Warning: Permanently added '[localhost]:5268' (ECDSA) to the list of known hosts.
2025/06/06 23:30:08 fuzzer started
2025/06/06 23:30:09 dialing manager at localhost:40003
syzkaller login: [  100.440221] cgroup: Unknown subsys name 'net'
[  100.569665] cgroup: Unknown subsys name 'cpuset'
[  100.605312] cgroup: Unknown subsys name 'rlimit'
2025/06/06 23:30:25 syscalls: 208
2025/06/06 23:30:25 code coverage: enabled
2025/06/06 23:30:25 comparison tracing: enabled
2025/06/06 23:30:25 extra coverage: enabled
2025/06/06 23:30:25 setuid sandbox: enabled
2025/06/06 23:30:25 namespace sandbox: enabled
2025/06/06 23:30:25 Android sandbox: enabled
2025/06/06 23:30:25 fault injection: enabled
2025/06/06 23:30:25 leak checking: enabled
2025/06/06 23:30:25 net packet injection: enabled
2025/06/06 23:30:25 net device setup: enabled
2025/06/06 23:30:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/06 23:30:25 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/06 23:30:25 USB emulation: enabled
2025/06/06 23:30:25 hci packet injection: enabled
2025/06/06 23:30:25 wifi device emulation: enabled
2025/06/06 23:30:25 802.15.4 emulation: enabled
2025/06/06 23:30:25 fetching corpus: 0, signal 0/0 (executing program)
2025/06/06 23:30:27 starting 8 fuzzer processes
23:30:27 executing program 0:
geteuid()
geteuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=<r0=>0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=<r1=>0x0)
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r2=>0x0)
setuid(r2)
keyctl$setperm(0x5, 0x0, 0x40)
getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
shmctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x1, r1, 0x0, r0, 0xee01, 0x180, 0x2}, 0x5, 0x3, 0x10000, 0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0x40})
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580))
geteuid()
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000005c0)={0x1, 0x2, 0xffffffff, 0x800, 0xd4, 0x8})
r3 = getuid()
setuid(r3)
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000600)={0x4, 0x0, 0x3f, 0x6, 0x77, 0x64})
geteuid()
ioctl$CDROM_SET_OPTIONS(0xffffffffffffffff, 0x5320, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000001080)=""/120)

23:30:27 executing program 1:
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '-{\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x44010)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2a}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x4008014)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000}, 0x1011)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r3)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r5, 0x109, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
ioctl$CDROMVOLREAD(0xffffffffffffffff, 0x5313, &(0x7f0000000c40))
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), r6)

23:30:27 executing program 2:
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2db0c2904f13ced0, 0x30, 0xffffffffffffffff, 0x10000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x10001, 0x1, {0x3}}, 0xb4)
r3 = shmget(0x0, 0x1000, 0x108, &(0x7f0000ffe000/0x1000)=nil)
getgroups(0x1, &(0x7f0000000040)=[<r4=>0xffffffffffffffff])
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000080)={{0x1, 0x0, r4, 0xffffffffffffffff, 0x0, 0x80, 0x20}, 0x36, 0x8, 0x8, 0x5babe259, 0xffffffffffffffff, 0x0, 0x37})
shmctl$IPC_RMID(r3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000100))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000140)={'erspan0\x00', <r6=>0x0, 0x8, 0x1, 0x1, 0x70000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @empty, {[@noop, @noop]}}}}})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6, @remote}, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/llc/socket\x00')
ioctl$CDROM_LOCKDOOR(r7, 0x5329, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x0, 0x0, r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, &(0x7f0000000340)='./file0\x00', 0x200, 0x100, 0x1}, 0x8)
r9 = fork()
r10 = fork()
shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0x0, 0x0, 0xee00, 0xee01, r8, 0x79, 0x40}, 0x7, 0x3c, 0x330, 0x4, r9, r10, 0x1f})
shmget(0x3, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil)

[  118.081370] audit: type=1400 audit(1749252627.160:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:30:27 executing program 4:
r0 = epoll_create1(0x80000)
epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0xc2a1)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80000001)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x9e)
epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x1, &(0x7f0000000100), 0x8)
prctl$PR_SET_FPEXC(0xc, 0x80)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0)
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000140)={0x60, 0xee, 0x5, 0x2d})
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x12})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/llc/socket\x00')
epoll_pwait2(r2, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x6]}, 0x8)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='coredump_filter\x00')
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x3f, 0x2, 0x8, 0x3f}, {0x1, 0x40, 0x40, 0x4}, {0x1ff, 0x40, 0xd8, 0x80000000}, {0x1, 0x1f, 0x0, 0x6}, {0x9, 0x6, 0x1, 0x8}]}, 0x10)
ioctl$CDROMGETSPINDOWN(r2, 0x531d, &(0x7f00000003c0))
r4 = syz_open_dev$usbmon(&(0x7f0000000400), 0x5, 0x800)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x9, 0x4, {{0x11, 0x4, 0x1, 0x6, 0x44, 0x66, 0x0, 0x81, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x2c, 0x20, 0x0, 0x3, [0x1f, 0x77e1, 0x0, 0xa9, 0x4, 0x8, 0x5, 0x401, 0x3, 0x1000]}, @end]}}}}})

23:30:27 executing program 3:
read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/14, 0xe)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/44, 0x2c})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101800, 0x0)
ioctl$MON_IOCQ_URB_LEN(r0, 0x9201)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/120, 0x78})
ioctl$CDROMEJECT(r0, 0x5309)
r1 = epoll_create(0x80000001)
kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r0, r1, 0x4})
r2 = eventfd(0x400)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2)
r3 = epoll_create1(0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r4=>0x0, <r5=>0x0})
epoll_pwait2(r3, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000340)={r4, r5+10000000}, &(0x7f0000000380)={[0x4]}, 0x8)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200, 0x0)
ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x10, 0xb, 0xb, 0x12, 0x7, 0xc2, 0x2, 0x118, 0x1}})
r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$RTC_UIE_OFF(r7, 0x7004)
syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00')

23:30:27 executing program 5:
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x204201)
read$usbmon(r0, &(0x7f0000000080)=""/238, 0xee)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00')
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000300)={&(0x7f00000001c0), &(0x7f0000000200)=""/231, 0xe7})
syz_open_dev$usbmon(&(0x7f0000000340), 0xffffffff00000000, 0x0)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x410300, 0x0)
mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x8, 0x110, r2, 0x6)
r3 = syz_io_uring_setup(0x706, &(0x7f00000003c0)={0x0, 0xe656, 0x31, 0x1, 0x32f}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000480))
r4 = eventfd2(0x5, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000004c0)=r4, 0x1)
ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1)
r5 = syz_open_procfs(0x0, &(0x7f0000000500)='statm\x00')
read$usbmon(r5, &(0x7f0000000540)=""/103, 0x67)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0xf0982, 0x0)
ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0xff26)
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000680)={&(0x7f0000000600), &(0x7f0000000640)=""/6, 0x6})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2)
r7 = fork()
kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f})

23:30:27 executing program 6:
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000), &(0x7f0000000040)=""/44, 0x2c})
r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x180)
read$usbmon(r0, &(0x7f0000000100)=""/147, 0x93)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
read$usbmon(r0, &(0x7f00000001c0)=""/106, 0x6a)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x3f, 0x9, {{0x1d, 0x4, 0x1, 0x7, 0x74, 0x68, 0x0, 0x80, 0x2f, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0x13, 0x2d, [@loopback, @loopback, @local, @remote]}, @timestamp_prespec={0x44, 0x14, 0x87, 0x3, 0xd, [{@local, 0x2}, {@multicast2, 0x7}]}, @rr={0x7, 0x7, 0x4a, [@loopback]}, @end, @timestamp_addr={0x44, 0x2c, 0xc1, 0x1, 0x3, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x400}, {@empty}, {@multicast2, 0x1}]}, @ra={0x94, 0x4, 0x1}]}}}}})
socket$packet(0x11, 0x3, 0x300)
ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)
ioctl$CDROMVOLREAD(r2, 0x5313, &(0x7f0000000380))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/mcfilter6\x00')
ioctl$CDROMCLOSETRAY(r3, 0x5319)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)
r4 = syz_open_dev$usbmon(&(0x7f0000000440), 0x5, 0x20002)
ioctl$MON_IOCQ_URB_LEN(r4, 0x9201)
eventfd2(0x6, 0x80801)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x301001, 0x0)
ioctl$CDROM_TIMED_MEDIA_CHANGE(r5, 0x5396, &(0x7f00000004c0)={0x3, 0x1})

23:30:27 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x4})
ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x3)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x1d7000, 0x0)
ioctl$CDROMRESUME(r1, 0x5302)
r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
ioctl$CDROMEJECT(r2, 0x5309)
ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000100)={0x7, 0x0, 0x20, 0x4, 0x1f, 0x20})
ioctl$CDROMMULTISESSION(r1, 0x5310, &(0x7f0000000b80)={@lba=0x3, 0x1, 0x2})
socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$CDROMRESET(r2, 0x5312)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000c00)='cgroup.threads\x00', 0x2, 0x0)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x8000, 0x0)
ioctl$CDROMPLAYMSF(r4, 0x5303, &(0x7f0000000c80)={0x7f, 0xfc, 0x55, 0x80, 0x2, 0xec})
socket$inet_icmp(0x2, 0x2, 0x1)
select(0x40, &(0x7f0000000cc0)={0xdd6d, 0xfff, 0x3, 0x7ff, 0x1, 0x9, 0x10000, 0x40}, &(0x7f0000000d00)={0x5, 0x6, 0xb2f9, 0x7, 0x1, 0xcb, 0x6, 0x8000}, &(0x7f0000000d40)={0x3ff, 0x100000001, 0x3aa, 0x7, 0x5, 0x81, 0x38, 0x7f}, &(0x7f0000000d80))
ioctl$CDROM_DEBUG(r1, 0x5330, 0x1)
ioctl$CDROM_CHANGER_NSLOTS(r2, 0x5328)

[  119.686297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.689764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.693483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.699959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.703622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.776529] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  119.781386] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  119.786289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  119.797308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  119.802931] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  119.820621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.823319] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.829700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.842428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.848530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.865428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.879448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.895397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.898585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.899142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  119.904880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.912725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.922496] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  119.925477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.930822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  119.931728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  119.939978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.956658] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  119.959616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.959969] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  119.968738] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  119.969288] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  119.972318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  119.975488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  119.979558] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  119.984227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  119.992257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  119.994728] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  120.015894] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  120.034655] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  121.768851] Bluetooth: hci0: command tx timeout
[  121.897138] Bluetooth: hci1: command tx timeout
[  121.960364] Bluetooth: hci2: command tx timeout
[  122.024252] Bluetooth: hci3: command tx timeout
[  122.026522] Bluetooth: hci4: command tx timeout
[  122.088257] Bluetooth: hci5: command tx timeout
[  122.088345] Bluetooth: hci6: command tx timeout
[  122.090539] Bluetooth: hci7: command tx timeout
[  123.817207] Bluetooth: hci0: command tx timeout
[  123.944181] Bluetooth: hci1: command tx timeout
[  124.008080] Bluetooth: hci2: command tx timeout
[  124.072178] Bluetooth: hci4: command tx timeout
[  124.072366] Bluetooth: hci3: command tx timeout
[  124.136269] Bluetooth: hci7: command tx timeout
[  124.137726] Bluetooth: hci5: command tx timeout
[  124.137771] Bluetooth: hci6: command tx timeout
[  125.864941] Bluetooth: hci0: command tx timeout
[  125.993247] Bluetooth: hci1: command tx timeout
[  126.056244] Bluetooth: hci2: command tx timeout
[  126.122191] Bluetooth: hci4: command tx timeout
[  126.122245] Bluetooth: hci3: command tx timeout
[  126.186350] Bluetooth: hci6: command tx timeout
[  126.187073] Bluetooth: hci5: command tx timeout
[  126.187148] Bluetooth: hci7: command tx timeout
[  127.912455] Bluetooth: hci0: command tx timeout
[  128.040119] Bluetooth: hci1: command tx timeout
[  128.104141] Bluetooth: hci2: command tx timeout
[  128.168378] Bluetooth: hci4: command tx timeout
[  128.169185] Bluetooth: hci3: command tx timeout
[  128.233107] Bluetooth: hci7: command tx timeout
[  128.233553] Bluetooth: hci5: command tx timeout
[  128.233983] Bluetooth: hci6: command tx timeout
[  181.947901] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.950672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.952445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.957559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.959627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  182.020887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.021524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  182.029362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.031391] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  182.037382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.039549] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  182.060887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  182.064172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  182.073349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.077345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.158878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.160101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.165876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.166886] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.171672] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.172723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.179878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.183468] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  182.200429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.209650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.262793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  182.277857] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  182.334635] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  182.345495] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  182.350736] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  182.353602] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.357675] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.366823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  182.376758] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  182.402926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.427712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  182.434610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  182.434667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.474616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.499372] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  183.977139] Bluetooth: hci0: command tx timeout
[  184.168428] Bluetooth: hci2: command tx timeout
[  184.168756] Bluetooth: hci1: command tx timeout
[  184.233095] Bluetooth: hci4: command tx timeout
[  184.297089] Bluetooth: hci3: command tx timeout
[  184.424453] Bluetooth: hci7: command tx timeout
[  184.555244] Bluetooth: hci6: command tx timeout
[  184.616072] Bluetooth: hci5: command tx timeout
[  186.025320] Bluetooth: hci0: command tx timeout
[  186.216208] Bluetooth: hci2: command tx timeout
[  186.219315] Bluetooth: hci1: command tx timeout
[  186.280088] Bluetooth: hci4: command tx timeout
[  186.344227] Bluetooth: hci3: command tx timeout
[  186.472381] Bluetooth: hci7: command tx timeout
[  186.600374] Bluetooth: hci6: command tx timeout
[  186.664207] Bluetooth: hci5: command tx timeout
[  188.072073] Bluetooth: hci0: command tx timeout
[  188.267042] Bluetooth: hci1: command tx timeout
[  188.267076] Bluetooth: hci2: command tx timeout
[  188.328193] Bluetooth: hci4: command tx timeout
[  188.393256] Bluetooth: hci3: command tx timeout
[  188.520067] Bluetooth: hci7: command tx timeout
[  188.648215] Bluetooth: hci6: command tx timeout
[  188.713379] Bluetooth: hci5: command tx timeout
[  190.120244] Bluetooth: hci0: command tx timeout
[  190.312099] Bluetooth: hci2: command tx timeout
[  190.312339] Bluetooth: hci1: command tx timeout
[  190.376204] Bluetooth: hci4: command tx timeout
[  190.440412] Bluetooth: hci3: command tx timeout
[  190.569180] Bluetooth: hci7: command tx timeout
[  190.696209] Bluetooth: hci6: command tx timeout
[  190.760079] Bluetooth: hci5: command tx timeout
[  244.991888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.998264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.000259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.007628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.014473] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.113579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.125522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.130791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  245.134943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.137075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  245.141778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  245.148934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.154846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.156569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  245.172644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  245.190536] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  245.192517] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  245.203156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  245.217590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  245.221960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  245.316979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  245.324298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  245.327794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  245.338749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  245.348576] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  245.381782] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.397559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.410809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.443821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  245.457475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.459710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  245.462610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.468130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.484416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.492177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.503208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.503859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.520546] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  245.548693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  245.568444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  247.080085] Bluetooth: hci0: command tx timeout
[  247.272352] Bluetooth: hci1: command tx timeout
[  247.272485] Bluetooth: hci2: command tx timeout
[  247.401237] Bluetooth: hci3: command tx timeout
[  247.464098] Bluetooth: hci5: command tx timeout
[  247.593087] Bluetooth: hci4: command tx timeout
[  247.658274] Bluetooth: hci7: command tx timeout
[  247.658287] Bluetooth: hci6: command tx timeout
[  249.128280] Bluetooth: hci0: command tx timeout
[  249.322258] Bluetooth: hci2: command tx timeout
[  249.322291] Bluetooth: hci1: command tx timeout
[  249.448331] Bluetooth: hci3: command tx timeout
[  249.512173] Bluetooth: hci5: command tx timeout
[  249.642021] Bluetooth: hci4: command tx timeout
[  249.704359] Bluetooth: hci7: command tx timeout
[  249.704392] Bluetooth: hci6: command tx timeout
[  251.176074] Bluetooth: hci0: command tx timeout
[  251.368496] Bluetooth: hci1: command tx timeout
[  251.368600] Bluetooth: hci2: command tx timeout
[  251.497431] Bluetooth: hci3: command tx timeout
[  251.561308] Bluetooth: hci5: command tx timeout
[  251.688073] Bluetooth: hci4: command tx timeout
[  251.753101] Bluetooth: hci7: command tx timeout
[  251.753577] Bluetooth: hci6: command tx timeout
[  253.224407] Bluetooth: hci0: command tx timeout
[  253.416144] Bluetooth: hci2: command tx timeout
[  253.416181] Bluetooth: hci1: command tx timeout
[  253.545106] Bluetooth: hci3: command tx timeout
[  253.609143] Bluetooth: hci5: command tx timeout
[  253.736073] Bluetooth: hci4: command tx timeout
[  253.801120] Bluetooth: hci6: command tx timeout
[  253.801155] Bluetooth: hci7: command tx timeout
[  307.270594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.275571] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.286262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.301287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.310137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.390499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  307.395301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  307.399304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  307.409669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  307.415586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  307.607369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.617480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.621468] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.644531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.651366] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.692751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.710330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.716557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.738291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.759463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.866916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  307.873656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  307.893341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  307.914673] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  307.924666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.050707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  308.061710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  308.070814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.080599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.092093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  308.093740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.095493] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.127351] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.128840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  308.132730] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.156251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.158519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.165139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.206350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.235423] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.353068] Bluetooth: hci0: command tx timeout
[  309.481235] Bluetooth: hci1: command tx timeout
[  309.737076] Bluetooth: hci2: command tx timeout
[  309.864319] Bluetooth: hci3: command tx timeout
[  309.992339] Bluetooth: hci4: command tx timeout
[  310.248081] Bluetooth: hci6: command tx timeout
[  310.313544] Bluetooth: hci7: command tx timeout
[  310.314395] Bluetooth: hci5: command tx timeout
[  311.400572] Bluetooth: hci0: command tx timeout
[  311.528561] Bluetooth: hci1: command tx timeout
[  311.784448] Bluetooth: hci2: command tx timeout
[  311.912149] Bluetooth: hci3: command tx timeout
[  312.041433] Bluetooth: hci4: command tx timeout
[  312.296903] Bluetooth: hci6: command tx timeout
[  312.361153] Bluetooth: hci5: command tx timeout
[  312.362096] Bluetooth: hci7: command tx timeout
[  313.448130] Bluetooth: hci0: command tx timeout
[  313.576483] Bluetooth: hci1: command tx timeout
[  313.833036] Bluetooth: hci2: command tx timeout
[  313.960416] Bluetooth: hci3: command tx timeout
[  314.088436] Bluetooth: hci4: command tx timeout
[  314.345439] Bluetooth: hci6: command tx timeout
[  314.408100] Bluetooth: hci5: command tx timeout
[  314.408603] Bluetooth: hci7: command tx timeout
[  315.496056] Bluetooth: hci0: command tx timeout
[  315.624359] Bluetooth: hci1: command tx timeout
[  315.880144] Bluetooth: hci2: command tx timeout
[  316.008379] Bluetooth: hci3: command tx timeout
[  316.136348] Bluetooth: hci4: command tx timeout
[  316.392360] Bluetooth: hci6: command tx timeout
[  316.456126] Bluetooth: hci5: command tx timeout
[  316.456598] Bluetooth: hci7: command tx timeout
[  369.603208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  369.608442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  369.613341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  369.625238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  369.629512] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  369.789498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  369.797605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  369.801208] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  369.815797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  369.826777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  369.932657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  369.936511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  369.939773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  369.946805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  369.951623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  370.048484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  370.057571] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  370.059710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.063849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.070278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  370.074593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  370.077669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  370.080751] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.088837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  370.091231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.093893] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  370.097609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  370.104548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  370.115775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  370.127662] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  370.261864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  370.273087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  370.274606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  370.279623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  370.294614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  370.353175] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  370.363882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  370.369529] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  370.404765] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  370.437585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  371.688295] Bluetooth: hci0: command tx timeout
[  371.880104] Bluetooth: hci1: command tx timeout
[  372.009076] Bluetooth: hci2: command tx timeout
[  372.200114] Bluetooth: hci5: command tx timeout
[  372.201086] Bluetooth: hci4: command tx timeout
[  372.264079] Bluetooth: hci3: command tx timeout
[  372.520103] Bluetooth: hci6: command tx timeout
[  372.584655] Bluetooth: hci7: command tx timeout
[  373.736296] Bluetooth: hci0: command tx timeout
[  373.928168] Bluetooth: hci1: command tx timeout
[  374.056144] Bluetooth: hci2: command tx timeout
[  374.249135] Bluetooth: hci4: command tx timeout
[  374.249179] Bluetooth: hci5: command tx timeout
[  374.312203] Bluetooth: hci3: command tx timeout
[  374.570031] Bluetooth: hci6: command tx timeout
[  374.632093] Bluetooth: hci7: command tx timeout
[  375.785367] Bluetooth: hci0: command tx timeout
[  375.976063] Bluetooth: hci1: command tx timeout
[  376.104084] Bluetooth: hci2: command tx timeout
[  376.296738] Bluetooth: hci5: command tx timeout
[  376.297085] Bluetooth: hci4: command tx timeout
[  376.360321] Bluetooth: hci3: command tx timeout
[  376.616356] Bluetooth: hci6: command tx timeout
[  376.681031] Bluetooth: hci7: command tx timeout
[  377.832114] Bluetooth: hci0: command tx timeout
[  378.024218] Bluetooth: hci1: command tx timeout
[  378.152306] Bluetooth: hci2: command tx timeout
[  378.344056] Bluetooth: hci4: command tx timeout
[  378.344565] Bluetooth: hci5: command tx timeout
[  378.408516] Bluetooth: hci3: command tx timeout
[  378.665136] Bluetooth: hci6: command tx timeout
[  378.729363] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
23:35:37  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff8880154cf570 RCX=ffffffff84ad9157 RDX=ffff88801a5e9b80
RSI=ffffffff84ad94c8 RDI=0000000000000005 RBP=ffff8880154cf8d0 RSP=ffff8880154cf258
R8 =00007f7b9731ffff R9 =00007f7b9731ffff R10=0000000000000002 R11=ffff88802599f280
R12=ffff8880357fa660 R13=ffff8880357fa600 R14=0000000000000002 R15=000000000000000f
RIP=ffffffff81738b3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f72fce51028 CR3=00000000347e4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000080 RBX=184698475234df01 RCX=ffff88806cf28180 RDX=ffff88800a8f9b80
RSI=ffffffff81619cd0 RDI=ffff88806cf281e8 RBP=ffff88806cf289d8 RSP=ffff88806cf08e28
R8 =0000000000000000 R9 =fffffbfff0c83e0a R10=0000000000000006 R11=0000000000000001
R12=ffff88806cf28080 R13=ffff88806cf28180 R14=00000063b20da140 R15=dffffc0000000000
RIP=ffffffff81619d09 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005649c243a080 CR3=0000000026464000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00712d3d534e4f4954504f5f45424f52
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000