Warning: Permanently added '[localhost]:10619' (ECDSA) to the list of known hosts.
2025/05/24 11:13:59 fuzzer started
2025/05/24 11:13:59 dialing manager at localhost:46087
syzkaller login: [  102.891570] cgroup: Unknown subsys name 'net'
[  103.036737] cgroup: Unknown subsys name 'cpuset'
[  103.082355] cgroup: Unknown subsys name 'rlimit'
2025/05/24 11:14:24 syscalls: 201
2025/05/24 11:14:24 code coverage: enabled
2025/05/24 11:14:24 comparison tracing: enabled
2025/05/24 11:14:24 extra coverage: enabled
2025/05/24 11:14:24 setuid sandbox: enabled
2025/05/24 11:14:24 namespace sandbox: enabled
2025/05/24 11:14:24 Android sandbox: enabled
2025/05/24 11:14:24 fault injection: enabled
2025/05/24 11:14:24 leak checking: enabled
2025/05/24 11:14:24 net packet injection: enabled
2025/05/24 11:14:24 net device setup: enabled
2025/05/24 11:14:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/24 11:14:24 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/24 11:14:24 USB emulation: enabled
2025/05/24 11:14:24 hci packet injection: enabled
2025/05/24 11:14:24 wifi device emulation: enabled
2025/05/24 11:14:24 802.15.4 emulation: enabled
2025/05/24 11:14:24 fetching corpus: 0, signal 0/0 (executing program)
2025/05/24 11:14:25 starting 8 fuzzer processes
11:14:25 executing program 0:
r0 = getpid()
ptrace$getenv(0x4201, r0, 0xd81, &(0x7f0000000000))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rtc_cmos', 0x204000, 0x80)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0x1f, 0xfa, 0x81, 0x0, 0x0, 0x22002, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x3ff}, 0x16400, 0xffffffff7fffffff, 0x5, 0x5, 0x7f, 0x10000, 0x7, 0x0, 0xffffffff, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r1, 0x3)
r2 = getpid()
ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000100))
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x0, 0x3, 0x934f, 0x0, 0x80})
r3 = getpid()
sched_getparam(r3, &(0x7f00000001c0))
timer_create(0x2, &(0x7f0000000380)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000200)="38ae38242626bbca6683e2e4457bd6e89fa3099c211788c8a1e8a9d8816cb8404fa3bbe8fe8fc9ed1de046b5069ce0c7d7b9c28d5f8f7a9c295118696db39bef68b68c9f9bb14a536233a344f0333b28692d170b1c76e2f96066d9e79610fb357b6ef9fa1ddf7cbbfd5159a37e469d2057c6ebe53132488479f011435d94aaa6a1824e2269c22dfe6a111270fb885f1f8fe6f4911da0597c9439d00da6c5f71262824f370379e7b7690a800322346e92cdd9c72058bbbd02c1d4062671faba15f5085fb3c367be8e3f370dd187cb83fdcac0f0feed83625e7089117ff999", &(0x7f0000000300)="5d3a8e8d65528b5b242bdd07a5725ace5597fcf81a53b9bbb349b87ab3e1c0b8778cb4782cfe494200b571457f8dc7cb9a5400296cd7f01dc89a829974b1ea5c86d468303567fdc396dd1f7c308d67c19ea275e5b4fe18323b72b50a66458c9d162779d6efe8c711c07761bae23085"}}, &(0x7f00000003c0))
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000400)={0x1, 0x101, "9cd19a", 0x3f, 0x5})
r4 = syz_open_dev$vcsn(&(0x7f0000000440), 0x1000, 0x80000)
write$tcp_mem(r4, &(0x7f0000000480)={0xfffffffffffffffc, 0x20, 0x101, 0x20, 0xf42}, 0x48)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000500)={'raw\x00', 0x0, [0x80, 0xa5, 0x7, 0x0, 0x1ff]}, &(0x7f0000000580)=0x54)
getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f00000005c0), &(0x7f0000000600)=0x24)
r5 = socket(0x28, 0x2, 0x10001)
getsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640), 0x2)
ptrace$getenv(0x4201, r3, 0xc910, &(0x7f0000000680))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000006c0)={0x0, <r6=>0x0})
getpriority(0x0, r6)

11:14:25 executing program 1:
sched_setparam(0x0, &(0x7f0000000000)=0xa0e)
getpriority(0x1, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xa7, 0x0, 0x4, 0xcb, 0x0, 0x8, 0x200b, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x5, 0x3}, 0x818, 0x1, 0xffffffff, 0x4, 0x80000000, 0x10000, 0x3ff, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, r0, 0xb, 0xffffffffffffffff, 0x8)
prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/4096)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000010c0), 0x1)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1)
ptrace$getenv(0x4201, r0, 0xfb, &(0x7f0000001100))
migrate_pages(r0, 0x2, &(0x7f0000001140)=0x10000, &(0x7f0000001180)=0x95)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000011c0)={0x0, 0x200, 0xffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001200), r2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_GET_NAME(0x10, &(0x7f0000001240)=""/134)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, r3, 0x400, 0x70bd2a, 0xc0000000, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0xc884)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000001440), r4)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/printk', 0x2201, 0x19a)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000014c0), 0x2, 0x0)

11:14:25 executing program 2:
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @nfc={0x27, 0x0, 0x1, 0x6}, @qipcrtr={0x2a, 0x1, 0x1}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x1}}, 0x101, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='veth0_to_team\x00', 0x3, 0x86, 0x46})
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, @isdn={0x22, 0x3, 0x9, 0x7, 0x9}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x0, 0x0, 0x0, 0x800, &(0x7f00000000c0)='macvtap0\x00', 0xef, 0x80000000, 0x7ff})
ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, &(0x7f0000000180)={'\x00', 0x7ff, 0x3, 0x9})
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0xb25)
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x6, 0xff, 0x1, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0x20, 0x10, 0x3ff, 0xffffffff}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1c0, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb6}}}]}}, {{0x8, 0x1, r1}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000400}, 0x400c000)
time(&(0x7f0000000580))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/bus/serio', 0x8200, 0x2)
ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000600)={0x2, 0x4, 0x8001, 0xf47a, 0x230a})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000007c0))
ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000800)={'\x00', 0x7ff, 0x3})
ioctl$CDROM_GET_CAPABILITY(r2, 0x5331)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000880)=0x1, &(0x7f00000008c0)=0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000900))
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000980)={0x1, 'syzkaller0\x00', 0x1}, 0x18)
ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f00000009c0)={0x8, 0x5, 0x5f, 0x0, 0x2, 0x8})

11:14:26 executing program 3:
ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x7fff, 0x3, 0xfffeffff, 0x9})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/4096})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/cpu_byteorder', 0x240, 0x80)
ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000001140)={'\x00', 0x8, 0x2, 0xaf})
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f00000011c0)={{0x7, 0x7fffffff}, {0xfff, 0x8}, 0x5})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x602100, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000001240)={{0x6e0c5f09, 0x24f1d4c6}, {0x6, 0x8000}, 0x80000000, 0x1})
r3 = syz_open_dev$vcsn(&(0x7f0000001280), 0x5, 0xe8900)
ioctl$CDROM_GET_CAPABILITY(r3, 0x5331)
ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f00000012c0))
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001340), 0x400, 0x0)
write$tcp_mem(r4, &(0x7f0000001380)={0x0, 0x20, 0x2, 0x20, 0x3f}, 0x48)
getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000001400)=""/4096, &(0x7f0000002400)=0x1000)
connect$bt_sco(r2, &(0x7f0000002440)={0x1f, @none}, 0x8)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002480)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x4)
r5 = syz_open_dev$vcsn(&(0x7f0000002fc0), 0x4, 0x42000)
bind$bt_hci(r5, &(0x7f0000003000)={0x1f, 0x3, 0x2}, 0x6)

11:14:26 executing program 4:
timer_create(0x5, &(0x7f0000000100)={0x0, 0x24, 0x0, @thr={&(0x7f0000000000)="807a5d6ff6d73aaa2472026c8cff84e6d2bf006dd34803f6cefe88c3058a9f19e768c7cfbd5cb48e6fc13f1f7f438bd88ac15c88e7ffb9fb2f3d70afc4bdc5f12e7107", &(0x7f0000000080)="2cf8fc760ccf22ad7785a221a20f32204547364d20f4b59a55f5dc23a84aa802d87edfc84f8020145ae43e17e4ce2f681c37f261b1229aa2db3f5ca82a83a0987d4a914b5e70a9b0f39ac5ade4"}}, &(0x7f0000000140))
timer_create(0x5, &(0x7f0000000180)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000200))
timer_gettime(r0, &(0x7f0000000240))
timer_gettime(r0, &(0x7f0000000280))
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff)
r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x80, 0x111000)
timerfd_gettime(r1, &(0x7f0000000300))
timerfd_gettime(r1, &(0x7f0000000340))
timer_create(0x7, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=<r2=>0x0)
timer_gettime(r2, &(0x7f0000000400))
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000440)={0x3, 0xb0, "0aa531", 0x7, 0x5})
ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000480))
write$bt_hci(r1, &(0x7f00000004c0)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x2, 0x4, 0x4, 0x101, 0x7, 0x3}, {0x80, 0x8, 0xfff7, 0x2, 0x800, 0x68}}}}, 0x25)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600), 0x14200, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x20008804)
perf_event_open(&(0x7f0000000780)={0xf, 0x80, 0x6, 0x0, 0xc9, 0xe1, 0x0, 0x9, 0x42, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x6}, 0x879fab862412379f, 0x100, 0x8, 0x4, 0x86, 0x5, 0x1, 0x0, 0x8, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)

[  129.093798] audit: type=1400 audit(1748085266.067:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:14:26 executing program 5:
getpriority(0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ptrace$pokeuser(0x6, r1, 0x100000000, 0x8c)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080))
r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000180), 0x2, &(0x7f00000001c0))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={0x0, 0xc00, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f00000002c0)=r3)
r5 = syz_open_dev$vcsn(&(0x7f0000000300), 0x4, 0xec080)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000340)={0x0, 0x1, r2, 0x3, 0x80000})
r6 = syz_open_dev$vcsn(&(0x7f0000000380), 0x72, 0x12000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f00000003c0)={r3, 0x3, r5, 0x958f, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000400)={r0, 0x0, r6, 0x2, 0x80000})
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000440))
timerfd_gettime(r6, &(0x7f0000000480))
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc046)
socket$inet(0x2, 0x5, 0x10000)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000005c0))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1d2b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2cb5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40054)

11:14:26 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x2)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x1ff, &(0x7f00000000c0)=0x2)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x4)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x7, &(0x7f00000001c0)=0x2)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000003540), 0x80000, 0x0)
bind$bt_sco(r1, &(0x7f0000003580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000035c0)=0x1, 0x4)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000003600)={0x4, 0xfff8, "c9fc15", 0x20, 0x4})
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000003640)=0xc15, &(0x7f0000003680)=0x2)
ioctl$CDROMRESUME(r1, 0x5302)
openat$cdrom(0xffffffffffffff9c, &(0x7f00000036c0), 0x100, 0x0)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000003700)={0x800, 0x1fc00000, 0x7f, 0x1})
sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3c}}]}, 0x64}}, 0x40095)
r2 = socket$inet(0x2, 0x800, 0x5)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000003880)=0xb4, 0x4)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000004080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000040c0))
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000004100)={@multicast1, @broadcast, @multicast2}, 0xc)

11:14:26 executing program 7:
ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000000)={{0x1, 0x9}, {0x0, 0x81}})
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1)
r0 = io_uring_setup(0x978, &(0x7f0000000080)={0x0, 0xdced, 0x0, 0x3, 0x2a7})
io_uring_setup(0xae4, &(0x7f0000000100)={0x0, 0xdc84, 0x1, 0x0, 0x211, 0x0, r0})
prctl$PR_SET_ENDIAN(0x14, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14f7bc75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78b5277b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x226ad4de}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13c371ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16b0ae83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70fa7ebe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d76f47a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3287a2e4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x6)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f00000002c0), 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/snd_seq', 0x81, 0x20)
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x7, 0x0)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000380)={@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f00000003c0)={@empty, @multicast1, @private=0xa010101}, 0xc)
ioctl$TIOCSCTTY(r3, 0x540e, 0x7)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x4)
timerfd_create(0x4, 0x800)
ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000004c0)={0x0, @ethernet={0x7, @broadcast}, @hci, @l2={0x1f, 0x4, @any, 0x8, 0x1}, 0x7f, 0x0, 0x0, 0x0, 0xb55d, &(0x7f0000000480)='erspan0\x00', 0x100000000, 0x9, 0x4})
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44040004)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @rc={0x1f, @none}, @sco, @xdp={0x2c, 0x0, 0x0, 0xe}, 0x9, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)='syzkaller1\x00', 0x0, 0x0, 0x9})

[  130.565467] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  130.568669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  130.575008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  130.576960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  130.580821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  130.583007] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  130.595777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  130.605274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  130.606962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  130.619690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  130.641454] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.646103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.666441] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.703849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.706162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  130.715496] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  130.722707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.725837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  130.727667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  130.728173] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  130.736153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  130.743986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  130.746170] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.748822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  130.755786] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  130.759087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  130.766184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  130.769061] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.776724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  130.777029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  130.780164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  130.782980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  130.786156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  130.796371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.810731] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  130.812735] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.816159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.834999] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  130.838117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  130.883508] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  132.703164] Bluetooth: hci0: command tx timeout
[  132.704793] Bluetooth: hci1: command tx timeout
[  132.766550] Bluetooth: hci2: command tx timeout
[  132.896479] Bluetooth: hci3: command tx timeout
[  132.897193] Bluetooth: hci4: command tx timeout
[  132.898534] Bluetooth: hci6: command tx timeout
[  132.958503] Bluetooth: hci7: command tx timeout
[  132.959182] Bluetooth: hci5: command tx timeout
[  134.750746] Bluetooth: hci0: command tx timeout
[  134.751242] Bluetooth: hci1: command tx timeout
[  134.816618] Bluetooth: hci2: command tx timeout
[  134.942814] Bluetooth: hci4: command tx timeout
[  134.943308] Bluetooth: hci3: command tx timeout
[  134.943865] Bluetooth: hci6: command tx timeout
[  135.008163] Bluetooth: hci7: command tx timeout
[  135.008884] Bluetooth: hci5: command tx timeout
[  136.801507] Bluetooth: hci1: command tx timeout
[  136.802003] Bluetooth: hci0: command tx timeout
[  136.863617] Bluetooth: hci2: command tx timeout
[  136.991663] Bluetooth: hci3: command tx timeout
[  136.992156] Bluetooth: hci6: command tx timeout
[  136.992652] Bluetooth: hci4: command tx timeout
[  137.055603] Bluetooth: hci7: command tx timeout
[  137.056090] Bluetooth: hci5: command tx timeout
[  138.846489] Bluetooth: hci0: command tx timeout
[  138.846979] Bluetooth: hci1: command tx timeout
[  138.910471] Bluetooth: hci2: command tx timeout
[  139.039819] Bluetooth: hci4: command tx timeout
[  139.040318] Bluetooth: hci6: command tx timeout
[  139.041298] Bluetooth: hci3: command tx timeout
[  139.102570] Bluetooth: hci5: command tx timeout
[  139.103075] Bluetooth: hci7: command tx timeout
[  193.840667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.843835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.848327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.854386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.863944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.928347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  193.933971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  193.938319] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  193.947551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  193.969847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  193.984077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.003871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  194.009085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  194.013271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.015004] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  194.025994] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  194.026283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.037992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  194.041096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.060677] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.094492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  194.103235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  194.125015] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  194.149802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  194.158882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  194.162629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  194.166213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  194.166852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  194.176635] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  194.180444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  194.183882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  194.185002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.188168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  194.246250] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  194.262435] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  194.406988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  194.418273] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  194.427716] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  194.438008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  194.446894] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  195.936000] Bluetooth: hci0: command tx timeout
[  196.063030] Bluetooth: hci1: command tx timeout
[  196.129226] Bluetooth: hci3: command tx timeout
[  196.190708] Bluetooth: hci2: command tx timeout
[  196.254875] Bluetooth: hci5: command tx timeout
[  196.319473] Bluetooth: hci4: command tx timeout
[  196.383470] Bluetooth: hci7: command tx timeout
[  196.511212] Bluetooth: hci6: command tx timeout
[  197.982642] Bluetooth: hci0: command tx timeout
[  198.110589] Bluetooth: hci1: command tx timeout
[  198.175801] Bluetooth: hci3: command tx timeout
[  198.238566] Bluetooth: hci2: command tx timeout
[  198.303314] Bluetooth: hci5: command tx timeout
[  198.367443] Bluetooth: hci4: command tx timeout
[  198.431456] Bluetooth: hci7: command tx timeout
[  198.558882] Bluetooth: hci6: command tx timeout
[  200.030709] Bluetooth: hci0: command tx timeout
[  200.158885] Bluetooth: hci1: command tx timeout
[  200.222615] Bluetooth: hci3: command tx timeout
[  200.288192] Bluetooth: hci2: command tx timeout
[  200.350553] Bluetooth: hci5: command tx timeout
[  200.415578] Bluetooth: hci4: command tx timeout
[  200.478553] Bluetooth: hci7: command tx timeout
[  200.606607] Bluetooth: hci6: command tx timeout
[  202.080512] Bluetooth: hci0: command tx timeout
[  202.208439] Bluetooth: hci1: command tx timeout
[  202.270471] Bluetooth: hci3: command tx timeout
[  202.334984] Bluetooth: hci2: command tx timeout
[  202.398583] Bluetooth: hci5: command tx timeout
[  202.462505] Bluetooth: hci4: command tx timeout
[  202.527485] Bluetooth: hci7: command tx timeout
[  202.654555] Bluetooth: hci6: command tx timeout
[  255.735729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.742170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.745771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.756243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.764908] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.893204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.896644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.898917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.929928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.935868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.975666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  255.998003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  256.004181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  256.015734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  256.036071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  256.119976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  256.134682] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  256.157759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  256.180244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  256.192213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.251468] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  256.259691] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  256.268365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  256.270912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  256.277876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  256.279927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.283863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  256.287328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  256.300054] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.330351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  256.336347] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  256.341005] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  256.350952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  256.358189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.376729] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  256.378469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  256.412206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.433252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  256.436184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  256.447795] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  257.824185] Bluetooth: hci0: command tx timeout
[  258.014646] Bluetooth: hci1: command tx timeout
[  258.078727] Bluetooth: hci2: command tx timeout
[  258.336411] Bluetooth: hci3: command tx timeout
[  258.462710] Bluetooth: hci6: command tx timeout
[  258.591306] Bluetooth: hci4: command tx timeout
[  258.591687] Bluetooth: hci5: command tx timeout
[  258.592164] Bluetooth: hci7: command tx timeout
[  259.871352] Bluetooth: hci0: command tx timeout
[  260.062565] Bluetooth: hci1: command tx timeout
[  260.127022] Bluetooth: hci2: command tx timeout
[  260.383777] Bluetooth: hci3: command tx timeout
[  260.513079] Bluetooth: hci6: command tx timeout
[  260.639255] Bluetooth: hci7: command tx timeout
[  260.641126] Bluetooth: hci5: command tx timeout
[  260.641964] Bluetooth: hci4: command tx timeout
[  261.919898] Bluetooth: hci0: command tx timeout
[  262.110490] Bluetooth: hci1: command tx timeout
[  262.175669] Bluetooth: hci2: command tx timeout
[  262.431352] Bluetooth: hci3: command tx timeout
[  262.560013] Bluetooth: hci6: command tx timeout
[  262.688457] Bluetooth: hci7: command tx timeout
[  262.688943] Bluetooth: hci5: command tx timeout
[  262.689363] Bluetooth: hci4: command tx timeout
[  263.966465] Bluetooth: hci0: command tx timeout
[  264.159676] Bluetooth: hci1: command tx timeout
[  264.223453] Bluetooth: hci2: command tx timeout
[  264.479974] Bluetooth: hci3: command tx timeout
[  264.607624] Bluetooth: hci6: command tx timeout
[  264.735769] Bluetooth: hci4: command tx timeout
[  264.736273] Bluetooth: hci5: command tx timeout
[  264.736778] Bluetooth: hci7: command tx timeout
[  318.460147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.463302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.467872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.478114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.488912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.646908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  318.650171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  318.652981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  318.661318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  318.670871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  318.773973] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  318.800958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  318.803137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  318.809977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  318.812727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  318.816518] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  318.822811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  318.823422] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  318.827032] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  318.830159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  318.837352] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  318.839883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  318.842270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  318.842967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  318.846214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  318.849002] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  318.851791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  318.866183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  318.869343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  318.873732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  318.876945] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  318.879922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  318.890983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  318.895777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.958999] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  318.976468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  319.001862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  319.005282] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  319.037095] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  319.055861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  320.542501] Bluetooth: hci0: command tx timeout
[  320.735454] Bluetooth: hci1: command tx timeout
[  320.990640] Bluetooth: hci2: command tx timeout
[  321.054653] Bluetooth: hci4: command tx timeout
[  321.118677] Bluetooth: hci5: command tx timeout
[  321.118859] Bluetooth: hci3: command tx timeout
[  321.119907] Bluetooth: hci6: command tx timeout
[  321.182610] Bluetooth: hci7: command tx timeout
[  322.591497] Bluetooth: hci0: command tx timeout
[  322.782557] Bluetooth: hci1: command tx timeout
[  323.038592] Bluetooth: hci2: command tx timeout
[  323.103615] Bluetooth: hci4: command tx timeout
[  323.166556] Bluetooth: hci3: command tx timeout
[  323.166596] Bluetooth: hci6: command tx timeout
[  323.166994] Bluetooth: hci5: command tx timeout
[  323.230698] Bluetooth: hci7: command tx timeout
[  324.638710] Bluetooth: hci0: command tx timeout
[  324.830458] Bluetooth: hci1: command tx timeout
[  325.086605] Bluetooth: hci2: command tx timeout
[  325.150604] Bluetooth: hci4: command tx timeout
[  325.214969] Bluetooth: hci3: command tx timeout
[  325.215878] Bluetooth: hci5: command tx timeout
[  325.215901] Bluetooth: hci6: command tx timeout
[  325.279022] Bluetooth: hci7: command tx timeout
[  326.686492] Bluetooth: hci0: command tx timeout
[  326.878688] Bluetooth: hci1: command tx timeout
[  327.135429] Bluetooth: hci2: command tx timeout
[  327.199428] Bluetooth: hci4: command tx timeout
[  327.262526] Bluetooth: hci3: command tx timeout
[  327.262941] Bluetooth: hci5: command tx timeout
[  327.263590] Bluetooth: hci6: command tx timeout
[  327.326657] Bluetooth: hci7: command tx timeout
[  380.720200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  380.725717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  380.730758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  380.740016] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  380.749763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  380.915987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  380.921685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  380.927632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.931980] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.933810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  380.941885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.945212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  380.948300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  380.960882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.967271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  381.045686] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  381.077684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  381.086639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  381.103768] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  381.114512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  381.118133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  381.132313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  381.135156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  381.145790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  381.155315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  381.160118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  381.160621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  381.161821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  381.174925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  381.177052] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  381.197987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  381.213217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  381.218023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  381.247814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  381.257295] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  381.264981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  381.266204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  381.298411] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  381.329129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  381.377353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  382.814602] Bluetooth: hci0: command tx timeout
[  383.007462] Bluetooth: hci1: command tx timeout
[  383.070503] Bluetooth: hci2: command tx timeout
[  383.326599] Bluetooth: hci4: command tx timeout
[  383.326652] Bluetooth: hci3: command tx timeout
[  383.390518] Bluetooth: hci5: command tx timeout
[  383.456467] Bluetooth: hci7: command tx timeout
[  383.456520] Bluetooth: hci6: command tx timeout
[  384.862517] Bluetooth: hci0: command tx timeout
[  385.054624] Bluetooth: hci1: command tx timeout
[  385.118632] Bluetooth: hci2: command tx timeout
[  385.374632] Bluetooth: hci3: command tx timeout
[  385.376051] Bluetooth: hci4: command tx timeout
[  385.440584] Bluetooth: hci5: command tx timeout
[  385.502597] Bluetooth: hci7: command tx timeout
[  385.503558] Bluetooth: hci6: command tx timeout
[  386.912828] Bluetooth: hci0: command tx timeout
[  387.102621] Bluetooth: hci1: command tx timeout
[  387.168406] Bluetooth: hci2: command tx timeout
[  387.422460] Bluetooth: hci4: command tx timeout
[  387.422515] Bluetooth: hci3: command tx timeout
[  387.486531] Bluetooth: hci5: command tx timeout
[  387.550496] Bluetooth: hci6: command tx timeout
[  387.550602] Bluetooth: hci7: command tx timeout
[  388.958752] Bluetooth: hci0: command tx timeout
[  389.150585] Bluetooth: hci1: command tx timeout
[  389.215447] Bluetooth: hci2: command tx timeout
[  389.471409] Bluetooth: hci4: command tx timeout
[  389.471538] Bluetooth: hci3: command tx timeout
[  389.534451] Bluetooth: hci5: command tx timeout
[  389.600280] Bluetooth: hci6: command tx timeout
[  389.600340] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
11:19:27  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffff888016d3f744 RDX=0000000000000000
RSI=ffffffff81bf13a1 RDI=ffff888016d89f7c RBP=ffff888016d3f848 RSP=ffff888016d3f780
R8 =0000000000000001 R9 =ffff888016d3f830 R10=000000000003b67d R11=00000000000291ff
R12=0000000000000000 R13=ffff888016d3f838 R14=ffff888016d89b80 R15=ffff888016d3f7f0
RIP=ffffffff81353c2c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555ddcd400 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe2300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb5c0000000 CR3=000000000d9b0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff000000000000ff000000
XMM02=0000000000ff00000000000000000000 XMM03=0000000000ff00000000000000000000
XMM04=00000000ff000000000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff85c1d1c0 RBP=ffffffff85c1d1c0 RSP=ffff88806cf08930
R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=0000000000012b66
R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf08a28
RIP=ffffffff815ab805 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555574cf9400 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe2c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe7d8388008 CR3=000000002fc81000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000