Warning: Permanently added '[localhost]:53609' (ECDSA) to the list of known hosts.
2025/06/05 02:31:20 fuzzer started
2025/06/05 02:31:20 dialing manager at localhost:42669
syzkaller login: [   94.590752] cgroup: Unknown subsys name 'net'
[   94.746232] cgroup: Unknown subsys name 'cpuset'
[   94.799157] cgroup: Unknown subsys name 'rlimit'
2025/06/05 02:31:38 syscalls: 201
2025/06/05 02:31:38 code coverage: enabled
2025/06/05 02:31:38 comparison tracing: enabled
2025/06/05 02:31:38 extra coverage: enabled
2025/06/05 02:31:38 setuid sandbox: enabled
2025/06/05 02:31:38 namespace sandbox: enabled
2025/06/05 02:31:38 Android sandbox: enabled
2025/06/05 02:31:38 fault injection: enabled
2025/06/05 02:31:38 leak checking: enabled
2025/06/05 02:31:38 net packet injection: enabled
2025/06/05 02:31:38 net device setup: enabled
2025/06/05 02:31:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/05 02:31:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/05 02:31:38 USB emulation: enabled
2025/06/05 02:31:38 hci packet injection: enabled
2025/06/05 02:31:38 wifi device emulation: enabled
2025/06/05 02:31:38 802.15.4 emulation: enabled
2025/06/05 02:31:38 fetching corpus: 0, signal 0/0 (executing program)
2025/06/05 02:31:40 starting 8 fuzzer processes
02:31:40 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/7, 0x7, 0x1, &(0x7f00000001c0)}, &(0x7f0000000240)=0x40)
prctl$PR_GET_THP_DISABLE(0x2a)
remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x7fff, 0xcb10d420b8c9f728)
prctl$PR_GET_THP_DISABLE(0x2a)
socket$inet6_tcp(0xa, 0x1, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mremap(&(0x7f0000fea000/0x13000)=nil, 0x13000, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil)
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008054}, 0x20000)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x420, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80800}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x24000840)
rt_sigaction(0x1, &(0x7f0000000640)={&(0x7f0000000580)="8f49909b8700000100660f380ac3c4e1b972f279410fc749008f6978db1b0f0f8b4900000097660f3833aae7ed0000c4a17e1091f7ff0000c482e53b0fc462918c6600", 0x80000000, &(0x7f0000000600)="c40259b73e8f89b896e40f3accef0045d143068fe878c17a000cfb64f245a6c46195de098f8978c14702f00fc74b00", {[0x101]}}, &(0x7f0000000700)={&(0x7f0000000680)="f2440fa3a707000000c4223d9666fec421e1650bf20f1b800a00000066430f1bd1c4a27d0f01c4630548e402c4e1a9f21146018cc1ef440000f246def5", 0x0, &(0x7f00000006c0)="400f531ef3406ec441f917690d8f6978cbecc4a295912cd4c4819dd89a0c000000f040800357f3440f0f9d28eb10010d363edef5c4412e2a30"}, 0x8, &(0x7f0000000740))
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='auxv\x00')
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x200)
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80800020}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x24, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xe00a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040045}, 0x40000)

02:31:40 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timerslack_ns\x00')
mq_notify(r0, &(0x7f0000000040)={0x0, 0x37, 0x2, @tid=0xffffffffffffffff})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = fork()
r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/vlan/config\x00')
r3 = accept4(r2, 0x0, &(0x7f00000001c0), 0x800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)="28deef5fa6c150d3e257680bdf37c0673de25af6114ce02b6c543852d4b7eb1a60da097ec0d5ca40300c41c5cd21d88144d681bdf703ae5d322f9368f633d10a18b24eb44acbd37c1fe7a2857c3aac4f3eae705cb4c57268f2df9d596c3c8ea74122e4310728161de223328d7a8281669f9f15f8baf52e68f09784d3b96ebe8f5bcafaff2bca75069c6c859a9962cbe66ed2f756a59abbabfd1b2e3e1e05adc490ec73a65a1d3f1c8b9e05ff658a4dc10dd0469e731017141c0c8b7d3d", 0xbd, r3}, 0x68)
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000)
pipe2(&(0x7f0000000280)={<r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x8100, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x2, 0x10, r5, 0x0)
pkey_alloc(0x0, 0x0)
mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r4, 0x8001)
r6 = io_uring_setup(0x41a, &(0x7f0000000300)={0x0, 0xe84c, 0x4, 0x2, 0x22c})
r7 = io_uring_setup(0x2c11, &(0x7f0000000380)={0x0, 0xab53, 0x10, 0x0, 0x3af, 0x0, r6})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0xc, 0x50, r7, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/30, 0x1e, 0x0, &(0x7f0000000440)=""/110, 0x6e}, &(0x7f0000000500)=0x40)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000540)={0xbc2, "963f13"}, 0x6)
accept4(r4, &(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x80, 0x400)

02:31:40 executing program 2:
personality(0x5000004)
personality(0x6)
personality(0x400000b)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x73, 0xfffffffffffffe01, 0x5, 0x2, 0x6}, &(0x7f0000000040)={0xabb8, 0x7, 0x800, 0x9, 0xff, 0xf66e, 0x8000, 0xb81c}, &(0x7f0000000080)={0x5, 0xa4e, 0x1cc0, 0x2, 0x8, 0x7, 0x1, 0xa79}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8})
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x32fd1000)
r0 = syz_io_uring_setup(0x12fd, &(0x7f0000000180)={0x0, 0xa33c, 0x4, 0x1, 0x267}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240))
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x50, 0xffffffffffffffff, 0x10000000)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x5, 0x0, r3, &(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0x4, 0x400, 0x1}, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440)="2454d7b61c06513a2b9cfa162ed543a8f248e7e5747fef53db1978d7a61765b157083a099da8da820658a70f51b71db2e1cba9b2dce2d5fee2af63c108e1925b13f3306a75af88e40fa305fc4337696a18151672461dce7fdba3bf5556d665f7596c5d38bd970a3514ed1638066ce6f6af98758e9cdc721c177bce4c4d8af3bc1480496878fb2cbee3063551c65d4aa359b203c7ff03a1f564aad85c09c8b96287113d2fc575084650f4d3cc24f30239a58f7bbc01fc2564a4e38a731300d3c1ba461cb01b1e5b7e7ed0048a8f543976238f247d24da44ffae6422c20b6c649db20c71c45c50fa74f88339421afa536f66", 0xf1, r3}, 0x68)
r4 = accept4(r3, 0x0, &(0x7f00000005c0), 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000600)=@qipcrtr, &(0x7f0000000680)=0x80, 0x80800)
clock_gettime(0x0, &(0x7f00000006c0)={<r5=>0x0, <r6=>0x0})
clock_nanosleep(0x6, 0x1, &(0x7f0000000700)={r5, r6+60000000}, &(0x7f0000000740))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='net/llc/core\x00')
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r7, 0x10000000)
get_robust_list(0xffffffffffffffff, &(0x7f0000000900)=&(0x7f00000008c0)={&(0x7f0000000800)={&(0x7f00000007c0)}, 0x0, &(0x7f0000000880)={&(0x7f0000000840)}}, &(0x7f0000000940)=0x18)
accept4(r4, &(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000a00)=0x80, 0x800)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0xcd230000)

02:31:40 executing program 3:
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/234, &(0x7f0000000100)=0xea)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @none}, 0x8)
r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "d3af1912378301e24d473a5d0071dc489956122acffc258368b8ec5f3fca569302905c059b82cf309e194177bff93842d1880dc1482d6ebc6ca70fc7df28ad21", 0x28}, 0x48, 0xfffffffffffffffe)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0x80, 0x80000)
getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000340)=""/116, &(0x7f00000003c0)=0x74)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$link(0x8, r0, r3)
mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1)
rt_sigtimedwait(&(0x7f0000000480)={[0x1000]}, &(0x7f00000004c0), &(0x7f0000000540), 0x8)
ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000580)={0xd, 0xfff})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "c4754dac3041123c14e4795520a5ea6907758e88693b5b75fa9056454522498dc4aa57c16d04b7bc0dc0d5ab371af27794d8b9c3bb14f3de5cee18839167245c", 0x40}, 0x48, r0)
r5 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "2ba3618767743e5f56bac1ea2222723377afbaa802c6feeb3701d0e7ccadef880d16b259074a41029800c1e62a830ea3716c57f4ac161cf150d1f4aa2772e48f", 0x19}, 0x48, 0xfffffffffffffffa)
keyctl$negate(0xd, r4, 0xfff, r5)
ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000007c0)={0xd, 0x1})
r6 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc3}, &(0x7f0000000900)={0x0, "b5014452ad7924700d28c184ff62396097dded8d4adcc2de2c7408a6fb891636124f8bd9d3ae14206ac7d298456b81588c14bc03c531315bf7e150c5cb5cee63", 0x27}, 0x48, 0xfffffffffffffffa)
add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, r6)

02:31:40 executing program 4:
rt_sigqueueinfo(0xffffffffffffffff, 0x30, &(0x7f0000000000)={0x2, 0x5, 0x3})
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66)
r0 = fork()
syz_open_procfs(r0, &(0x7f0000000140)='cgroup\x00')
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none}, 0x8)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0)
connect$bt_sco(r1, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000280)={0x40, 0x3, 0x8000, 0x1ff}, &(0x7f00000002c0))
r2 = fork()
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000300))
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xd5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x81)
ioprio_get$pid(0x1, r0)
syz_open_pts(r1, 0x40800)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), 0xffffffffffffffff)
bind$bt_l2cap(r1, &(0x7f0000000480)={0x1f, 0x1000, @none, 0x32, 0x1}, 0xe)
sched_rr_get_interval(r2, &(0x7f00000004c0))
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x8003, 0x0)
mq_getsetattr(r3, &(0x7f0000000540)={0xcde, 0x5, 0x401, 0x101}, &(0x7f0000000580))
write$snapshot(r1, &(0x7f00000005c0)="7059614fb7bf8c5fb8fb554c11de7a50247163acf2da7534cb5c2ac9bc6fdc6319bc1abbbd53ee62d7a8945b61b849d87f284bdca59c13c3ace2ef941118b6a35295bbffa043bd03a41637448310fcc56d7afa4fab93022ade545c4dab6aa5e8d3b9376ea2b11b95", 0x68)

[  114.135685] audit: type=1400 audit(1749090700.501:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
02:31:40 executing program 5:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x400)
r1 = syz_open_pts(r0, 0x22a243)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000008, 0x110, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2004, @fd=r1, 0x5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000100)=""/200, 0xc8}], 0x4, 0x14}, 0x7ff)
shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x80010, r0, 0xc11a7000)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x432000, 0x0)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x1)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}, 0xaa)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300), 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/cgroup\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000f78000/0x3000)=nil, &(0x7f0000c1c000/0x1000)=nil, &(0x7f0000ec5000/0x1000)=nil, &(0x7f0000d71000/0x3000)=nil, &(0x7f0000d9f000/0x1000)=nil, &(0x7f0000f52000/0x2000)=nil, &(0x7f0000c10000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a7e000/0x2000)=nil, &(0x7f0000bab000/0x2000)=nil, &(0x7f0000000340)="d5cc117efa045802d167ad90edadefe241dd88a2af33f518564273a7ad0ec02189d7314294235b7e1c54422ca52a6260223aa928eaeb25b7b7dfc28b0cd68b2e05ef07f0cf20b6e6aa521b29c617858b12d4e99140d9551280d222e6954a6f63b2b7a71bb766e88e1bcfb8ed781bf1612923253737e939eedffc902ee2ab099eb5ede5670d5203cd309c46b1c02813dc5cf99d6bdc907a155d4a5dc900ab5f95398f2d636a687155d02d1d0a294c596f61cb2fe121316df624890333c353", 0xbe, r4}, 0x68)
ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
pipe2(&(0x7f00000004c0)={<r5=>0xffffffffffffffff}, 0x800)
write$vga_arbiter(r5, &(0x7f0000000500)=@other={'trylock', ' ', 'io'}, 0xb)
r6 = accept4(r5, 0x0, &(0x7f0000000540), 0x0)
write$nbd(r6, &(0x7f0000000580)={0x67446698, 0x0, 0x2, 0x0, 0x1, "12b766995d626a8e65e8bcf2e12a6fd7268b6454f36a14e469e54a9bc0eb3f54b4e4bf44c6dc12ae7efb0ef398c950e7c8bc8d5bd0dbffb3fdaae7972d4f1596f4697d140054314d786263b8d958d877a28385a9500e32bd9815ac0fa88901762c018f4108e88462c329b27090c255769396a3117e4614ec78aee746ba3d4cfb4fd13a5b94ae3981b6c6238712aaecb9e01b82614f83e281987ea6fefba902484469a39a85ee864e94937616f2fb414454751b5ebe29b8a64f620624"}, 0xcc)

02:31:40 executing program 6:
set_thread_area(&(0x7f0000000000)={0x1, 0x100000, 0x2000, 0x1, 0x1, 0x1, 0x1, 0x1})
set_thread_area(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
modify_ldt$write2(0x11, &(0x7f0000000080)={0x1ff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/200, &(0x7f00000001c0)=0xc8)
modify_ldt$write2(0x11, &(0x7f0000000200)={0xfffffff8, 0x20001000, 0x400, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x10)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000240)={0x1f, @none}, 0x8)
set_thread_area(&(0x7f0000000280)={0x8, 0x0, 0x4000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1})
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000300), &(0x7f0000000340))
getsockname(r0, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x80)
set_thread_area(&(0x7f0000000440)={0x5, 0xffffffffffffffff, 0x400, 0x1, 0x0, 0x1, 0x1})
r1 = fork()
rt_sigqueueinfo(r1, 0x2c, &(0x7f0000000480)={0x1a, 0x3, 0x5})
connect$bt_sco(r0, &(0x7f0000000500)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
getsockname(r0, &(0x7f0000000540)=@l2, &(0x7f00000005c0)=0x80)
socketpair(0x25, 0x800, 0x8, &(0x7f0000000600)={<r2=>0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4)
r3 = fork()
ptrace$peek(0x3, r3, &(0x7f00000006c0))
set_thread_area(&(0x7f0000000700)={0x7, 0x40002800, 0x400, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1})

02:31:40 executing program 7:
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x3}, 0x1, 0x2}, 0xe)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x80, @none, 0x3}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x9, 0x0, 0xd2, 0x1}, 0xc)
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff})
r2 = accept4(r1, &(0x7f00000001c0)=@ethernet={0x0, @remote}, &(0x7f0000000240)=0x80, 0x80800)
connect$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x3000, @none, 0x5, 0x1}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='numa_maps\x00')
accept4(r3, &(0x7f0000000300)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @bcast, @rose, @default, @remote, @netrom, @bcast]}, &(0x7f0000000380)=0x80, 0x80000)
connect$bt_sco(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, @none}, 0x8)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r3, 0x10000000)
clock_gettime(0x0, &(0x7f0000000400)={<r5=>0x0, <r6=>0x0})
syz_io_uring_submit(0x0, r4, &(0x7f0000000480)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000440)={r5, r6+60000000}, 0x1, 0x0, 0x1}, 0x7)
syz_io_uring_setup(0x4bb2, &(0x7f00000004c0)={0x0, 0xe15a, 0x10, 0x0, 0x176}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000540)=<r7=>0x0, &(0x7f0000000580))
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xc4012, r1, 0x10000000)
syz_io_uring_submit(r7, r8, &(0x7f0000000680)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x9594, 0x0, &(0x7f00000005c0)="b14b83bebf76ea5ac00bc59af0f57f9ffbe09ad63ba406b8e1f17b77746f6e6d40f3a59136675edef8481b0d04e0ad0e2d3f4405c54ec754a209ebad8b5b19511b50972ccd4b51334168abd90b9cc75bb66c1a531c286e4f250b4237133284ad7e42c1fb18420a4d5d492347dc0857918cfd553431ca17832f101ae1108aa8c727eb6f4c30bb338169e2b86f31b3210e8612b8cdb1f3a199e5646381e3fbef610c991e534e23bcebf9ce4b0a3de20590aa242db7964f253c3e51", 0x5, 0x0, 0x0, {0x1}}, 0x2)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs2/binder0\x00', 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000006c0)="b2ea4621aca0c8a404fbafbbe2dfc16d29e16fa89b77a2c607c120a6309952defb69934ed407bb699fdbc6f0d17294af535d5ca98e65545b60ef51d9c2be163232395b510c43756644d714bdf6834d3c5e4f21525689298db9679a376c78e51c35753fe8af3cafd961e697717c05e4fa7eca37214118d3a43702d0a45343caf204886149fb58cbf3abb034a4959c259325c61d968d7c0307b1859bf8a238f988177d79feebff7cc1", 0xa8, r9}, 0x68)

[  115.670331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.672800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.675403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.683175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.697888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.699575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.701153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  115.703004] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  115.706775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  115.708412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.709704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.725611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  115.731675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.735026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.745872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.748819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.751623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.755439] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.759906] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.761022] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.764142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  115.765750] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.770940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.779126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  115.780463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.782189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  115.786180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.792546] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.793426] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  115.796803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  115.797558] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  115.804887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.811749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.819185] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  115.821363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.825773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  115.832132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.846713] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  115.846730] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  115.903781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  117.815831] Bluetooth: hci0: command tx timeout
[  117.815834] Bluetooth: hci1: command tx timeout
[  117.816164] Bluetooth: hci2: command tx timeout
[  117.879789] Bluetooth: hci3: command tx timeout
[  117.880600] Bluetooth: hci4: command tx timeout
[  117.880691] Bluetooth: hci5: command tx timeout
[  117.943390] Bluetooth: hci6: command tx timeout
[  118.007869] Bluetooth: hci7: command tx timeout
[  119.863499] Bluetooth: hci2: command tx timeout
[  119.865240] Bluetooth: hci0: command tx timeout
[  119.865290] Bluetooth: hci1: command tx timeout
[  119.927436] Bluetooth: hci3: command tx timeout
[  119.927944] Bluetooth: hci4: command tx timeout
[  119.928408] Bluetooth: hci5: command tx timeout
[  119.993342] Bluetooth: hci6: command tx timeout
[  120.056391] Bluetooth: hci7: command tx timeout
[  121.911615] Bluetooth: hci1: command tx timeout
[  121.912134] Bluetooth: hci0: command tx timeout
[  121.912185] Bluetooth: hci2: command tx timeout
[  121.975453] Bluetooth: hci5: command tx timeout
[  121.975488] Bluetooth: hci4: command tx timeout
[  121.975956] Bluetooth: hci3: command tx timeout
[  122.039556] Bluetooth: hci6: command tx timeout
[  122.103491] Bluetooth: hci7: command tx timeout
[  123.959622] Bluetooth: hci1: command tx timeout
[  123.960144] Bluetooth: hci0: command tx timeout
[  123.960510] Bluetooth: hci2: command tx timeout
[  124.023376] Bluetooth: hci4: command tx timeout
[  124.023881] Bluetooth: hci3: command tx timeout
[  124.024360] Bluetooth: hci5: command tx timeout
[  124.087414] Bluetooth: hci6: command tx timeout
[  124.152073] Bluetooth: hci7: command tx timeout
[  177.923508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.926720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.928183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.936171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.940986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.066683] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.070175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.072826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.083667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.084691] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.090986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.095501] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.098474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.117478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.122209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.198168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.200335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.203951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.211141] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.215784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.260907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.266250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.273923] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.277633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.279110] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.282045] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.285089] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.300084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.318246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.320419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.321838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.326375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.329049] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  178.365136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.365851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.387935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.389211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.395906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.401424] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.404422] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  180.024382] Bluetooth: hci0: command tx timeout
[  180.215389] Bluetooth: hci1: command tx timeout
[  180.215460] Bluetooth: hci2: command tx timeout
[  180.343346] Bluetooth: hci3: command tx timeout
[  180.407413] Bluetooth: hci6: command tx timeout
[  180.407550] Bluetooth: hci7: command tx timeout
[  180.472358] Bluetooth: hci4: command tx timeout
[  180.536407] Bluetooth: hci5: command tx timeout
[  182.072376] Bluetooth: hci0: command tx timeout
[  182.264318] Bluetooth: hci2: command tx timeout
[  182.264387] Bluetooth: hci1: command tx timeout
[  182.391589] Bluetooth: hci3: command tx timeout
[  182.455724] Bluetooth: hci7: command tx timeout
[  182.455725] Bluetooth: hci6: command tx timeout
[  182.520730] Bluetooth: hci4: command tx timeout
[  182.583631] Bluetooth: hci5: command tx timeout
[  184.120174] Bluetooth: hci0: command tx timeout
[  184.311401] Bluetooth: hci2: command tx timeout
[  184.311916] Bluetooth: hci1: command tx timeout
[  184.439466] Bluetooth: hci3: command tx timeout
[  184.503605] Bluetooth: hci7: command tx timeout
[  184.503626] Bluetooth: hci6: command tx timeout
[  184.567357] Bluetooth: hci4: command tx timeout
[  184.632349] Bluetooth: hci5: command tx timeout
[  186.167396] Bluetooth: hci0: command tx timeout
[  186.359401] Bluetooth: hci1: command tx timeout
[  186.359889] Bluetooth: hci2: command tx timeout
[  186.488385] Bluetooth: hci3: command tx timeout
[  186.551387] Bluetooth: hci6: command tx timeout
[  186.552707] Bluetooth: hci7: command tx timeout
[  186.615482] Bluetooth: hci4: command tx timeout
[  186.679443] Bluetooth: hci5: command tx timeout
[  240.144302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.148517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.153917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.162942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.169897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.338971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.343926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.346836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.355742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.359065] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.398509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.402907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.405035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.425889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.444800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.465110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  240.479742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  240.482320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  240.506030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  240.510382] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  240.557249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.567226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.583378] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.609970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.622543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.730029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.748796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.755474] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.762837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.774577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.779715] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.782111] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.800149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.820526] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.828978] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.834749] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  240.849740] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.851735] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.874202] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.911806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  242.231566] Bluetooth: hci0: command tx timeout
[  242.423368] Bluetooth: hci1: command tx timeout
[  242.552482] Bluetooth: hci2: command tx timeout
[  242.680332] Bluetooth: hci3: command tx timeout
[  242.743563] Bluetooth: hci4: command tx timeout
[  242.873549] Bluetooth: hci6: command tx timeout
[  242.999385] Bluetooth: hci5: command tx timeout
[  242.999992] Bluetooth: hci7: command tx timeout
[  244.280351] Bluetooth: hci0: command tx timeout
[  244.472344] Bluetooth: hci1: command tx timeout
[  244.600596] Bluetooth: hci2: command tx timeout
[  244.728539] Bluetooth: hci3: command tx timeout
[  244.792396] Bluetooth: hci4: command tx timeout
[  244.921021] Bluetooth: hci6: command tx timeout
[  245.048358] Bluetooth: hci7: command tx timeout
[  245.048794] Bluetooth: hci5: command tx timeout
[  246.328326] Bluetooth: hci0: command tx timeout
[  246.520325] Bluetooth: hci1: command tx timeout
[  246.648506] Bluetooth: hci2: command tx timeout
[  246.775364] Bluetooth: hci3: command tx timeout
[  246.840535] Bluetooth: hci4: command tx timeout
[  246.969367] Bluetooth: hci6: command tx timeout
[  247.095366] Bluetooth: hci5: command tx timeout
[  247.095817] Bluetooth: hci7: command tx timeout
[  248.376616] Bluetooth: hci0: command tx timeout
[  248.568620] Bluetooth: hci1: command tx timeout
[  248.696579] Bluetooth: hci2: command tx timeout
[  248.824329] Bluetooth: hci3: command tx timeout
[  248.887341] Bluetooth: hci4: command tx timeout
[  249.016309] Bluetooth: hci6: command tx timeout
[  249.144644] Bluetooth: hci5: command tx timeout
[  249.145078] Bluetooth: hci7: command tx timeout
[  302.858587] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.866344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.870250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.877447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.884461] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.934395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.939549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.943813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.950762] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.954796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.102103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.120700] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.128005] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.147578] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.151949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.154911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.164070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.169019] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.177630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.223317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.225058] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.232522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.240997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.248520] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.260197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.362249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.379918] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.386840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.411020] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.418962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.440009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.445190] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.455658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.471164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.478202] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.485708] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.486704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.491044] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.510147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.563546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.952612] Bluetooth: hci0: command tx timeout
[  305.016682] Bluetooth: hci1: command tx timeout
[  305.271869] Bluetooth: hci3: command tx timeout
[  305.336448] Bluetooth: hci2: command tx timeout
[  305.336677] Bluetooth: hci4: command tx timeout
[  305.591384] Bluetooth: hci5: command tx timeout
[  305.592436] Bluetooth: hci6: command tx timeout
[  305.784442] Bluetooth: hci7: command tx timeout
[  306.999386] Bluetooth: hci0: command tx timeout
[  307.063438] Bluetooth: hci1: command tx timeout
[  307.319588] Bluetooth: hci3: command tx timeout
[  307.385337] Bluetooth: hci4: command tx timeout
[  307.385418] Bluetooth: hci2: command tx timeout
[  307.639626] Bluetooth: hci6: command tx timeout
[  307.639716] Bluetooth: hci5: command tx timeout
[  307.832659] Bluetooth: hci7: command tx timeout
[  309.047930] Bluetooth: hci0: command tx timeout
[  309.112337] Bluetooth: hci1: command tx timeout
[  309.367766] Bluetooth: hci3: command tx timeout
[  309.431721] Bluetooth: hci2: command tx timeout
[  309.431786] Bluetooth: hci4: command tx timeout
[  309.687380] Bluetooth: hci6: command tx timeout
[  309.688596] Bluetooth: hci5: command tx timeout
[  309.879445] Bluetooth: hci7: command tx timeout
[  311.096652] Bluetooth: hci0: command tx timeout
[  311.160495] Bluetooth: hci1: command tx timeout
[  311.418464] Bluetooth: hci3: command tx timeout
[  311.479467] Bluetooth: hci4: command tx timeout
[  311.482525] Bluetooth: hci2: command tx timeout
[  311.736381] Bluetooth: hci5: command tx timeout
[  311.736400] Bluetooth: hci6: command tx timeout
[  311.927344] Bluetooth: hci7: command tx timeout
[  366.429997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  366.437977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  366.446020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  366.459818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  366.465955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  366.547545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.551858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.565916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.578879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.591541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.610074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.621563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.636798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.658140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.662462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  366.899447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  366.918945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  366.921905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  366.936775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  366.952549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  367.064487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  367.090697] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  367.105089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  367.114124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  367.132747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  367.138901] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  367.158770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  367.168920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  367.217854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  367.220207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  367.233715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.236088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  367.291801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.299085] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  367.346415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  367.351900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  367.355591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  367.366555] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.380648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  367.390732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.504524] Bluetooth: hci0: command tx timeout
[  368.631482] Bluetooth: hci1: command tx timeout
[  368.695699] Bluetooth: hci2: command tx timeout
[  369.015802] Bluetooth: hci3: command tx timeout
[  369.399737] Bluetooth: hci5: command tx timeout
[  369.463345] Bluetooth: hci7: command tx timeout
[  369.464341] Bluetooth: hci4: command tx timeout
[  369.592567] Bluetooth: hci6: command tx timeout
[  370.552319] Bluetooth: hci0: command tx timeout
[  370.680372] Bluetooth: hci1: command tx timeout
[  370.745126] Bluetooth: hci2: command tx timeout
[  371.064545] Bluetooth: hci3: command tx timeout
[  371.448386] Bluetooth: hci5: command tx timeout
[  371.512697] Bluetooth: hci4: command tx timeout
[  371.512974] Bluetooth: hci7: command tx timeout
[  371.641202] Bluetooth: hci6: command tx timeout
[  372.600425] Bluetooth: hci0: command tx timeout
[  372.729830] Bluetooth: hci1: command tx timeout
[  372.792842] Bluetooth: hci2: command tx timeout
[  373.112461] Bluetooth: hci3: command tx timeout
[  373.496441] Bluetooth: hci5: command tx timeout
[  373.559411] Bluetooth: hci7: command tx timeout
[  373.561813] Bluetooth: hci4: command tx timeout
[  373.687523] Bluetooth: hci6: command tx timeout
[  374.648602] Bluetooth: hci0: command tx timeout
[  374.775410] Bluetooth: hci1: command tx timeout
[  374.839361] Bluetooth: hci2: command tx timeout
[  375.159525] Bluetooth: hci3: command tx timeout
[  375.543351] Bluetooth: hci5: command tx timeout
[  375.607611] Bluetooth: hci4: command tx timeout
[  375.607637] Bluetooth: hci7: command tx timeout
[  375.735609] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
02:36:49  Registers:
info registers vcpu 0
RAX=0000000000000003 RBX=ffffea00001d86c0 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffffff819c5d2b RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88802d867878
R8 =0000000000000000 R9 =fffff9400003b0d8 R10=0000000000000000 R11=0000000000000001
R12=800000000761b025 R13=00007f0a52cd7000 R14=ffff88802d867ce0 R15=ffff88802d8679e0
RIP=ffffffff819c5d59 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f56067d36f4 CR3=000000000eb81000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f56067e247000007f56067e1f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000ffffffff RBX=0000000000000000 RCX=4b952e4da9267483 RDX=00000000915d54c6
RSI=000000005e406224 RDI=0000000000104185 RBP=ffffffff85c1cbc0 RSP=ffff888032987920
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b247 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f570edbf2f0 CR3=000000001bfb0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000