Warning: Permanently added '[localhost]:1876' (ECDSA) to the list of known hosts.
2025/05/26 10:40:28 fuzzer started
2025/05/26 10:40:29 dialing manager at localhost:46087
syzkaller login: [   93.546463] cgroup: Unknown subsys name 'net'
[   93.672320] cgroup: Unknown subsys name 'cpuset'
[   93.728087] cgroup: Unknown subsys name 'rlimit'
2025/05/26 10:40:43 syscalls: 213
2025/05/26 10:40:43 code coverage: enabled
2025/05/26 10:40:43 comparison tracing: enabled
2025/05/26 10:40:43 extra coverage: enabled
2025/05/26 10:40:43 setuid sandbox: enabled
2025/05/26 10:40:43 namespace sandbox: enabled
2025/05/26 10:40:43 Android sandbox: enabled
2025/05/26 10:40:43 fault injection: enabled
2025/05/26 10:40:43 leak checking: enabled
2025/05/26 10:40:43 net packet injection: enabled
2025/05/26 10:40:43 net device setup: enabled
2025/05/26 10:40:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/26 10:40:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/26 10:40:43 USB emulation: enabled
2025/05/26 10:40:43 hci packet injection: enabled
2025/05/26 10:40:43 wifi device emulation: enabled
2025/05/26 10:40:43 802.15.4 emulation: enabled
2025/05/26 10:40:43 fetching corpus: 0, signal 0/0 (executing program)
2025/05/26 10:40:45 starting 8 fuzzer processes
10:40:45 executing program 0:
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/175, 0xaf}], 0x1, &(0x7f0000000180)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r0=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff]}}], 0x140}, 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000300)={0x7, 0x7b, 0x1}, 0x7)
write$P9_RATTACH(r2, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x20, 0x3, 0x1}}, 0x14)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="7bfa7f34e33c656e4acbc91db5374919", 0x10)
r5 = socket(0x9, 0x2, 0x40)
setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000003c0)={0x9}, 0x4)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000400))
getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000440)=""/237, &(0x7f0000000540)=0xed)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000600)=""/161, &(0x7f00000006c0)=0xa1)
openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@local, @multicast1}, &(0x7f0000000780)=0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmsg$unix(r3, &(0x7f0000000a00)={&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000840)=""/55, 0x37}], 0x1, &(0x7f00000008c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}, 0x60)
getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, &(0x7f0000000a40)=""/129, &(0x7f0000000b00)=0x81)
write$P9_RSYMLINK(r8, &(0x7f0000000b40)={0x14, 0x11, 0x1, {0x2, 0x3, 0x4}}, 0x14)
write$P9_RWSTAT(r7, &(0x7f0000000b80)={0x7, 0x7f, 0x1}, 0x7)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r10, &(0x7f0000000bc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)

10:40:45 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', <r0=>0x0, 0x4, 0x1, 0xf7, 0x5, 0x74, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x40, 0x7, 0x5000000, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r1=>r0, 0x29, 0x2, 0xb7, 0x4, 0x40, @remote, @remote, 0x7, 0x80, 0x4, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x6, 0x0, 0x43, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8, 0x100, 0x1}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000041)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001740), 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x70, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x408c0}, 0x2)
r4 = socket$unix(0x1, 0x2, 0x0)
getsockname(r4, &(0x7f00000018c0)=@un=@abs, &(0x7f0000001940)=0x80)
eventfd(0x4)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f00000019c0)={0xfc, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8080}, 0x890)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000001b40)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x10000)
pipe2$9p(&(0x7f0000001b80)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84800)
write$P9_RREADLINK(r6, &(0x7f0000001bc0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r7 = eventfd(0x0)
write$eventfd(r7, &(0x7f0000001c00)=0xcd79, 0x8)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001cc0)={'ip6gre0\x00', &(0x7f0000001c40)={'syztnl1\x00', r1, 0x2f, 0x1, 0xf7, 0x4, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80, 0x40, 0x8, 0x2}})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d00)={'wpan3\x00'})
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x100810, 0xffffffffffffffff, 0x10000000)

10:40:45 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000000)={'lo\x00', @ifru_names})
getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/174, &(0x7f0000000100)=0xae)
getsockname(r0, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000400)="95d4c6ab16c3d0f5b8ee1e4e810ded412f6d8dcf93c036", 0x17)
r2 = syz_io_uring_complete(0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000440)="acf1cba4369b362071699d197d62362d", 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000480)=0x7, 0x4)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000004c0), &(0x7f0000000500)=0x14)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000540))
write$P9_RWALK(r2, &(0x7f0000000580)={0x30, 0x6f, 0x2, {0x3, [{0x1, 0x1, 0x6}, {0x2, 0x0, 0x3}, {0x8, 0x4, 0x7}]}}, 0x30)
r3 = syz_io_uring_complete(0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'syztnl0\x00', <r4=>0x0, 0x4, 0xf0, 0x5c, 0xa7a2, 0x60, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x0, 0x4}})
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, 0x13, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x90186, 0x0)
write$P9_RAUTH(r5, &(0x7f0000001180)={0x14, 0x67, 0x1, {0xa, 0x3, 0x5}}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001240)={'ip6gre0\x00', &(0x7f00000011c0)={'ip6_vti0\x00', r4, 0xe94b5be6f052c1bc, 0x1, 0x40, 0x0, 0x16, @empty, @private0, 0x8, 0x7800, 0xa00, 0x3ff}})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001380), 0x4)

10:40:45 executing program 3:
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xa, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044044}, 0x2000811)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000849}, 0x20000080)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1044}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x158, 0xb, 0x6, 0x401, 0x0, 0x0, {0x6, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_COMMENT={0x9, 0x1a, '*)]+\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x12}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8a}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008000}, 0x20040000)
r1 = socket(0x21, 0x1, 0x0)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000481}, 0x20008000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0xa43d8eafb0da7556}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x54, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc05}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6f}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048000}, 0x24004010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3}, ["", "", "", "", ""]}, 0x14}}, 0x48000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r3 = socket(0x0, 0x0, 0xaf)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001040)={'ip6gre0\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', 0x0, 0x29, 0x61, 0x8, 0x5, 0x18, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x8000, 0x50b, 0x3}})
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000001080)={0x8, 0x35, 0x1}, 0x8)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x1bc, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xc, 0x1a, 'ip6gre0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3a}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4fc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff7}}]}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9d}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000001)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0xa0, 0x2, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
getsockname(r1, &(0x7f0000002980)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000002a00)=0x80)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x60, 0x5, 0x6, 0x303, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x48801)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002b80)=""/43, &(0x7f0000002bc0)=0x2b)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c80)={0x178, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x90, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x549}, @CTA_EXPECT_NAT={0x88, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004804}, 0x1)

10:40:45 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
r1 = inotify_init()
inotify_rm_watch(r1, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/8, 0x8, 0x0, &(0x7f0000000280)=""/200, 0xc8}, &(0x7f00000003c0)=0x40)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000400), 0x1)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000440)={0x7, 0x79, 0x2}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x81, 0x9, 0x5cc, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8, 0x1, 0x1000}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl2\x00', <r2=>0x0, 0x4, 0xff, 0x8, 0x2, 0x0, @private2, @mcast2, 0x1, 0x40, 0x40, 0x2}})
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000600)=0x66a, 0x4)
prctl$PR_SET_ENDIAN(0x14, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000640)=[@mss={0x2, 0x9}], 0x1)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000680)=0x1, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r2, 0x29, 0x85, 0x3, 0xffff, 0x39, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4, 0x5}})
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000780)=0xa5d)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {0xc}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xe5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x850)
ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000900)={0x4d, 0x2, 0xff, 0x7, 0xfc})
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000001380)={0x8, 0x35, 0x1, 0x1}, 0x8)

[  109.494775] audit: type=1400 audit(1748256045.241:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:40:45 executing program 5:
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080)=""/133, &(0x7f0000000140)=0x85)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'sit0\x00', <r0=>0x0, 0x2f, 0xe1, 0x0, 0x800, 0x20, @private2, @loopback, 0x8, 0x80, 0x6, 0x9}})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x60000001}}, 0x6)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000002c0)=""/216, &(0x7f00000003c0)=0xd8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000400), 0x8)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000440)=""/183, &(0x7f0000000500)=0xb7)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x3, 0x7, 0x402, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ffc000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7d74}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010)
ioctl$CDROMCLOSETRAY(0xffffffffffffffff, 0x5319)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x40080, 0x0)
write$P9_RREADLINK(r2, &(0x7f00000006c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl1\x00', <r3=>r0, 0x29, 0x31, 0x94, 0x4, 0x15, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x8, 0x4}})
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000007c0)=""/98, &(0x7f0000000840)=0x62)
pipe2$9p(&(0x7f0000000880), 0x84000)
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000008c0)={0x5b22, 0x6f, "e0ba74ae97edc8179f1f3617ccd61e93b557df86ea0ab90ef5d82d6571485051b910df8603e1e98477aeb9a1245de64b590cdb8828cf4b584d530a5aac9ba74cdc922c97538d63a84c56a1cd2fe04d7ae6749e582d2be7ac8d02c5dcd24b0f33358099d8339188f84a8810385b19cc"})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'sit0\x00', <r4=>r3, 0x0, 0x7, 0x1, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x9d, 0x100}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', r4, 0x29, 0x8, 0x41, 0x5, 0x72, @loopback, @initdev={0xfe, 0x88, '\x00', 0xa8, 0x0}, 0x40, 0x7, 0x7f, 0x42f3}})
socket(0x0, 0xa, 0x200)
connect$bt_sco(r1, &(0x7f0000000ac0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

10:40:45 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x40, 0x4, 0x7}}, 0x14)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x2, 0x0, 0xaf0, 0x101, 0x7})
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x478}, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000100)=0xfffffffd, 0x4)
r2 = socket(0x3d, 0x80000, 0x7)
getsockname(r2, &(0x7f0000000140)=@sco={0x1f, @fixed}, &(0x7f00000001c0)=0x80)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14)
epoll_pwait2(r1, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x5]}, 0x8)
r3 = inotify_init1(0xf8953d9577c3a857)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r3, 0x6, 0x0, 0x5}, 0x200)
pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r4, &(0x7f00000003c0)={0x18, 0x73, 0x1, {{0x20, 0x2, 0x4}, 0x9}}, 0x18)
write$P9_RCLUNK(r0, &(0x7f0000000400)={0x7, 0x79, 0x1}, 0x7)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000440)=0xfffffff7, 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000001480)=""/46, 0x2e}, &(0x7f0000001500)=0x40)
r6 = socket(0x0, 0x80000, 0x9)
recvmsg(r6, &(0x7f0000001b80)={&(0x7f0000001540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000015c0)=""/43, 0x2b}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/243, 0xf3}, {&(0x7f0000001800)=""/155, 0x9b}, {&(0x7f00000018c0)=""/155, 0x9b}, {&(0x7f0000001980)=""/117, 0x75}], 0x6, &(0x7f0000001a80)=""/194, 0xc2}, 0x40002101)

10:40:45 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000740)={0x60000000})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x6, 0x40, 0x7fff, 0x4, @loopback, @dev={0xfe, 0x80, '\x00', 0x42}, 0x700, 0x80, 0x100, 0xfff}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'sit0\x00', <r2=>0x0, 0x4, 0x40, 0x6, 0x7, 0x8, @mcast1, @loopback, 0x20, 0x700, 0x900000, 0xff}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000940)={@empty, @empty, <r3=>0x0}, &(0x7f0000000980)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'ip6_vti0\x00', &(0x7f0000000a00)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x3, 0x84, 0x4, 0x4, @local, @private0, 0x80, 0x8000, 0x1, 0xab}})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x1, 0x0, 0x7ff, 0x20, @dev={0xfe, 0x80, '\x00', 0x11}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x800000, 0xff}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000b80)={0x644, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x1f8, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3a2b, 0x9, 0x80}, {0xbe6, 0xfa, 0x1, 0x99}, {0xa3c, 0x1f, 0x80, 0x401}, {0x5, 0x80, 0x9e, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x2, 0xff, 0xc9fc}, {0x20, 0x3e, 0x1}, {0x8001, 0x0, 0x6, 0x200}, {0x1, 0xaa, 0x4, 0xb8d}, {0x80, 0x1, 0x3}, {0x4, 0x5, 0xcc, 0x10001}, {0x2, 0x8, 0x80, 0x7fff}, {0x1, 0xe4, 0x80, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001280))
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x5, 0x1, 0x405, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20000080)
connect$bt_sco(0xffffffffffffffff, &(0x7f00000013c0), 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000001480)={'sit0\x00', &(0x7f0000001400)={'ip6gre0\x00', <r7=>r3, 0x0, 0xd8, 0x3f, 0x0, 0xe4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x0, 0x10001, 0x1}})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x310, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x4080)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f00000015c0))
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001640)={'team0\x00', <r9=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001700)={'syztnl2\x00', &(0x7f0000001680)={'syztnl2\x00', <r10=>r3, 0x2f, 0x8, 0x0, 0x2, 0x60, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x4, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001800)={'ip6gre0\x00', &(0x7f0000001780)={'syztnl0\x00', <r11=>r1, 0x29, 0x1, 0x6, 0x0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x700, 0xdcc, 0x5c95}})
sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000004a40)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004a00)={&(0x7f0000004140)={0x898, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x800, 0x20, 0x3f, 0x9}, {0x400, 0x1, 0x1, 0xfff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1f, 0x4, 0x6, 0x3f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)

[  110.882767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  110.896274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.901535] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.913128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.920432] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  110.924721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  110.931368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.933067] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  110.936705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.947192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.949826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  110.967309] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.972932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.976090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  110.985721] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  110.992328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  110.999410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.002652] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  111.006615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  111.008807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.014165] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  111.016606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  111.017881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  111.026262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.034491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.036356] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.040647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  111.040684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  111.043610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  111.044613] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  111.044651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  111.057529] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  111.062751] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.067281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  111.079289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.082864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.087333] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  111.090770] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  111.091207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.096981] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  112.966338] Bluetooth: hci1: command tx timeout
[  113.031255] Bluetooth: hci0: command tx timeout
[  113.159102] Bluetooth: hci4: command tx timeout
[  113.159750] Bluetooth: hci6: command tx timeout
[  113.159786] Bluetooth: hci2: command tx timeout
[  113.160394] Bluetooth: hci5: command tx timeout
[  113.223148] Bluetooth: hci7: command tx timeout
[  113.223786] Bluetooth: hci3: command tx timeout
[  115.014323] Bluetooth: hci1: command tx timeout
[  115.078978] Bluetooth: hci0: command tx timeout
[  115.206450] Bluetooth: hci2: command tx timeout
[  115.207889] Bluetooth: hci5: command tx timeout
[  115.207994] Bluetooth: hci6: command tx timeout
[  115.208964] Bluetooth: hci4: command tx timeout
[  115.270259] Bluetooth: hci7: command tx timeout
[  115.271731] Bluetooth: hci3: command tx timeout
[  117.063960] Bluetooth: hci1: command tx timeout
[  117.127002] Bluetooth: hci0: command tx timeout
[  117.254220] Bluetooth: hci6: command tx timeout
[  117.254714] Bluetooth: hci5: command tx timeout
[  117.255356] Bluetooth: hci4: command tx timeout
[  117.255813] Bluetooth: hci2: command tx timeout
[  117.318098] Bluetooth: hci7: command tx timeout
[  117.318584] Bluetooth: hci3: command tx timeout
[  119.111955] Bluetooth: hci1: command tx timeout
[  119.173980] Bluetooth: hci0: command tx timeout
[  119.302376] Bluetooth: hci2: command tx timeout
[  119.302891] Bluetooth: hci4: command tx timeout
[  119.303722] Bluetooth: hci5: command tx timeout
[  119.304199] Bluetooth: hci6: command tx timeout
[  119.366259] Bluetooth: hci3: command tx timeout
[  119.366757] Bluetooth: hci7: command tx timeout
[  171.306483] syz-executor.5 (284) used greatest stack depth: 24800 bytes left
[  173.719469] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  173.730139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  173.732468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  173.738799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.742099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.744368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  173.746863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.752195] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.754543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  173.758153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.807599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  173.813517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  173.820695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.822586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  173.825456] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.830326] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  173.835476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.847717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  173.866297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.872450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.877875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.885076] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.909803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.915408] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.917712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  173.922061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.922096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  173.927855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.933512] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.939225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.943787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.945928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.950237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.954223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  173.961162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.971186] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  173.973137] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  173.979213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.998247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  174.012120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  175.815236] Bluetooth: hci0: command tx timeout
[  175.815258] Bluetooth: hci1: command tx timeout
[  175.942027] Bluetooth: hci2: command tx timeout
[  176.007051] Bluetooth: hci3: command tx timeout
[  176.007129] Bluetooth: hci4: command tx timeout
[  176.070094] Bluetooth: hci7: command tx timeout
[  176.070313] Bluetooth: hci5: command tx timeout
[  176.071260] Bluetooth: hci6: command tx timeout
[  177.863052] Bluetooth: hci0: command tx timeout
[  177.863117] Bluetooth: hci1: command tx timeout
[  177.990035] Bluetooth: hci2: command tx timeout
[  178.054014] Bluetooth: hci3: command tx timeout
[  178.055073] Bluetooth: hci4: command tx timeout
[  178.120359] Bluetooth: hci6: command tx timeout
[  178.120384] Bluetooth: hci5: command tx timeout
[  178.120457] Bluetooth: hci7: command tx timeout
[  179.910243] Bluetooth: hci1: command tx timeout
[  179.910809] Bluetooth: hci0: command tx timeout
[  180.038249] Bluetooth: hci2: command tx timeout
[  180.103031] Bluetooth: hci4: command tx timeout
[  180.103542] Bluetooth: hci3: command tx timeout
[  180.166045] Bluetooth: hci7: command tx timeout
[  180.166520] Bluetooth: hci5: command tx timeout
[  180.168246] Bluetooth: hci6: command tx timeout
[  181.958394] Bluetooth: hci1: command tx timeout
[  181.960027] Bluetooth: hci0: command tx timeout
[  182.087166] Bluetooth: hci2: command tx timeout
[  182.150199] Bluetooth: hci3: command tx timeout
[  182.150228] Bluetooth: hci4: command tx timeout
[  182.215147] Bluetooth: hci7: command tx timeout
[  182.215187] Bluetooth: hci6: command tx timeout
[  182.215647] Bluetooth: hci5: command tx timeout
[  236.240674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.244887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  236.249184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  236.254751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  236.257838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  236.377637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.383735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.389602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.396043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.399219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.447499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.451216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.452417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.455533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.457728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.545557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.584864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.601688] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.623255] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  236.629450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  236.635177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  236.637552] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  236.639189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  236.640847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  236.646826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  236.653348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.655257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  236.660669] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  236.662450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  236.669078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.669844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  236.675534] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  236.684122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  236.692558] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  236.693738] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  236.697037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  236.698441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  236.702067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  236.717968] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  236.718260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.279199] Bluetooth: hci0: command tx timeout
[  238.471047] Bluetooth: hci1: command tx timeout
[  238.535229] Bluetooth: hci2: command tx timeout
[  238.790759] Bluetooth: hci4: command tx timeout
[  238.791116] Bluetooth: hci3: command tx timeout
[  238.853994] Bluetooth: hci7: command tx timeout
[  238.855473] Bluetooth: hci6: command tx timeout
[  238.856851] Bluetooth: hci5: command tx timeout
[  240.327518] Bluetooth: hci0: command tx timeout
[  240.518256] Bluetooth: hci1: command tx timeout
[  240.582024] Bluetooth: hci2: command tx timeout
[  240.840066] Bluetooth: hci3: command tx timeout
[  240.841707] Bluetooth: hci4: command tx timeout
[  240.903085] Bluetooth: hci6: command tx timeout
[  240.903108] Bluetooth: hci7: command tx timeout
[  240.904398] Bluetooth: hci5: command tx timeout
[  242.375941] Bluetooth: hci0: command tx timeout
[  242.567014] Bluetooth: hci1: command tx timeout
[  242.630262] Bluetooth: hci2: command tx timeout
[  242.886153] Bluetooth: hci4: command tx timeout
[  242.886172] Bluetooth: hci3: command tx timeout
[  242.950156] Bluetooth: hci6: command tx timeout
[  242.950212] Bluetooth: hci7: command tx timeout
[  242.951307] Bluetooth: hci5: command tx timeout
[  244.422010] Bluetooth: hci0: command tx timeout
[  244.614163] Bluetooth: hci1: command tx timeout
[  244.679061] Bluetooth: hci2: command tx timeout
[  244.933997] Bluetooth: hci3: command tx timeout
[  244.934972] Bluetooth: hci4: command tx timeout
[  244.999202] Bluetooth: hci5: command tx timeout
[  244.999694] Bluetooth: hci7: command tx timeout
[  245.000978] Bluetooth: hci6: command tx timeout
[  299.009991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  299.015363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  299.030633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  299.049218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  299.065772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  299.105553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  299.109180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  299.111482] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  299.129505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  299.147225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  299.163847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  299.176610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  299.185117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  299.197200] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  299.202278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  299.249224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  299.251740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  299.256348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  299.261357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  299.265308] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  299.265351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  299.269479] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  299.270234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  299.280095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  299.284093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  299.288478] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  299.298426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  299.306126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  299.307187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  299.317250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  299.323504] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  299.329251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.367640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  299.393492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.396091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  299.396933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.402206] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.410620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  299.417086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.420560] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  301.126278] Bluetooth: hci0: command tx timeout
[  301.190013] Bluetooth: hci1: command tx timeout
[  301.254079] Bluetooth: hci2: command tx timeout
[  301.382061] Bluetooth: hci5: command tx timeout
[  301.382075] Bluetooth: hci4: command tx timeout
[  301.445998] Bluetooth: hci6: command tx timeout
[  301.513319] Bluetooth: hci7: command tx timeout
[  301.638277] Bluetooth: hci3: command tx timeout
[  303.174205] Bluetooth: hci0: command tx timeout
[  303.239501] Bluetooth: hci1: command tx timeout
[  303.302034] Bluetooth: hci2: command tx timeout
[  303.430048] Bluetooth: hci5: command tx timeout
[  303.431676] Bluetooth: hci4: command tx timeout
[  303.494038] Bluetooth: hci6: command tx timeout
[  303.559072] Bluetooth: hci7: command tx timeout
[  303.686335] Bluetooth: hci3: command tx timeout
[  305.223462] Bluetooth: hci0: command tx timeout
[  305.287141] Bluetooth: hci1: command tx timeout
[  305.351003] Bluetooth: hci2: command tx timeout
[  305.479371] Bluetooth: hci5: command tx timeout
[  305.481114] Bluetooth: hci4: command tx timeout
[  305.541978] Bluetooth: hci6: command tx timeout
[  305.606739] Bluetooth: hci7: command tx timeout
[  305.734010] Bluetooth: hci3: command tx timeout
[  307.269998] Bluetooth: hci0: command tx timeout
[  307.335085] Bluetooth: hci1: command tx timeout
[  307.397986] Bluetooth: hci2: command tx timeout
[  307.528008] Bluetooth: hci5: command tx timeout
[  307.529773] Bluetooth: hci4: command tx timeout
[  307.590994] Bluetooth: hci6: command tx timeout
[  307.655428] Bluetooth: hci7: command tx timeout
[  307.784010] Bluetooth: hci3: command tx timeout
[  361.632052] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.634572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.636277] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.644470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.648817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.686984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.690663] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.699022] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.712264] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.717241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.810252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  361.816315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  361.820122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  361.827662] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  361.835151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  361.892571] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  361.897231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  361.903208] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  361.936392] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  361.949377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  361.967825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  361.984344] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  361.989468] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  361.996211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  361.996575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  362.000569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  362.015725] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  362.027296] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  362.028352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  362.031279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  362.033126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  362.046822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  362.066375] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  362.068396] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  362.070649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  362.093259] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  362.106837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  362.131300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  362.149085] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  362.173826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  363.719319] Bluetooth: hci0: command tx timeout
[  363.781997] Bluetooth: hci1: command tx timeout
[  363.910307] Bluetooth: hci2: command tx timeout
[  364.038088] Bluetooth: hci3: command tx timeout
[  364.102689] Bluetooth: hci4: command tx timeout
[  364.166000] Bluetooth: hci6: command tx timeout
[  364.230855] Bluetooth: hci5: command tx timeout
[  364.294005] Bluetooth: hci7: command tx timeout
[  365.766356] Bluetooth: hci0: command tx timeout
[  365.830947] Bluetooth: hci1: command tx timeout
[  365.958296] Bluetooth: hci2: command tx timeout
[  366.086381] Bluetooth: hci3: command tx timeout
[  366.150960] Bluetooth: hci4: command tx timeout
[  366.214453] Bluetooth: hci6: command tx timeout
[  366.279948] Bluetooth: hci5: command tx timeout
[  366.342355] Bluetooth: hci7: command tx timeout
[  367.814041] Bluetooth: hci0: command tx timeout
[  367.877981] Bluetooth: hci1: command tx timeout
[  368.006288] Bluetooth: hci2: command tx timeout
[  368.134366] Bluetooth: hci3: command tx timeout
[  368.198069] Bluetooth: hci4: command tx timeout
[  368.262253] Bluetooth: hci6: command tx timeout
[  368.326409] Bluetooth: hci5: command tx timeout
[  368.390226] Bluetooth: hci7: command tx timeout
[  369.862626] Bluetooth: hci0: command tx timeout
[  369.927263] Bluetooth: hci1: command tx timeout
[  370.054305] Bluetooth: hci2: command tx timeout
[  370.182993] Bluetooth: hci3: command tx timeout
[  370.248023] Bluetooth: hci4: command tx timeout
[  370.311010] Bluetooth: hci6: command tx timeout
[  370.374119] Bluetooth: hci5: command tx timeout
[  370.438000] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
10:45:48  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000246 RCX=ffff88802741fd0c RDX=0000000000000001
RSI=ffffffff85d0ee98 RDI=ffff888028253700 RBP=ffffffff85d0ee98 RSP=ffff88802741fce0
R8 =0000000000000001 R9 =ffffed1004e83f9a R10=0000000000000003 R11=0000000000000001
R12=ffffffff81b21eb6 R13=ffff88802741fd0c R14=0000000000000001 R15=0000000000000001
RIP=ffffffff81513edc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555584021400 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe5e00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c139bd5080 CR3=0000000018347000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00ff000000000000000000000000ff00
XMM02=0000000000ff000000000000ff000000 XMM03=0000000000ff00000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=23c42bae1de9e4a1 RDX=0000000000000001
RSI=000000002b6731b2 RDI=ffff88806cf31850 RBP=ffff88802490f848 RSP=ffff88802490f780
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff88802490f850 R13=ffff88802490f838 R14=ffff88802490f831 R15=ffff88802490f7f0
RIP=ffffffff81353cde RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2c238e5000 CR3=00000000165e6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=315f315f4c53534e45504f00315f315f XMM03=0000000000006365445f505645007472
XMM04=77656e5f544353006b636f6c4265646f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000