Warning: Permanently added '[localhost]:62112' (ECDSA) to the list of known hosts.
2025/06/19 11:24:34 fuzzer started
2025/06/19 11:24:34 dialing manager at localhost:36157
syzkaller login: [   96.602265] cgroup: Unknown subsys name 'net'
[   96.703019] cgroup: Unknown subsys name 'cpuset'
[   96.732100] cgroup: Unknown subsys name 'rlimit'
2025/06/19 11:24:49 syscalls: 206
2025/06/19 11:24:49 code coverage: enabled
2025/06/19 11:24:49 comparison tracing: enabled
2025/06/19 11:24:49 extra coverage: enabled
2025/06/19 11:24:49 setuid sandbox: enabled
2025/06/19 11:24:49 namespace sandbox: enabled
2025/06/19 11:24:49 Android sandbox: enabled
2025/06/19 11:24:49 fault injection: enabled
2025/06/19 11:24:49 leak checking: enabled
2025/06/19 11:24:49 net packet injection: enabled
2025/06/19 11:24:49 net device setup: enabled
2025/06/19 11:24:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/19 11:24:49 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/19 11:24:49 USB emulation: enabled
2025/06/19 11:24:49 hci packet injection: enabled
2025/06/19 11:24:49 wifi device emulation: enabled
2025/06/19 11:24:49 802.15.4 emulation: enabled
2025/06/19 11:24:49 fetching corpus: 0, signal 0/0 (executing program)
2025/06/19 11:24:50 starting 8 fuzzer processes
11:24:50 executing program 0:
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x4, 0x7, 0x7, 0x6, 0xa, "669c3de5b81ffa1ff114a7c89b9c069015f2cd"})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/219)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0x4)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000180)=""/148)
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000240))
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000280))
ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000300)={0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340))
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000380)={0x1ff, 0x4, 0x7f, 0x8, 0xd, "89c60c8dda26658c"})
r3 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x7}, {0x9, 0xf6f}, {0x6, 0x8}]})
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000440))
r4 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000480)={0x80, 0x1, 0x40, 0x0, 0x12, "82361d9312bbc02fc38fe5595bcdc6f0472dc9"})

11:24:50 executing program 1:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2c0400, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x3, 0x1, 0x1, 0x0, 0x3, 0x20, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x5}, 0x800, 0x10000, 0x3f, 0x8, 0x100000000, 0x2e91, 0x6, 0x0, 0x9, 0x0, 0x4}, r0, 0xf, r1, 0x2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x204)
perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xfe, 0x2, 0x4, 0xe8, 0x0, 0x8a20, 0x2022, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0xffffffffffff8c9c, 0x3000}, 0x88, 0x97, 0x2, 0x3, 0xfffffffffffffff8, 0x8001, 0x800, 0x0, 0x3, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r2 = syz_open_procfs(r0, &(0x7f00000001c0)='pagemap\x00')
write$tun(r2, &(0x7f0000000200)={@val={0x0, 0x86dd}, @val={0x3, 0x3, 0x7fff, 0xa3, 0x0, 0x2}, @mpls={[{0xff, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x1000}], @llc={@snap={0xab, 0xaa, '!*', "b5704e", 0xfbfb, "805b8dc99db146a707d294902179c419ec24a0c11855a63aafca57638b5bf42737b00714eec4ec8364e65c222c4a7ac4f6701e4f7ff3959a2f52c381fae2d13ddcc3925efbe231b837dd1bb7097576c5345e8021a37e9b34ce3dcef2e256e67efbd5f5d9565b17f0bb28e6d6e4930ba855a91ea5e23a2e0de64d55408f816156cf5c74cc89be728d888393fad753a6ecf91c12ef10b8c4627eef7964ede9d63b4a77c7379bfeeff0fc823fd421e466563598"}}}}, 0xd5)
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8000}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5a}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xe1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2d}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x7c3ba055bd015c25)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x304011}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000840)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0xa0100, 0x0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000640)={0x1, 0x9}, 0x8)
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11)
syz_open_procfs$namespace(r0, &(0x7f0000000680)='ns/mnt\x00')
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000740)={0x3, 0x80, 0x1f, 0x2, 0x8, 0x7, 0x0, 0x6, 0x1442, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000700), 0x2}, 0x30, 0x6, 0x3cea, 0x3, 0x200, 0x10000, 0x2, 0x0, 0xfffffffb, 0x0, 0x4}, r0, 0x10, r1, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000007c0))
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000800)=0x3)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000840)={'ipvlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040800}, 0x20040801)

11:24:50 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x5)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)=0x1)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008}, 0x40000)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x3}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4850}, 0x4000050)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000340))
r2 = syz_open_pts(r0, 0x61100)
ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000380)={0x1f, 0xffffe212, 0xd7c, 0xa91, 0x10, "40e10cf11a24ccc222a8bb359a77993f87e233"})
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x727042, 0x0)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000400)=0x1)
r4 = getuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r4)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000440)={'veth1_vlan\x00', @random})
ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000480)={'rose0\x00'})
setuid(0x0)

[  112.638658] audit: type=1400 audit(1750332290.993:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:24:51 executing program 3:
prctl$PR_GET_IO_FLUSHER(0x3a)
prctl$PR_GET_IO_FLUSHER(0x3a)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000))
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x1)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5d, 0x1, 0x0, 0x101, 0x1})
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0xb7, 0xfff7, 0x40, 0x3})
ioctl$TIOCCONS(r0, 0x541d)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000000c0)={0x41ecb8d8, 0xf62, 0x9, 0x0, 0x7fff})
ioctl$TIOCCONS(r0, 0x541d)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x5, 0x385, 0x2, 0x2})
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000140)=0x9)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8085}, 0x4000)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x6, 0x8})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0))
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000300)={0x5, 0x4, 0xfffffff9, 0x6, 0x12, "e47c7859bebf9f740a6e58974978208ae284b2"})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000400))

11:24:51 executing program 4:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @multicast1}, &(0x7f0000000040)=0xc)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x5)
socketpair(0x2b, 0x3, 0x5268, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = accept(r1, &(0x7f0000000200)=@vsock, &(0x7f0000000280)=0x80)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x840)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000400)={'veth1_macvtap\x00'})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000440))
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$TCSETSW(r5, 0x5403, &(0x7f00000004c0)={0x1, 0x5, 0x0, 0xfff, 0x17, "01e3a8ec2e3489619bef7145b868a0b659d0aa"})
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000500)={'veth1_virt_wifi\x00', 0x2})
sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1c}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x4)
openat$cgroup_subtree(r5, &(0x7f0000000680), 0x2, 0x0)
r6 = getuid()
ioctl$TUNSETOWNER(r3, 0x400454cc, r6)
r7 = syz_open_pts(r5, 0x200)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000006c0)=0x5)

11:24:51 executing program 5:
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0xffe0}, {0x7ff, 0x7}]})
write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @val={0x3, 0xd2c21498828f43e0, 0xefca, 0x2, 0x0, 0x4d25}, @ipv4=@tipc={{0xb, 0x4, 0x3, 0x7, 0x5c, 0x64, 0x0, 0x40, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@lsrr={0x83, 0x17, 0x23, [@dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x36}, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3d}]}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x2, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1, 0x7, 0x1ff, 0x3, 0x4e22, 0x4e24}, 0x1, 0x4}, 0x0, 0x3}, 0x3}}, [0x0, 0x0, 0x0, 0x0]}}}, 0x66)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=<r1=>0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, r1)
getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x620080, 0x0)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000380)={0x20, 0x7fff, 0x400, 0x40800000, 0xc, "00bf125bd691a9b6b061014cfaf33bba2f5adb"})
r4 = getuid()
ioctl$TUNSETOWNER(r0, 0x400454cc, r4)
ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f00000003c0)='vcan0\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r2, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8eb}}}, 0x80)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000540)=<r6=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000580)=r6)
write$tun(r2, &(0x7f00000005c0)={@val={0x0, 0x88f5}, @val={0x1, 0x1, 0x5, 0x20, 0x0, 0x3}, @x25={0x2, 0x3f, 0xff, "dabcc092729c6876091e3b572d204bb47f3f491144330c4f9e492c13e13b4ef35f205c77aad3ab6993e07f7119e4d8317b6ae5e6b7d111000551acc2f8a38c4d5709bd6bc03efb4c3c86a30eb8edf7318c34c67d864a10105d1f01f9f14fe93834b0bc2415f7bac52784dc919c5afa8efbbc36f56ab3b835f3ce565dcb27c1ab34f10cb776962c7de5c51d1e57d8fbd7"}}, 0xa1)
recvfrom(r2, &(0x7f0000000680)=""/176, 0xb0, 0x12102, &(0x7f0000000740)=@caif, 0x80)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x25274844}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4004040)

11:24:51 executing program 6:
timerfd_create(0x6, 0x80000)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x7ff)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040))
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xfa39, 0x6, 0x6, 0x2, 0xe, "157e86c4d53802e2"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x800, 0x1c, 0x3f, 0x2})
ioctl$TCSBRK(r0, 0x5409, 0x3bb5)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000180))
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$VT_WAITACTIVE(r3, 0x5607)
ioctl$TCFLSH(r3, 0x540b, 0x0)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000200)={0x6, 0x6})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]})
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f00000002c0))

11:24:51 executing program 7:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000000))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)={0x80, "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"})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/134})
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0)
ioctl$KDSETMODE(r3, 0x4b3a, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000400)={0x1, 0x7f, 0x3ff, 0x6, 0x11, "7b959e3945f8289d8a58378140ee4988c74f27"})
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000440))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x282, 0x0)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000004c0))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='attr\x00')
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000540)=0x7)
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000580)=0x1)
timerfd_gettime(r5, &(0x7f00000005c0))
ioctl$VT_ACTIVATE(r4, 0x5606, 0xa3)
ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000600))
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000640)={0x3, 0x0, 0x3ff, 0x3916, 0x5, "8f19a7387c64f05bbd758fa560197150814ef4"})

[  114.125400] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.128849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.131812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.136659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.139613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.187033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.189105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.191416] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.199280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.201608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.207993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  114.210141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.213887] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.235680] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.242836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.247491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.253746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.272653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.313776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.315462] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  114.321501] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.322801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  114.324504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.328356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.329780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  114.335893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.339441] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.366773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  114.368676] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.369737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  114.383591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  114.389577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  114.392389] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  114.395312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  114.406247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  114.410679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  114.412911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  114.415827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  114.427725] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  114.436576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  116.197460] Bluetooth: hci0: command tx timeout
[  116.260574] Bluetooth: hci1: command tx timeout
[  116.324234] Bluetooth: hci2: command tx timeout
[  116.388469] Bluetooth: hci5: command tx timeout
[  116.452229] Bluetooth: hci6: command tx timeout
[  116.453121] Bluetooth: hci3: command tx timeout
[  116.516508] Bluetooth: hci4: command tx timeout
[  116.517731] Bluetooth: hci7: command tx timeout
[  118.244613] Bluetooth: hci0: command tx timeout
[  118.308334] Bluetooth: hci1: command tx timeout
[  118.373717] Bluetooth: hci2: command tx timeout
[  118.436891] Bluetooth: hci5: command tx timeout
[  118.500729] Bluetooth: hci6: command tx timeout
[  118.501400] Bluetooth: hci3: command tx timeout
[  118.564240] Bluetooth: hci7: command tx timeout
[  118.564857] Bluetooth: hci4: command tx timeout
[  120.292366] Bluetooth: hci0: command tx timeout
[  120.356190] Bluetooth: hci1: command tx timeout
[  120.421158] Bluetooth: hci2: command tx timeout
[  120.484223] Bluetooth: hci5: command tx timeout
[  120.548341] Bluetooth: hci3: command tx timeout
[  120.548943] Bluetooth: hci6: command tx timeout
[  120.612220] Bluetooth: hci4: command tx timeout
[  120.612798] Bluetooth: hci7: command tx timeout
[  122.340681] Bluetooth: hci0: command tx timeout
[  122.404578] Bluetooth: hci1: command tx timeout
[  122.468491] Bluetooth: hci2: command tx timeout
[  122.533134] Bluetooth: hci5: command tx timeout
[  122.597161] Bluetooth: hci6: command tx timeout
[  122.597750] Bluetooth: hci3: command tx timeout
[  122.660227] Bluetooth: hci7: command tx timeout
[  122.660785] Bluetooth: hci4: command tx timeout
[  177.139207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  177.142608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  177.151140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  177.160306] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  177.170758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  177.360622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  177.372663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  177.375454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  177.388995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  177.392287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  177.399871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.401598] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  177.404433] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  177.404542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.408445] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.409363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  177.412856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  177.414400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  177.431285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.434449] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.497921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.503879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.516429] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.524702] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.532290] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  177.544318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.545417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  177.546686] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  177.548589] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  177.550153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.559516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  177.565710] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  177.567964] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.591633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.599947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  177.601576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  177.605425] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.617020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.618875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  177.635571] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  179.236248] Bluetooth: hci0: command tx timeout
[  179.492326] Bluetooth: hci2: command tx timeout
[  179.493239] Bluetooth: hci1: command tx timeout
[  179.556128] Bluetooth: hci3: command tx timeout
[  179.621148] Bluetooth: hci7: command tx timeout
[  179.684292] Bluetooth: hci4: command tx timeout
[  179.685152] Bluetooth: hci5: command tx timeout
[  179.685260] Bluetooth: hci6: command tx timeout
[  181.284164] Bluetooth: hci0: command tx timeout
[  181.541583] Bluetooth: hci2: command tx timeout
[  181.542327] Bluetooth: hci1: command tx timeout
[  181.604143] Bluetooth: hci3: command tx timeout
[  181.669089] Bluetooth: hci7: command tx timeout
[  181.732187] Bluetooth: hci4: command tx timeout
[  181.732667] Bluetooth: hci6: command tx timeout
[  181.733161] Bluetooth: hci5: command tx timeout
[  183.332432] Bluetooth: hci0: command tx timeout
[  183.588384] Bluetooth: hci2: command tx timeout
[  183.588861] Bluetooth: hci1: command tx timeout
[  183.652116] Bluetooth: hci3: command tx timeout
[  183.716286] Bluetooth: hci7: command tx timeout
[  183.780563] Bluetooth: hci4: command tx timeout
[  183.781026] Bluetooth: hci6: command tx timeout
[  183.781319] Bluetooth: hci5: command tx timeout
[  185.381084] Bluetooth: hci0: command tx timeout
[  185.636352] Bluetooth: hci2: command tx timeout
[  185.636849] Bluetooth: hci1: command tx timeout
[  185.700405] Bluetooth: hci3: command tx timeout
[  185.764118] Bluetooth: hci7: command tx timeout
[  185.828153] Bluetooth: hci6: command tx timeout
[  185.828584] Bluetooth: hci4: command tx timeout
[  185.829689] Bluetooth: hci5: command tx timeout
[  239.368380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  239.372549] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  239.380600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  239.388657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  239.394505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  239.426257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  239.430324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  239.433722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  239.445310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  239.450504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  239.588483] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  239.595617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  239.606562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.609024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  239.617956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  239.621944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  239.636855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.639396] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.648605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.656598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.989676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  240.008932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  240.020022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  240.024258] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  240.028307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  240.031697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  240.040438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  240.057858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  240.061582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  240.063577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  240.070627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  240.075424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  240.102695] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  240.113396] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  240.124409] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  240.130640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  240.133119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  240.137801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  240.167515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  240.183594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  241.444194] Bluetooth: hci0: command tx timeout
[  241.509378] Bluetooth: hci1: command tx timeout
[  241.702328] Bluetooth: hci2: command tx timeout
[  241.765121] Bluetooth: hci3: command tx timeout
[  242.212171] Bluetooth: hci4: command tx timeout
[  242.212909] Bluetooth: hci7: command tx timeout
[  242.277237] Bluetooth: hci5: command tx timeout
[  242.341250] Bluetooth: hci6: command tx timeout
[  243.492512] Bluetooth: hci0: command tx timeout
[  243.557096] Bluetooth: hci1: command tx timeout
[  243.749579] Bluetooth: hci2: command tx timeout
[  243.813131] Bluetooth: hci3: command tx timeout
[  244.260246] Bluetooth: hci7: command tx timeout
[  244.260724] Bluetooth: hci4: command tx timeout
[  244.324129] Bluetooth: hci5: command tx timeout
[  244.390347] Bluetooth: hci6: command tx timeout
[  245.540102] Bluetooth: hci0: command tx timeout
[  245.605268] Bluetooth: hci1: command tx timeout
[  245.796331] Bluetooth: hci2: command tx timeout
[  245.861427] Bluetooth: hci3: command tx timeout
[  246.308342] Bluetooth: hci4: command tx timeout
[  246.308808] Bluetooth: hci7: command tx timeout
[  246.374121] Bluetooth: hci5: command tx timeout
[  246.438351] Bluetooth: hci6: command tx timeout
[  247.589747] Bluetooth: hci0: command tx timeout
[  247.652303] Bluetooth: hci1: command tx timeout
[  247.845063] Bluetooth: hci2: command tx timeout
[  247.909110] Bluetooth: hci3: command tx timeout
[  248.357135] Bluetooth: hci4: command tx timeout
[  248.357603] Bluetooth: hci7: command tx timeout
[  248.421320] Bluetooth: hci5: command tx timeout
[  248.485103] Bluetooth: hci6: command tx timeout
[  302.130803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.135531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.139001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.144431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.146627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.193607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  302.196381] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  302.198820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  302.204957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  302.209816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  302.326285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  302.330788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  302.331850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  302.344402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  302.349169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.394709] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.409413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.422790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.428741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.432276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  302.475403] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  302.484825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  302.488375] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  302.517126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  302.523331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  302.526663] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  302.530302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  302.539301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  302.567190] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  302.578524] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  302.587418] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  302.611370] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  302.612592] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  302.636446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  302.639012] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  302.745523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  302.761482] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  302.789175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  302.862928] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  302.936171] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  304.228319] Bluetooth: hci1: command tx timeout
[  304.228376] Bluetooth: hci0: command tx timeout
[  304.421132] Bluetooth: hci2: command tx timeout
[  304.484439] Bluetooth: hci3: command tx timeout
[  304.612476] Bluetooth: hci5: command tx timeout
[  304.614159] Bluetooth: hci4: command tx timeout
[  304.676147] Bluetooth: hci6: command tx timeout
[  305.061215] Bluetooth: hci7: command tx timeout
[  306.276149] Bluetooth: hci1: command tx timeout
[  306.276653] Bluetooth: hci0: command tx timeout
[  306.468213] Bluetooth: hci2: command tx timeout
[  306.533086] Bluetooth: hci3: command tx timeout
[  306.660485] Bluetooth: hci4: command tx timeout
[  306.660528] Bluetooth: hci5: command tx timeout
[  306.724090] Bluetooth: hci6: command tx timeout
[  307.109234] Bluetooth: hci7: command tx timeout
[  308.324266] Bluetooth: hci1: command tx timeout
[  308.324439] Bluetooth: hci0: command tx timeout
[  308.517172] Bluetooth: hci2: command tx timeout
[  308.580349] Bluetooth: hci3: command tx timeout
[  308.710111] Bluetooth: hci5: command tx timeout
[  308.710613] Bluetooth: hci4: command tx timeout
[  308.775155] Bluetooth: hci6: command tx timeout
[  309.156249] Bluetooth: hci7: command tx timeout
[  310.372152] Bluetooth: hci0: command tx timeout
[  310.373212] Bluetooth: hci1: command tx timeout
[  310.564228] Bluetooth: hci2: command tx timeout
[  310.629416] Bluetooth: hci3: command tx timeout
[  310.756411] Bluetooth: hci5: command tx timeout
[  310.757759] Bluetooth: hci4: command tx timeout
[  310.821119] Bluetooth: hci6: command tx timeout
[  311.204231] Bluetooth: hci7: command tx timeout
[  364.977191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  364.980844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  364.984465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  364.989530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  364.992601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.106406] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.109550] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.111930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.120455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.130396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  365.243357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  365.248324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  365.260989] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  365.265006] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  365.270780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  365.273674] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  365.278520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  365.282762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  365.290433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  365.300706] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  365.397529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.410116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  365.415293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.416356] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  365.423720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.428936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  365.438435] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.444765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  365.445731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.450518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  365.581372] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  365.612422] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  365.625971] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  365.650728] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  365.681562] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.421554] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  366.431640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  366.491372] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  366.551303] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  366.594698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.076329] Bluetooth: hci0: command tx timeout
[  367.204183] Bluetooth: hci1: command tx timeout
[  367.332392] Bluetooth: hci3: command tx timeout
[  367.397483] Bluetooth: hci2: command tx timeout
[  367.524603] Bluetooth: hci4: command tx timeout
[  367.588343] Bluetooth: hci5: command tx timeout
[  367.780269] Bluetooth: hci7: command tx timeout
[  368.740162] Bluetooth: hci6: command tx timeout
[  369.125186] Bluetooth: hci0: command tx timeout
[  369.254595] Bluetooth: hci1: command tx timeout
[  369.381472] Bluetooth: hci3: command tx timeout
[  369.444575] Bluetooth: hci2: command tx timeout
[  369.573188] Bluetooth: hci4: command tx timeout
[  369.638427] Bluetooth: hci5: command tx timeout
[  369.828474] Bluetooth: hci7: command tx timeout
[  370.788212] Bluetooth: hci6: command tx timeout
[  371.172504] Bluetooth: hci0: command tx timeout
[  371.301410] Bluetooth: hci1: command tx timeout
[  371.428162] Bluetooth: hci3: command tx timeout
[  371.492685] Bluetooth: hci2: command tx timeout
[  371.621165] Bluetooth: hci4: command tx timeout
[  371.684329] Bluetooth: hci5: command tx timeout
[  371.877134] Bluetooth: hci7: command tx timeout
[  372.836303] Bluetooth: hci6: command tx timeout
[  373.220223] Bluetooth: hci0: command tx timeout
[  373.349121] Bluetooth: hci1: command tx timeout
[  373.476123] Bluetooth: hci3: command tx timeout
[  373.540276] Bluetooth: hci2: command tx timeout
[  373.668129] Bluetooth: hci4: command tx timeout
[  373.733175] Bluetooth: hci5: command tx timeout
[  373.924147] Bluetooth: hci7: command tx timeout
[  374.884158] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
11:29:53  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff888029985280 RCX=ffff888016a5740c RDX=0000000000000000
RSI=ffffffff819ed5f7 RDI=ffff88802998567c RBP=ffff888029985280 RSP=ffff888016a57430
R8 =0000000000000001 R9 =ffff888016a574f8 R10=000000000003b53d R11=000000000001f50e
R12=0000000000000000 R13=ffff888016a57500 R14=ffff888029985280 R15=ffff888016a574b8
RIP=ffffffff815abe87 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd7ff8b3b70 CR3=000000002ac15000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78
XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88802fecf8b0 RCX=ffff88802fecf73c RDX=1ffff11005fd9f2c
RSI=ffffffff81b67570 RDI=ffff88802fecf8bc RBP=ffff88802fecf960 RSP=ffff88802fecf7c8
R8 =0000000000000001 R9 =ffff88802fecf828 R10=000000000003b53d R11=0000000000026e67
R12=ffff88802fecf8b0 R13=0000000000000000 R14=ffff88801686b700 R15=0000000000000dc0
RIP=ffffffff81604ab9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe2400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f86af608000 CR3=0000000035360000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000