Warning: Permanently added '[localhost]:29317' (ECDSA) to the list of known hosts.
2025/04/24 05:33:05 fuzzer started
2025/04/24 05:33:05 dialing manager at localhost:37747
syzkaller login: [  106.421717] cgroup: Unknown subsys name 'net'
[  106.568810] cgroup: Unknown subsys name 'cpuset'
[  106.609505] cgroup: Unknown subsys name 'rlimit'
2025/04/24 05:33:28 syscalls: 200
2025/04/24 05:33:28 code coverage: enabled
2025/04/24 05:33:28 comparison tracing: enabled
2025/04/24 05:33:28 extra coverage: enabled
2025/04/24 05:33:28 setuid sandbox: enabled
2025/04/24 05:33:28 namespace sandbox: enabled
2025/04/24 05:33:28 Android sandbox: enabled
2025/04/24 05:33:28 fault injection: enabled
2025/04/24 05:33:28 leak checking: enabled
2025/04/24 05:33:28 net packet injection: enabled
2025/04/24 05:33:28 net device setup: enabled
2025/04/24 05:33:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/24 05:33:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/24 05:33:28 USB emulation: enabled
2025/04/24 05:33:28 hci packet injection: enabled
2025/04/24 05:33:28 wifi device emulation: enabled
2025/04/24 05:33:28 802.15.4 emulation: enabled
2025/04/24 05:33:28 fetching corpus: 0, signal 0/0 (executing program)
2025/04/24 05:33:31 starting 8 fuzzer processes
05:33:31 executing program 0:
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, @in_args={0x2}}, './file0\x00'})
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/145)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/252)
write$eventfd(r0, &(0x7f0000000200), 0x8)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000240)=""/181)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{<r1=>0x0, 0x8, 0x8, 0x81, 0x2, 0x10001, 0x6, 0x6, 0xfffff01d, 0x14d, 0x4, 0x4, 0x7fffffff, 0xa, 0x28c}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={r1, 0x1})
r2 = syz_open_dev$evdev(&(0x7f00000013c0), 0xfffffffffffffff7, 0x204000)
ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000001400)=""/79)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001480)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000014c0)={{0x1, 0x1, 0x18, <r4=>r2, @in_args={0x4}}, './file0\x00'})
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000001600)={0x1f, 0xec, &(0x7f0000001500)="7b32b32dad6cdf5cd5de5e027570559dd420a4f3f5542abc8ca04fb2ed68ca62821bdf6fca297c095ca1eaaa3b0ce0f56b589d9224cbbaa1d419ba185940db8e127bd2cd925980e3b6cb76a723c18e77683abd7f2691525e5c572e776d8f69f9d444686819a2455db0788de1489f971eeafd6245d9b7c46d712286f2d3c80cb6c05272caad5c7119807d9098a538148b942fbef88156afd2617af303df7de3a079b099b3e2620fcaabd2c07dfd1c7117a213acc3c211698e75b893f3f45ba4bc14f1c78db37b66d66604c601608e27b245393c1807ef54a8284dc2853552f0f6091eeae1922680dea26638eb"})
write$P9_RAUTH(r4, &(0x7f0000001640)={0x14, 0x67, 0x2, {0x4, 0x2, 0x1}}, 0x14)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000001680)={0x8, 0x4, 0x6, 0x6, 0x5, 0x7ff})
r5 = syz_mount_image$iso9660(&(0x7f00000016c0), &(0x7f0000001700)='./file0\x00', 0x5, 0x0, &(0x7f0000001740), 0x40000, &(0x7f0000001780)={[{@hide}, {@map_off}, {@check_strict}, {@map_normal}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x1}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/event#\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/input/event#\x00'}}, {@subj_type={'subj_type', 0x3d, '}/.'}}, {@dont_appraise}]})
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001880))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000018c0))
write$binfmt_script(r2, &(0x7f0000001900)={'#! ', './file0', [{0x20, 'check=strict'}, {0x20, '-\':\\@\'-[.)'}, {0x20, '/!\x99\xe8@^@*\x00'}, {0x20, 'map=off'}, {0x20, 'dont_appraise'}], 0xa, "f837090b331872d4c27fc9d5e4b622419b42686587b92b8f37837f5e9dd01b69a9b2dd"}, 0x66)

05:33:31 executing program 1:
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000))
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000040)={0xa2, 0x7, 0x9, 0x7f, 0x6, 0x1})
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000080)={0x3, 0x400, 0x0, 0x7fffffff, 0x6, 0x8})
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000000c0)=0x6)
write$snapshot(0xffffffffffffffff, &(0x7f0000000100)="495c764f4494531bee3c1b3ab97f836176a1207600cab9a47a951352b504987749b1ba3120f6891649115c9f8c4f7fb3c99a0e719b6e62d13e3a01ac062e64abb003dab4c230fb9932cacf8f6967ad836ae9f2a964b2", 0x56)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000001c0)={0x1, 0x4, 0x5, 0x7, 0x3, 0x7})
socket$inet6(0xa, 0x0, 0x7ff)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304)
recvmsg$unix(r0, &(0x7f0000000680)={&(0x7f0000000200), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/171, 0xab}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000480)=""/246, 0xf6}], 0x4, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x142)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r5=>r4, @in_args={0x4}}, './file0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000740)={0x0, 0x6})
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001740), 0x4aa100, 0x0)
ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000001780)=""/4096)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002780)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, @in_args={0x4}}, './file0\x00'})
ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000027c0)=""/13)
recvmsg$unix(r2, &(0x7f0000003140)={&(0x7f0000002800), 0x6e, &(0x7f0000003000)=[{&(0x7f0000002880)=""/219, 0xdb}, {&(0x7f0000002980)=""/23, 0x17}, {&(0x7f00000029c0)=""/211, 0xd3}, {&(0x7f0000002ac0)=""/126, 0x7e}, {&(0x7f0000002b40)=""/193, 0xc1}, {&(0x7f0000002c40)=""/191, 0xbf}, {&(0x7f0000002d00)=""/161, 0xa1}, {&(0x7f0000002dc0)=""/215, 0xd7}, {&(0x7f0000002ec0)=""/87, 0x57}, {&(0x7f0000002f40)=""/135, 0x87}], 0xa, &(0x7f00000030c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x58}, 0x20)
ioctl$EVIOCGBITKEY(r8, 0x80404521, &(0x7f0000003180)=""/23)

05:33:31 executing program 2:
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="f6d3498e9a9a1a0730477f95b2a35215849faf52e0eb59f5f5f96a6d408b1550159787ec8c953d77c2a67a9fe5f250ab0357487d31aed076d56eedec87a02be3eb6bd031be145971d777c3de48268623200d11fb57151c41625f8fd2fd28c4")
r0 = inotify_init()
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080))
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280))
socket$netlink(0x10, 0x3, 0x14)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
ioctl$sock_ifreq(r1, 0x8935, &(0x7f0000000300)={'wlan1\x00', @ifru_addrs=@sco={0x1f, @none}})
inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380))
r2 = io_uring_setup(0x698a, &(0x7f00000003c0)={0x0, 0xb980, 0x20, 0x3, 0x2de})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)=""/226, 0xe2}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x22)
semget$private(0x0, 0x1, 0x200)
write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [{0x20, '/dev/vcsu\x00'}, {}, {0x20, '/dev/vcsu\x00'}], 0xa, "db362f594b917a525fedfb7542f389d1c542603498d3c39308514076b6dc077a93ae29c572192ad8026265689b7d898a4e9a0851d472478d99f93081d4775b9059e7a84d0fcdd06a1c95a0757d230ab24b698f62e9cbbcc86d3dd92ad5509ef45618ca3c1651af0dd6cd44f1c2825e"}, 0x91)
openat$cgroup_freezer_state(r7, &(0x7f00000007c0), 0x2, 0x0)
inotify_init1(0x40800)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4010, r1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r8, 0x0, &(0x7f0000000880)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r1, r2, r5, r6, r9, r7], 0x6, 0x0, 0x1}, 0x8)
accept$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs, &(0x7f0000000980)=0x6e)

05:33:31 executing program 3:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/164)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b0183, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000100)=""/85)
socketpair(0x26, 0x2, 0x2, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ifreq(r2, 0x891b, &(0x7f00000001c0)={'macvlan1\x00', @ifru_mtu})
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x401)
recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000280), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)=""/114, 0x72}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/193, 0xc1}], 0x3, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$SNAPSHOT_FREE(r9, 0x3305)
ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000740)=""/53)
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0)
ioctl$EVIOCGVERSION(r11, 0x80044501, &(0x7f00000007c0)=""/44)
ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82)
lremovexattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=@random={'btrfs.', '&{!]\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000880)={{0x1, 0x1, 0x18, r6, @in_args={0x1}}, './file0\x00'})
recvmsg(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f00000009c0)=""/89, 0x59}, {&(0x7f0000000a40)=""/192, 0xc0}, {&(0x7f0000000b00)=""/218, 0xda}], 0x4, &(0x7f0000000c40)=""/184, 0xb8}, 0x0)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000d40)={0x53, 0x2, 0x5, {0xff, 0x800}, {0x522c, 0x200}, @cond=[{0x8c, 0x9, 0x0, 0x9, 0x8, 0x590}, {0xffff, 0x0, 0x7, 0x6, 0x200, 0x5745}]})

05:33:31 executing program 4:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/198)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000240)={0x5, 0xf7, &(0x7f0000000140)="8dc38daceb3accff7a528f270aeb73d04b9d169c76a1d5d5bd6e0e9426da826495b899d9e447d38a02a0bf20cf1f4b11136af7f333c41b9a998acb87f8ce41aebd01e7739763756a272c18a9ae7f205cfb6205cc8596ae769b600d66b401f278621e780be8485b0ae4adcdc862f6a588639b30049c77fc8fd18b4ed6fec001106d90deb732e749f2be3bd75cac940e477fbd2e35f0d66dc9cab8ac20dc362f5f0fb802f5c7b9de8dd445053553145821b7f1fc5d9e80dd9ef5b8b5b9c3ab8bab7758b44c92bdb5a861dea47db264ff4114c4397bbc3fb2a413f74c59f8f7c81500ef35f26327a62518c1480ac532a2cc9fc60a569b0684"})
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000280)={0x3, 0x800, 0x7fffffff, 0x200, 0x6, 0x3ff})
recvmsg$unix(r0, &(0x7f0000001780)={&(0x7f00000002c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000340)}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/26, 0x1a}, {&(0x7f0000001480)=""/241, 0xf1}, {&(0x7f0000001580)=""/162, 0xa2}, {&(0x7f0000001640)=""/21, 0x15}], 0x8, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r1=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40000000)
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f00000017c0)=""/97)
r5 = syz_open_dev$evdev(&(0x7f0000001840), 0x0, 0x480300)
ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000001880)=""/56)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001, 0x0)
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000001900)={0x3f, 0x69, 0xff, 0xf0e9, 0x1000, 0x4})
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000001940)=[0x4, 0x9])
recvmsg$unix(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001980)=""/254, 0xfe}, {&(0x7f0000001a80)=""/6, 0x6}], 0x2, &(0x7f0000001b00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0, <r9=>0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0)
ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000001c00)=""/236)
semctl$GETPID(0xffffffffffffffff, 0x3, 0xb, &(0x7f0000001d00)=""/198)
r10 = getuid()
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001e00)={{0x2, r8, r9, r10, r1, 0x80, 0xfffe}, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7})
r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001e80), 0x400400, 0x0)
ioctl$EVIOCGKEYCODE_V2(r11, 0x80284504, &(0x7f0000001ec0)=""/244)
ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000001fc0)={0x41, 0x8, 0x800, 0x7ff, 0x10001, 0x101})
ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000002000)={0x4, 0x4000, 0x20, 0x2, 0xe64, 0x1})

[  131.676470] audit: type=1400 audit(1745472811.205:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:33:31 executing program 5:
r0 = eventfd(0x4)
read$eventfd(r0, &(0x7f00000005c0), 0x8)
r1 = eventfd2(0x3ff, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000600)=r0, 0x1)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0xf, 0x1, {{0x40, 0x3, 0x6}, 0x6}}, 0x18)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000680)={0x18, 0xf, 0x2, {{0x10, 0x2, 0x4}, 0x8}}, 0x18)
r2 = eventfd(0xb967)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000006c0)=r2, 0x1)
r3 = io_uring_setup(0x68dc, &(0x7f0000000700)={0x0, 0x8692, 0x2, 0x1, 0x20b})
socket$netlink(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780))
r4 = inotify_init()
inotify_rm_watch(r4, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@initdev}}, {{@in6=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000a80)=0xe8)
r6 = eventfd2(0x6, 0x801)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000ac0)=r6, 0x1)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r7, &(0x7f0000000b40), 0x2, 0x0)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000c00)={0x3, 0x1c, &(0x7f0000000bc0)="4bc30808a963015f444dd686036f8e18c823b041114f1be4f5e9b329"})

05:33:31 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x914b959420032551, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24048081)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x80)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x66}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3d}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x44}}, 0x2000c000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan1\x00'})
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40017)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0x40)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x404005c)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r6, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44841}, 0x4080)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0xc010)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

05:33:31 executing program 7:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000180))
r1 = socket$inet6(0xa, 0x80000, 0x8)
getsockname(r1, &(0x7f0000000240)=@in={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x80)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000300)={0x4, 0x1, 'client1\x00', 0x1, "2442b70ddd8cdab0", "aea4394347c4ea0bc6a402befad3dda2882b32a925b0f604da0e77f241adae46", 0x7, 0xfffffff7})
recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/212, 0xd4}], 0x1, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x20}, 0x40000100)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000600)=""/4096)
write$P9_RREADDIR(r3, &(0x7f0000001600)={0x68, 0x29, 0x2, {0x5, [{{0x4, 0x0, 0x4}, 0x0, 0x3, 0x7, './file0'}, {{0x20, 0x0, 0x1}, 0x6, 0x80, 0x7, './file0'}, {{0x8, 0x4, 0x1}, 0x6, 0x6, 0x7, './file0'}]}}, 0x68)
readlinkat(r4, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)=""/152, 0x98)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000001780)=""/152)
mkdir(&(0x7f0000001840)='./file0\x00', 0xa3)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000001880)={0x3, 0x5d9bd34336c916df, 'client0\x00', 0x2, "929ba309bdcc4ffc", "76fafd65a280a48c965b9ec7cb50234fad12a7dd1b607fce99f27608563b34e5", 0x4, 0x3ff})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001940), 0x20800)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000001980))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000001a40)={0x1, 0x2, 'client1\x00', 0x4, "9fe3c94d72d9d878", "16dbd8bf34f4615b71891dc9ae15c0d44fe3f089fb9d4dd446bd7c5bc7ea4758", 0x10000, 0x7fff})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000001b00))
pipe2$9p(&(0x7f0000001bc0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000001c00))
write$binfmt_script(r1, &(0x7f0000001e00)={'#! ', './file0', [{0x20, 'client1\x00'}, {0x20, ','}], 0xa, "2029b71cfb0c3c2c1e3875177e7606ef606c38ca9c46e090ce27986a3ba95258f4ddabf251409c4e9645ac8a9441c7d9d3100210e416b8c06318c1c0bcc3627aa02f2ce3c18879a92352fe762ff4ecd2f5196fc801746bbd6bb94d31e875e5a4da47d4295338e67f6abc37393541969df4bc644c205064b22701cf69b338"}, 0x94)

[  133.462798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  133.470573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  133.477644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  133.480673] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.488766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.498176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.502343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.504465] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  133.506935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.509476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  133.517621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.519145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  133.521229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  133.530424] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  133.534214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.540614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.545777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.567293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  133.578681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  133.578880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  133.626758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  133.637977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  133.645932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  133.649450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  133.654817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  133.665814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  133.680178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  133.700890] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  133.713629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  133.717587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  133.727843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  133.736381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  133.741071] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  133.747786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  133.750890] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  133.763563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  133.779969] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  133.782449] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.788123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  133.807723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  135.585449] Bluetooth: hci0: command tx timeout
[  135.648392] Bluetooth: hci2: command tx timeout
[  135.712170] Bluetooth: hci1: command tx timeout
[  135.712824] Bluetooth: hci3: command tx timeout
[  135.840146] Bluetooth: hci5: command tx timeout
[  135.904136] Bluetooth: hci4: command tx timeout
[  135.904786] Bluetooth: hci7: command tx timeout
[  135.968117] Bluetooth: hci6: command tx timeout
[  137.633149] Bluetooth: hci0: command tx timeout
[  137.697195] Bluetooth: hci2: command tx timeout
[  137.761530] Bluetooth: hci3: command tx timeout
[  137.761967] Bluetooth: hci1: command tx timeout
[  137.889396] Bluetooth: hci5: command tx timeout
[  137.953578] Bluetooth: hci7: command tx timeout
[  137.954267] Bluetooth: hci4: command tx timeout
[  138.016111] Bluetooth: hci6: command tx timeout
[  139.680103] Bluetooth: hci0: command tx timeout
[  139.745094] Bluetooth: hci2: command tx timeout
[  139.810085] Bluetooth: hci1: command tx timeout
[  139.810523] Bluetooth: hci3: command tx timeout
[  139.937095] Bluetooth: hci5: command tx timeout
[  140.001537] Bluetooth: hci7: command tx timeout
[  140.001977] Bluetooth: hci4: command tx timeout
[  140.065116] Bluetooth: hci6: command tx timeout
[  141.728492] Bluetooth: hci0: command tx timeout
[  141.793118] Bluetooth: hci2: command tx timeout
[  141.857137] Bluetooth: hci3: command tx timeout
[  141.857698] Bluetooth: hci1: command tx timeout
[  141.984160] Bluetooth: hci5: command tx timeout
[  142.048927] Bluetooth: hci4: command tx timeout
[  142.050294] Bluetooth: hci7: command tx timeout
[  142.112396] Bluetooth: hci6: command tx timeout
[  193.174323] syz-executor.6 (288) used greatest stack depth: 24504 bytes left
[  195.762807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.766275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.769151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.775229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.782586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.846479] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  195.851495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  195.854902] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  195.861471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  195.866416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  195.960409] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  195.973201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  195.976665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  195.986600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  195.994543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  195.998055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  195.999754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  196.001712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  196.004995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.007389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  196.014651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.017858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  196.019689] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  196.021399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.023927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  196.029437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.031645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  196.034417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.041304] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  196.043948] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.047758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.050930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.051171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  196.053379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.055928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  196.060719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.075556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.081062] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.087950] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.093838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  197.856575] Bluetooth: hci0: command tx timeout
[  197.922240] Bluetooth: hci1: command tx timeout
[  198.112319] Bluetooth: hci3: command tx timeout
[  198.176194] Bluetooth: hci5: command tx timeout
[  198.176249] Bluetooth: hci6: command tx timeout
[  198.177316] Bluetooth: hci4: command tx timeout
[  198.178205] Bluetooth: hci7: command tx timeout
[  198.178736] Bluetooth: hci2: command tx timeout
[  199.904460] Bluetooth: hci0: command tx timeout
[  199.969143] Bluetooth: hci1: command tx timeout
[  200.161629] Bluetooth: hci3: command tx timeout
[  200.224424] Bluetooth: hci6: command tx timeout
[  200.225555] Bluetooth: hci7: command tx timeout
[  200.225678] Bluetooth: hci5: command tx timeout
[  200.227583] Bluetooth: hci4: command tx timeout
[  200.228336] Bluetooth: hci2: command tx timeout
[  201.954064] Bluetooth: hci0: command tx timeout
[  202.016401] Bluetooth: hci1: command tx timeout
[  202.208418] Bluetooth: hci3: command tx timeout
[  202.272464] Bluetooth: hci4: command tx timeout
[  202.273366] Bluetooth: hci2: command tx timeout
[  202.274211] Bluetooth: hci5: command tx timeout
[  202.274986] Bluetooth: hci7: command tx timeout
[  202.275808] Bluetooth: hci6: command tx timeout
[  204.000198] Bluetooth: hci0: command tx timeout
[  204.064304] Bluetooth: hci1: command tx timeout
[  204.256217] Bluetooth: hci3: command tx timeout
[  204.320823] Bluetooth: hci6: command tx timeout
[  204.321512] Bluetooth: hci2: command tx timeout
[  204.321949] Bluetooth: hci7: command tx timeout
[  204.322096] Bluetooth: hci5: command tx timeout
[  204.322822] Bluetooth: hci4: command tx timeout
[  257.725451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.735930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.738928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.749821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.755832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.851742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.856446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.860509] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.868983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.873523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.072523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.075554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  258.082774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.085385] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.095615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.109639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  258.112791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.116940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.119623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  258.126318] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.163810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.168891] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  258.174186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  258.185870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  258.200325] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.215298] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.225524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.254707] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  258.259849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  258.265094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.280223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  258.289569] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.300888] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  258.304250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  258.311124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  258.314990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  258.344681] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  258.378574] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  258.390144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  258.400683] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.808263] Bluetooth: hci0: command tx timeout
[  259.939096] Bluetooth: hci1: command tx timeout
[  260.193213] Bluetooth: hci2: command tx timeout
[  260.257503] Bluetooth: hci3: command tx timeout
[  260.320697] Bluetooth: hci4: command tx timeout
[  260.449259] Bluetooth: hci6: command tx timeout
[  260.577393] Bluetooth: hci5: command tx timeout
[  260.579244] Bluetooth: hci7: command tx timeout
[  261.856377] Bluetooth: hci0: command tx timeout
[  261.984072] Bluetooth: hci1: command tx timeout
[  262.241455] Bluetooth: hci2: command tx timeout
[  262.304150] Bluetooth: hci3: command tx timeout
[  262.369310] Bluetooth: hci4: command tx timeout
[  262.497067] Bluetooth: hci6: command tx timeout
[  262.624475] Bluetooth: hci5: command tx timeout
[  262.624967] Bluetooth: hci7: command tx timeout
[  263.905049] Bluetooth: hci0: command tx timeout
[  264.032384] Bluetooth: hci1: command tx timeout
[  264.289111] Bluetooth: hci2: command tx timeout
[  264.352437] Bluetooth: hci3: command tx timeout
[  264.417485] Bluetooth: hci4: command tx timeout
[  264.544123] Bluetooth: hci6: command tx timeout
[  264.672220] Bluetooth: hci5: command tx timeout
[  264.672720] Bluetooth: hci7: command tx timeout
[  265.952286] Bluetooth: hci0: command tx timeout
[  266.080713] Bluetooth: hci1: command tx timeout
[  266.338415] Bluetooth: hci2: command tx timeout
[  266.401109] Bluetooth: hci3: command tx timeout
[  266.465275] Bluetooth: hci4: command tx timeout
[  266.592117] Bluetooth: hci6: command tx timeout
[  266.721302] Bluetooth: hci7: command tx timeout
[  266.721793] Bluetooth: hci5: command tx timeout
[  320.113304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  320.118294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  320.133595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  320.143125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  320.149293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  320.378222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  320.383825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  320.396425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  320.408947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.410585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.412710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.416390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.428663] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.465897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  320.469564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  320.471959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  320.477310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.484135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  320.487991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.502594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.579079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.587804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.600990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.608516] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.612562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.615160] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.619950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.633747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.648864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.655481] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.658908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.666877] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.670353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.670545] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.676788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.696562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.703051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.706632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.729785] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.750665] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  322.209758] Bluetooth: hci0: command tx timeout
[  322.464566] Bluetooth: hci1: command tx timeout
[  322.528159] Bluetooth: hci2: command tx timeout
[  322.592379] Bluetooth: hci3: command tx timeout
[  322.657104] Bluetooth: hci4: command tx timeout
[  322.784534] Bluetooth: hci6: command tx timeout
[  322.912757] Bluetooth: hci7: command tx timeout
[  322.912799] Bluetooth: hci5: command tx timeout
[  324.257366] Bluetooth: hci0: command tx timeout
[  324.512349] Bluetooth: hci1: command tx timeout
[  324.576145] Bluetooth: hci2: command tx timeout
[  324.642098] Bluetooth: hci3: command tx timeout
[  324.705262] Bluetooth: hci4: command tx timeout
[  324.833377] Bluetooth: hci6: command tx timeout
[  324.960333] Bluetooth: hci5: command tx timeout
[  324.960481] Bluetooth: hci7: command tx timeout
[  326.304982] Bluetooth: hci0: command tx timeout
[  326.560377] Bluetooth: hci1: command tx timeout
[  326.624523] Bluetooth: hci2: command tx timeout
[  326.688286] Bluetooth: hci3: command tx timeout
[  326.752106] Bluetooth: hci4: command tx timeout
[  326.882052] Bluetooth: hci6: command tx timeout
[  327.008366] Bluetooth: hci5: command tx timeout
[  327.008388] Bluetooth: hci7: command tx timeout
[  328.353140] Bluetooth: hci0: command tx timeout
[  328.610250] Bluetooth: hci1: command tx timeout
[  328.673355] Bluetooth: hci2: command tx timeout
[  328.737440] Bluetooth: hci3: command tx timeout
[  328.800792] Bluetooth: hci4: command tx timeout
[  328.930702] Bluetooth: hci6: command tx timeout
[  329.056138] Bluetooth: hci7: command tx timeout
[  329.056686] Bluetooth: hci5: command tx timeout
[  382.518733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.528238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.530744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.546103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.553688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.580366] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.588593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.595264] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.604837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.614154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.788288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  382.791349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  382.795607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  382.804236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  382.810444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  382.929948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  382.940621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.943733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  382.950504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  382.957541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.960449] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  382.962805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  382.968833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  382.975333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.976922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.982749] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  382.994426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.008205] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.014841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  383.018513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.165709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.189796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.208280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.217911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.231343] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.233125] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.248610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.261993] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.281260] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.308746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  384.608111] Bluetooth: hci0: command tx timeout
[  384.674065] Bluetooth: hci1: command tx timeout
[  384.864222] Bluetooth: hci2: command tx timeout
[  385.056163] Bluetooth: hci4: command tx timeout
[  385.184092] Bluetooth: hci3: command tx timeout
[  385.312102] Bluetooth: hci5: command tx timeout
[  385.313184] Bluetooth: hci6: command tx timeout
[  385.504179] Bluetooth: hci7: command tx timeout
[  386.656090] Bluetooth: hci0: command tx timeout
[  386.721313] Bluetooth: hci1: command tx timeout
[  386.912192] Bluetooth: hci2: command tx timeout
[  387.105151] Bluetooth: hci4: command tx timeout
[  387.232351] Bluetooth: hci3: command tx timeout
[  387.360147] Bluetooth: hci5: command tx timeout
[  387.362173] Bluetooth: hci6: command tx timeout
[  387.553357] Bluetooth: hci7: command tx timeout
[  388.704224] Bluetooth: hci0: command tx timeout
[  388.768440] Bluetooth: hci1: command tx timeout
[  388.960444] Bluetooth: hci2: command tx timeout
[  389.153090] Bluetooth: hci4: command tx timeout
[  389.280136] Bluetooth: hci3: command tx timeout
[  389.408175] Bluetooth: hci6: command tx timeout
[  389.408199] Bluetooth: hci5: command tx timeout
[  389.600093] Bluetooth: hci7: command tx timeout
[  390.753370] Bluetooth: hci0: command tx timeout
[  390.817127] Bluetooth: hci1: command tx timeout
[  391.008169] Bluetooth: hci2: command tx timeout
[  391.200357] Bluetooth: hci4: command tx timeout
[  391.329278] Bluetooth: hci3: command tx timeout
[  391.457160] Bluetooth: hci5: command tx timeout
[  391.458098] Bluetooth: hci6: command tx timeout
[  391.648162] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
05:38:34  Registers:
info registers vcpu 0
RAX=ffffffff87a2bc90 RBX=ffff888035a0d340 RCX=0000000000000200 RDX=08e8ec013c717217
RSI=ffff888035a0de38 RDI=ffff888035a0de10 RBP=0000000000000000 RSP=ffff88806ce08888
R8 =0000000000000004 R9 =0000000000000000 R10=0000000000000000 R11=00000000000043a2
R12=ffff888035a0de38 R13=0000000000000000 R14=0000000000000004 R15=ffff888035a0dd98
RIP=ffffffff81516e84 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f11ee216540 00000000 00000000
GS =0000 ffff8880e564e000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f11ee6f7f88 CR3=0000000035bfa000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000
XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000005 RBX=0000000000000000 RCX=0000000000000004 RDX=0000000000000002
RSI=ffff888035ac5d98 RDI=ffff888035ac5340 RBP=ffff888035ac5340 RSP=ffff88802f227dc0
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8640ee17 R11=0000000000000000
R12=0000000000000006 R13=ffff888035ac5d98 R14=ffff88801368d100 R15=0000000000000000
RIP=ffffffff8151615f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e574e000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f78266076f4 CR3=000000002becc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f782661647000007f7826615f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000