syzkaller login: [   97.770932] sshd (232) used greatest stack depth: 24600 bytes left
Warning: Permanently added '[localhost]:21359' (ECDSA) to the list of known hosts.
2025/04/27 06:15:49 fuzzer started
2025/04/27 06:15:49 dialing manager at localhost:46629
[  100.979352] cgroup: Unknown subsys name 'net'
[  101.121880] cgroup: Unknown subsys name 'cpuset'
[  101.163526] cgroup: Unknown subsys name 'rlimit'
2025/04/27 06:16:13 syscalls: 207
2025/04/27 06:16:13 code coverage: enabled
2025/04/27 06:16:13 comparison tracing: enabled
2025/04/27 06:16:13 extra coverage: enabled
2025/04/27 06:16:13 setuid sandbox: enabled
2025/04/27 06:16:13 namespace sandbox: enabled
2025/04/27 06:16:13 Android sandbox: enabled
2025/04/27 06:16:13 fault injection: enabled
2025/04/27 06:16:13 leak checking: enabled
2025/04/27 06:16:13 net packet injection: enabled
2025/04/27 06:16:13 net device setup: enabled
2025/04/27 06:16:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/27 06:16:13 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/27 06:16:13 USB emulation: enabled
2025/04/27 06:16:13 hci packet injection: enabled
2025/04/27 06:16:13 wifi device emulation: enabled
2025/04/27 06:16:13 802.15.4 emulation: enabled
2025/04/27 06:16:13 fetching corpus: 0, signal 0/0 (executing program)
2025/04/27 06:16:15 starting 8 fuzzer processes
06:16:15 executing program 0:
linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)
mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x5, 0xe, 0x170000}, 0x20)
linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000)
unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200)
futimesat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {0x77359400}})
pipe2$9p(&(0x7f00000002c0)={<r0=>0xffffffffffffffff}, 0x4000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*)!#]!$$../-.,'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@pcr={'pcr', 0x3d, 0xc}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x412a030, 0xffffffffffffffff, 0x8000000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0)
ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000400)="0239eec604d7c39540e27b779f1f3c0d16fe537a0470992980cbae5d92603721908e3da887eaaa40e2230f54")
unlinkat(r2, &(0x7f0000000440)='./file0\x00', 0x200)
ioctl$VT_DISALLOCATE(r2, 0x5608)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'})
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPTPEER(r4, 0x5441, 0x7fffffff)
prctl$PR_SVE_GET_VL(0x33, 0xabb6)
r5 = syz_open_dev$loop(&(0x7f00000004c0), 0x7, 0x340ac2)
ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000500))

06:16:15 executing program 1:
ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="17a456c3d4bf6b97a27ab5aa2f57ced166fab2b3d04ee713c00dce9c367ab7591ce84ff7221a50d83c1660a2e4bf7480e4117857402eb6c1069bdf82d3a181301907021a2a11f50f62bd2ee9a4a4368b9d681c5f9f5de556971b82eb52b5f848f92365994a2437b516fdaf50404925760b7013ae8006c309b3dec694bd8c")
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff)
ioctl$VT_DISALLOCATE(r0, 0x5608)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000000c0))
ioctl$TCFLSH(r2, 0x540b, 0x2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0xa, &(0x7f0000000100)=[{0x4, 0x2}, {0x1, 0xfff9}, {0x800, 0x201}, {0x2, 0xb286}, {0xff4f, 0x40}, {0x2, 0x6}, {0x6, 0x7}, {0x3f, 0x98}, {0x7, 0x1}, {0x3, 0x7}]})
ioctl$VT_DISALLOCATE(r2, 0x5608)
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9)
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180))
r4 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCNXCL(r4, 0x540d)
r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x67)
ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f00000001c0))
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000200)="ab5ce3dc22e62dfa574b90a590c82c5c70823c3c938c421fe45be4")

06:16:15 executing program 2:
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)="cc0021d50bebcf78264d0cc3dad8ba247b692bfed523415ec0b951cea4fdafb4679047ad4c9dd805515b27c2a44bd01c8395a0a5e3ce4323944ed7f8555566a39ad5a47a7ce15c92f4f125958f1bd4e1c7fa5833eaae38b8844bb759593e55c3de7585f80b79f1cfe7133c12a5d8fb8c0b381a3d7d7f9757e6c9c40fe228acf3f1f6d395cdce")
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0xff20, 0x4f86, 0x4, 0x8, 0x8001})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000540)={0x80, 0x17, &(0x7f0000000140)="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"})
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000580))
ioctl$TCGETA(r0, 0x5405, &(0x7f00000005c0))
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000600)=0x2)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x10000, 0x0)
read$eventfd(r2, &(0x7f0000000680), 0x8)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000006c0))
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r4 = gettid()
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000700)=r4)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000740)={'\x00', 0x400, 0x7e, 0x8, 0x3, 0x5, r4})
ioctl$VT_DISALLOCATE(r1, 0x5608)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000900)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x0, 0x80000000, {{0x1d, 0x4, 0x1, 0x25, 0x74, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1f, 0xcf, [@remote, @loopback, @multicast2, @loopback, @loopback, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0xe5, [@loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, @rand_addr=0x64010100]}, @noop, @cipso={0x86, 0x27, 0x1, [{0x1, 0x7, "62487cbbdb"}, {0x5, 0x7, "cbd619ad96"}, {0x7, 0x5, "6e2996"}, {0x1, 0xa, "fada2dfda31b842b"}, {0x0, 0x4, "0eb4"}]}]}}}}})

06:16:15 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc010)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0x9)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x6, 0x7})
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x30)
ioctl$TIOCNXCL(r1, 0x540d)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0xdb, 0xe0, 0x7, 0x0, 0x0, 0x478})
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSBRK(r3, 0x5409, 0x3)
ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000240))
r4 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1)
ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x3)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x8001, 0x4}, {0x1, 0x7}, {0x1ff, 0x20}, {0x8, 0xa000}, {0x3f, 0x1}]})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000340)=0x1)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r5, 0x5608)

[  126.713941] audit: type=1400 audit(1745734575.658:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
06:16:15 executing program 5:
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="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", 0xfe}, 0x68)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x202000, 0x1b1, 0x10}, 0x18)
futimesat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}})
r1 = io_uring_setup(0x4747, &(0x7f0000000280)={0x0, 0xfe69, 0x10, 0x1, 0x3dc})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000300), 0x1)
syz_io_uring_setup(0x6b1, &(0x7f0000000340)={0x0, 0xdb01, 0x2, 0x3, 0x4, 0x0, r1}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0xbc, 0x9, 0x1, {0x0, 0x0, r1}}, 0x9)
pkey_alloc(0x0, 0x3)
statx(r0, &(0x7f0000000480)='./file1\x00', 0x4000, 0x800, &(0x7f00000004c0))
pipe2$9p(&(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
write$P9_RREADDIR(r4, &(0x7f0000000600)={0xc5, 0x29, 0x1, {0x7, [{{0x20, 0x3, 0x8}, 0xffffffffffff1a71, 0x3, 0x7, './file1'}, {{0x80, 0x3, 0x1}, 0x40, 0x4, 0x7, './file0'}, {{0x1, 0x1, 0x6}, 0x200, 0x0, 0x7, './file1'}, {{0x2, 0x1, 0x5}, 0x54, 0x40, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0x4, 0x5, 0x7, './file1'}, {{0x1, 0x0, 0x1}, 0x5, 0x1, 0x7, './file0'}]}}, 0xc5)
r5 = io_uring_setup(0x2d41, &(0x7f0000000700)={0x0, 0xb2af, 0x10, 0x2, 0x29f, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x2010, r5, 0x8000000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0)={0x42001, 0x8, 0x8}, 0x18)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x51)
clock_gettime(0x2, &(0x7f0000000840))
sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000880))
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x40000, 0x0)
mount$9p_fd(0x0, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900), 0x110c0d, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_loose}, {@aname={'aname', 0x3d, '\\)^]'}}], [{@dont_measure}, {@obj_user={'obj_user', 0x3d, './binderfs/binder1\x00'}}]}})

06:16:15 executing program 4:
r0 = timerfd_create(0x6, 0x80000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/4096, 0x1000, 0x1, &(0x7f0000001000)=""/68, 0x44}, &(0x7f00000010c0)=0x40)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000001100)={0x7, 0x7b, 0x1}, 0x7)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000001140)={0x7, 0x21, 0x1}, 0x7)
timerfd_settime(r0, 0x1, &(0x7f0000001180)={{}, {0x77359400}}, &(0x7f00000011c0))
setresuid(0xee00, 0xffffffffffffffff, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x23a500, 0x0)
write$P9_RMKNOD(r1, &(0x7f0000001240)={0x14, 0x13, 0x2, {0x2, 0x1, 0x4}}, 0x14)
msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7)
write$P9_RVERSION(r1, &(0x7f0000001280)={0x15, 0x65, 0xffff, 0x101, 0x8, '9P2000.L'}, 0x15)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000012c0))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001380), 0x4c0000, 0x0)
write$P9_RMKNOD(r2, &(0x7f00000013c0)={0x14, 0x13, 0x1, {0x4, 0x4, 0x1}}, 0x14)
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000001400)=0xb3)
io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000001440)=r2, 0x1)
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000001480)={0x6, 0x1})
pipe2$9p(&(0x7f00000014c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
write$P9_RWALK(r3, &(0x7f0000001500)={0x57, 0x6f, 0x2, {0x6, [{0x60, 0x3, 0x8}, {0x80, 0x4, 0x7}, {0x8, 0x2, 0x6}, {0x80, 0x1, 0x7}, {0x4, 0x4, 0x1}, {0x4, 0x2, 0x1}]}}, 0x57)
pipe2$9p(&(0x7f0000001580)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84800)
write$P9_RSYMLINK(r4, &(0x7f00000015c0)={0x14, 0x11, 0x2, {0x10, 0x2, 0x3}}, 0x14)

06:16:15 executing program 6:
r0 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20040000)
syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/ipc\x00')
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x800, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x3, r1, 0xee01, 0x0, 0xee00, 0x1, 0x7a}, 0x0, 0x0, 0x3, 0x40, 0xffffffff, 0x8, 0x5, 0x0, 0x152b, 0xa8, r0, r0})
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x5)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10248000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000640))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x379ee9aa4e181205}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x8005)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000800))
mount$9p_fd(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x40000, &(0x7f0000000900)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@cache_fscache}, {@cachetag}, {@msize={'msize', 0x3d, 0xb}}, {@access_uid={'access', 0x3d, r1}}], [{@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '}\'}!!'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'ns/ipc\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}]}})

06:16:15 executing program 7:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x3)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)={0x184, 0xa, &(0x7f0000000080)})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000004c0))
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000500)={0x6, 0x8})
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000540))
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000580))
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x400, {0x2, 0x1, 0x6}, 0x80, 0xee00, 0x0, 0x5, 0x776dfc1e, 0xfffffffffffff72d, 0x1, 0xf7f, 0x7, 0x6, 0x5, 0x0, 0xb5f, 0x8c0, 0xffff, 0xd1f, 0x3, 0x4}}, 0xa0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000680))
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000006c0)="546163ba54a5addbc0e3406d1d8671960efba4c6a0a30a7493ad4f75d9d5b956a479b34c29067251beb50fb4d10a5dcb71341019f5f91580aa5b4bdd67b62b92bab3e50d3b22458febc6bfa688082999209e5f88865fddd7116bcde0ca78a1baee93a77d56e4ea7d0a0535c8b21ddfe9a2b23a8ba3eb8d0aaa5a6fb56d56bf7cb174082aad7ef956b4cf7b6a48cad2100820d7ad499f7864ae939c027e084f7c88aca20854ba31ede80d2eb91ca647201a2b1163759f2ba8a58f993068810314b5d741f38a4d585b1b0b4b330bad6e9056d4fa7cb39b9af73b5017ad787a6bef35a1c5b5a6e722987b64cce0f2bf43306ee196327f")
ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000007c0)=0x80000001)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000800)={0x18, 0x71, 0x1, {{0x4, 0x1, 0x3}, 0xc28}}, 0x18)
pipe2$9p(&(0x7f0000000840)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RLINK(r5, &(0x7f0000000880)={0x7, 0x47, 0x1}, 0x7)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000008c0)={0x9, 0x1, 0x9, 0x5, 0x13, "0dadea44a4cc856f"})

[  128.101299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  128.113195] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  128.118089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  128.127235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  128.129880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  128.131635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  128.137333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  128.138970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  128.157262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  128.173489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  128.219953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.228218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.231775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.242266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.256134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.304792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  128.313111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  128.331915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  128.336177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  128.344443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  128.346297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  128.351350] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  128.355188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  128.359447] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  128.361573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  128.363375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  128.365513] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  128.367937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  128.372417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  128.373879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  128.378014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  128.380173] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  128.397457] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  128.410579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  128.413712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.419955] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  128.448139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  128.454713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  128.462312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  128.493108] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.179171] Bluetooth: hci1: command tx timeout
[  130.243726] Bluetooth: hci0: command tx timeout
[  130.306673] Bluetooth: hci2: command tx timeout
[  130.434698] Bluetooth: hci3: command tx timeout
[  130.499687] Bluetooth: hci4: command tx timeout
[  130.499795] Bluetooth: hci7: command tx timeout
[  130.500353] Bluetooth: hci5: command tx timeout
[  130.562699] Bluetooth: hci6: command tx timeout
[  132.226678] Bluetooth: hci1: command tx timeout
[  132.290864] Bluetooth: hci0: command tx timeout
[  132.354695] Bluetooth: hci2: command tx timeout
[  132.482666] Bluetooth: hci3: command tx timeout
[  132.546937] Bluetooth: hci5: command tx timeout
[  132.548013] Bluetooth: hci7: command tx timeout
[  132.548449] Bluetooth: hci4: command tx timeout
[  132.611213] Bluetooth: hci6: command tx timeout
[  134.275185] Bluetooth: hci1: command tx timeout
[  134.338663] Bluetooth: hci0: command tx timeout
[  134.402693] Bluetooth: hci2: command tx timeout
[  134.530690] Bluetooth: hci3: command tx timeout
[  134.594696] Bluetooth: hci4: command tx timeout
[  134.595150] Bluetooth: hci5: command tx timeout
[  134.596206] Bluetooth: hci7: command tx timeout
[  134.660887] Bluetooth: hci6: command tx timeout
[  136.322661] Bluetooth: hci1: command tx timeout
[  136.386880] Bluetooth: hci0: command tx timeout
[  136.450799] Bluetooth: hci2: command tx timeout
[  136.578957] Bluetooth: hci3: command tx timeout
[  136.642975] Bluetooth: hci7: command tx timeout
[  136.643246] Bluetooth: hci5: command tx timeout
[  136.643412] Bluetooth: hci4: command tx timeout
[  136.706740] Bluetooth: hci6: command tx timeout
[  190.616166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  190.619331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  190.624231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  190.644064] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  190.658281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  190.763198] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.765915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.773891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.777985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.790470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.797094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.800179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.825473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.830889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.839321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  190.843250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.845660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  190.847859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  190.856671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  190.869815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  191.131536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.144770] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.150143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.177290] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.183798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.484265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  191.492487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  191.498180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  191.510588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  191.511152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  191.555743] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  191.559349] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  191.563963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  191.571301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  191.625065] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  191.632094] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  191.634064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  191.647322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  191.647368] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  191.664171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  192.706970] Bluetooth: hci0: command tx timeout
[  192.899796] Bluetooth: hci3: command tx timeout
[  193.026754] Bluetooth: hci1: command tx timeout
[  193.027469] Bluetooth: hci2: command tx timeout
[  193.219686] Bluetooth: hci4: command tx timeout
[  193.731908] Bluetooth: hci7: command tx timeout
[  193.732737] Bluetooth: hci5: command tx timeout
[  193.794789] Bluetooth: hci6: command tx timeout
[  194.756748] Bluetooth: hci0: command tx timeout
[  194.947827] Bluetooth: hci3: command tx timeout
[  195.076457] Bluetooth: hci1: command tx timeout
[  195.076489] Bluetooth: hci2: command tx timeout
[  195.269645] Bluetooth: hci4: command tx timeout
[  195.778906] Bluetooth: hci7: command tx timeout
[  195.779069] Bluetooth: hci5: command tx timeout
[  195.842983] Bluetooth: hci6: command tx timeout
[  196.802702] Bluetooth: hci0: command tx timeout
[  196.994674] Bluetooth: hci3: command tx timeout
[  197.123026] Bluetooth: hci1: command tx timeout
[  197.124188] Bluetooth: hci2: command tx timeout
[  197.315679] Bluetooth: hci4: command tx timeout
[  197.827687] Bluetooth: hci5: command tx timeout
[  197.827816] Bluetooth: hci7: command tx timeout
[  197.890696] Bluetooth: hci6: command tx timeout
[  198.851500] Bluetooth: hci0: command tx timeout
[  199.043878] Bluetooth: hci3: command tx timeout
[  199.170879] Bluetooth: hci2: command tx timeout
[  199.171159] Bluetooth: hci1: command tx timeout
[  199.362654] Bluetooth: hci4: command tx timeout
[  199.874752] Bluetooth: hci7: command tx timeout
[  199.877621] Bluetooth: hci5: command tx timeout
[  199.939760] Bluetooth: hci6: command tx timeout
[  251.031185] syz-executor.7 (2970) used greatest stack depth: 24328 bytes left
[  253.274036] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  253.278987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  253.282156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  253.290565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  253.296251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  253.586123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  253.591486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  253.593846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  253.602891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  253.609562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  253.718955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  253.721443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  253.723912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  253.729119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  253.732274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  253.790122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  253.799101] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.802421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  253.805946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  253.812356] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.814277] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  253.819978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  253.826026] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.833206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.842975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.871141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.887394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.897207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.956231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  253.958177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.963304] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  253.970587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  253.993493] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  253.997729] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  254.006874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  254.024941] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  254.038053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  254.043292] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  254.101286] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  254.165927] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  255.362694] Bluetooth: hci0: command tx timeout
[  255.682725] Bluetooth: hci1: command tx timeout
[  255.746978] Bluetooth: hci2: command tx timeout
[  255.938817] Bluetooth: hci4: command tx timeout
[  256.002965] Bluetooth: hci5: command tx timeout
[  256.130733] Bluetooth: hci6: command tx timeout
[  256.130965] Bluetooth: hci3: command tx timeout
[  256.259155] Bluetooth: hci7: command tx timeout
[  257.410740] Bluetooth: hci0: command tx timeout
[  257.731762] Bluetooth: hci1: command tx timeout
[  257.794669] Bluetooth: hci2: command tx timeout
[  257.986892] Bluetooth: hci4: command tx timeout
[  258.050764] Bluetooth: hci5: command tx timeout
[  258.178795] Bluetooth: hci6: command tx timeout
[  258.178951] Bluetooth: hci3: command tx timeout
[  258.306946] Bluetooth: hci7: command tx timeout
[  259.459144] Bluetooth: hci0: command tx timeout
[  259.780669] Bluetooth: hci1: command tx timeout
[  259.843379] Bluetooth: hci2: command tx timeout
[  260.035098] Bluetooth: hci4: command tx timeout
[  260.098770] Bluetooth: hci5: command tx timeout
[  260.226810] Bluetooth: hci3: command tx timeout
[  260.226936] Bluetooth: hci6: command tx timeout
[  260.354774] Bluetooth: hci7: command tx timeout
[  261.506671] Bluetooth: hci0: command tx timeout
[  261.826667] Bluetooth: hci1: command tx timeout
[  261.890727] Bluetooth: hci2: command tx timeout
[  262.082679] Bluetooth: hci4: command tx timeout
[  262.146670] Bluetooth: hci5: command tx timeout
[  262.274752] Bluetooth: hci3: command tx timeout
[  262.275972] Bluetooth: hci6: command tx timeout
[  262.403834] Bluetooth: hci7: command tx timeout
[  315.861667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  315.869194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  315.873869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  315.883402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  315.887683] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  316.052111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  316.058320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  316.061073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  316.067906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  316.079255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  316.083126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  316.085100] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  316.087983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  316.098269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  316.102435] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  316.109787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.126579] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.130205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.136438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.152358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.230154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.248443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.287770] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.290257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.302409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.313121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.326439] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.330528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.374639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.403179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.669720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.686956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.702073] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.717881] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.719289] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.743062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.752935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.752933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.801191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.823252] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  317.956703] Bluetooth: hci0: command tx timeout
[  318.146862] Bluetooth: hci1: command tx timeout
[  318.210751] Bluetooth: hci3: command tx timeout
[  318.338816] Bluetooth: hci2: command tx timeout
[  318.467782] Bluetooth: hci4: command tx timeout
[  318.594871] Bluetooth: hci5: command tx timeout
[  318.915749] Bluetooth: hci7: command tx timeout
[  318.916907] Bluetooth: hci6: command tx timeout
[  320.002976] Bluetooth: hci0: command tx timeout
[  320.194674] Bluetooth: hci1: command tx timeout
[  320.259784] Bluetooth: hci3: command tx timeout
[  320.388636] Bluetooth: hci2: command tx timeout
[  320.515678] Bluetooth: hci4: command tx timeout
[  320.643747] Bluetooth: hci5: command tx timeout
[  320.962771] Bluetooth: hci7: command tx timeout
[  320.962824] Bluetooth: hci6: command tx timeout
[  322.050727] Bluetooth: hci0: command tx timeout
[  322.244000] Bluetooth: hci1: command tx timeout
[  322.307708] Bluetooth: hci3: command tx timeout
[  322.435172] Bluetooth: hci2: command tx timeout
[  322.562776] Bluetooth: hci4: command tx timeout
[  322.690696] Bluetooth: hci5: command tx timeout
[  323.010844] Bluetooth: hci7: command tx timeout
[  323.011037] Bluetooth: hci6: command tx timeout
[  324.099834] Bluetooth: hci0: command tx timeout
[  324.290726] Bluetooth: hci1: command tx timeout
[  324.354711] Bluetooth: hci3: command tx timeout
[  324.484656] Bluetooth: hci2: command tx timeout
[  324.610888] Bluetooth: hci4: command tx timeout
[  324.739652] Bluetooth: hci5: command tx timeout
[  325.058708] Bluetooth: hci6: command tx timeout
[  325.058932] Bluetooth: hci7: command tx timeout
[  378.010575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.015502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.020581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.028098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.032468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  378.275328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  378.280166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  378.283553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  378.290447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  378.295217] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  378.400191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  378.408509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  378.413406] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  378.426547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  378.438340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  378.488036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  378.504796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  378.525833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  378.578524] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  378.581320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  378.586139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  378.588359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  378.590903] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  378.603219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  378.607434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  378.610576] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  378.650467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  378.667757] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  378.674157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  378.676834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  378.700965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  378.704132] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  378.709825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  378.715826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  378.718193] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  378.726419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  378.735246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  378.742195] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  378.780046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  378.805535] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  380.098947] Bluetooth: hci0: command tx timeout
[  380.354942] Bluetooth: hci1: command tx timeout
[  380.546950] Bluetooth: hci2: command tx timeout
[  380.674684] Bluetooth: hci3: command tx timeout
[  380.738672] Bluetooth: hci4: command tx timeout
[  380.867857] Bluetooth: hci5: command tx timeout
[  380.868193] Bluetooth: hci6: command tx timeout
[  380.869094] Bluetooth: hci7: command tx timeout
[  382.146653] Bluetooth: hci0: command tx timeout
[  382.402678] Bluetooth: hci1: command tx timeout
[  382.595711] Bluetooth: hci2: command tx timeout
[  382.722713] Bluetooth: hci3: command tx timeout
[  382.787009] Bluetooth: hci4: command tx timeout
[  382.914707] Bluetooth: hci5: command tx timeout
[  382.915218] Bluetooth: hci6: command tx timeout
[  382.915698] Bluetooth: hci7: command tx timeout
[  384.194704] Bluetooth: hci0: command tx timeout
[  384.450774] Bluetooth: hci1: command tx timeout
[  384.642848] Bluetooth: hci2: command tx timeout
[  384.770672] Bluetooth: hci3: command tx timeout
[  384.834815] Bluetooth: hci4: command tx timeout
[  384.963352] Bluetooth: hci7: command tx timeout
[  384.964133] Bluetooth: hci6: command tx timeout
[  384.964565] Bluetooth: hci5: command tx timeout
[  386.242708] Bluetooth: hci0: command tx timeout
[  386.499671] Bluetooth: hci1: command tx timeout
[  386.691051] Bluetooth: hci2: command tx timeout
[  386.818704] Bluetooth: hci3: command tx timeout
[  386.882733] Bluetooth: hci4: command tx timeout
[  387.010745] Bluetooth: hci5: command tx timeout
[  387.011262] Bluetooth: hci6: command tx timeout
[  387.011746] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
06:21:17  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88802acd7410 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff81350bc2 RDI=ffffffff85c1bac0 RBP=ffffffff85c1bac0 RSP=ffff88806ce08988
R8 =0000000000000001 R9 =ffff88806ce08a90 R10=000000000003b0c2 R11=000000000000e4cf
R12=ffffffff81350bc2 R13=ffff88806ce08a98 R14=ffff88802acd73e0 R15=ffff88806ce08a50
RIP=ffffffff815a7725 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e564b000 00000000 00000000
LDT=0000 fffffe0b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc1e9535610 CR3=000000002e5ae000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff8880134f3780 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff85c1bac0 RBP=0000000000000000 RSP=ffff88802e35f4d0
R8 =0000000000000000 R9 =ffffffff87a255c8 R10=0000000000000000 R11=0000000000000003
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151627f RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555797d3400 00000000 00000000
GS =0000 ffff8880e574b000 00000000 00000000
LDT=0000 fffffe0600000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5a5cc26f4 CR3=00000000305c6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000ff0000000000ff
XMM02=000000ff000000ff000000ff000000ff XMM03=ff00000000000000ff0000000000ff00
XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000