Warning: Permanently added '[localhost]:31581' (ECDSA) to the list of known hosts.
2025/06/22 00:26:44 fuzzer started
2025/06/22 00:26:45 dialing manager at localhost:33119
syzkaller login: [  104.349747] cgroup: Unknown subsys name 'net'
[  104.457909] cgroup: Unknown subsys name 'cpuset'
[  104.518575] cgroup: Unknown subsys name 'rlimit'
2025/06/22 00:27:09 syscalls: 200
2025/06/22 00:27:09 code coverage: enabled
2025/06/22 00:27:09 comparison tracing: enabled
2025/06/22 00:27:09 extra coverage: enabled
2025/06/22 00:27:09 setuid sandbox: enabled
2025/06/22 00:27:09 namespace sandbox: enabled
2025/06/22 00:27:09 Android sandbox: enabled
2025/06/22 00:27:09 fault injection: enabled
2025/06/22 00:27:09 leak checking: enabled
2025/06/22 00:27:09 net packet injection: enabled
2025/06/22 00:27:09 net device setup: enabled
2025/06/22 00:27:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/22 00:27:09 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/22 00:27:09 USB emulation: enabled
2025/06/22 00:27:09 hci packet injection: enabled
2025/06/22 00:27:09 wifi device emulation: enabled
2025/06/22 00:27:09 802.15.4 emulation: enabled
2025/06/22 00:27:09 fetching corpus: 0, signal 0/0 (executing program)
2025/06/22 00:27:10 starting 8 fuzzer processes
00:27:10 executing program 0:
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/68)
r0 = shmget(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = shmget(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)
shmctl$IPC_RMID(r1, 0x0)
r2 = shmget(0x3, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)
r3 = shmget(0x3, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000080)=""/49)
shmctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/188)
r4 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000180)=""/232)
shmctl$SHM_UNLOCK(r3, 0xc)
shmctl$SHM_STAT_ANY(r4, 0xf, &(0x7f0000000280)=""/69)
r5 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r5, 0xb)
shmctl$SHM_UNLOCK(r0, 0xc)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x11)
shmctl$SHM_LOCK(r0, 0xb)
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x11, 0x1, {0x0, 0x1, 0x5}}, 0x14)

00:27:10 executing program 1:
io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x9)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0xfa73dc07bdab4090, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/62, 0x3e}], 0x7)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/configfs', 0x408001, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000004c0)={0x16, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x1d, 0xffc0, [0x9]}}]}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r2=>r1, {0x344a}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0)
write$hidraw(r2, &(0x7f00000005c0)="41d4762c56cc1b29d13a4a1b2a081b46796c96d61cbeb4355a2c567123da107dc52331da26686792c00df5b637209a", 0x2f)
pipe2(&(0x7f0000000600)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'})
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/class/scsi_disk', 0x181001, 0x110)
setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000700), 0x4)
write$hidraw(r3, &(0x7f0000000740)="015da674d2d143de7e50107bccf76f1204c14c7c498cea5472b5ac6335c872dcbed67967c579ce335c818f787793262fcac2ca84789b47aaa460d36a83ce9464620cb396a0df5896363eb38981ef47eb0b1e4b65c6ad6e6fe7f2e8bb92da2051da384545c9d051335ecb06762a44caae70567b213fff5e8c79c48987edd2030da3", 0x81)
io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'})
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000880)=0x8, 0x4)

00:27:10 executing program 2:
r0 = gettid()
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x1d, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x5, 0x25, "1f1a85198542efbde41cad24d15c605c42d1b8007274e7b296376df2142235f165cce098d5"}, @enc_lim={0x4, 0x1, 0x61}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x2, 0x4, 0x31, 0x5, [0x8, 0x1000]}}, @ra={0x5, 0x2, 0x7ff}]}, 0x98)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000100)={0x6, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4cd3}}, {{0xa, 0x4e23, 0xb1a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e)
waitid(0x1, r0, &(0x7f00000002c0), 0x40000000, 0x0)
pipe2(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = openat$cgroup_pressure(r1, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0)
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2a2881, 0x0)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r4, r1, r5, r6, r1], 0x5)
r7 = syz_io_uring_setup(0x5d28, &(0x7f0000000480)={0x0, 0xd8f8, 0x0, 0x2, 0x333, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540))
io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000580)=r2, 0x1)
r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x44080, 0x0)
setsockopt$inet6_opts(r8, 0x29, 0x0, &(0x7f0000000600)=@hopopts={0x3b, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x10)
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000640)=r1, 0x1)
openat$cgroup_freezer_state(r5, &(0x7f0000000680), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r9=>r8}, './file0\x00'})
openat$cgroup_freezer_state(r9, &(0x7f0000000700), 0x2, 0x0)

00:27:10 executing program 3:
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
r0 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xfffffffffffffff7}}, './file0\x00'})
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/hci\x00')
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x47c33f2094cf8590, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10041, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x5, 0x0, 0x3a5, 0x0, 0x8}, r2, 0xa, 0xffffffffffffffff, 0x5)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0xffff6692}}, './file0\x00'})
shmget(0x3, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x100, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x2, 0x9}, 0x4143, 0x2, 0x9, 0x7, 0x0, 0x2, 0x199d, 0x0, 0xfffff5bb, 0x0, 0x20}, r4, 0x4, r5, 0xc)
openat$cgroup_ro(r3, &(0x7f00000002c0)='memory.numa_stat\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xafc2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}}, 0x0)
recvfrom$inet6(r4, &(0x7f0000000580)=""/229, 0xe5, 0x41, &(0x7f0000000680)={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x101}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0xbfe}}, './file0\x00'})
openat$cgroup_type(r5, &(0x7f0000000700), 0x2, 0x0)

[  129.380850] audit: type=1400 audit(1750552030.461:7): avc:  denied  { execmem } for  pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:27:10 executing program 4:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, @out_args}, './file0\x00'})
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x6, @private2, 0x4}, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x80000001}, 0x0, [0x6, 0x20, 0x100, 0x390, 0xe0000000, 0xffffff01, 0x8, 0x7f]}, 0x5c)
write$P9_RLINK(r1, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x60080, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2, {0x3}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x278}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)
r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x400081, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r8=>r7}, './file0\x00'})
openat$cgroup_procs(r8, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0)
write$bt_hci(r0, &(0x7f0000000480)={0x1, @write_le_host_supported={{0xc6d, 0x2}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x1}}, './file1\x00'})
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x400280, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r10=>r6}, './file1\x00'})
openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000580), 0x2, 0x0)
openat$cgroup(r10, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0)

00:27:10 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x800}}, './file0\x00'})
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0xfffffffffffffff7}}, './file0\x00'})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast2, @in=@dev}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
write$P9_RXATTRCREATE(r2, &(0x7f0000000240)={0x7, 0x21, 0x1}, 0x7)
r3 = syz_io_uring_setup(0xf10, &(0x7f0000000280)={0x0, 0xace2, 0x0, 0x1, 0x4f, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000300), &(0x7f0000000340))
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x4001810, r3, 0x10000000)
pipe2(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000d6b000/0x12000)=nil, 0x12000, 0xa, 0x10, r2, 0x8000000)
write$P9_RREMOVE(r0, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
write$P9_RREADLINK(r4, &(0x7f0000000440)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r7=>r3, {0x7}}, './file0\x00'})
io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000004c0)={0x2, 0x4, 0x0, 0x81, 0x0, [@remote, @local]}, 0x28)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r8=>r2, {0x4}}, './file0\x00'})
syz_io_uring_setup(0x46c0, &(0x7f0000000580)={0x0, 0xa1ab, 0x10, 0x0, 0x12c, 0x0, r8}, &(0x7f0000f83000/0x2000)=nil, &(0x7f0000b6d000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0/../file0\x00'})

00:27:10 executing program 6:
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r1=>r0, {0x1ff}}, './file0\x00'})
clock_gettime(0x0, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
futimesat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={{}, {r2, r3/1000+60000}})
r4 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x0, 0x0)
mknodat(r4, &(0x7f0000000280)='./file0\x00', 0x800, 0xc3)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r6=>r0, {0x5d73}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0x1}}, './file0\x00'})
io_uring_enter(r0, 0x1858, 0xc1a0, 0x2, &(0x7f0000000380)={[0xffff]}, 0x8)
r8 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x8, 0x400000)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r9=>r8, {0x3}}, './file0\x00'})
write$P9_RLERRORu(r0, &(0x7f0000000440)={0xe, 0x7, 0x1, {{0x1, '\x1a'}, 0x6}}, 0xe)
faccessat(r7, &(0x7f0000000480)='./file0\x00', 0x121)
openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x111000, 0x10, 0x17}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r9, {0x6}}, './file0\x00'})
futimesat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={{0x77359400}, {0x0, 0xea60}})

00:27:10 executing program 7:
clock_getres(0x4, &(0x7f0000000000))
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
write$P9_RXATTRCREATE(r0, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7)
write$P9_RXATTRCREATE(r0, &(0x7f0000000280)={0x7, 0x21, 0x1}, 0x7)
clock_getres(0x0, &(0x7f00000002c0))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/class/spi_host', 0x2, 0x1)
write$P9_RLERRORu(r1, &(0x7f0000000340)={0x1d, 0x7, 0x1, {{0x10, 'veth0_to_batadv\x00'}, 0x3}}, 0x1d)
clock_gettime(0x0, &(0x7f0000000380)={<r2=>0x0, <r3=>0x0})
nanosleep(&(0x7f00000003c0)={r2, r3+60000000}, 0x0)
clock_getres(0x0, &(0x7f0000000400))
clock_gettime(0x0, &(0x7f0000000440)={<r4=>0x0, <r5=>0x0})
nanosleep(&(0x7f0000000480)={r4, r5+10000000}, &(0x7f00000004c0))
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000500))
write$P9_RWRITE(r0, &(0x7f0000000540)={0xb, 0x77, 0x2, 0x3ff}, 0xb)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/class/mei', 0x680000, 0x42)
ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f00000005c0))
r7 = accept4$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000640)=0x1c, 0x80800)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000680)={{{@in=@broadcast, @in=@multicast1, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0xa0, 0x2f, 0x0, 0xee00}, {0x3, 0x0, 0xfffffffffffffffb, 0x5, 0x74, 0x1f, 0x100000001, 0x3}, {0x2, 0x200, 0xe31d, 0x3f}, 0xfff, 0x6e6bb7, 0x0, 0x0, 0x6, 0x3}, {{@in=@empty, 0x4d5, 0x27}, 0xa, @in6=@remote, 0x3507, 0x1, 0x2, 0x6, 0x3, 0x3, 0x6}}, 0xe8)

[  130.830148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.832363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.836289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.838724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.846888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.854528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.859301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.863350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.870778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.873185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.880302] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.884748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.902320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.911415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.946856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.972700] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.977392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.997960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  131.011312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  131.014431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  131.015943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  131.016897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  131.018430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  131.028060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  131.030042] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  131.036032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  131.038728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  131.044827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  131.080249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  131.087129] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  131.097136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  131.097810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  131.100590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  131.104820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  131.107427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  131.109397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  131.112312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  131.128271] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  131.151726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  131.196817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  132.967338] Bluetooth: hci0: command tx timeout
[  132.968632] Bluetooth: hci1: command tx timeout
[  133.029743] Bluetooth: hci2: command tx timeout
[  133.093981] Bluetooth: hci3: command tx timeout
[  133.094575] Bluetooth: hci4: command tx timeout
[  133.221565] Bluetooth: hci5: command tx timeout
[  133.285792] Bluetooth: hci7: command tx timeout
[  133.349546] Bluetooth: hci6: command tx timeout
[  135.013658] Bluetooth: hci1: command tx timeout
[  135.013723] Bluetooth: hci0: command tx timeout
[  135.079683] Bluetooth: hci2: command tx timeout
[  135.142797] Bluetooth: hci4: command tx timeout
[  135.144119] Bluetooth: hci3: command tx timeout
[  135.269910] Bluetooth: hci5: command tx timeout
[  135.333643] Bluetooth: hci7: command tx timeout
[  135.399610] Bluetooth: hci6: command tx timeout
[  137.061658] Bluetooth: hci1: command tx timeout
[  137.062701] Bluetooth: hci0: command tx timeout
[  137.126729] Bluetooth: hci2: command tx timeout
[  137.190111] Bluetooth: hci3: command tx timeout
[  137.190194] Bluetooth: hci4: command tx timeout
[  137.317709] Bluetooth: hci5: command tx timeout
[  137.382508] Bluetooth: hci7: command tx timeout
[  137.445547] Bluetooth: hci6: command tx timeout
[  139.109542] Bluetooth: hci0: command tx timeout
[  139.109572] Bluetooth: hci1: command tx timeout
[  139.173628] Bluetooth: hci2: command tx timeout
[  139.237690] Bluetooth: hci4: command tx timeout
[  139.237740] Bluetooth: hci3: command tx timeout
[  139.365853] Bluetooth: hci5: command tx timeout
[  139.429533] Bluetooth: hci7: command tx timeout
[  139.494699] Bluetooth: hci6: command tx timeout
[  193.529647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.537083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.540031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.548735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.554699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.617035] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.621079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.624974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.626722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.629079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.634936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.637660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.649888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.649957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.672786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.733015] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  193.754244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  193.759171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.778997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  193.782285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  193.784428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  193.792989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  193.800137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  193.802124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  193.806352] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  193.810267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  193.816764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  193.822544] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.825721] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  193.828998] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  193.833266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  193.834528] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  193.837714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.843989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.870351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  193.870371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.881046] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  193.897064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  193.929945] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.010048] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.621730] Bluetooth: hci0: command tx timeout
[  195.749638] Bluetooth: hci2: command tx timeout
[  195.814398] Bluetooth: hci1: command tx timeout
[  195.877974] Bluetooth: hci7: command tx timeout
[  196.005756] Bluetooth: hci3: command tx timeout
[  196.006582] Bluetooth: hci5: command tx timeout
[  196.006640] Bluetooth: hci4: command tx timeout
[  196.069693] Bluetooth: hci6: command tx timeout
[  197.670491] Bluetooth: hci0: command tx timeout
[  197.797629] Bluetooth: hci2: command tx timeout
[  197.862643] Bluetooth: hci1: command tx timeout
[  197.925543] Bluetooth: hci7: command tx timeout
[  198.054510] Bluetooth: hci4: command tx timeout
[  198.054988] Bluetooth: hci3: command tx timeout
[  198.055408] Bluetooth: hci5: command tx timeout
[  198.117570] Bluetooth: hci6: command tx timeout
[  199.717705] Bluetooth: hci0: command tx timeout
[  199.845908] Bluetooth: hci2: command tx timeout
[  199.909521] Bluetooth: hci1: command tx timeout
[  199.974480] Bluetooth: hci7: command tx timeout
[  200.101741] Bluetooth: hci3: command tx timeout
[  200.102204] Bluetooth: hci5: command tx timeout
[  200.103068] Bluetooth: hci4: command tx timeout
[  200.165904] Bluetooth: hci6: command tx timeout
[  201.765858] Bluetooth: hci0: command tx timeout
[  201.895480] Bluetooth: hci2: command tx timeout
[  201.957527] Bluetooth: hci1: command tx timeout
[  202.021717] Bluetooth: hci7: command tx timeout
[  202.150545] Bluetooth: hci3: command tx timeout
[  202.151005] Bluetooth: hci4: command tx timeout
[  202.151423] Bluetooth: hci5: command tx timeout
[  202.214518] Bluetooth: hci6: command tx timeout
[  255.613533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.618565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.624123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.640096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.645104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.857993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.863057] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.865664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.873653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.878994] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.917424] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.937045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  255.940406] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  255.957932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  255.963970] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.969597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  255.973024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.977283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.982369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.997290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.999721] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.004409] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.023814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.043721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.045353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.046800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.066680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.090247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.114366] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.126732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  256.164869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.201371] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.205096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  256.217929] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.241379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  256.271801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  256.288212] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.293425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.298613] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.313487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.701925] Bluetooth: hci0: command tx timeout
[  257.958189] Bluetooth: hci1: command tx timeout
[  258.085800] Bluetooth: hci2: command tx timeout
[  258.213800] Bluetooth: hci4: command tx timeout
[  258.278980] Bluetooth: hci5: command tx timeout
[  258.279915] Bluetooth: hci3: command tx timeout
[  258.407554] Bluetooth: hci7: command tx timeout
[  258.408091] Bluetooth: hci6: command tx timeout
[  259.749742] Bluetooth: hci0: command tx timeout
[  260.006637] Bluetooth: hci1: command tx timeout
[  260.133511] Bluetooth: hci2: command tx timeout
[  260.261770] Bluetooth: hci4: command tx timeout
[  260.325744] Bluetooth: hci5: command tx timeout
[  260.326169] Bluetooth: hci3: command tx timeout
[  260.453688] Bluetooth: hci6: command tx timeout
[  260.454119] Bluetooth: hci7: command tx timeout
[  261.797729] Bluetooth: hci0: command tx timeout
[  262.053568] Bluetooth: hci1: command tx timeout
[  262.181871] Bluetooth: hci2: command tx timeout
[  262.310522] Bluetooth: hci4: command tx timeout
[  262.373728] Bluetooth: hci3: command tx timeout
[  262.374206] Bluetooth: hci5: command tx timeout
[  262.501875] Bluetooth: hci7: command tx timeout
[  262.502327] Bluetooth: hci6: command tx timeout
[  263.845578] Bluetooth: hci0: command tx timeout
[  264.101684] Bluetooth: hci1: command tx timeout
[  264.229529] Bluetooth: hci2: command tx timeout
[  264.357926] Bluetooth: hci4: command tx timeout
[  264.421855] Bluetooth: hci5: command tx timeout
[  264.422325] Bluetooth: hci3: command tx timeout
[  264.549779] Bluetooth: hci6: command tx timeout
[  264.550500] Bluetooth: hci7: command tx timeout
[  318.658792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.666950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.674926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.685386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.694806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.734204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.738071] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.747152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.758319] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.764218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.849977] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.861184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.871185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.884991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.894159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.900049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.924055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.945750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.969028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.992232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  319.100942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  319.118098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  319.126820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  319.167828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  319.189072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  319.207428] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.285035] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.289979] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.312409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  319.318837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  319.324304] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  319.330785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  319.337997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  319.363209] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.404258] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  319.427707] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  319.438146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  319.442725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  319.472683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  319.479301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  320.742278] Bluetooth: hci0: command tx timeout
[  320.806181] Bluetooth: hci1: command tx timeout
[  320.997559] Bluetooth: hci2: command tx timeout
[  321.125678] Bluetooth: hci3: command tx timeout
[  321.382860] Bluetooth: hci6: command tx timeout
[  321.574674] Bluetooth: hci4: command tx timeout
[  321.638577] Bluetooth: hci7: command tx timeout
[  321.702528] Bluetooth: hci5: command tx timeout
[  322.790767] Bluetooth: hci0: command tx timeout
[  322.853612] Bluetooth: hci1: command tx timeout
[  323.046678] Bluetooth: hci2: command tx timeout
[  323.174557] Bluetooth: hci3: command tx timeout
[  323.430637] Bluetooth: hci6: command tx timeout
[  323.621879] Bluetooth: hci4: command tx timeout
[  323.686374] Bluetooth: hci7: command tx timeout
[  323.750774] Bluetooth: hci5: command tx timeout
[  324.838826] Bluetooth: hci0: command tx timeout
[  324.902528] Bluetooth: hci1: command tx timeout
[  325.093514] Bluetooth: hci2: command tx timeout
[  325.223127] Bluetooth: hci3: command tx timeout
[  325.478562] Bluetooth: hci6: command tx timeout
[  325.670761] Bluetooth: hci4: command tx timeout
[  325.733735] Bluetooth: hci7: command tx timeout
[  325.798556] Bluetooth: hci5: command tx timeout
[  326.887141] Bluetooth: hci0: command tx timeout
[  326.950759] Bluetooth: hci1: command tx timeout
[  327.142834] Bluetooth: hci2: command tx timeout
[  327.271507] Bluetooth: hci3: command tx timeout
[  327.526794] Bluetooth: hci6: command tx timeout
[  327.718511] Bluetooth: hci4: command tx timeout
[  327.782671] Bluetooth: hci7: command tx timeout
[  327.846512] Bluetooth: hci5: command tx timeout
[  380.795068] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.800178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.803398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.814052] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.818649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.959783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.965849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.977726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  381.003990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  381.008126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  381.015290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  381.017998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  381.023263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  381.049691] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  381.060123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.132116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.136513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.140882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.147392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.190951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.228971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.247693] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.250056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.253339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.260143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.261971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.265767] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.302745] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.306057] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.309046] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.312867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.331876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.337274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.371065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.371170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.385227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.387758] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.424140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.431608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  381.468935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.887518] Bluetooth: hci0: command tx timeout
[  383.078790] Bluetooth: hci1: command tx timeout
[  383.206575] Bluetooth: hci2: command tx timeout
[  383.270514] Bluetooth: hci3: command tx timeout
[  383.335777] Bluetooth: hci5: command tx timeout
[  383.526672] Bluetooth: hci4: command tx timeout
[  383.526846] Bluetooth: hci7: command tx timeout
[  383.528093] Bluetooth: hci6: command tx timeout
[  384.933781] Bluetooth: hci0: command tx timeout
[  385.125579] Bluetooth: hci1: command tx timeout
[  385.255243] Bluetooth: hci2: command tx timeout
[  385.317712] Bluetooth: hci3: command tx timeout
[  385.381555] Bluetooth: hci5: command tx timeout
[  385.573754] Bluetooth: hci4: command tx timeout
[  385.574157] Bluetooth: hci7: command tx timeout
[  385.574236] Bluetooth: hci6: command tx timeout
[  386.981617] Bluetooth: hci0: command tx timeout
[  387.173555] Bluetooth: hci1: command tx timeout
[  387.301648] Bluetooth: hci2: command tx timeout
[  387.365519] Bluetooth: hci3: command tx timeout
[  387.429671] Bluetooth: hci5: command tx timeout
[  387.621813] Bluetooth: hci4: command tx timeout
[  387.622282] Bluetooth: hci6: command tx timeout
[  387.622803] Bluetooth: hci7: command tx timeout
[  389.031509] Bluetooth: hci0: command tx timeout
[  389.221521] Bluetooth: hci1: command tx timeout
[  389.350806] Bluetooth: hci2: command tx timeout
[  389.413517] Bluetooth: hci3: command tx timeout
[  389.478528] Bluetooth: hci5: command tx timeout
[  389.669580] Bluetooth: hci6: command tx timeout
[  389.670071] Bluetooth: hci7: command tx timeout
[  389.670579] Bluetooth: hci4: command tx timeout

VM DIAGNOSIS:
00:32:13  Registers:
info registers vcpu 0
RAX=00000000ffffffff RBX=0000000000000000 RCX=bde53094b5b1327e RDX=00000000db688f6a
RSI=000000000b6dc639 RDI=00000000d61cd15b RBP=ffffffff85c1cc40 RSP=ffff88800960f768
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff8151b063 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556aa88f54c8 CR3=0000000033661000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f
XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=1ffff1100d9e1c0c RBX=ffff88806cf0e000 RCX=dffffc0000000000 RDX=0000000000000000
RSI=ffffffff8129188f RDI=ffff88806cf0e060 RBP=ffff888031480000 RSP=ffff888013f476e8
R8 =0000000000000000 R9 =ffffed100688da50 R10=0000000000000001 R11=ffff88806cf37058
R12=ffff88803446d280 R13=ffff88803446e8ce R14=ffff88803446e8cc R15=ffff88803446e8a8
RIP=ffffffff812918df RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe3300000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b0bba4c50 CR3=000000000ea94000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000