Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:42046' (ECDSA) to the list of known hosts.
2025/04/25 08:31:08 fuzzer started
2025/04/25 08:31:08 dialing manager at localhost:46629
syzkaller login: [   92.489221] cgroup: Unknown subsys name 'net'
[   92.656367] cgroup: Unknown subsys name 'cpuset'
[   92.707422] cgroup: Unknown subsys name 'rlimit'
2025/04/25 08:31:24 syscalls: 207
2025/04/25 08:31:24 code coverage: enabled
2025/04/25 08:31:24 comparison tracing: enabled
2025/04/25 08:31:24 extra coverage: enabled
2025/04/25 08:31:24 setuid sandbox: enabled
2025/04/25 08:31:24 namespace sandbox: enabled
2025/04/25 08:31:24 Android sandbox: enabled
2025/04/25 08:31:24 fault injection: enabled
2025/04/25 08:31:24 leak checking: enabled
2025/04/25 08:31:24 net packet injection: enabled
2025/04/25 08:31:24 net device setup: enabled
2025/04/25 08:31:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/25 08:31:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/25 08:31:24 USB emulation: enabled
2025/04/25 08:31:24 hci packet injection: enabled
2025/04/25 08:31:24 wifi device emulation: enabled
2025/04/25 08:31:24 802.15.4 emulation: enabled
2025/04/25 08:31:24 fetching corpus: 0, signal 0/0 (executing program)
2025/04/25 08:31:25 starting 8 fuzzer processes
08:31:25 executing program 0:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000000)={0x5, 0x10, 0xff, 0x91, 0x40, 0xda})
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000a80)={0x9, 0x1})
ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x2)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141000, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
ioctl$CDROM_CLEAR_OPTIONS(r0, 0x5321, 0x12)
ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000000b00)={0x32, 0xff, 0x7, 0x1, 0x8, 0x2})
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001600)={0x14, &(0x7f0000001580)={0x20, 0xf, 0x2e, {0x2e, 0x8, "27e54f64d1a3ee246aa846e908a6345df15987c312031238a09a789d260b6ab99f6b764b98f0078af1d43bdd"}}, &(0x7f00000015c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001880)={0x44, &(0x7f0000001640)={0x0, 0xc, 0x6f, "0225cd47e18fc28535020d6fccef94a4fe6dac553447a49fe4bb40b594b50fd2484787d2da7318f5e4b4f717bab0bd32892bbc49e74460cc0caddb59b8b27698c849f3029e6edfd86c9072b4945d487b9768b9a57c65848cb453cbe6521db73c1dd590cb9e32ed05605dbc593c96f4"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001740)={0x20, 0x80, 0x1c, {0x88, 0x9, 0xeca0, 0x401, 0x2, 0xcc, 0x80, 0x0, 0xfffb, 0x200, 0x8, 0x20}}, &(0x7f0000001780)={0x20, 0x85, 0x4, 0x771cc2ff}, &(0x7f00000017c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001800)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000001840)={0x20, 0x89, 0x2, 0x1}})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001900), 0x400000, 0x0)
ioctl$CDROMPAUSE(r1, 0x5301)
ioctl$CDROMSTOP(r0, 0x5307)
ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0)
ioctl$CDROMSTART(r0, 0x5308)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001940), 0x84c42, 0x0)
ioctl$CDROMSTOP(r2, 0x5307)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001a40)={0x14, &(0x7f0000001980)={0x20, 0x23, 0x47, {0x47, 0x30, "25f6a978e3bb8994966d16a82503df7ebefa815929745b65c28fec026bd74820cf168266976fcf033b458af12d0368960ea5a71b93461f4c5d1cb126a4b736e48db964d8b9"}}, &(0x7f0000001a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001c80)={0x44, &(0x7f0000001a80)={0x9cd2fea69aa74f9f, 0xf, 0x4, "9f07dc29"}, &(0x7f0000001ac0)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001b40)={0x20, 0x80, 0x1c, {0x7, 0x800, 0x9, 0x6, 0x7, 0x8, 0x5, 0x5, 0x7ff, 0x0, 0x0, 0x5455}}, &(0x7f0000001b80)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000001bc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001c00)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000001c40)={0x20, 0x89, 0x2, 0x1}})

08:31:25 executing program 1:
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/206)
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x3f, 0x40000)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000140)=""/79)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x7f)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4)
r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2)
r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x840)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000002c0)=""/66)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x121040, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000380)=""/52)
r4 = syz_open_dev$mouse(&(0x7f00000003c0), 0x100000000, 0x200)
ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000400)=""/228)
setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "60c4d3030e977941", "db32a338f509286b49b31ce72544c6c4", 'w3N\t', "6390f36e6f1c2fba"}, 0x28)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000540)={0xbf, 0x8, 0x8001, 0x8001, "8abb54c96e28beebdbe5c143e0120cffc8d44cec5e5aae4734728ad0560f326b"})
ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000580))

08:31:25 executing program 2:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000))
ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000180)=0x8)
r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x6, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000200))
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000240))
r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x4, 0x2000)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000002c0))
r2 = syz_open_dev$sg(&(0x7f0000000300), 0x3, 0x8600)
ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000340))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0)
ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000003c0))
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000440), 0x81, 0x1)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000480)=0xc8)
r5 = syz_open_dev$sg(&(0x7f00000004c0), 0x3, 0x100040)
ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000500))
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000540)=0x1)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000580)=0x40)

08:31:25 executing program 3:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x8e0, 0x30000, 0x40})
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1000, 0x101000)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200, 0x1)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/92)
sync()
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
clock_gettime(0x7, &(0x7f0000000180))
ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f00000001c0)=""/47)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/4096)
r2 = syz_open_dev$evdev(&(0x7f0000001200), 0x5, 0x4000)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001240)={0x4, 0x414, 0x3de, 0x4, 0x8, 0x7})
r3 = syz_open_dev$evdev(&(0x7f0000001280), 0x590, 0x54000)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000012c0)=""/9)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001300))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001340), 0x101000, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000001380)=""/4096)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000002440)={'broute\x00', 0x0, 0x4, 0x6e, [0x7e, 0xffffffffffffff2b, 0x80, 0x1, 0x4, 0x3], 0x3, &(0x7f0000002380)=[{}, {}, {}], &(0x7f00000023c0)=""/110}, &(0x7f00000024c0)=0x78)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000002500)=[0xfff80000, 0x401])
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000002540)=[0x872f, 0x6])

08:31:25 executing program 4:
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x80000000)
r1 = inotify_init1(0x80800)
r2 = inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x830008a3)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x4)
inotify_rm_watch(r0, r2)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000180))
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r4 = inotify_init1(0x800)
inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x40)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)
r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x90000002)
ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000240)={0x8, 0x3, 0x80, 0x2, 0x2, 0x26})
inotify_rm_watch(r1, r5)
ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000cc0))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000d00)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6)

[  109.313772] audit: type=1400 audit(1745569885.857:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:31:25 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x400c0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000016c0)={0x0, 0xfffffffffffffffe, 0x0, 0x7, @scatter={0x8, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/240, 0xf0}, {&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/163, 0xa3}, {&(0x7f0000001300)=""/4, 0x4}, {&(0x7f0000001340)=""/90, 0x5a}, {&(0x7f00000013c0)=""/196, 0xc4}]}, &(0x7f0000001540), &(0x7f0000001580)=""/230, 0x7fffffff, 0x0, 0x0, &(0x7f0000001680)})
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000001740)=0x1)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000001780))
r1 = syz_open_dev$mouse(&(0x7f00000017c0), 0x9, 0x40400)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000001800))
getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001980)=""/128, &(0x7f0000001a00)=0x80)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000001a40))
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000001a80))
getsockopt$inet_int(r0, 0x0, 0x38, &(0x7f0000001b40), &(0x7f0000001b80)=0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000001bc0))
accept$inet(r1, &(0x7f0000001c00)={0x2, 0x0, @initdev}, &(0x7f0000001c40)=0x10)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000002000)=@filter={'filter\x00', 0xe, 0x3, 0x312, [0x0, 0x20001cc0, 0x20001d96, 0x20001dc6], 0x0, &(0x7f0000001c80), &(0x7f0000001cc0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0x883e, 'ip6gretap0\x00', 'veth0_to_hsr\x00', 'netpci0\x00', 'batadv_slave_1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0x7f], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0xc, 0x9300, 'vcan0\x00', 'veth1_to_team\x00', 'geneve1\x00', 'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x81, {0x10000}}}}}, {0x3, 0x18, 0x0, 'team_slave_1\x00', 'wg1\x00', 'veth0_to_hsr\x00', 'veth1_macvtap\x00', @random="f6686db9d49c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00', {0x6}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x38a)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000002080)={0x80, "a43feeda2d0038d4590f1ec765d394b147665ef0f8b0f079f5f86db16434c5182b22e79ac9d9cfb84a7b0f606ee8c5d1158f01d2219e422f748f82677b66b8ca"})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002180)={'syztnl1\x00', &(0x7f0000002100)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x40, 0xfffffc70, 0x4, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x10, 0x5, 0x7ff}})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000021c0), 0x40, 0x0)
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)

08:31:25 executing program 6:
ioctl$CDROMSTART(0xffffffffffffffff, 0x5308)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x100000001)
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000080)={0x4, 0x6, 0x1, 0x5, 0x80, 0x3})
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b00), 0x4200, 0x0)
ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f0000000b40)={0x81, 0x0, 0x5, 0x9, 0x1, 0xf5})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x2002, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000001600))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001640), 0x24800, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f0000001680)={0xea8b, 0x1})
openat$cdrom(0xffffffffffffff9c, &(0x7f00000016c0), 0x40000, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000001700)=0x4)
r4 = inotify_add_watch(r2, &(0x7f0000001740)='./file0\x00', 0x0)
inotify_rm_watch(r2, r4)
ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000001780)={0x10001, 0xff, 0xdca, 0x1, 0x3f, 0x9})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000017c0), 0x101042, 0x0)
ioctl$CDROMREADMODE1(r5, 0x530d, &(0x7f0000001800)={0x0, 0x7, 0x37, 0x3, 0x5, 0xff})

08:31:25 executing program 7:
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000))
ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000040)=""/125)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)=0x1)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100))
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000280)=0x1)
r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x1, 0x5a1000)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000300))
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000340))
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
r1 = syz_open_dev$mouse(&(0x7f0000000380), 0x3, 0x820c0)
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000003c0)=""/237)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000004c0)={0x6b, 0x1f, 0x0, "788a090c301c08663d4d1203bcb878721481fd51364ac6919dfb7d3ba94291d3288059a75170736202339ecbf5af60bd9fe64319f0a5582ed8fb730061b2537f1db482d0cafec525fd79d5b7c5382ba5bf2d78925cab181158bc8d06130def1d409a0f5522a71f2f1dcd1a"})
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000540))
ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/243)
r2 = syz_open_dev$mouse(&(0x7f0000000680), 0x54a, 0x181d02)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000006c0)={0x9, 0x6, 0x101, 0x4, 0x35f, 0x1})
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000700))
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000740))
accept$unix(r1, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e)

[  110.664502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.671254] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.674263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.688573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.701699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.718489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.732318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.737253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.750855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.756740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.762598] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.769579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.773080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.791805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.804071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.806273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.815949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.834040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.844871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.852747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.863432] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  110.878666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  110.884277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.888468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.890359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  110.896153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.899178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  110.909235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.915500] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  110.938117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  110.945180] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  110.975645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.979210] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  110.988208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.993462] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.004593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.029704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.034467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.035934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.045018] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.741566] Bluetooth: hci0: command tx timeout
[  112.804070] Bluetooth: hci2: command tx timeout
[  112.867981] Bluetooth: hci1: command tx timeout
[  112.997001] Bluetooth: hci4: command tx timeout
[  112.997356] Bluetooth: hci3: command tx timeout
[  113.060164] Bluetooth: hci5: command tx timeout
[  113.124031] Bluetooth: hci6: command tx timeout
[  113.124062] Bluetooth: hci7: command tx timeout
[  114.790239] Bluetooth: hci0: command tx timeout
[  114.852529] Bluetooth: hci2: command tx timeout
[  114.916080] Bluetooth: hci1: command tx timeout
[  115.044027] Bluetooth: hci4: command tx timeout
[  115.044972] Bluetooth: hci3: command tx timeout
[  115.109097] Bluetooth: hci5: command tx timeout
[  115.172065] Bluetooth: hci7: command tx timeout
[  115.174960] Bluetooth: hci6: command tx timeout
[  116.836045] Bluetooth: hci0: command tx timeout
[  116.900007] Bluetooth: hci2: command tx timeout
[  116.964049] Bluetooth: hci1: command tx timeout
[  117.092976] Bluetooth: hci3: command tx timeout
[  117.093202] Bluetooth: hci4: command tx timeout
[  117.157930] Bluetooth: hci5: command tx timeout
[  117.220188] Bluetooth: hci6: command tx timeout
[  117.220532] Bluetooth: hci7: command tx timeout
[  118.886279] Bluetooth: hci0: command tx timeout
[  118.948871] Bluetooth: hci2: command tx timeout
[  119.012296] Bluetooth: hci1: command tx timeout
[  119.140250] Bluetooth: hci4: command tx timeout
[  119.141181] Bluetooth: hci3: command tx timeout
[  119.205931] Bluetooth: hci5: command tx timeout
[  119.270050] Bluetooth: hci6: command tx timeout
[  119.270267] Bluetooth: hci7: command tx timeout
[  170.710098] syz-executor.1 (285) used greatest stack depth: 24520 bytes left
[  173.385614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.387826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.388729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.391212] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.396449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.399399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.400614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.404213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.405710] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.406496] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.420069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.421622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.423388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.425673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.427979] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.431113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.433366] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.448521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.463405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.482124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.482834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.493221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.494343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.495551] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.498331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.507821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.510674] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.512722] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.517308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.536425] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.675904] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.697480] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.716730] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.761499] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.781610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  174.192786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  174.210674] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  174.259469] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  174.296728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  174.305714] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  175.459985] Bluetooth: hci3: command tx timeout
[  175.524241] Bluetooth: hci0: command tx timeout
[  175.524270] Bluetooth: hci1: command tx timeout
[  175.587984] Bluetooth: hci2: command tx timeout
[  175.587994] Bluetooth: hci5: command tx timeout
[  175.908050] Bluetooth: hci4: command tx timeout
[  175.972972] Bluetooth: hci7: command tx timeout
[  176.484951] Bluetooth: hci6: command tx timeout
[  177.509201] Bluetooth: hci3: command tx timeout
[  177.573993] Bluetooth: hci0: command tx timeout
[  177.574469] Bluetooth: hci1: command tx timeout
[  177.636920] Bluetooth: hci5: command tx timeout
[  177.637643] Bluetooth: hci2: command tx timeout
[  177.956103] Bluetooth: hci4: command tx timeout
[  178.020943] Bluetooth: hci7: command tx timeout
[  178.531968] Bluetooth: hci6: command tx timeout
[  179.557143] Bluetooth: hci3: command tx timeout
[  179.622143] Bluetooth: hci1: command tx timeout
[  179.622624] Bluetooth: hci0: command tx timeout
[  179.685092] Bluetooth: hci5: command tx timeout
[  179.685573] Bluetooth: hci2: command tx timeout
[  180.007047] Bluetooth: hci4: command tx timeout
[  180.068249] Bluetooth: hci7: command tx timeout
[  180.580174] Bluetooth: hci6: command tx timeout
[  181.603967] Bluetooth: hci3: command tx timeout
[  181.670916] Bluetooth: hci0: command tx timeout
[  181.671390] Bluetooth: hci1: command tx timeout
[  181.733035] Bluetooth: hci5: command tx timeout
[  181.733514] Bluetooth: hci2: command tx timeout
[  182.052155] Bluetooth: hci4: command tx timeout
[  182.117157] Bluetooth: hci7: command tx timeout
[  182.627963] Bluetooth: hci6: command tx timeout
[  235.448021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.449612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.456374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.460072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.460089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.464084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.470396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.471778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.474592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.477078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.530319] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.533254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.534512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.540409] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.543031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.667163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  235.681107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  235.684703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  235.714255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  235.746845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  235.753742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.770663] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.801623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  235.808018] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.815405] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  235.829965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.832608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  235.837058] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.867930] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  235.869048] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  235.872383] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  235.881284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  235.903546] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  235.906867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  235.909304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  235.911382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  235.945243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  235.947274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  235.998199] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.023058] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  237.540031] Bluetooth: hci1: command tx timeout
[  237.540054] Bluetooth: hci0: command tx timeout
[  237.603994] Bluetooth: hci2: command tx timeout
[  237.796118] Bluetooth: hci3: command tx timeout
[  237.924158] Bluetooth: hci6: command tx timeout
[  237.924340] Bluetooth: hci4: command tx timeout
[  237.987999] Bluetooth: hci5: command tx timeout
[  238.116192] Bluetooth: hci7: command tx timeout
[  239.588149] Bluetooth: hci1: command tx timeout
[  239.590435] Bluetooth: hci0: command tx timeout
[  239.651962] Bluetooth: hci2: command tx timeout
[  239.847051] Bluetooth: hci3: command tx timeout
[  239.972650] Bluetooth: hci4: command tx timeout
[  239.972808] Bluetooth: hci6: command tx timeout
[  240.036199] Bluetooth: hci5: command tx timeout
[  240.164224] Bluetooth: hci7: command tx timeout
[  241.636223] Bluetooth: hci0: command tx timeout
[  241.636719] Bluetooth: hci1: command tx timeout
[  241.699983] Bluetooth: hci2: command tx timeout
[  241.892004] Bluetooth: hci3: command tx timeout
[  242.020023] Bluetooth: hci6: command tx timeout
[  242.020190] Bluetooth: hci4: command tx timeout
[  242.085152] Bluetooth: hci5: command tx timeout
[  242.212169] Bluetooth: hci7: command tx timeout
[  243.684108] Bluetooth: hci0: command tx timeout
[  243.684601] Bluetooth: hci1: command tx timeout
[  243.748031] Bluetooth: hci2: command tx timeout
[  243.941919] Bluetooth: hci3: command tx timeout
[  244.068185] Bluetooth: hci4: command tx timeout
[  244.068218] Bluetooth: hci6: command tx timeout
[  244.132333] Bluetooth: hci5: command tx timeout
[  244.260070] Bluetooth: hci7: command tx timeout
[  297.792225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  297.797249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  297.799771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  297.812032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  297.817319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  297.912780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  297.928794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  297.932646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  297.940422] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  297.949489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.039214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.051568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.055732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.070497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.104654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.120131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.125388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.129848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.131264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.136491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.146746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.158557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.166797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.175771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.177788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.204841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.238846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.241326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.245789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.274698] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.303826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.306797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.309653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.316478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.320018] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.351378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.371657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.437641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.475429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.506540] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.877460] Bluetooth: hci0: command tx timeout
[  300.004973] Bluetooth: hci1: command tx timeout
[  300.197311] Bluetooth: hci2: command tx timeout
[  300.260975] Bluetooth: hci4: command tx timeout
[  300.323985] Bluetooth: hci3: command tx timeout
[  300.390298] Bluetooth: hci5: command tx timeout
[  300.452013] Bluetooth: hci6: command tx timeout
[  300.580219] Bluetooth: hci7: command tx timeout
[  301.924104] Bluetooth: hci0: command tx timeout
[  302.053024] Bluetooth: hci1: command tx timeout
[  302.246189] Bluetooth: hci2: command tx timeout
[  302.307948] Bluetooth: hci4: command tx timeout
[  302.372157] Bluetooth: hci3: command tx timeout
[  302.437238] Bluetooth: hci5: command tx timeout
[  302.500110] Bluetooth: hci6: command tx timeout
[  302.627983] Bluetooth: hci7: command tx timeout
[  303.972238] Bluetooth: hci0: command tx timeout
[  304.100071] Bluetooth: hci1: command tx timeout
[  304.291953] Bluetooth: hci2: command tx timeout
[  304.355974] Bluetooth: hci4: command tx timeout
[  304.420246] Bluetooth: hci3: command tx timeout
[  304.484148] Bluetooth: hci5: command tx timeout
[  304.548286] Bluetooth: hci6: command tx timeout
[  304.676142] Bluetooth: hci7: command tx timeout
[  306.019994] Bluetooth: hci0: command tx timeout
[  306.148959] Bluetooth: hci1: command tx timeout
[  306.341913] Bluetooth: hci2: command tx timeout
[  306.404259] Bluetooth: hci4: command tx timeout
[  306.467995] Bluetooth: hci3: command tx timeout
[  306.531957] Bluetooth: hci5: command tx timeout
[  306.596273] Bluetooth: hci6: command tx timeout
[  306.723943] Bluetooth: hci7: command tx timeout
[  360.505855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  360.509531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  360.512827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  360.527221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  360.534742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  360.699281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.704607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.709337] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.718707] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.725708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.765627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  360.771533] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  360.785601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  360.792645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  360.795403] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  360.802806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  360.804519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  360.813628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  360.823534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  360.854538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  360.856184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  360.875399] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  360.878621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  360.887844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  360.895691] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  360.897535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  360.900339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  360.909813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  360.918231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  360.922728] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  360.972848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  360.984144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  361.012415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  361.018633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.021943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  361.026782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  361.032015] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  361.040801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  361.100659] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  361.110177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.597135] Bluetooth: hci0: command tx timeout
[  362.788983] Bluetooth: hci1: command tx timeout
[  362.916213] Bluetooth: hci2: command tx timeout
[  362.979988] Bluetooth: hci4: command tx timeout
[  363.045231] Bluetooth: hci6: command tx timeout
[  363.046292] Bluetooth: hci3: command tx timeout
[  363.237022] Bluetooth: hci5: command tx timeout
[  363.300144] Bluetooth: hci7: command tx timeout
[  364.645099] Bluetooth: hci0: command tx timeout
[  364.836174] Bluetooth: hci1: command tx timeout
[  364.964902] Bluetooth: hci2: command tx timeout
[  365.028238] Bluetooth: hci4: command tx timeout
[  365.092213] Bluetooth: hci6: command tx timeout
[  365.092701] Bluetooth: hci3: command tx timeout
[  365.284946] Bluetooth: hci5: command tx timeout
[  365.347984] Bluetooth: hci7: command tx timeout
[  366.691971] Bluetooth: hci0: command tx timeout
[  366.884007] Bluetooth: hci1: command tx timeout
[  367.012314] Bluetooth: hci2: command tx timeout
[  367.076939] Bluetooth: hci4: command tx timeout
[  367.140423] Bluetooth: hci3: command tx timeout
[  367.141210] Bluetooth: hci6: command tx timeout
[  367.332916] Bluetooth: hci5: command tx timeout
[  367.396231] Bluetooth: hci7: command tx timeout
[  368.740910] Bluetooth: hci0: command tx timeout
[  368.931972] Bluetooth: hci1: command tx timeout
[  369.060405] Bluetooth: hci2: command tx timeout
[  369.124207] Bluetooth: hci4: command tx timeout
[  369.188464] Bluetooth: hci3: command tx timeout
[  369.188927] Bluetooth: hci6: command tx timeout
[  369.379993] Bluetooth: hci5: command tx timeout
[  369.445242] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:36:27  Registers:
info registers vcpu 0
RAX=000000000000018e RBX=ffff888019275340 RCX=0000000000000200 RDX=b1a50b675e9e944f
RSI=ffff888019275dc0 RDI=ffff888019275d98 RBP=0000000000000000 RSP=ffff888030126dc0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000024809
R12=ffff888019275dc0 R13=0000000000000000 R14=0000000000000001 R15=ffff888019275d98
RIP=ffffffff81511bd3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6770ec6020 CR3=0000000035234000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff8880263776c0 RCX=ffff88802637754c RDX=1ffff11004c6eee6
RSI=ffffffff81adc864 RDI=ffff8880263776cc RBP=ffff888026377730 RSP=ffff8880263775d8
R8 =ffffffff867f39f0 R9 =ffff888026377638 R10=000000000003b0c2 R11=0000000000012abc
R12=ffff8880263776c0 R13=0000000000000000 R14=ffff88802ca7d340 R15=0000000000092cc0
RIP=ffffffff81600387 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcc0c546540 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe286cb7a8 CR3=0000000026aa4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000