: hci5: command tx timeout
[  239.321144] Bluetooth: hci6: command tx timeout
[  292.906223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  292.907679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  292.914691] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  292.918361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  292.921725] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  292.923403] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  292.967795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.987663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.993280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  293.020921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  293.022770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  293.024309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  293.096233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  293.099512] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  293.101535] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  293.112915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  293.116341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  293.129919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  293.251724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  293.260585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  293.262812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  293.266676] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  293.282474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  293.284542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  293.287218] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  293.297370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  293.298206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  293.299434] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  293.304640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  293.309769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  293.316505] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  293.316524] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  293.322817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  293.332811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  293.335894] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  293.340214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  293.343129] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  293.360151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  293.362615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  293.373294] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  293.374189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  293.412260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  293.416192] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  293.417491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  293.425567] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  293.435255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  293.447251] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  293.452279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  295.001163] Bluetooth: hci0: command tx timeout
[  295.065883] Bluetooth: hci1: command tx timeout
[  295.194228] Bluetooth: hci2: command tx timeout
[  295.386114] Bluetooth: hci5: command tx timeout
[  295.449210] Bluetooth: hci3: command tx timeout
[  295.450338] Bluetooth: hci4: command tx timeout
[  295.514222] Bluetooth: hci7: command tx timeout
[  295.577135] Bluetooth: hci6: command tx timeout
[  297.049185] Bluetooth: hci0: command tx timeout
[  297.113115] Bluetooth: hci1: command tx timeout
[  297.241219] Bluetooth: hci2: command tx timeout
[  297.435162] Bluetooth: hci5: command tx timeout
[  297.497159] Bluetooth: hci3: command tx timeout
[  297.498137] Bluetooth: hci4: command tx timeout
[  297.561158] Bluetooth: hci7: command tx timeout
[  297.625095] Bluetooth: hci6: command tx timeout
[  299.097114] Bluetooth: hci0: command tx timeout
[  299.162110] Bluetooth: hci1: command tx timeout
[  299.292069] Bluetooth: hci2: command tx timeout
[  299.482141] Bluetooth: hci5: command tx timeout
[  299.546212] Bluetooth: hci4: command tx timeout
[  299.546782] Bluetooth: hci3: command tx timeout
[  299.610093] Bluetooth: hci7: command tx timeout
[  299.673280] Bluetooth: hci6: command tx timeout
[  301.146126] Bluetooth: hci0: command tx timeout
[  301.209227] Bluetooth: hci1: command tx timeout
[  301.338118] Bluetooth: hci2: command tx timeout
[  301.529098] Bluetooth: hci5: command tx timeout
[  301.593125] Bluetooth: hci4: command tx timeout
[  301.596102] Bluetooth: hci3: command tx timeout
[  301.658117] Bluetooth: hci7: command tx timeout
[  301.722095] Bluetooth: hci6: command tx timeout
[  355.447225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.452845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.455269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.457895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.464647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  355.465712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  355.503598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  355.506170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  355.510543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  355.529159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  355.532437] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  355.535259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  355.635807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  355.639307] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  355.642485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  355.652551] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  355.656218] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  355.657890] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.693266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  355.703905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  355.707336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  355.721240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  355.722276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  355.755211] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  355.755955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  355.756833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.764125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  355.774955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  355.775813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.777493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  355.782816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  355.787362] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.789441] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  355.790533] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  355.793174] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  355.794847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  355.795912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  355.799437] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  355.800673] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  355.814618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.818611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.824342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.830645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  355.840374] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  355.848220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  355.885459] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  355.935214] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  355.938528] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  357.530119] Bluetooth: hci0: command tx timeout
[  357.593183] Bluetooth: hci1: command tx timeout
[  357.723107] Bluetooth: hci2: command tx timeout
[  357.849273] Bluetooth: hci5: command tx timeout
[  357.849533] Bluetooth: hci4: command tx timeout
[  357.850230] Bluetooth: hci3: command tx timeout
[  357.913122] Bluetooth: hci6: command tx timeout
[  358.043070] Bluetooth: hci7: command tx timeout
[  359.578220] Bluetooth: hci0: command tx timeout
[  359.643040] Bluetooth: hci1: command tx timeout
[  359.769068] Bluetooth: hci2: command tx timeout
[  359.899045] Bluetooth: hci3: command tx timeout
[  359.899590] Bluetooth: hci4: command tx timeout
[  359.900160] Bluetooth: hci5: command tx timeout
[  359.961158] Bluetooth: hci6: command tx timeout
[  360.089293] Bluetooth: hci7: command tx timeout
[  361.625377] Bluetooth: hci0: command tx timeout
[  361.689227] Bluetooth: hci1: command tx timeout
[  361.817074] Bluetooth: hci2: command tx timeout
[  361.945116] Bluetooth: hci4: command tx timeout
[  361.945678] Bluetooth: hci3: command tx timeout
[  361.946183] Bluetooth: hci5: command tx timeout
[  362.009153] Bluetooth: hci6: command tx timeout
[  362.137108] Bluetooth: hci7: command tx timeout
[  363.673080] Bluetooth: hci0: command tx timeout
[  363.739046] Bluetooth: hci1: command tx timeout
[  363.865320] Bluetooth: hci2: command tx timeout
[  363.993459] Bluetooth: hci4: command tx timeout
[  363.993528] Bluetooth: hci5: command tx timeout
[  363.994063] Bluetooth: hci3: command tx timeout
[  364.057050] Bluetooth: hci6: command tx timeout
[  364.186287] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
15:14:27  Registers:
info registers vcpu 0
RAX=ffffffff87effe58 RBX=0000000000000000 RCX=ffffffff814f55be RDX=fffffbfff0fdfbdd
RSI=0000000000000008 RDI=ffffffff87efdee0 RBP=ffff8880071eb780 RSP=ffff88803631fa10
R8 =0000000000000000 R9 =fffffbfff0fdfbdc R10=ffffffff87efdee7 R11=0000000000000000
R12=ffff88806ce40390 R13=ffffffff87effe58 R14=0000000000000003 R15=ffff8880071ec1f0
RIP=ffffffff814ff0a3 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fce4b5c9540 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2771f77000 CR3=000000002ea42000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000ffff000000000000000000000000
XMM02=ffffffffffffffff0f0e0d0c0b0a0908 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff85d01f58 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffffffff0ba03eb
RSI=0000000000000000 RDI=ffffffff85d01f58 RBP=ffff888009715340 RSP=ffff888009737998
R8 =0000000000000001 R9 =0000000000000001 R10=ffff888009715d84 R11=0000000000000532
R12=ffffffff85d01f58 R13=0000000000000000 R14=ffffea0000397a40 R15=ffff88800e5e9580
RIP=ffffffff814fec9c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f41b790f1f0 CR3=000000003288e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff00000000000000ff00000000000000
XMM02=0000000000000000ff00000000000000 XMM03=00000000000000000000ff0000000000
XMM04=00ff0000000000000000ff0000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000