Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:42314' (ECDSA) to the list of known hosts.
2025/04/24 02:54:49 fuzzer started
2025/04/24 02:54:49 dialing manager at localhost:37747
syzkaller login: [   95.373258] cgroup: Unknown subsys name 'net'
[   95.516832] cgroup: Unknown subsys name 'cpuset'
[   95.563157] cgroup: Unknown subsys name 'rlimit'
2025/04/24 02:55:04 syscalls: 200
2025/04/24 02:55:04 code coverage: enabled
2025/04/24 02:55:04 comparison tracing: enabled
2025/04/24 02:55:04 extra coverage: enabled
2025/04/24 02:55:04 setuid sandbox: enabled
2025/04/24 02:55:04 namespace sandbox: enabled
2025/04/24 02:55:04 Android sandbox: enabled
2025/04/24 02:55:04 fault injection: enabled
2025/04/24 02:55:04 leak checking: enabled
2025/04/24 02:55:04 net packet injection: enabled
2025/04/24 02:55:04 net device setup: enabled
2025/04/24 02:55:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/24 02:55:04 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/24 02:55:04 USB emulation: enabled
2025/04/24 02:55:04 hci packet injection: enabled
2025/04/24 02:55:04 wifi device emulation: enabled
2025/04/24 02:55:04 802.15.4 emulation: enabled
2025/04/24 02:55:04 fetching corpus: 0, signal 0/0 (executing program)
2025/04/24 02:55:06 starting 8 fuzzer processes
02:55:06 executing program 0:
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0)
ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x1, 0x2, 0x2, 0x5, 0x0, 0xaff0, 0xf1c, 0x2, 0xffffffff, 0x200, 0xffff8001, 0x80000000, 0x3, 0x324e04ba})
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)=0xcd90)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x600002)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000140)={0x1, 0x100, 0x61731e83, 0x7ff, 0x7, 0x7})
r2 = syz_open_dev$hiddev(&(0x7f0000000180), 0x100, 0x40000)
ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000001c0))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
ioctl$HIDIOCGVERSION(r3, 0x80044801, &(0x7f0000000240))
r4 = syz_open_dev$hiddev(&(0x7f0000000280), 0x1, 0x200000)
ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0)
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0)
r5 = socket(0xa, 0x6, 0x80000000)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x840)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f00000003c0)={0xbc, "42e5349ad518b5748d73cf2cc60afb75b02cf8d65bb55421ef77cc2b78d52b685d960b2df01314b82ba51b03cf0687814d3054d3c1cf7c74d1026f83d7a5f5eda8f5d1dd560a578f60a6b054b8154b3004ace6417484bd33cb491a2c1d54cd1257878bb01ce14761b545b262fe50cf230a0d63412b3059118e9a28457ff2b5ad7cb5d24376a1b1738c5536b8894213a9618411b231f3bdeb9011140d3ac80b5a4d516fc92e00e10d8d502e4a3a234c8e0548ead882490b6b00100d80"})
r6 = syz_open_dev$hiddev(&(0x7f0000000480), 0x5, 0x200000)
ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f00000004c0)={0x2, 0xffffffff, 0x7fff})

02:55:06 executing program 1:
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000180)={"26e9dad537180dc688c7230e", &(0x7f0000000000)="6d1ce083cdb0d415e60a597115e5911beb3ff439009b4a4307cad9bdf280b1ff8c9e3c899dc1f6c05e9354c3315dd4f6789baf3d6680edd226498f4c41598524c6987b20a09a8bf3b933dca488a318dc4ced63f84051d1798980c6eb8174748480ec9b1b4b3333fec5329659429cde1685d984e01111bc47eff2f1678489015fa031be450387af4fc53b878d4bfff44395d9488c88c949c7de9aaf8f11e92d9ef2b142af1d3b2478f93b97ec2708bd8958ea30e34b6a52993c9ff9a0fd792e5f385f1f", 0xc3, 0x5, &(0x7f0000000100)={0x3, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, "ace851b1", 0x2, "7c1e48ca", 0x1f, 0x9, 0x9e, "25b988", "cf80677766376b18342eb591d01550ac664cc996d4b501ffbedf87589a9863d90781e7a4fc5993d5b87c45da2278"}, 0x1, 0x8, 0x9, &(0x7f0000000140)})
ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x1)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000001c0)={0x3f, 0xa, 0x0, 0x0, @msf={0x2, 0x3, 0x1f}, 0x3c})
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x8900, 0x0)
ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0x3ff)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0)
ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000280)={0x9, 0x2})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x115e83, 0x0)
ioctl$CDROMCLOSETRAY(r2, 0x5319)
ioctl$CDROMEJECT_SW(r0, 0x530f, 0x0)
ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f0000000300)={0x800, 0x1})
ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0)
ioctl$CDROMSTART(r1, 0x5308)
ioctl$CDROMREADCOOKED(r2, 0x5315, &(0x7f0000000340))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0)
ioctl$CDROMVOLCTRL(r3, 0x530a, &(0x7f0000000e00)={0x40, 0x0, 0xd9, 0x1})
ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000e40)={0x3, 0x3, 0x1, 0x0, 0x1, 0x9})
ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f00000018c0)={0x3f, 0xdb})
ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x2)

02:55:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0xc0)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000380)=""/1)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0)
sendmsg$FOU_CMD_DEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c0}, 0x880)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x7, 0x0, @udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x44094}, 0x4)
ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x800)
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000600)={0x3, 0x1, 0x80000000})
r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x18100, 0x0)
ioctl$CDROMPLAYBLK(r5, 0x5317, &(0x7f0000000680)={0x3, 0xffff})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r2)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x200080c0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x2002, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x54)

02:55:06 executing program 2:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x6681, 0x0)
ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000040))
ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000080)={0x1, 0x37, 0xd, 0x4, 0x7, 0x7f, @lba=0xfffffff9, @msf={0x8, 0x7, 0x1f}})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x120, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x810)
ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x113)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x14)
ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x2)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x48501, 0x0)
ioctl$CDROMRESUME(r3, 0x5302)
ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0xe)
ioctl$CDROMPLAYBLK(r3, 0x5317, &(0x7f0000000380)={0xc2, 0x1ff})
ioctl$CDROMPAUSE(r0, 0x5301)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x200900, 0x0)
ioctl$CDROMREADALL(r4, 0x5318, &(0x7f0000000400))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000005)
r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001040), 0x10542, 0x0)
ioctl$CDROM_MEDIA_CHANGED(r6, 0x5325, 0x7)

[  111.695655] audit: type=1400 audit(1745463306.200:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:55:06 executing program 4:
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000000)={0xff, 0x0, 0x9, 0x9})
ioctl$CDROMPAUSE(0xffffffffffffffff, 0x5301)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0xe, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20040044)
ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000180))
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48001)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000e00)={"75efa6a9805e80abb6c39721", &(0x7f0000000d40)="891d4a1381", 0x5, 0x0, &(0x7f0000000d80)={0x5, 0x1, 0x20, 0x2, 0x0, 0x0, 0x0, "810d9c63", 0x3, "87ddfe01", 0xed, 0xfa, 0xfb, "3b93ce", "fe4326e80d9013a7f4c8f34cf071fc1d78b643cc3f439f35fcc1050c21a451ec9c207c6957d8bb581352533f28b0"}, 0x2, 0xe2af, 0x921, &(0x7f0000000dc0)})
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000e40), 0x80400, 0x0)
ioctl$CDROM_SELECT_DISK(r2, 0x5322, 0x1000)
ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f0000000e80))
ioctl$CDROMREADCOOKED(r2, 0x5315, &(0x7f0000001900))
ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000002380)={@msf={0x4, 0x6}, 0x1, 0x2})
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, r0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c815}, 0x846)
ioctl$CDROMSTART(r3, 0x5308)
ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000002500))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x30, r0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x20000004)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x342490}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x3c, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x24000404)

02:55:06 executing program 5:
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8800)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket(0xa, 0xa, 0x8000)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@dev, @local, <r3=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048040)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x204c82}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x9b15613e207744f4, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000)
socketpair(0x29, 0x2, 0x8, &(0x7f0000000500)={<r4=>0xffffffffffffffff})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x22004500}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socketpair(0x23, 0x4, 0x6, &(0x7f0000000640)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r4)
sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r6, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7c00}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x40000000)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00'})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20004014)
ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000b00))

02:55:06 executing program 6:
ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x209, 0x5, 0x400, 0x6})
r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x20, 0x100)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x7fffffff)
ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000100))
ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000140)={0x2, 0x100})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0)
ioctl$CDROM_GET_CAPABILITY(r3, 0x5331)
ioctl$CDROMVOLREAD(r3, 0x5313, &(0x7f00000001c0))
ioctl$CDROMCLOSETRAY(r3, 0x5319)
ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000200))
ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f0000000240)={0x20, 0x0, 0x8, 0x2, @msf={0xee, 0x3c, 0x7f}, 0x9})
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000280)={0x20, 0x2, 0x8})
r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0xdcc, 0x345840)
ioctl$HIDIOCGNAME(r4, 0x80404806, &(0x7f0000000300))
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$CDROMEJECT_SW(r3, 0x530f, 0x0)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4090)

02:55:06 executing program 7:
ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307)
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000080)={@msf={0x4b, 0x4, 0xa3}, 0x3, 0x41, &(0x7f0000000000)=""/65})
ioctl$CDROM_MEDIA_CHANGED(0xffffffffffffffff, 0x5325, 0x9)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x50)
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
ioctl$DVD_WRITE_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f00000001c0)=@copyright={0x1, 0x1, 0x1f, 0x5})
ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000a00)={0x8})
ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, &(0x7f0000000a40)={0xf1, 0xff})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
r2 = socket(0xa, 0x2, 0x5)
r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000bc0), 0x10000, 0x0)
ioctl$CDROM_CLEAR_OPTIONS(r3, 0x5321, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x70, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x24004010)
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000d40)={0x3, 0x0, 0x3ff})
ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000d80)=@lsc={0x3, 0x0, "c71cd577440f19a5b67a"})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r2)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r4, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x400c054)

[  113.145226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.150229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.152551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.161908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.165847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.222598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.227414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.233472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.270629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.273498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.279585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  113.286541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.289376] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  113.294581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  113.296610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  113.298584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  113.300405] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  113.306072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  113.308848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  113.313460] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  113.315738] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.320585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  113.321014] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.323882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  113.324745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.333414] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.337019] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.338550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  113.343810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  113.349646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  113.356440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  113.358548] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  113.369730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  113.374612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  113.382715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.389541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  113.392765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.395728] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  113.468445] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.472817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.228042] Bluetooth: hci0: command tx timeout
[  115.355013] Bluetooth: hci1: command tx timeout
[  115.418544] Bluetooth: hci2: command tx timeout
[  115.420219] Bluetooth: hci7: command tx timeout
[  115.482417] Bluetooth: hci4: command tx timeout
[  115.484305] Bluetooth: hci6: command tx timeout
[  115.485437] Bluetooth: hci5: command tx timeout
[  115.546250] Bluetooth: hci3: command tx timeout
[  117.275496] Bluetooth: hci0: command tx timeout
[  117.402388] Bluetooth: hci1: command tx timeout
[  117.467694] Bluetooth: hci2: command tx timeout
[  117.468524] Bluetooth: hci7: command tx timeout
[  117.531640] Bluetooth: hci5: command tx timeout
[  117.532505] Bluetooth: hci6: command tx timeout
[  117.532596] Bluetooth: hci4: command tx timeout
[  117.595143] Bluetooth: hci3: command tx timeout
[  119.322268] Bluetooth: hci0: command tx timeout
[  119.450518] Bluetooth: hci1: command tx timeout
[  119.515149] Bluetooth: hci7: command tx timeout
[  119.515644] Bluetooth: hci2: command tx timeout
[  119.578178] Bluetooth: hci5: command tx timeout
[  119.578680] Bluetooth: hci4: command tx timeout
[  119.579125] Bluetooth: hci6: command tx timeout
[  119.642441] Bluetooth: hci3: command tx timeout
[  121.370814] Bluetooth: hci0: command tx timeout
[  121.498295] Bluetooth: hci1: command tx timeout
[  121.562668] Bluetooth: hci2: command tx timeout
[  121.563318] Bluetooth: hci7: command tx timeout
[  121.626309] Bluetooth: hci4: command tx timeout
[  121.627863] Bluetooth: hci6: command tx timeout
[  121.627916] Bluetooth: hci5: command tx timeout
[  121.690242] Bluetooth: hci3: command tx timeout
[  175.669520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.674288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.676668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.681503] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.683194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.686773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.701569] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.704422] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.718665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.720833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.724015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.728606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.742522] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.751502] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.754907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.008181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  176.012602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  176.023619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  176.032385] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  176.037404] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.045492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  176.061022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  176.062989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  176.068928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  176.070436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  176.082237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  176.084421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  176.093751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  176.098116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  176.100529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  176.101730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  176.106970] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  176.131427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  176.149346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  176.155902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  176.162452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  176.173787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  176.207642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  176.208824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  176.218606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.754488] Bluetooth: hci0: command tx timeout
[  177.818789] Bluetooth: hci2: command tx timeout
[  177.819756] Bluetooth: hci1: command tx timeout
[  178.204187] Bluetooth: hci7: command tx timeout
[  178.205058] Bluetooth: hci4: command tx timeout
[  178.205141] Bluetooth: hci3: command tx timeout
[  178.268213] Bluetooth: hci5: command tx timeout
[  178.395177] Bluetooth: hci6: command tx timeout
[  179.802155] Bluetooth: hci0: command tx timeout
[  179.868773] Bluetooth: hci2: command tx timeout
[  179.868841] Bluetooth: hci1: command tx timeout
[  180.250272] Bluetooth: hci3: command tx timeout
[  180.251377] Bluetooth: hci7: command tx timeout
[  180.251591] Bluetooth: hci4: command tx timeout
[  180.315183] Bluetooth: hci5: command tx timeout
[  180.442293] Bluetooth: hci6: command tx timeout
[  181.850181] Bluetooth: hci0: command tx timeout
[  181.914386] Bluetooth: hci2: command tx timeout
[  181.914462] Bluetooth: hci1: command tx timeout
[  182.298183] Bluetooth: hci7: command tx timeout
[  182.298316] Bluetooth: hci3: command tx timeout
[  182.299159] Bluetooth: hci4: command tx timeout
[  182.362225] Bluetooth: hci5: command tx timeout
[  182.490166] Bluetooth: hci6: command tx timeout
[  183.898439] Bluetooth: hci0: command tx timeout
[  183.962358] Bluetooth: hci1: command tx timeout
[  183.962792] Bluetooth: hci2: command tx timeout
[  184.347152] Bluetooth: hci7: command tx timeout
[  184.347375] Bluetooth: hci4: command tx timeout
[  184.347615] Bluetooth: hci3: command tx timeout
[  184.412122] Bluetooth: hci5: command tx timeout
[  184.538151] Bluetooth: hci6: command tx timeout
[  237.929726] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  237.933097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.935228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.943656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.946056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.020255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  238.025869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  238.032681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  238.046614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  238.050568] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  238.056148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  238.062847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  238.065907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  238.085933] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  238.090290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  238.092918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  238.095960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  238.104504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  238.114928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  238.117337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.199368] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  238.211271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.219402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.228297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  238.238782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  238.238776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.262417] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  238.265368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  238.266462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.283822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  238.299532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  238.319467] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.327474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  238.374666] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  238.377149] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  238.555368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  238.557959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  238.560052] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  238.566362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  238.578804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.028437] Bluetooth: hci0: command tx timeout
[  240.218481] Bluetooth: hci1: command tx timeout
[  240.219477] Bluetooth: hci3: command tx timeout
[  240.220051] Bluetooth: hci2: command tx timeout
[  240.346189] Bluetooth: hci4: command tx timeout
[  240.410295] Bluetooth: hci7: command tx timeout
[  240.410995] Bluetooth: hci5: command tx timeout
[  240.602160] Bluetooth: hci6: command tx timeout
[  242.074308] Bluetooth: hci0: command tx timeout
[  242.266806] Bluetooth: hci2: command tx timeout
[  242.267326] Bluetooth: hci3: command tx timeout
[  242.267752] Bluetooth: hci1: command tx timeout
[  242.394491] Bluetooth: hci4: command tx timeout
[  242.458405] Bluetooth: hci7: command tx timeout
[  242.458865] Bluetooth: hci5: command tx timeout
[  242.651442] Bluetooth: hci6: command tx timeout
[  244.122546] Bluetooth: hci0: command tx timeout
[  244.314212] Bluetooth: hci1: command tx timeout
[  244.314707] Bluetooth: hci3: command tx timeout
[  244.315909] Bluetooth: hci2: command tx timeout
[  244.442385] Bluetooth: hci4: command tx timeout
[  244.506267] Bluetooth: hci7: command tx timeout
[  244.506744] Bluetooth: hci5: command tx timeout
[  244.698362] Bluetooth: hci6: command tx timeout
[  246.171341] Bluetooth: hci0: command tx timeout
[  246.362791] Bluetooth: hci2: command tx timeout
[  246.363516] Bluetooth: hci3: command tx timeout
[  246.363953] Bluetooth: hci1: command tx timeout
[  246.490170] Bluetooth: hci4: command tx timeout
[  246.554232] Bluetooth: hci5: command tx timeout
[  246.554702] Bluetooth: hci7: command tx timeout
[  246.746279] Bluetooth: hci6: command tx timeout
[  300.334800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.340845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.344292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.356654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.360868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.480365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.486058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.490584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.498554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.502700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.531343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.540883] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.544213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.581405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.590599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.612311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  300.659151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  300.664842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  300.670025] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  300.670177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  300.672968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  300.675545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  300.682632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  300.687287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  300.690032] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  300.692396] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  300.700559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  300.708756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.735578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  300.759318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  300.765242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  300.781154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  300.804532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  300.811574] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  300.818825] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  300.828108] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  300.831388] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  300.874700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  300.916989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  300.928589] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  302.426256] Bluetooth: hci0: command tx timeout
[  302.618173] Bluetooth: hci1: command tx timeout
[  302.684121] Bluetooth: hci2: command tx timeout
[  302.746224] Bluetooth: hci4: command tx timeout
[  302.810164] Bluetooth: hci5: command tx timeout
[  302.875315] Bluetooth: hci3: command tx timeout
[  303.002176] Bluetooth: hci7: command tx timeout
[  303.002939] Bluetooth: hci6: command tx timeout
[  304.474745] Bluetooth: hci0: command tx timeout
[  304.668138] Bluetooth: hci1: command tx timeout
[  304.730202] Bluetooth: hci2: command tx timeout
[  304.794319] Bluetooth: hci4: command tx timeout
[  304.858445] Bluetooth: hci5: command tx timeout
[  304.922243] Bluetooth: hci3: command tx timeout
[  305.051153] Bluetooth: hci6: command tx timeout
[  305.051857] Bluetooth: hci7: command tx timeout
[  306.522138] Bluetooth: hci0: command tx timeout
[  306.714139] Bluetooth: hci1: command tx timeout
[  306.778278] Bluetooth: hci2: command tx timeout
[  306.842358] Bluetooth: hci4: command tx timeout
[  306.906448] Bluetooth: hci5: command tx timeout
[  306.970371] Bluetooth: hci3: command tx timeout
[  307.098160] Bluetooth: hci6: command tx timeout
[  307.098448] Bluetooth: hci7: command tx timeout
[  308.570161] Bluetooth: hci0: command tx timeout
[  308.762340] Bluetooth: hci1: command tx timeout
[  308.826165] Bluetooth: hci2: command tx timeout
[  308.890254] Bluetooth: hci4: command tx timeout
[  308.954138] Bluetooth: hci5: command tx timeout
[  309.018269] Bluetooth: hci3: command tx timeout
[  309.146200] Bluetooth: hci6: command tx timeout
[  309.147265] Bluetooth: hci7: command tx timeout
[  362.744395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  362.756886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  362.764018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  362.775725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  362.781068] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  362.989375] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  362.994312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  362.997568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  363.005060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  363.010839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  363.178048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  363.189683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  363.196624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  363.218130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  363.221467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  363.224901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  363.229700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  363.244264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  363.247821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  363.251970] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  363.306051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  363.338728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.343754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  363.350819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.355717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.378845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  363.409795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  363.423939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  363.424951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  363.460601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  363.461497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  363.462884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.475911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  363.481641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  363.486647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  363.492872] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  363.500163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.502330] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  363.507600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.524607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.826254] Bluetooth: hci0: command tx timeout
[  365.083172] Bluetooth: hci1: command tx timeout
[  365.339176] Bluetooth: hci2: command tx timeout
[  365.403149] Bluetooth: hci3: command tx timeout
[  365.594167] Bluetooth: hci6: command tx timeout
[  365.658903] Bluetooth: hci7: command tx timeout
[  365.789184] Bluetooth: hci5: command tx timeout
[  365.978198] Bluetooth: hci4: command tx timeout
[  366.875173] Bluetooth: hci0: command tx timeout
[  367.130178] Bluetooth: hci1: command tx timeout
[  367.387304] Bluetooth: hci2: command tx timeout
[  367.450184] Bluetooth: hci3: command tx timeout
[  367.642149] Bluetooth: hci6: command tx timeout
[  367.708289] Bluetooth: hci7: command tx timeout
[  367.834491] Bluetooth: hci5: command tx timeout
[  368.026391] Bluetooth: hci4: command tx timeout
[  368.922143] Bluetooth: hci0: command tx timeout
[  369.179106] Bluetooth: hci1: command tx timeout
[  369.437097] Bluetooth: hci2: command tx timeout
[  369.499138] Bluetooth: hci3: command tx timeout
[  369.690146] Bluetooth: hci6: command tx timeout
[  369.754266] Bluetooth: hci7: command tx timeout
[  369.884133] Bluetooth: hci5: command tx timeout
[  370.074362] Bluetooth: hci4: command tx timeout
[  370.971174] Bluetooth: hci0: command tx timeout
[  371.226206] Bluetooth: hci1: command tx timeout
[  371.482233] Bluetooth: hci2: command tx timeout
[  371.546296] Bluetooth: hci3: command tx timeout
[  371.738223] Bluetooth: hci6: command tx timeout
[  371.802698] Bluetooth: hci7: command tx timeout
[  371.930223] Bluetooth: hci5: command tx timeout
[  372.123448] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
03:00:08  Registers:
info registers vcpu 0
RAX=ffffffff87a225c8 RBX=ffff88800fa2b780 RCX=0000000000000200 RDX=f83118ee9175ffc2
RSI=ffff88800fa2c200 RDI=ffff88800fa2c200 RBP=0000000000000000 RSP=ffff88802b0ff648
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=ffff88800fa2c200 R13=0000000000000000 R14=0000000000000001 R15=ffff88800fa2c1d8
RIP=ffffffff81516929 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564e000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f409b73a6f4 CR3=000000002b728000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f409b74947000007f409b748f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000080000000 RBX=dffffc0000000000 RCX=ffffffff818c3883 RDX=0000000000000000
RSI=000000000000003f RDI=0000000000000001 RBP=ffff88800c1fb9c0 RSP=ffff888025597590
R8 =0000000000000000 R9 =fffff940000396f8 R10=0000000000000000 R11=0000000000000000
R12=ffff8880255978a8 R13=0000000000000000 R14=ffff8880255975d8 R15=0000000000000000
RIP=ffffffff8172e69a RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574e000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f670a2051f0 CR3=0000000029b88000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000