Warning: Permanently added '[localhost]:58868' (ECDSA) to the list of known hosts.
2025/06/16 13:58:45 fuzzer started
2025/06/16 13:58:46 dialing manager at localhost:42061
syzkaller login: [  106.608510] cgroup: Unknown subsys name 'net'
[  106.863700] cgroup: Unknown subsys name 'cpuset'
[  106.941046] cgroup: Unknown subsys name 'rlimit'
2025/06/16 13:59:08 syscalls: 206
2025/06/16 13:59:08 code coverage: enabled
2025/06/16 13:59:08 comparison tracing: enabled
2025/06/16 13:59:08 extra coverage: enabled
2025/06/16 13:59:08 setuid sandbox: enabled
2025/06/16 13:59:08 namespace sandbox: enabled
2025/06/16 13:59:08 Android sandbox: enabled
2025/06/16 13:59:08 fault injection: enabled
2025/06/16 13:59:08 leak checking: enabled
2025/06/16 13:59:08 net packet injection: enabled
2025/06/16 13:59:08 net device setup: enabled
2025/06/16 13:59:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/16 13:59:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/16 13:59:08 USB emulation: enabled
2025/06/16 13:59:08 hci packet injection: enabled
2025/06/16 13:59:08 wifi device emulation: enabled
2025/06/16 13:59:08 802.15.4 emulation: enabled
2025/06/16 13:59:08 fetching corpus: 0, signal 0/0 (executing program)
2025/06/16 13:59:10 starting 8 fuzzer processes
13:59:10 executing program 0:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x110, 0xffffffffffffffff, 0x8000000)
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x10000, 0x100)
ioctl$CDROM_DISC_STATUS(r0, 0x5327)
r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x7, 0x400)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x7, 0x28, 0xe, 0x1e, 0x7, 0xc86, 0x1, 0x154, 0xffffffffffffffff})
ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f00000000c0)={0x5, 0x4, 0x7, 0x8, 0x4, 0x9})
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7)
ioctl$CDROM_MEDIA_CHANGED(r0, 0x5325, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
write$P9_RFLUSH(r2, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7)
openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_open_dev$vcsu(&(0x7f0000000200), 0x40, 0x40)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000240)={0x8, "8f5511"}, 0x6)
r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x9, 0x8, 0x9})
ioctl$CDROM_CLEAR_OPTIONS(r4, 0x5321, 0x18)
ioctl$RTC_UIE_ON(r3, 0x7003)
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000d40))

13:59:10 executing program 1:
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x181001, 0x0)
ioctl$CDROMPAUSE(r0, 0x5301)
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x2000000000, 0x40)
r2 = pidfd_getfd(r1, r0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x100)
ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f00000000c0)={0x7, 0x8})
write$9p(r1, &(0x7f0000000100)="74bfa2b57c89969ce73db099d4d8fce290416675530c5f44778bb9b6b3eb476caac26709bba948fb84cf00c6657c24c72c601e991067810463dda89b2084e91049b0f0b5424c04e0c77cb6a537cce0eb07c545c95c4e4a45f1a00c30012451cd479446d297197b320ceee956dda7b398a1ab811775051a72e86fdd1f3c072a5bd87ca0778bef7055a8066bf6988396a8cfab31a07cce744a885b100834fab87bf00f121b8a8ea06ed830c08b428c9b1cf0e054e0461871cdfb67065c719dfeab616b765d8ea2e664fe716ab0deffbb6170d4a90bed3750d511bb1363fb307e6a07ea902ffd5df9b0e8a82acb64dd81f1c387bf", 0xf3)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4000)
write$P9_RATTACH(r3, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x80, 0x4, 0x3}}, 0x14)
ioctl$CDROMCLOSETRAY(r2, 0x5319)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x73, 0x1, {{0x80, 0x3, 0x8}, 0xd}}, 0x18)
openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x204401, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, <r4=>0x0})
r5 = getpgid(0x0)
r6 = getpgid(0xffffffffffffffff)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0xd0040, 0x0)
clone3(&(0x7f00000005c0)={0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x18}, &(0x7f00000003c0)=""/123, 0x7b, &(0x7f0000000440)=""/121, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0x0, r5, r6], 0x7, {r7}}, 0x58)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x90442, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0)

13:59:10 executing program 2:
pidfd_open(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x14, 0x15, 0x8, 0x14, 0x0, 0x3, 0x5, 0xcc, 0x1}})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x410001, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x36}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x1080}, 0x8040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14044090}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r2)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c040}, 0x20000000)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r2)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4010)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r2)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000780)={0x1c, 0x15, 0x9, 0x11, 0x4, 0xfffffffb, 0x5, 0xdd})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x404)

13:59:10 executing program 3:
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x48001)
ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/4096)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x74, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:dlm_control_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20044080)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x718, 0x15}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
r0 = syz_open_dev$vcsu(&(0x7f00000013c0), 0x9, 0x8000)
write$P9_RRENAMEAT(r0, &(0x7f0000001400)={0x7, 0x4b, 0x2}, 0x7)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001440)={'erspan0\x00'})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$CDROMEJECT(r0, 0x5309)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000001580)={0x7, 0x6d, 0x2}, 0x7)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000015c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000001640)={r1, 0xd0, 0x7fffffff})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001680), 0x402, 0x0)
write$P9_RFSYNC(r2, &(0x7f00000016c0)={0x7, 0x33, 0x2}, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001700))
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001740), 0x40300, 0x0)
write$P9_RCREATE(r3, &(0x7f0000001780)={0x18, 0x73, 0x1, {{0x0, 0x3, 0x2}, 0x68}}, 0x18)
write$P9_RCLUNK(r2, &(0x7f00000017c0)={0x7, 0x79, 0x2}, 0x7)
write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000001840)={0x14, 0x49, 0x1, {0x1, 0x4, 0x2}}, 0x14)

13:59:10 executing program 4:
semctl$GETZCNT(0xffffffffffffffff, 0x4, 0xf, &(0x7f0000000000)=""/226)
semget$private(0x0, 0x3, 0x5)
r0 = semget(0x3, 0x2, 0x84)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/203)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000200)=""/120)
r1 = semget(0x1, 0x0, 0x8)
r2 = semget(0x0, 0x2, 0x400)
semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000280)=""/236)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000380))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
semget(0x0, 0x3, 0x100)
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f00000003c0)=""/80)
semget$private(0x0, 0x3, 0x400)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x301)
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000004c0)={0x61, 0x7d, 0x2, {0x0, 0x5a, 0x100, 0x1, {0x4, 0x4, 0x4}, 0x40080000, 0x4, 0x760, 0x5, 0xd, '/dev/net/tun\x00', 0xd, '/dev/net/tun\x00', 0xd, '/dev/net/tun\x00'}}, 0x61)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000540)={0x14, 0x11, 0x1, {0x1, 0x4, 0x4}}, 0x14)
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f00000005c0)={0x0, 0x3f, 0xf9, 0x80})

[  130.206856] audit: type=1400 audit(1750082350.218:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:59:10 executing program 5:
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7)
write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x4, 0x2, 0x6}}, 0x14)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x1, 0xff, 0x0, 0xffffffff, 0x1, 0x3ff, 0x668306ce, 0x2, 0x2}}, 0x43)
ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000140)={0xff, 0xbb, 0x62, 0x7, 0x0, 0xe1})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f00000001c0)={0x80, 0x4, 0x9, 0x1, @lba=0x4, 0x1f})
r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x401, 0x800)
ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000240)=@hsk={0x3fbabf8bca703ff0, 0x0, "8e9858639d"})
write$P9_RLCREATE(r1, &(0x7f0000000280)={0x18, 0xf, 0x1, {{0x20, 0x0, 0x5}, 0xb83a}}, 0x18)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000002c0)=0xf2)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
pipe2$9p(&(0x7f00000003c0), 0x4800)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x121401, 0x0)
ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000440))
ioctl$RTC_UIE_ON(r1, 0x7003)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x200140, 0x0)
write$P9_RSTAT(r3, &(0x7f00000004c0)={0x5e, 0x7d, 0x1, {0x0, 0x57, 0x7f, 0x3f, {0x1, 0x2, 0x4}, 0x13140000, 0x4a0, 0xffffffff, 0x8aa, 0xb, '/dev/cdrom\x00', 0x3, '^,\\', 0xb, '/dev/cdrom\x00', 0xb, '/dev/vcsu#\x00'}}, 0x5e)
write$P9_RMKDIR(r1, &(0x7f0000000540)={0x14, 0x49, 0x2, {0x10, 0x2, 0x1}}, 0x14)

13:59:10 executing program 6:
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000000)
socketpair(0x9, 0x5, 0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4c890)
r4 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x349, 0x2)
r5 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x812)
inotify_rm_watch(r4, r5)
r6 = pidfd_open(0x0, 0x0)
r7 = pidfd_getfd(r6, r2, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000240)={0x0, 0x7, [@multicast, @local, @remote, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @local, @broadcast]})
ioctl$TUNSETVNETLE(r4, 0x400454dc, 0xfffffffffffffffd)
syz_genetlink_get_family_id$fou(&(0x7f0000000280), r4)
r8 = inotify_add_watch(r7, &(0x7f00000002c0)='./file0/file0\x00', 0x8)
inotify_rm_watch(r0, r8)
write$P9_RREADLINK(r4, &(0x7f0000000300)={0xa, 0x17, 0x1, {0x1, '.'}}, 0xa)
r9 = syz_usb_connect$cdc_ecm(0x4, 0x4f, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x1, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, '\vC'}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xc0, 0x4, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1f, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x1f, 0x4}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x3, 0xff, 0x9, 0x20, 0x40}, 0x45, &(0x7f0000000400)={0x5, 0xf, 0x45, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x3a, 0x6, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x40, 0x7f, 0xe2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xe, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0xfe, 0x2, 0x4, 0xf, 0x6, [0x0, 0xf]}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x9, 0xf00f, 0x401, [0xc000]}]}, 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80c}}]})
syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x20, 0xa, 0x98, {0x98, 0xb, "4ee75fecfc3ebe37df9dedc043ec8102cec4637d175aa251ef4d36e1029c1b4e7a070bac29bcfe94e91869a4b072bf87a643c8003fd1d665c01527ddd19c6824050d310e60aa1165ffce76d794da889a0c6b07df898c1366e637db71d4adac6f1135da281c3a6ea52a7dec10366973c3eea87888735c150cd77a72f65349f20993a880cc599aa6b6479d544c352ec626d117211bb5fb"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x40, 0x17, 0x66, "3bf1aede2c33265c6f32c2c8d47868b1a82a1d2a3faec8c4e2e2dc22ce1891e9a56082c35a20be0dde6c6742f0a6550ee354a0fde75c96bc423483f9eea58ade97bec44d0f04e4dc07d7764a09edbd9e6ed9737dd2bd5ef7725feba2d96fb4feab6766aa6120"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}})
ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x6)
ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000780)={0x8, 0x3f, 0x81, 0x5e, 0x4, 0x6})

13:59:10 executing program 7:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8)
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x8808}, @void, @mpls={[{0x3ff}, {0x387}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4}], @ipv6=@generic={0x3, 0x6, "a063b3", 0x3a, 0xc, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, {[@dstopts={0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0xff}, @jumbo={0xc2, 0x4, 0xfffffff9}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x3, 0x40, 0x100, [@ipv4={'\x00', '\xff\xff', @broadcast}]}], "8f631a9d902c73d878e6"}}}}, 0x7a)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x7, [@random="7cf7afb7087d", @multicast, @remote, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @broadcast, @multicast]})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'ip_vti0\x00', @remote})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x4, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}]})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x2, [@local, @multicast]})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x80c00, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'vlan0\x00', @multicast})
write$vga_arbiter(r0, &(0x7f00000002c0)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000300)={'veth1_virt_wifi\x00'})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x12181, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x2ad, @none, 0x9f, 0x1}, 0xe)
pidfd_getfd(r2, r0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000400)={'veth0_to_bond\x00'})

[  131.607542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.611319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.612853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.622648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.626878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.677029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.681281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.687156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.688259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.696581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.697680] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  131.706012] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.707625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.714576] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.722645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.740387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  131.744075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.760043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.765605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.777467] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.778433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.779610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.782543] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.783759] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.787386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.788601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.797135] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.800504] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.802721] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.805600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.807506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.816068] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.818040] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.820258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  131.823305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.837221] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.853508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.861596] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.896389] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.920609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  133.696212] Bluetooth: hci0: command tx timeout
[  133.759053] Bluetooth: hci1: command tx timeout
[  133.887189] Bluetooth: hci3: command tx timeout
[  133.887379] Bluetooth: hci6: command tx timeout
[  133.887957] Bluetooth: hci4: command tx timeout
[  133.950899] Bluetooth: hci5: command tx timeout
[  133.951487] Bluetooth: hci2: command tx timeout
[  134.015177] Bluetooth: hci7: command tx timeout
[  135.743108] Bluetooth: hci0: command tx timeout
[  135.807446] Bluetooth: hci1: command tx timeout
[  135.935467] Bluetooth: hci4: command tx timeout
[  135.936847] Bluetooth: hci6: command tx timeout
[  135.937315] Bluetooth: hci3: command tx timeout
[  136.000899] Bluetooth: hci2: command tx timeout
[  136.001397] Bluetooth: hci5: command tx timeout
[  136.062910] Bluetooth: hci7: command tx timeout
[  137.791207] Bluetooth: hci0: command tx timeout
[  137.855111] Bluetooth: hci1: command tx timeout
[  137.982937] Bluetooth: hci4: command tx timeout
[  137.983006] Bluetooth: hci3: command tx timeout
[  137.983432] Bluetooth: hci6: command tx timeout
[  138.047911] Bluetooth: hci5: command tx timeout
[  138.047974] Bluetooth: hci2: command tx timeout
[  138.111859] Bluetooth: hci7: command tx timeout
[  139.841026] Bluetooth: hci0: command tx timeout
[  139.902976] Bluetooth: hci1: command tx timeout
[  140.030986] Bluetooth: hci3: command tx timeout
[  140.031518] Bluetooth: hci4: command tx timeout
[  140.032032] Bluetooth: hci6: command tx timeout
[  140.094965] Bluetooth: hci5: command tx timeout
[  140.097863] Bluetooth: hci2: command tx timeout
[  140.159210] Bluetooth: hci7: command tx timeout
[  191.962664] syz-executor.3 (292) used greatest stack depth: 24640 bytes left
[  194.841536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.845501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.848370] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.849733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.850588] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.852286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.852342] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.856373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.863186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.863214] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.865353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.866368] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.873395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.874794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.879613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.880456] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.882367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.886063] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.886518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.888296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.889407] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.890168] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.898325] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.917434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.920230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.930130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.945487] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.947393] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.951148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.960554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.969317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.981320] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.983396] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.986030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.987208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.987647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  195.003267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  195.005161] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.013333] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.017670] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  196.927226] Bluetooth: hci2: command tx timeout
[  196.928370] Bluetooth: hci5: command tx timeout
[  196.991010] Bluetooth: hci1: command tx timeout
[  196.991874] Bluetooth: hci0: command tx timeout
[  196.992439] Bluetooth: hci3: command tx timeout
[  197.055152] Bluetooth: hci4: command tx timeout
[  197.056030] Bluetooth: hci7: command tx timeout
[  197.119910] Bluetooth: hci6: command tx timeout
[  198.975044] Bluetooth: hci5: command tx timeout
[  198.975599] Bluetooth: hci2: command tx timeout
[  199.039118] Bluetooth: hci3: command tx timeout
[  199.039610] Bluetooth: hci0: command tx timeout
[  199.040997] Bluetooth: hci1: command tx timeout
[  199.102909] Bluetooth: hci7: command tx timeout
[  199.102993] Bluetooth: hci4: command tx timeout
[  199.168886] Bluetooth: hci6: command tx timeout
[  201.023033] Bluetooth: hci2: command tx timeout
[  201.024535] Bluetooth: hci5: command tx timeout
[  201.086969] Bluetooth: hci0: command tx timeout
[  201.087014] Bluetooth: hci1: command tx timeout
[  201.088913] Bluetooth: hci3: command tx timeout
[  201.150913] Bluetooth: hci7: command tx timeout
[  201.152623] Bluetooth: hci4: command tx timeout
[  201.216953] Bluetooth: hci6: command tx timeout
[  203.071885] Bluetooth: hci2: command tx timeout
[  203.073374] Bluetooth: hci5: command tx timeout
[  203.136234] Bluetooth: hci1: command tx timeout
[  203.137989] Bluetooth: hci0: command tx timeout
[  203.138021] Bluetooth: hci3: command tx timeout
[  203.199046] Bluetooth: hci4: command tx timeout
[  203.199140] Bluetooth: hci7: command tx timeout
[  203.262909] Bluetooth: hci6: command tx timeout
[  257.171563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.173451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.181284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.188195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.198144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.243034] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  257.246127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  257.247390] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  257.267423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  257.273199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  257.320520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.324363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.333659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.343110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.347881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  257.372542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  257.397162] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  257.399921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  257.416312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  257.420077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  257.425330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  257.428067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  257.435278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  257.438184] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  257.447377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  257.552410] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  257.554755] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  257.556359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  257.558470] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  257.565265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  257.567723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  257.573342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  257.576240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  257.579345] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  257.584447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  257.656737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  257.663979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  257.685436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  257.693974] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  257.702706] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.262992] Bluetooth: hci0: command tx timeout
[  259.326914] Bluetooth: hci1: command tx timeout
[  259.391198] Bluetooth: hci2: command tx timeout
[  259.519122] Bluetooth: hci3: command tx timeout
[  259.519328] Bluetooth: hci4: command tx timeout
[  259.646984] Bluetooth: hci6: command tx timeout
[  259.647032] Bluetooth: hci5: command tx timeout
[  259.775009] Bluetooth: hci7: command tx timeout
[  261.311154] Bluetooth: hci0: command tx timeout
[  261.376292] Bluetooth: hci1: command tx timeout
[  261.439936] Bluetooth: hci2: command tx timeout
[  261.566900] Bluetooth: hci4: command tx timeout
[  261.568844] Bluetooth: hci3: command tx timeout
[  261.695032] Bluetooth: hci6: command tx timeout
[  261.696472] Bluetooth: hci5: command tx timeout
[  261.823910] Bluetooth: hci7: command tx timeout
[  263.361876] Bluetooth: hci0: command tx timeout
[  263.423879] Bluetooth: hci1: command tx timeout
[  263.488391] Bluetooth: hci2: command tx timeout
[  263.615254] Bluetooth: hci3: command tx timeout
[  263.615756] Bluetooth: hci4: command tx timeout
[  263.744122] Bluetooth: hci5: command tx timeout
[  263.744223] Bluetooth: hci6: command tx timeout
[  263.871025] Bluetooth: hci7: command tx timeout
[  265.408358] Bluetooth: hci0: command tx timeout
[  265.470963] Bluetooth: hci1: command tx timeout
[  265.534879] Bluetooth: hci2: command tx timeout
[  265.663373] Bluetooth: hci4: command tx timeout
[  265.663514] Bluetooth: hci3: command tx timeout
[  265.790931] Bluetooth: hci5: command tx timeout
[  265.791050] Bluetooth: hci6: command tx timeout
[  265.919181] Bluetooth: hci7: command tx timeout
[  319.864379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  319.867638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  319.869443] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  319.874029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  319.893252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  319.961172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.979071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.983298] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.990104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  320.011147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.060745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.068151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  320.073275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  320.079459] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.082936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.083793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  320.090360] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.103244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.131492] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  320.136233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  320.155576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  320.165188] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  320.188241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  320.225328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  320.231274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  320.236394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  320.241172] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  320.255652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  320.259638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  320.275288] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  320.278380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  320.282506] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  320.285517] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.286384] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.310610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.315988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.321167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  320.338270] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.338308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.342156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  321.919097] Bluetooth: hci0: command tx timeout
[  322.047162] Bluetooth: hci1: command tx timeout
[  322.177001] Bluetooth: hci2: command tx timeout
[  322.240272] Bluetooth: hci3: command tx timeout
[  322.305560] Bluetooth: hci4: command tx timeout
[  322.366943] Bluetooth: hci5: command tx timeout
[  322.431925] Bluetooth: hci6: command tx timeout
[  322.431978] Bluetooth: hci7: command tx timeout
[  323.966919] Bluetooth: hci0: command tx timeout
[  324.097758] Bluetooth: hci1: command tx timeout
[  324.222906] Bluetooth: hci2: command tx timeout
[  324.286990] Bluetooth: hci3: command tx timeout
[  324.350933] Bluetooth: hci4: command tx timeout
[  324.415247] Bluetooth: hci5: command tx timeout
[  324.481183] Bluetooth: hci7: command tx timeout
[  324.481365] Bluetooth: hci6: command tx timeout
[  326.015243] Bluetooth: hci0: command tx timeout
[  326.143008] Bluetooth: hci1: command tx timeout
[  326.272942] Bluetooth: hci2: command tx timeout
[  326.335050] Bluetooth: hci3: command tx timeout
[  326.400200] Bluetooth: hci4: command tx timeout
[  326.463899] Bluetooth: hci5: command tx timeout
[  326.527158] Bluetooth: hci6: command tx timeout
[  326.528253] Bluetooth: hci7: command tx timeout
[  328.063364] Bluetooth: hci0: command tx timeout
[  328.191869] Bluetooth: hci1: command tx timeout
[  328.319232] Bluetooth: hci2: command tx timeout
[  328.383612] Bluetooth: hci3: command tx timeout
[  328.447297] Bluetooth: hci4: command tx timeout
[  328.510905] Bluetooth: hci5: command tx timeout
[  328.574950] Bluetooth: hci7: command tx timeout
[  328.575441] Bluetooth: hci6: command tx timeout
[  382.685603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  382.688394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  382.695433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  382.768475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  382.782136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  382.862578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  382.883650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.898982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.907484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.912042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  383.056470] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  383.065977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  383.069684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  383.080228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  383.082483] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  383.120544] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  383.134059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  383.135414] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  383.139512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  383.142114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  383.145256] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  383.147264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  383.155704] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  383.156066] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  383.161249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.163750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  383.165380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  383.166687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  383.173921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  383.188544] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  383.195772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  383.209209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  383.221111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  383.254544] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  383.268110] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  383.277170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  383.301555] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  383.327148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  383.347989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  383.373162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  384.831088] Bluetooth: hci0: command tx timeout
[  385.023927] Bluetooth: hci1: command tx timeout
[  385.151229] Bluetooth: hci2: command tx timeout
[  385.279999] Bluetooth: hci4: command tx timeout
[  385.280861] Bluetooth: hci5: command tx timeout
[  385.281418] Bluetooth: hci3: command tx timeout
[  385.406911] Bluetooth: hci7: command tx timeout
[  385.727192] Bluetooth: hci6: command tx timeout
[  386.879203] Bluetooth: hci0: command tx timeout
[  387.070902] Bluetooth: hci1: command tx timeout
[  387.201178] Bluetooth: hci2: command tx timeout
[  387.328594] Bluetooth: hci3: command tx timeout
[  387.329174] Bluetooth: hci5: command tx timeout
[  387.329635] Bluetooth: hci4: command tx timeout
[  387.455196] Bluetooth: hci7: command tx timeout
[  387.777138] Bluetooth: hci6: command tx timeout
[  388.926909] Bluetooth: hci0: command tx timeout
[  389.118942] Bluetooth: hci1: command tx timeout
[  389.247362] Bluetooth: hci2: command tx timeout
[  389.375117] Bluetooth: hci3: command tx timeout
[  389.375662] Bluetooth: hci4: command tx timeout
[  389.376919] Bluetooth: hci5: command tx timeout
[  389.502925] Bluetooth: hci7: command tx timeout
[  389.822899] Bluetooth: hci6: command tx timeout
[  390.975578] Bluetooth: hci0: command tx timeout
[  391.167296] Bluetooth: hci1: command tx timeout
[  391.297027] Bluetooth: hci2: command tx timeout
[  391.422973] Bluetooth: hci3: command tx timeout
[  391.423553] Bluetooth: hci4: command tx timeout
[  391.424069] Bluetooth: hci5: command tx timeout
[  391.550937] Bluetooth: hci7: command tx timeout
[  391.871063] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
14:04:15  Registers:
info registers vcpu 0
RAX=00000000073c0177 RBX=ffff88803560dc08 RCX=ffff88800719f9e0 RDX=000000000000000e
RSI=00000000540c3709 RDI=ffffffff81000130 RBP=ffff88802d3ef8d0 RSP=ffff88802d3ef418
R8 =000000008eca994d R9 =ffff88806bf763b0 R10=0000000000000001 R11=0000000000000000
R12=0000000000000200 R13=0000000000000002 R14=0000000000000002 R15=000000000000000f
RIP=ffffffff817bb344 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e562f000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5e5ce3b260 CR3=000000001c461000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff888023f07470 RCX=ffffffff819979d1 RDX=ffff88802d305280
RSI=0000000000000003 RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff888009837810
R8 =0000000000000001 R9 =ffffed1006b4768a R10=0000000000000003 R11=0000000000000001
R12=0000000000000003 R13=0000000000000003 R14=ffff88802ed06a00 R15=0000000000000003
RIP=ffffffff819979d4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7b31f6b540 00000000 00000000
GS =0000 ffff8880e572f000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7b3203c710 CR3=0000000033fdc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff0000000000000000000000ff XMM01=ffffff0000ff00ffffffffffffffff00
XMM02=494c4700362e322e325f4342494c4700 XMM03=00000000000000000000000000004700
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000