Warning: Permanently added '[localhost]:31707' (ECDSA) to the list of known hosts.
2025/06/13 22:29:33 fuzzer started
2025/06/13 22:29:33 dialing manager at localhost:42061
syzkaller login: [   98.651386] cgroup: Unknown subsys name 'net'
[   98.825522] cgroup: Unknown subsys name 'cpuset'
[   98.900910] cgroup: Unknown subsys name 'rlimit'
2025/06/13 22:29:54 syscalls: 204
2025/06/13 22:29:54 code coverage: enabled
2025/06/13 22:29:54 comparison tracing: enabled
2025/06/13 22:29:54 extra coverage: enabled
2025/06/13 22:29:54 setuid sandbox: enabled
2025/06/13 22:29:54 namespace sandbox: enabled
2025/06/13 22:29:54 Android sandbox: enabled
2025/06/13 22:29:54 fault injection: enabled
2025/06/13 22:29:54 leak checking: enabled
2025/06/13 22:29:54 net packet injection: enabled
2025/06/13 22:29:54 net device setup: enabled
2025/06/13 22:29:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/13 22:29:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/13 22:29:54 USB emulation: enabled
2025/06/13 22:29:54 hci packet injection: enabled
2025/06/13 22:29:54 wifi device emulation: enabled
2025/06/13 22:29:54 802.15.4 emulation: enabled
2025/06/13 22:29:54 fetching corpus: 0, signal 0/0 (executing program)
2025/06/13 22:29:55 starting 8 fuzzer processes
22:29:55 executing program 0:
ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080))
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0))
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000100)={0x231, 0x5, 0xfffffffe, 0x6, 0x0, 0x5, 0x63b})
ioctl$RTC_PIE_ON(r0, 0x7005)
pidfd_send_signal(r0, 0x29, &(0x7f0000000140)={0x5, 0x6, 0x4}, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x80000000)
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x181, 0x0)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000200)={0x0, 0x4b97e93b, 0x9, 0x5, 0x9, 0x81, 0xfffffffffffffff8})
r2 = geteuid()
ioprio_set$uid(0x0, r2, 0x4004)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000002c0))
r5 = syz_open_dev$rtc(&(0x7f0000000300), 0x5, 0x200200)
ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000000340))
r6 = geteuid()
mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2400, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@access_uid={'access', 0x3d, r6}}, {@mmap}, {@noextend}], [{@dont_appraise}, {@uid_lt={'uid<', r2}}, {@subj_type={'subj_type', 0x3d, ']{'}}, {@euid_lt={'euid<', r2}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@obj_role={'obj_role', 0x3d, '/dev/vcs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '){:'}}]}})

22:29:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @accept_conn_req={{0x409, 0x7}, {@any, 0x20}}}, 0xb)
r2 = syz_open_dev$rtc(&(0x7f00000001c0), 0x8, 0x200000)
ioctl$RTC_WIE_ON(r2, 0x700f)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80408c0}, 0x40840)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40c4)
getgid()
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440))
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000480))
write$eventfd(0xffffffffffffffff, &(0x7f00000004c0)=0x3e90, 0x8)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000500))
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ']}[f\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c1)
ioctl$RTC_WIE_ON(r2, 0x700f)
syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff)

22:29:55 executing program 2:
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0)
write$P9_RLERROR(r0, &(0x7f00000000c0)={0x9, 0x7, 0x2}, 0x9)
read$eventfd(r0, &(0x7f0000000100), 0x8)
read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x8, 0x81, 0x1f, 0x2}, {0x4c3, 0x1, 0x81, 0x6}, {0x4, 0x1f, 0x9, 0x9}, {0x1, 0x1, 0xc, 0x7}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000280)={r2, 0x4, r0, 0x100, 0x80000})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/locks\x00', 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0xfffc, 0x7, 0x7, 0x8d}, {0x1, 0x5, 0x9}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000380)=r2)
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$eventfd(r6, &(0x7f0000000400)=0x1ff, 0x8)
setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000440)=0x3, 0x4)
r7 = pidfd_getfd(r6, r1, 0x0)
read$eventfd(r7, &(0x7f0000000480), 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0, <r8=>0x0})
clone3(&(0x7f0000000740)={0x800000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x17}, &(0x7f0000000600)=""/170, 0xaa, &(0x7f00000006c0), &(0x7f0000000700)=[r8, r3, r3, 0x0, 0x0, r8, r8], 0x7, {r4}}, 0x58)

22:29:55 executing program 3:
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x37, 0x1, {0x1, 0x5, 0x8, 0xffffffffffffffff}}, 0x1e)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9)
write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{0x2, 0x2, 0x3}]}}, 0x16)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x7, 0x1}, 0x9)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x35, 0x2}, 0x8)
write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x2, 0x3}}, 0x14)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x100000001}, 0xf)
write$P9_RWALK(0xffffffffffffffff, &(0x7f00000001c0)={0x30, 0x6f, 0x1, {0x3, [{0x8, 0x2, 0x4}, {0x40, 0x4, 0x7}, {0x10, 0x4, 0x6}]}}, 0x30)
r0 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000200)=""/241)
r1 = shmget(0x3, 0x1000, 0x54000000, &(0x7f0000ffa000/0x1000)=nil)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000300)=""/15)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000340)=""/4096)
r2 = syz_open_dev$vcsu(&(0x7f0000001340), 0x2, 0x80000)
write$P9_RXATTRWALK(r2, &(0x7f0000001380)={0xf, 0x1f, 0x2, 0x2}, 0xf)
r3 = shmget(0x1, 0x2000, 0x2, &(0x7f0000ffa000/0x2000)=nil)
shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000013c0)={0x3f, 0x7f}, 0x2)
shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x6000)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000001400)={0x81, 0x8c}, 0x2)

22:29:56 executing program 4:
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x35, 0x25, 0x0, 0xb, 0x3, 0x5, 0x1, 0x112, 0x1}})
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000140)=r1)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000180)=0x2, 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000001c0)=r1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x280401, 0x0)
ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000240))
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
pidfd_send_signal(r4, 0x2b, &(0x7f00000002c0)={0xa}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000340)={0x0, 0x3, r4, 0x9})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000380)={r1, 0xfff})
pidfd_getfd(r4, r4, 0x0)
ioctl$RTC_WIE_ON(r0, 0x700f)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/snd_hda_core', 0x4a4001, 0x2)
openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
clone3(&(0x7f0000000740)={0x128141200, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2f}, &(0x7f0000000500)=""/78, 0x4e, &(0x7f0000000580)=""/122, &(0x7f0000000700)=[0x0, 0x0, r2], 0x3, {r3}}, 0x58)

[  120.813966] audit: type=1400 audit(1749853796.038:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
22:29:56 executing program 5:
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0xa00, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20004000)
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x10)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r0, 0x120, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x20004880)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x24004080)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'fou\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x891}, 0x84800)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r4)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r4)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x40, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x26}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x810)
futex(&(0x7f0000000a80), 0x2, 0x2, &(0x7f0000000ac0)={0x77359400}, &(0x7f0000000b00), 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000b40)={0x14, 0x69, 0x2, {0x1, 0x4, 0x7}}, 0x14)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r4)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0x0, 0x213d80dbbc06e3bc, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x7d940bcd1de7baa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

22:29:56 executing program 6:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000))
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000080))
write$char_usb(r0, &(0x7f00000000c0)="020e294b0b92d0e93ab537d68619f5482dd6b2bbaf4fe8ca060fa65b594246b3a2f3a39713d6864849eac81f30e9c8c2facbbda6afb4c857356f5300f5a09e097a6e6d60f159b42bcc3d24cbcbc2008b49a71b3cbdc687a3b539", 0x5a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read$rfkill(r2, &(0x7f00000001c0), 0x8)
r3 = pidfd_getfd(r2, r0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000280)={r4, 0x1, r3, 0x5})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000002c0))
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200090c4}, 0x6d9fe7800f605dbf)
getegid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, 0x0, 0x1318, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x4010)

22:29:56 executing program 7:
r0 = getpgid(0xffffffffffffffff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, <r1=>0x0})
ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x80, 0x0, 0x5}, &(0x7f00000000c0)=[{}, {}, {}, {}, {}])
rt_sigtimedwait(&(0x7f0000000340)={[0x1]}, &(0x7f0000000380), &(0x7f0000000400)={0x0, 0x989680}, 0x8)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x4)
read$char_usb(r2, &(0x7f0000000440)=""/4096, 0x1000)
r3 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil)
r4 = getuid()
r5 = getegid()
clone3(&(0x7f0000001740)={0x1000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=<r6=>0x0, {0x37}, &(0x7f0000001500)=""/236, 0xec, &(0x7f0000001600)=""/252, &(0x7f0000001700)=[r1, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, r0, r0], 0x8}, 0x58)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000017c0)={{0x1, r4, r5, 0x0, 0xee00, 0x0, 0x5}, 0x80000001, 0xbef, 0x6, 0x100, r1, r6, 0x8})
shmctl$SHM_INFO(r3, 0xe, &(0x7f0000001840)=""/65)
shmctl$SHM_LOCK(r3, 0xb)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000018c0)=0x4, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
clock_gettime(0x0, &(0x7f00000019c0)={<r7=>0x0, <r8=>0x0})
rt_sigtimedwait(&(0x7f0000001900)={[0x2]}, &(0x7f0000001940), &(0x7f0000001a00)={r7, r8+10000000}, 0x8)
setuid(r4)
shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000001a40)=""/204)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b40)=""/219)

[  122.286399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.297326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.300612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.303540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.309666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.312385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.317972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.328087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.330618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.337420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.351659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.358378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.362189] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.395128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.402043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  122.402475] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  122.406215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.411241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  122.416903] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  122.424631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  122.432423] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  122.435903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  122.437399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  122.440569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  122.443997] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  122.446250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  122.457025] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  122.459100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  122.464186] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  122.467642] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  122.469569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  122.475668] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  122.478551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.487497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  122.495469] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  122.498387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  122.505354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  122.512418] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  122.519136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  122.540197] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  124.424299] Bluetooth: hci1: command tx timeout
[  124.424529] Bluetooth: hci0: command tx timeout
[  124.487810] Bluetooth: hci2: command tx timeout
[  124.552962] Bluetooth: hci3: command tx timeout
[  124.552992] Bluetooth: hci6: command tx timeout
[  124.618202] Bluetooth: hci7: command tx timeout
[  124.618411] Bluetooth: hci5: command tx timeout
[  124.619877] Bluetooth: hci4: command tx timeout
[  126.472108] Bluetooth: hci1: command tx timeout
[  126.472575] Bluetooth: hci0: command tx timeout
[  126.535775] Bluetooth: hci2: command tx timeout
[  126.600086] Bluetooth: hci6: command tx timeout
[  126.600557] Bluetooth: hci3: command tx timeout
[  126.665747] Bluetooth: hci4: command tx timeout
[  126.666285] Bluetooth: hci7: command tx timeout
[  126.666930] Bluetooth: hci5: command tx timeout
[  128.520535] Bluetooth: hci1: command tx timeout
[  128.522292] Bluetooth: hci0: command tx timeout
[  128.583844] Bluetooth: hci2: command tx timeout
[  128.651419] Bluetooth: hci3: command tx timeout
[  128.653148] Bluetooth: hci6: command tx timeout
[  128.711994] Bluetooth: hci5: command tx timeout
[  128.712912] Bluetooth: hci7: command tx timeout
[  128.713776] Bluetooth: hci4: command tx timeout
[  130.569056] Bluetooth: hci0: command tx timeout
[  130.569289] Bluetooth: hci1: command tx timeout
[  130.632017] Bluetooth: hci2: command tx timeout
[  130.696015] Bluetooth: hci6: command tx timeout
[  130.696060] Bluetooth: hci3: command tx timeout
[  130.759965] Bluetooth: hci7: command tx timeout
[  130.760133] Bluetooth: hci4: command tx timeout
[  130.760505] Bluetooth: hci5: command tx timeout
[  185.062595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.069174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  185.072485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.075063] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  185.078926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.078988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  185.095060] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  185.101856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  185.102379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.110199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.136445] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.152442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.176179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.196342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.200169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.215109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.221484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.234207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.251895] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.256575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.289421] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  185.292752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  185.295220] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  185.313430] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  185.325127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  185.414549] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  185.417304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  185.420043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  185.443293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  185.448137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  185.686080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.689498] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.699503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.706006] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.752204] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.762224] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.790580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.826717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.857151] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.858054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  187.144880] Bluetooth: hci0: command tx timeout
[  187.208785] Bluetooth: hci1: command tx timeout
[  187.273099] Bluetooth: hci2: command tx timeout
[  187.335961] Bluetooth: hci3: command tx timeout
[  187.465982] Bluetooth: hci4: command tx timeout
[  187.592270] Bluetooth: hci5: command tx timeout
[  188.040618] Bluetooth: hci7: command tx timeout
[  188.043855] Bluetooth: hci6: command tx timeout
[  189.193205] Bluetooth: hci0: command tx timeout
[  189.255742] Bluetooth: hci1: command tx timeout
[  189.319923] Bluetooth: hci2: command tx timeout
[  189.383926] Bluetooth: hci3: command tx timeout
[  189.513725] Bluetooth: hci4: command tx timeout
[  189.640031] Bluetooth: hci5: command tx timeout
[  190.087912] Bluetooth: hci7: command tx timeout
[  190.088372] Bluetooth: hci6: command tx timeout
[  191.240135] Bluetooth: hci0: command tx timeout
[  191.304783] Bluetooth: hci1: command tx timeout
[  191.367799] Bluetooth: hci2: command tx timeout
[  191.432994] Bluetooth: hci3: command tx timeout
[  191.559979] Bluetooth: hci4: command tx timeout
[  191.687993] Bluetooth: hci5: command tx timeout
[  192.135761] Bluetooth: hci6: command tx timeout
[  192.136224] Bluetooth: hci7: command tx timeout
[  193.287949] Bluetooth: hci0: command tx timeout
[  193.351865] Bluetooth: hci1: command tx timeout
[  193.416318] Bluetooth: hci2: command tx timeout
[  193.480814] Bluetooth: hci3: command tx timeout
[  193.607823] Bluetooth: hci4: command tx timeout
[  193.735820] Bluetooth: hci5: command tx timeout
[  194.183822] Bluetooth: hci6: command tx timeout
[  194.184374] Bluetooth: hci7: command tx timeout
[  247.452162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  247.458294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  247.464558] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  247.473495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  247.481275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.539656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  247.544482] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  247.547655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  247.558209] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  247.563404] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  247.822146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  247.838656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  247.843455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  247.845179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  247.852319] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  247.864285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  247.870762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  247.875172] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  247.896803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  247.905066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  247.943007] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.950789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.958945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  248.006435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  248.044339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  248.084506] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  248.121227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  248.129286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  248.145920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  248.146177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  248.150161] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  248.173357] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  248.183182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  248.186439] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  248.193488] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  248.197737] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  248.209550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  248.216969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  248.229574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  248.288216] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  249.544832] Bluetooth: hci0: command tx timeout
[  249.671995] Bluetooth: hci1: command tx timeout
[  249.991915] Bluetooth: hci3: command tx timeout
[  250.055771] Bluetooth: hci2: command tx timeout
[  250.120101] Bluetooth: hci4: command tx timeout
[  250.312035] Bluetooth: hci7: command tx timeout
[  250.312618] Bluetooth: hci5: command tx timeout
[  250.375854] Bluetooth: hci6: command tx timeout
[  251.592911] Bluetooth: hci0: command tx timeout
[  251.720720] Bluetooth: hci1: command tx timeout
[  252.040778] Bluetooth: hci3: command tx timeout
[  252.104758] Bluetooth: hci2: command tx timeout
[  252.168745] Bluetooth: hci4: command tx timeout
[  252.360207] Bluetooth: hci5: command tx timeout
[  252.360635] Bluetooth: hci7: command tx timeout
[  252.425805] Bluetooth: hci6: command tx timeout
[  253.640968] Bluetooth: hci0: command tx timeout
[  253.768729] Bluetooth: hci1: command tx timeout
[  254.087879] Bluetooth: hci3: command tx timeout
[  254.153176] Bluetooth: hci2: command tx timeout
[  254.216503] Bluetooth: hci4: command tx timeout
[  254.407808] Bluetooth: hci5: command tx timeout
[  254.408236] Bluetooth: hci7: command tx timeout
[  254.473692] Bluetooth: hci6: command tx timeout
[  255.688413] Bluetooth: hci0: command tx timeout
[  255.815881] Bluetooth: hci1: command tx timeout
[  256.136999] Bluetooth: hci3: command tx timeout
[  256.200821] Bluetooth: hci2: command tx timeout
[  256.263723] Bluetooth: hci4: command tx timeout
[  256.456937] Bluetooth: hci7: command tx timeout
[  256.457359] Bluetooth: hci5: command tx timeout
[  256.519724] Bluetooth: hci6: command tx timeout
[  309.922125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.927868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.932382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.940118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.948656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  310.168984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  310.171373] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  310.174450] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  310.184182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  310.190281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  310.236401] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  310.246131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  310.249378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  310.261421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  310.269243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  310.324355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  310.329147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  310.338206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  310.351471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  310.361128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  310.401463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  310.404037] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.424625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.427481] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.449128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  310.459153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.466442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  310.476030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.476828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  310.495237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  310.498586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  310.503179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  310.516255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  310.521817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  310.541279] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  310.737294] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  310.744517] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  310.766052] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  310.795237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  310.854497] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  312.009013] Bluetooth: hci0: command tx timeout
[  312.264192] Bluetooth: hci1: command tx timeout
[  312.327997] Bluetooth: hci2: command tx timeout
[  312.455824] Bluetooth: hci3: command tx timeout
[  312.583958] Bluetooth: hci4: command tx timeout
[  312.649081] Bluetooth: hci6: command tx timeout
[  312.713086] Bluetooth: hci5: command tx timeout
[  313.033723] Bluetooth: hci7: command tx timeout
[  314.055919] Bluetooth: hci0: command tx timeout
[  314.313941] Bluetooth: hci1: command tx timeout
[  314.376715] Bluetooth: hci2: command tx timeout
[  314.504759] Bluetooth: hci3: command tx timeout
[  314.631802] Bluetooth: hci4: command tx timeout
[  314.696774] Bluetooth: hci6: command tx timeout
[  314.761699] Bluetooth: hci5: command tx timeout
[  315.080728] Bluetooth: hci7: command tx timeout
[  316.104991] Bluetooth: hci0: command tx timeout
[  316.361648] Bluetooth: hci1: command tx timeout
[  316.425987] Bluetooth: hci2: command tx timeout
[  316.552751] Bluetooth: hci3: command tx timeout
[  316.680976] Bluetooth: hci4: command tx timeout
[  316.744751] Bluetooth: hci6: command tx timeout
[  316.810702] Bluetooth: hci5: command tx timeout
[  317.128727] Bluetooth: hci7: command tx timeout
[  318.153791] Bluetooth: hci0: command tx timeout
[  318.408043] Bluetooth: hci1: command tx timeout
[  318.473289] Bluetooth: hci2: command tx timeout
[  318.599985] Bluetooth: hci3: command tx timeout
[  318.728064] Bluetooth: hci4: command tx timeout
[  318.791758] Bluetooth: hci6: command tx timeout
[  318.855749] Bluetooth: hci5: command tx timeout
[  319.176791] Bluetooth: hci7: command tx timeout
[  372.197511] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  372.213373] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  372.217085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  372.229048] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  372.236152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  372.571802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  372.575383] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  372.578974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  372.589383] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  372.598627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  372.671359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  372.701048] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  372.710445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  372.728596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  372.733283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  372.760092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  372.773163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  372.781214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  372.791355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  372.799432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  372.817999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  372.824269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  372.828427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  372.847197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  372.852595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  372.862071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  372.869495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  372.872931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  372.897074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  372.924235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  373.095236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  373.104483] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  373.119065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  373.133601] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  373.155324] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  373.191041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  373.194465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  373.197282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  373.210003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  373.218162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  374.282048] Bluetooth: hci0: command tx timeout
[  374.663787] Bluetooth: hci1: command tx timeout
[  374.792131] Bluetooth: hci2: command tx timeout
[  374.856759] Bluetooth: hci3: command tx timeout
[  375.049547] Bluetooth: hci5: command tx timeout
[  375.112273] Bluetooth: hci4: command tx timeout
[  375.239811] Bluetooth: hci7: command tx timeout
[  375.303771] Bluetooth: hci6: command tx timeout
[  376.327782] Bluetooth: hci0: command tx timeout
[  376.713702] Bluetooth: hci1: command tx timeout
[  376.840753] Bluetooth: hci2: command tx timeout
[  376.904743] Bluetooth: hci3: command tx timeout
[  377.096488] Bluetooth: hci5: command tx timeout
[  377.161043] Bluetooth: hci4: command tx timeout
[  377.288866] Bluetooth: hci7: command tx timeout
[  377.352724] Bluetooth: hci6: command tx timeout
[  378.376891] Bluetooth: hci0: command tx timeout
[  378.762024] Bluetooth: hci1: command tx timeout
[  378.888734] Bluetooth: hci2: command tx timeout
[  378.953638] Bluetooth: hci3: command tx timeout
[  379.144922] Bluetooth: hci5: command tx timeout
[  379.208840] Bluetooth: hci4: command tx timeout
[  379.336918] Bluetooth: hci7: command tx timeout
[  379.400796] Bluetooth: hci6: command tx timeout
[  380.424838] Bluetooth: hci0: command tx timeout
[  380.807761] Bluetooth: hci1: command tx timeout
[  380.936889] Bluetooth: hci2: command tx timeout
[  381.000024] Bluetooth: hci3: command tx timeout
[  381.194712] Bluetooth: hci5: command tx timeout
[  381.255952] Bluetooth: hci4: command tx timeout
[  381.383716] Bluetooth: hci7: command tx timeout
[  381.447939] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
22:35:01  Registers:
info registers vcpu 0
RAX=0000000000000005 RBX=ffff88803647d280 RCX=0000000000000200 RDX=0000000000000008
RSI=ffff88803647dd28 RDI=ffff88803647dd28 RBP=ffff88803647dcd8 RSP=ffff88806ce08878
R8 =0000000000000002 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffff88803647dd28 R13=873d0e13b074236a R14=0000000000000000 R15=0000000000000002
RIP=ffffffff815145d3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9d7ebfb540 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d7eccc710 CR3=0000000028769000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000010 RBX=0000000000000002 RCX=dffffc0000000000 RDX=ffff888036478000
RSI=ffffffff84aa1c39 RDI=0000000000000000 RBP=ffff88803626c418 RSP=ffff888023cefc70
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=0000000000000001
R12=00007f13c09a65e0 R13=0000000000000002 R14=000000000000000e R15=00007f13c095afff
RIP=ffffffff84aa1c53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f13c07c2540 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe4900000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f13c09a65e0 CR3=000000002d75f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000700007f13c0ccda90
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000