Warning: Permanently added '[localhost]:3242' (ECDSA) to the list of known hosts.
2025/04/23 07:27:30 fuzzer started
2025/04/23 07:27:30 dialing manager at localhost:42253
syzkaller login: [   93.597939] cgroup: Unknown subsys name 'net'
[   93.662173] cgroup: Unknown subsys name 'cpuset'
[   93.685135] cgroup: Unknown subsys name 'rlimit'
2025/04/23 07:27:45 syscalls: 203
2025/04/23 07:27:45 code coverage: enabled
2025/04/23 07:27:45 comparison tracing: enabled
2025/04/23 07:27:45 extra coverage: enabled
2025/04/23 07:27:45 setuid sandbox: enabled
2025/04/23 07:27:45 namespace sandbox: enabled
2025/04/23 07:27:45 Android sandbox: enabled
2025/04/23 07:27:45 fault injection: enabled
2025/04/23 07:27:45 leak checking: enabled
2025/04/23 07:27:45 net packet injection: enabled
2025/04/23 07:27:45 net device setup: enabled
2025/04/23 07:27:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/04/23 07:27:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/04/23 07:27:45 USB emulation: enabled
2025/04/23 07:27:45 hci packet injection: enabled
2025/04/23 07:27:45 wifi device emulation: enabled
2025/04/23 07:27:45 802.15.4 emulation: enabled
2025/04/23 07:27:45 fetching corpus: 0, signal 0/0 (executing program)
2025/04/23 07:27:46 starting 8 fuzzer processes
07:27:46 executing program 0:
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000))
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x81)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f00000000c0))
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000100))
ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000140)="2fdb5145015aab4736d42910e4948617fb803fd0965cb2e902457eb836f88429c27ce7c41df689da452e2b4a490cc7c67cd6f43129a3d53c53ae2038f4349de2c4a13e522543d554471ab313c340f3507aa9d0d996d6e8f031f99589b88c7ff0a9ba7db47daab3c798c03d7a2a130734c3fb9c0a703d8d1051b95a2de0879f895a84bef1eefa37ae4f36ca96f216f4e9ee7fdb00c0e00fda9f071de17e5aba905aee29d375712254adad87edfbf6a17d3cdefc426c7ca2108a64608da3952a8c188401238183b042d63fc4")
ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000240)={0x95, "21c1a4752996def071565751c2058e7464e351fef9c5583c2f9730b674d546c01c2145715e891606e4c2a5ef9b9a64595831abf039d51603c8d3c60daec9f6638868f968a61bac64b451b8f9ea525da7baec65e9404aab4d4339c8016c78bb9f32ea9294915de9d1a2f0a2039114d03488fd38e9bda350a3f2aa5c506bcd6004a316449946f6d184093e89087bf130aaf69c3bdc31"})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000300)="fe5b")
r3 = syz_open_dev$hiddev(&(0x7f0000000340), 0x8, 0x501000)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000380)=0x2)
openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x474400, 0x0)
ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x45b3)
write$cgroup_pid(r4, &(0x7f0000000440)=0xffffffffffffffff, 0x12)
socketpair(0x0, 0x0, 0xfffffffd, &(0x7f0000000480))
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x44100, 0x0)
ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000500)={0x1, 0x3, 0x7, 0x4, 0x0, 0x4})

07:27:46 executing program 2:
ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x42, {0x42, 0xd, "6fa44163e7585ba381c53ad4add76457a7ccb156380fbfa7232af020c66e9b1afe42c32ac982b4ae86092ee433200f0ec64dec8b9385c02618cf2f10f75ed265"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f00000000c0)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x1c1, 0x1, 0x5, 0x1f, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0xb, 0x4}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x1, 0xf0f, 0x5d, [0x3f00, 0xffffa0, 0x37, 0xcf]}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0x1f, 0x40, "29debfd4", "7d4dd2b1"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x9, 0x0, 0x5, 0x3, 0x9}}}, &(0x7f0000000600)={0x84, &(0x7f00000001c0)={0x0, 0x3, 0x69, "30e498b751c1a09c15d811fc023026e984ea36aa05f04c1c1ea372b356911113cbb40f1d6358711418cbbd0bd94ee6054c1b1fdaaaca5d4dd78701d19cc462ab2f5cb5e1351c2ed9c26b7e994137273976ac832d10fa55d459e4645528cb5ea5fe2ff020a64d87a64a"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x20}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x140, 0x4c}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x5115}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000003c0)={0x40, 0xb, 0x2, '\bY'}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x6bd8}, &(0x7f0000000440)={0x40, 0x13, 0x6, @local}, &(0x7f0000000480)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f00000004c0)={0x40, 0x19, 0x2, "e013"}, &(0x7f0000000500)={0x40, 0x1a, 0x2, 0xa5}, &(0x7f0000000540)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000580)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000005c0)={0x40, 0x21, 0x1, 0x4}})
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f00000006c0)={0x759, 0x71d, 0x2})
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDDISABIO(r1, 0x4b37)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000700))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x203, 0x0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000780)={0x3, 0x200, 0x4, 0x4, 0x7, 0x3})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000007c0)={0x1, 0x1ff, 0x8})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCNXCL(r4, 0x540d)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000800))
ioctl$KDDISABIO(r3, 0x4b37)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x40, 0x23, 0xe2, {0xe2, 0xe, "6885d9529ceb3189eeaab3cdb9fd9b1848b4a5c0e92f5088dd97621aab4f01af46111456bed3edb700b9bdc4fc347d4b5258f2aa615de62ad91a7beedef30d6691b96a7b8188b30475541b3839ce8f663293883f0ce7058f87e61ec063d36e792f510dd1d900037a8912bf14a0182d70fbe8310cfc7d2bbd710b3470574fbb63275e85cfb474e1678081080c74892bd9b03a2ae2ce591840e0e3fd1d85a92150b6822e23a4d7c684f8fd8fec7999aa42b1c8902667f8c460d100463505550b349a021557f22c038e9dbfb7898d777af3d6eb82f6e2688bb1142657b3f9821066"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x842}}, &(0x7f0000000980)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xe0, "5ec012324e98b1605bbce7359cd89ccc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b90859cbe9eebbbf953b4b0b6c9dfe76"}, @ptm_cap={0x3}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x4, 0x9, 0xfa, "d1a9bf2f", "4af68101"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x1, 0x7e, 0x20, 0x0, 0x4}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000a80)={0x40, 0x7, 0xe4, "98206ad672186e767ed0cedfbc4479ce0bcfb381bc549cc909509acf47dbb69f272c0af44da1c51281e49d8e4d0ad953563ae882897ac836d693e8488d9bd37e70bb0e40a8ecf354e21c75605a99d8b92f10b5f3e2b6a3148435377294c646d212421cc16f91e876bc539170141b1dc01b175f6e24b81e1d2ec7743746a96e5f841bb04beb03d44976d43a1404c4e926420065492a7e6dd2d2a6269fc7a93fe6cc51e8d659156710a08655d1714a62c485911cc0ddf17eabc2c631a00a51b3e82f861f9b6b7a81c1f064418cd946e1e898f7b67056f15f6103025c0d38c63a9fbcca6bde"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000d00)={0x40, 0xb, 0x2, 'OL'}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "5184"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x2}})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000001000))
ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, &(0x7f0000001040))
ioctl$KDDISABIO(r0, 0x4b37)

07:27:46 executing program 1:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040)={0x1, 0xff}, 0x2)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffff, 0x12)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x7, 0x1, 0x2a}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/53, 0x35, 0x1, 0x32}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x48}}, 0x400}, @acquire_done={0x40106309, 0x1}, @increfs={0x40046304, 0x3}, @free_buffer, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x1}], 0xe6, 0x0, &(0x7f0000000300)="9362b3313b35ebaa519f44653f1f7613939c86159927e03d530d2e359269ca574561ef3fdeadaa54c7df4824b100c70cee3ef41d00140a55130c0ec9c4805858314842f7ea36839b2b9dce9ebc0a7be920a301c90240af70a92e0d2bc107fc8ade40526b001c877adea82642a2adca4a2490c846a68cc445532ea40f87cac2169c00cf0e7666e6b3f91d5f6a4fb6ceb6de14f5a25af485b7e540aeae93e416dfaca75bd0dfee8385ee583902b04c0a3d882715b022c61595544d625e10800d15917e576ba0895e6ec5a2a2b7fe686c95254a994f7bba097a6fb20a50ae43a05d6e40c724bea3"})
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000480), r1)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r3=>0x0, 0x29, 0xdf, 0x7f, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x7800, 0x9, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', <r4=>0x0, 0x29, 0x9, 0x4, 0xff, 0x26, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, 0x700, 0x8000, 0x5, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl2\x00', <r5=>0x0, 0x29, 0x20, 0x0, 0x1, 0x25, @loopback, @mcast2, 0x10, 0x0, 0x5, 0xfffffffe}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x20, 0x0, 0x2d20, 0x40, @local, @private0, 0x8, 0x7800, 0x7, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', <r8=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000840)={0x77c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x8000, 0xec, 0x8, 0x2}, {0x8c, 0xcc, 0x1, 0x6}, {0x9, 0xb4, 0xf0, 0x9}, {0x18, 0x8, 0x3, 0xcd}, {0x3ff, 0x3, 0x0, 0x3}, {0x2, 0xfe, 0x40, 0xfffffff8}, {0x800, 0x5, 0x40, 0xffff}, {0x1, 0x1, 0x89, 0xc2db}, {0x1, 0x7, 0x8, 0x9}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7519}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x101, 0x1, 0x4, 0x5}, {0x9, 0x8, 0x7, 0x7fff}, {0x20, 0x6, 0x3, 0x10000}, {0xffe0, 0x81, 0x0, 0x1}, {0x5, 0x3f, 0x5, 0x1f}, {0x7, 0x80, 0x52, 0x3}, {0x800, 0x0, 0x7, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0000000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6c8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x77c}, 0x1, 0x0, 0x0, 0x4004}, 0x8051)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000001040))
openat$null(0xffffffffffffff9c, &(0x7f0000001080), 0x392300, 0x0)
r9 = msgget(0x0, 0x410)
r10 = geteuid()
getresgid(&(0x7f00000010c0), &(0x7f0000001100)=<r11=>0x0, &(0x7f0000001140))
msgctl$IPC_SET(r9, 0x1, &(0x7f0000001180)={{0x3, r10, 0xee00, 0xee01, r11, 0xa9688899ae2c4942, 0x1ff}, 0x0, 0x0, 0xd756, 0x6, 0x2, 0x5, 0x3, 0x86c, 0x9, 0x80, 0xffffffffffffffff})

07:27:46 executing program 4:
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x400, 0x40, 0x7f, 0x101}, {0x1, 0xf8, 0x4, 0x7}, {0x6, 0x0, 0x20, 0x80}, {0x9, 0x7, 0x4, 0x9a4}, {0x7f, 0x0, 0x7f, 0x6}, {0x6, 0x1, 0x3f, 0x46}, {0x100, 0x6, 0x6, 0xffffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x9f, 0x637})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20440, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100))
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6)
ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000001c0)={0x81, "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"})
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7f, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0xbe, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x5, 0x4}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x0, 0x2, 0x1, 0x10, 0x38}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x5, [{0xf, &(0x7f00000004c0)=@string={0xf, 0x3, "a898d2c21b28fb90a60c36e8c1"}}, {0x19, &(0x7f0000000500)=@string={0x19, 0x3, "c3ee047c29b5ed1113987b77632de01a37c6a82a5126c2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2401}}, {0x92, &(0x7f00000005c0)=@string={0x92, 0x3, "40e35bc610d6d81f52b8203363509a5801838e306bddfca01b3c70c026ad33bbceafeea69747cd1b39b90b77f69ff82f3d7dcb902d2e42edb214fb20f5f489ed72b3ebf70dfdf45bfa031240e891cdfa9bae38e0335770164371f49f287f7231f60fdb3c864d36f2a9c4faff07284048352eeedb43b7a959ad60c7eea2df22ebe8bdcf2622c2ae65bf75eb1a6455dcdf"}}]})
accept4$bt_l2cap(r2, &(0x7f0000000700), &(0x7f0000000740)=0xe, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x10f802, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000800)=0x14)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x12b9c0, 0x0)
ioctl$KDDISABIO(r4, 0x4b37)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000880))
r5 = inotify_init1(0x80000)
inotify_add_watch(r5, &(0x7f00000008c0)='./file0\x00', 0x0)
ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000900))
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000940)="8382d49b6bff73bf9c0d81338bfa1e79", 0x10)

07:27:46 executing program 3:
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80000)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000100)="da22e8359ce170eaf5e03b902fa1424011678bb919022e2105b26f5783bc734f4c712b1067eca41a990043abd5550fdb61bbe21e4b74e1ade9ab1591e453bad685274fbf719af92df60a243862313e22ea12d460e58149003902b045500936c790dcebd9b41da770214bdca6b25767518a2d4e8a4fe5bb7e9db4ed3630f6593085968220adc7e205db41604b3f1982c14d21cb53a0c88d9937", 0x99)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x3f, 0x3f}, 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/64, 0x40, 0x1, &(0x7f0000000240)=""/176, 0xb0}, &(0x7f0000000340)=0x40)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x36, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000400)=@ccm_128={{0x303}, "a47aaad4a46cf91d", "993f216300dea81989f63e4d5ad481ab", "f8e08017", "be16b857138c6942"}, 0x28)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000440)=""/114, &(0x7f00000004c0)=0x72)
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000500)={0x8, 0x98d})
socketpair(0x1f, 0x1, 0x7ff, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000580)=[@sack_perm, @sack_perm, @mss={0x2, 0xffff}, @mss={0x2, 0x20}], 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000640)=[@timestamp, @window={0x3, 0x732a, 0xf5}, @sack_perm, @sack_perm, @window={0x3, 0x8, 0xe8}, @sack_perm, @sack_perm, @window={0x3, 0x9, 0x9}, @mss, @timestamp], 0xa)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f00000006c0)=0x3)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000740)=[@timestamp, @window={0x3, 0x7, 0x7f}, @mss={0x2, 0x6}, @timestamp, @timestamp], 0x5)

[  109.161474] audit: type=1400 audit(1745393266.411:7): avc:  denied  { execmem } for  pid=277 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
07:27:46 executing program 6:
sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x44}, 0x1, 0x0, 0x0, 0x8051}, 0x1)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c001}, 0x40005)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x381, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0x28}}, 0x40)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2003001}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x52}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c802}, 0xb60e9750026fc9db)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r1)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x94, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4040040)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f00000008c0)=""/87)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x2004c089)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ec0)={&(0x7f0000000a80)={0x438, 0x3f3, 0x20, 0x70bd2d, 0x25dfdbfc, {0x4, 0x2, 0x25, [0x7f, 0xca14ae3, 0x4, 0x2eb, 0x5, 0x7, 0x9, 0x7, 0x6, 0x7f, 0x800, 0x5, 0x2, 0x9, 0x80, 0x1, 0x4, 0x800, 0x4, 0x5, 0x81, 0x6c, 0x100, 0x8000, 0x101, 0xd2, 0x1, 0xfffffffa, 0x14ad, 0x8000, 0x3ff, 0x1, 0xfffffc01, 0x8, 0x0, 0x1, 0x2, 0x96a, 0x81, 0x80000000, 0x0, 0x7c2, 0xefb, 0x2, 0x4, 0x9d9, 0x822, 0x0, 0x0, 0x10000, 0x0, 0x800, 0x2, 0x3ff, 0x3, 0x401, 0x400, 0xfffffffd, 0x100, 0x4, 0x8001, 0x0, 0x10000, 0x5], [0x6, 0x8, 0xffffffff, 0xc655, 0x4, 0xf1, 0x9, 0x5, 0x9, 0x81, 0x1, 0x7, 0x200, 0x8, 0x80, 0x401, 0x2, 0x800, 0x80, 0x3, 0x7fffffff, 0x200, 0x2, 0x6, 0x7fffffff, 0x7, 0x0, 0x2e0, 0x80, 0xda, 0x1, 0x3f, 0xfffffffc, 0xfffffff9, 0x7, 0x2000, 0x97, 0x6, 0xd2045e2, 0x5b0e, 0xe5, 0x3, 0xffff8b41, 0xdb1, 0xfffffffe, 0x1, 0x2, 0x0, 0x7968, 0x8, 0x4, 0x9, 0x8000, 0x3f, 0x7fffffff, 0x80000001, 0x2, 0x7ff1, 0x1ff, 0x5, 0x1f, 0x1, 0x2, 0x3], [0x200, 0x4, 0x20000000, 0x5, 0x58bf, 0x3ff, 0x137, 0x4, 0x4, 0xfffffff7, 0x7fff, 0x5, 0x3389, 0xffffffff, 0x345f, 0x8, 0x0, 0x9, 0x95e, 0x8a7, 0x1f, 0x5, 0xdd2, 0x81, 0x0, 0x6, 0x4, 0x1, 0x8, 0x2, 0x1, 0x3, 0xf9b, 0x944, 0x5, 0x20, 0x1, 0x1000, 0x4, 0xd4b, 0x5, 0x80000000, 0x7, 0x80, 0x2, 0x1, 0x9, 0x7, 0x1, 0x6, 0xc0000000, 0x4, 0x5, 0x7ff, 0x16, 0x82b0, 0xa5a, 0xd0, 0x3f, 0x8, 0x4, 0x5, 0x2, 0x5], [0x80, 0x1, 0x10001, 0x7fff, 0x9, 0x4, 0xfffffffd, 0x1, 0x1f, 0x7f, 0x400, 0x8, 0x211a1b41, 0x8000, 0x7, 0x4, 0x3, 0x7, 0xffff2a97, 0x19, 0x1ff, 0x6, 0x0, 0x1, 0x7, 0x81, 0x9, 0x3000, 0x1, 0x2, 0x2f42cb22, 0x80000000, 0x3, 0x3, 0x0, 0x4, 0x3, 0x1f, 0x8, 0x1, 0xff, 0x1, 0x0, 0x7, 0x2, 0xb67, 0x381a, 0x8, 0x4, 0x3f, 0xfffffff8, 0x3, 0xfffffc00, 0x5, 0x0, 0xfff, 0x20, 0x0, 0x8, 0x80000000, 0x239d, 0x5, 0x7, 0x1], 0x15, ['NLBL_MGMT\x00', '\x00', '\x00', '\xff\xff', '%\xc5)[\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x20000050}, 0x2400c881)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r1)

07:27:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^F\x15+\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x921c)
r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r3, 0x3, r2, 0x800})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r1, 0x11, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x32}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4088080}, 0xc005)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f00000003c0))
syz_io_uring_setup(0x72a2, &(0x7f0000000400)={0x0, 0xbdd8, 0x1, 0x0, 0xf4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000500)=0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540))
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, r1, 0x0, 0x4, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '\xe7:@)/][+\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x80}, 0x1, 0x0, 0x0, 0x20804}, 0x4000000)
ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000880))
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000008c0)=0x5, 0x4)
openat$random(0xffffffffffffff9c, &(0x7f0000000900), 0x80800, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x46008}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x200040c1)

07:27:46 executing program 7:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2)
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x180000)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x50, 0x4)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x557, @any, 0xfffa, 0x1}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008883}, 0x40)
syz_open_dev$ptys(0xc, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0xa9, 0xff, 0x2, 0x16, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x8, 0xa53, 0x4}})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x27c, 0x0, 0x200, 0x6, 0x5, {}, [{{0x8, 0x1, r4}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdd2a}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd06}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x80}, 0x8011)
shmctl$IPC_RMID(0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000007c0), 0x4)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x8, &(0x7f0000000840)=0x2)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x800)
getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000900)=0x9, &(0x7f0000000940)=0x2)

[  110.520655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.524448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.527604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.534410] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.540724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.571283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.576438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.582670] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.600396] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.602605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.607249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.610490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.644368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.663368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.676302] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.689883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.695448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.698112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.706382] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.708023] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  110.717652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  110.724400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  110.731298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  110.741507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  110.752796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  110.754741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  110.765337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  110.774742] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  110.782043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  110.794769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  110.816182] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  110.820122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  110.837074] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  110.845407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  110.858085] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  110.859454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  110.870448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  110.870650] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  110.883039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  110.915119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  112.664473] Bluetooth: hci0: command tx timeout
[  112.664483] Bluetooth: hci1: command tx timeout
[  112.856047] Bluetooth: hci4: command tx timeout
[  112.856275] Bluetooth: hci3: command tx timeout
[  112.857189] Bluetooth: hci2: command tx timeout
[  112.919931] Bluetooth: hci5: command tx timeout
[  112.984111] Bluetooth: hci7: command tx timeout
[  112.984216] Bluetooth: hci6: command tx timeout
[  114.712012] Bluetooth: hci1: command tx timeout
[  114.712186] Bluetooth: hci0: command tx timeout
[  114.903916] Bluetooth: hci2: command tx timeout
[  114.904109] Bluetooth: hci3: command tx timeout
[  114.904431] Bluetooth: hci4: command tx timeout
[  114.968182] Bluetooth: hci5: command tx timeout
[  115.032066] Bluetooth: hci7: command tx timeout
[  115.032559] Bluetooth: hci6: command tx timeout
[  116.760134] Bluetooth: hci1: command tx timeout
[  116.760930] Bluetooth: hci0: command tx timeout
[  116.952883] Bluetooth: hci3: command tx timeout
[  116.953337] Bluetooth: hci2: command tx timeout
[  116.953791] Bluetooth: hci4: command tx timeout
[  117.016058] Bluetooth: hci5: command tx timeout
[  117.080233] Bluetooth: hci7: command tx timeout
[  117.080671] Bluetooth: hci6: command tx timeout
[  118.808031] Bluetooth: hci0: command tx timeout
[  118.808064] Bluetooth: hci1: command tx timeout
[  119.000100] Bluetooth: hci2: command tx timeout
[  119.001023] Bluetooth: hci4: command tx timeout
[  119.001157] Bluetooth: hci3: command tx timeout
[  119.065162] Bluetooth: hci5: command tx timeout
[  119.128155] Bluetooth: hci6: command tx timeout
[  119.129400] Bluetooth: hci7: command tx timeout
[  170.907526] syz-executor.2 (287) used greatest stack depth: 24696 bytes left
[  173.323557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.327194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.330155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.336323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.341158] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.357589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.360281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.364361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.376163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.380236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.383666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.398480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.399094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.404382] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.419130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.422240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.426274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.437564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.476374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.491244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.524492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.541425] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.544033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.552215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.556880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.562018] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.566429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.572984] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.580343] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.584626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.589414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.591643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.597411] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.604346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.606928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.611278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.624637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.628658] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.654349] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  173.661908] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.384059] Bluetooth: hci0: command tx timeout
[  175.447917] Bluetooth: hci2: command tx timeout
[  175.512049] Bluetooth: hci1: command tx timeout
[  175.576598] Bluetooth: hci3: command tx timeout
[  175.703969] Bluetooth: hci7: command tx timeout
[  175.704008] Bluetooth: hci5: command tx timeout
[  175.704921] Bluetooth: hci4: command tx timeout
[  175.705752] Bluetooth: hci6: command tx timeout
[  177.432055] Bluetooth: hci0: command tx timeout
[  177.496251] Bluetooth: hci2: command tx timeout
[  177.559997] Bluetooth: hci1: command tx timeout
[  177.623925] Bluetooth: hci3: command tx timeout
[  177.752302] Bluetooth: hci5: command tx timeout
[  177.752780] Bluetooth: hci4: command tx timeout
[  177.752844] Bluetooth: hci6: command tx timeout
[  177.753675] Bluetooth: hci7: command tx timeout
[  179.479904] Bluetooth: hci0: command tx timeout
[  179.544902] Bluetooth: hci2: command tx timeout
[  179.608917] Bluetooth: hci1: command tx timeout
[  179.674161] Bluetooth: hci3: command tx timeout
[  179.800123] Bluetooth: hci7: command tx timeout
[  179.800602] Bluetooth: hci6: command tx timeout
[  179.801603] Bluetooth: hci5: command tx timeout
[  179.802102] Bluetooth: hci4: command tx timeout
[  181.527928] Bluetooth: hci0: command tx timeout
[  181.591929] Bluetooth: hci2: command tx timeout
[  181.655914] Bluetooth: hci1: command tx timeout
[  181.720547] Bluetooth: hci3: command tx timeout
[  181.848902] Bluetooth: hci5: command tx timeout
[  181.849392] Bluetooth: hci6: command tx timeout
[  181.849789] Bluetooth: hci4: command tx timeout
[  181.850408] Bluetooth: hci7: command tx timeout
[  235.658372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  235.662158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  235.668295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  235.682182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  235.703747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  235.824116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  235.827944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  235.844463] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.855553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.860306] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.898781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.905514] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.910260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.920595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.937486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.002597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.006116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.007513] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.023135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.030072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.089339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.093397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.096557] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.101121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.105095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.145093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.149132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.155454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.194667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.205178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  236.242540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.254815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.266352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.270253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.279206] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.293205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.311732] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.312796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.327130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.328765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  237.785271] Bluetooth: hci0: command tx timeout
[  237.912285] Bluetooth: hci1: command tx timeout
[  238.039918] Bluetooth: hci2: command tx timeout
[  238.104925] Bluetooth: hci3: command tx timeout
[  238.168078] Bluetooth: hci4: command tx timeout
[  238.296015] Bluetooth: hci5: command tx timeout
[  238.552223] Bluetooth: hci6: command tx timeout
[  238.616976] Bluetooth: hci7: command tx timeout
[  239.831981] Bluetooth: hci0: command tx timeout
[  239.961878] Bluetooth: hci1: command tx timeout
[  240.088871] Bluetooth: hci2: command tx timeout
[  240.152938] Bluetooth: hci3: command tx timeout
[  240.216154] Bluetooth: hci4: command tx timeout
[  240.346078] Bluetooth: hci5: command tx timeout
[  240.600091] Bluetooth: hci6: command tx timeout
[  240.665293] Bluetooth: hci7: command tx timeout
[  241.881133] Bluetooth: hci0: command tx timeout
[  242.008037] Bluetooth: hci1: command tx timeout
[  242.135900] Bluetooth: hci2: command tx timeout
[  242.202905] Bluetooth: hci3: command tx timeout
[  242.265268] Bluetooth: hci4: command tx timeout
[  242.392056] Bluetooth: hci5: command tx timeout
[  242.649206] Bluetooth: hci6: command tx timeout
[  242.712884] Bluetooth: hci7: command tx timeout
[  243.928899] Bluetooth: hci0: command tx timeout
[  244.057294] Bluetooth: hci1: command tx timeout
[  244.184957] Bluetooth: hci2: command tx timeout
[  244.248897] Bluetooth: hci3: command tx timeout
[  244.312123] Bluetooth: hci4: command tx timeout
[  244.441038] Bluetooth: hci5: command tx timeout
[  244.695900] Bluetooth: hci6: command tx timeout
[  244.760981] Bluetooth: hci7: command tx timeout
[  298.093709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.101200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.103737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.115508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.120101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.225430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.232325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.234309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.247242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.252604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.354751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  298.365640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  298.375261] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  298.383589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  298.399402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  298.419765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  298.430646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  298.438470] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  298.443583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  298.444754] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  298.446232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  298.454311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  298.458593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  298.459488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  298.464674] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  298.465769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  298.471957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  298.475475] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  298.487796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  298.501753] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  298.559047] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  298.589465] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  298.611430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  298.622122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  298.637295] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  298.833986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  298.853419] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  298.858549] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  298.882534] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  298.908668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  300.186132] Bluetooth: hci0: command tx timeout
[  300.312408] Bluetooth: hci1: command tx timeout
[  300.504919] Bluetooth: hci2: command tx timeout
[  300.632072] Bluetooth: hci6: command tx timeout
[  300.632144] Bluetooth: hci3: command tx timeout
[  300.633461] Bluetooth: hci4: command tx timeout
[  300.824093] Bluetooth: hci5: command tx timeout
[  300.952250] Bluetooth: hci7: command tx timeout
[  302.232891] Bluetooth: hci0: command tx timeout
[  302.360124] Bluetooth: hci1: command tx timeout
[  302.552102] Bluetooth: hci2: command tx timeout
[  302.680750] Bluetooth: hci4: command tx timeout
[  302.681269] Bluetooth: hci6: command tx timeout
[  302.681703] Bluetooth: hci3: command tx timeout
[  302.872062] Bluetooth: hci5: command tx timeout
[  303.001864] Bluetooth: hci7: command tx timeout
[  304.281859] Bluetooth: hci0: command tx timeout
[  304.408121] Bluetooth: hci1: command tx timeout
[  304.599968] Bluetooth: hci2: command tx timeout
[  304.728073] Bluetooth: hci4: command tx timeout
[  304.728455] Bluetooth: hci3: command tx timeout
[  304.728564] Bluetooth: hci6: command tx timeout
[  304.921187] Bluetooth: hci5: command tx timeout
[  305.049141] Bluetooth: hci7: command tx timeout
[  306.328236] Bluetooth: hci0: command tx timeout
[  306.456156] Bluetooth: hci1: command tx timeout
[  306.649157] Bluetooth: hci2: command tx timeout
[  306.775964] Bluetooth: hci3: command tx timeout
[  306.775988] Bluetooth: hci4: command tx timeout
[  306.777129] Bluetooth: hci6: command tx timeout
[  306.969406] Bluetooth: hci5: command tx timeout
[  307.097910] Bluetooth: hci7: command tx timeout
[  361.018789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.024158] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.026673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.036460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.043046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.163567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.175241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.183417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.188608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.195461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.197993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.199977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.207704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.215397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.250739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.314412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.318360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.321462] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.342746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.347687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.434417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.447534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.468389] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.497074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.513409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  361.919088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  361.951935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  361.981347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.007297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.058205] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.063414] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.065801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.068107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.069636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.070709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.083395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.084652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  362.115749] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.125970] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.133462] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  363.095992] Bluetooth: hci0: command tx timeout
[  363.352668] Bluetooth: hci1: command tx timeout
[  363.416886] Bluetooth: hci3: command tx timeout
[  363.480031] Bluetooth: hci2: command tx timeout
[  363.608963] Bluetooth: hci4: command tx timeout
[  364.185929] Bluetooth: hci7: command tx timeout
[  364.248013] Bluetooth: hci5: command tx timeout
[  364.248062] Bluetooth: hci6: command tx timeout
[  365.144926] Bluetooth: hci0: command tx timeout
[  365.400909] Bluetooth: hci1: command tx timeout
[  365.466032] Bluetooth: hci3: command tx timeout
[  365.530884] Bluetooth: hci2: command tx timeout
[  365.657336] Bluetooth: hci4: command tx timeout
[  366.232065] Bluetooth: hci7: command tx timeout
[  366.296473] Bluetooth: hci6: command tx timeout
[  366.297111] Bluetooth: hci5: command tx timeout
[  367.192375] Bluetooth: hci0: command tx timeout
[  367.448009] Bluetooth: hci1: command tx timeout
[  367.512874] Bluetooth: hci3: command tx timeout
[  367.576582] Bluetooth: hci2: command tx timeout
[  367.704020] Bluetooth: hci4: command tx timeout
[  368.282026] Bluetooth: hci7: command tx timeout
[  368.344346] Bluetooth: hci6: command tx timeout
[  368.344877] Bluetooth: hci5: command tx timeout
[  369.240087] Bluetooth: hci0: command tx timeout
[  369.496423] Bluetooth: hci1: command tx timeout
[  369.561153] Bluetooth: hci3: command tx timeout
[  369.625228] Bluetooth: hci2: command tx timeout
[  369.752059] Bluetooth: hci4: command tx timeout
[  370.328093] Bluetooth: hci7: command tx timeout
[  370.393802] Bluetooth: hci6: command tx timeout
[  370.393888] Bluetooth: hci5: command tx timeout

VM DIAGNOSIS:
07:32:49  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800903d968 RCX=ffffffff81baa6ee RDX=ffff88803396b780
RSI=ffffffff81b9cd69 RDI=ffff88800903d968 RBP=0000000000000003 RSP=ffff8880229b7948
R8 =0000000000000001 R9 =ffffed100d982eef R10=000000030bbbca74 R11=0000000000000001
R12=ffff88806cc17778 R13=ffff8880229b7c70 R14=dffffc0000000000 R15=ffff88800903d968
RIP=ffffffff8172ed38 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9bc9668540 00000000 00000000
GS =0000 ffff8880e564d000 00000000 00000000
LDT=0000 fffffe5100000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffde87a1ff8 CR3=0000000032a56000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00007f98f259f000 RCX=0000000000000061 RDX=0000000000000023
RSI=0000000000008011 RDI=000000008027adfa RBP=0000000000000002 RSP=00007ffd213e7ba0
R8 =00007ffd213e7ce0 R9 =00007f98f25d9440 R10=00007f98f23f31b0 R11=0000000000000007
R12=0000000000000007 R13=00007f98f25a0a90 R14=0000000000000001 R15=0000000000000000
RIP=00007f98f25b70e1 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f98f2095540 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f98f256c000 CR3=000000000b838000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000042494c4700352e32
XMM04=312e325f4342494c470035312e325f43 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000