Warning: Permanently added '[localhost]:39040' (ECDSA) to the list of known hosts. 2025/05/28 00:42:45 fuzzer started 2025/05/28 00:42:46 dialing manager at localhost:36005 syzkaller login: [ 87.010036] cgroup: Unknown subsys name 'net' [ 87.149747] cgroup: Unknown subsys name 'cpuset' [ 87.189878] cgroup: Unknown subsys name 'rlimit' 2025/05/28 00:43:02 syscalls: 207 2025/05/28 00:43:02 code coverage: enabled 2025/05/28 00:43:02 comparison tracing: enabled 2025/05/28 00:43:02 extra coverage: enabled 2025/05/28 00:43:02 setuid sandbox: enabled 2025/05/28 00:43:02 namespace sandbox: enabled 2025/05/28 00:43:02 Android sandbox: enabled 2025/05/28 00:43:02 fault injection: enabled 2025/05/28 00:43:02 leak checking: enabled 2025/05/28 00:43:02 net packet injection: enabled 2025/05/28 00:43:02 net device setup: enabled 2025/05/28 00:43:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/28 00:43:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/28 00:43:02 USB emulation: enabled 2025/05/28 00:43:02 hci packet injection: enabled 2025/05/28 00:43:02 wifi device emulation: enabled 2025/05/28 00:43:02 802.15.4 emulation: enabled 2025/05/28 00:43:02 fetching corpus: 0, signal 0/0 (executing program) 2025/05/28 00:43:04 starting 8 fuzzer processes 00:43:04 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="ba47a0dda4136ba9525670c71969c785", 0x10) r1 = io_uring_setup(0x38dc, &(0x7f0000000080)={0x0, 0xdef0, 0x0, 0x0, 0x69}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000100)) socketpair(0x29, 0x1, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/i8042', 0x80, 0xc0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000200)) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r4 = pidfd_getfd(r3, r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r4, 0x8008330e, &(0x7f00000002c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/pnp0', 0x4240, 0x100) write$snapshot(r5, &(0x7f0000000340)="853b4bd8b54ef9d6bf50702025225ada5d3b3b8d70f52d9b6cd342194cc969f50c7def07c1a0b32363c94c3192a696e263fe25df48156e961c80863f8ba521ec3d470dc689e3a9deac2f06e5af580190782ae9e38fc3c6b36fa4c65a59fb3b190a6612b9805a48bb5a19fdba7d1fa9c211e4275bc7e681abe16f6b81b42655c01701a73892dbd703491226d20509defe75637fb8c85754fd10f06fb3d680a0ad73deeb92f028881982a83264996fce877eddedad7177454df83c38134ab2042578624cc6", 0xc4) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x4) waitid$P_PIDFD(0x3, r4, &(0x7f0000000440), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000004c0)={0x8, 0x4}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) 00:43:04 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x81, 0x400000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xd00000000) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x0, 0xff, 0x8, 0x7, 0x7}, &(0x7f0000000080)=0x20) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000040, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@cachetag={'cachetag', 0x3d, '/dev/vcs#\x00'}}, {@msize}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cachetag={'cachetag', 0x3d, '@\xc4%{]'}}, {@cache_mmap}, {@access_uid={'access', 0x3d, r1}}], [{@subj_type}]}}) r2 = add_key$fscrypt_v1(&(0x7f0000000300), 0xfffffffffffffffc, &(0x7f0000000340)={0x0, "0d09e40a61d4c644fe1f99e19fd5da7fb95dc07ae9849d092ef6326b095ae15ae675ef1cc13389ab6fcda9e3ded1f4b3327356f8ce9631be35c96f2ca0bfa009", 0x1b}, 0x48, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @auto=[0x35, 0x36, 0x65, 0x30, 0x63, 0x36, 0x9, 0x61, 0x63, 0x64, 0x64, 0x66, 0x37, 0x39, 0x62, 0x62]}, &(0x7f0000000440)={0x0, "be0bc3ea94896057217b34cd4465a6ea170960b473c6fc56298f96ec8b8f870852d6d07320935382afc5544e4e7839075817871cfc755160db069ac912708576", 0x21}, 0x48, 0xfffffffffffffffd) keyctl$negate(0xd, r2, 0x2, r3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000004c0)=0x3, 0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000500), 0x401, 0x10000) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r3) r6 = accept4$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000600)=0x1c, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000640)={@private0, 0x35}) keyctl$unlink(0x9, r5, r5) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000680)=0x5, 0x1) syz_open_dev$vcsu(&(0x7f00000006c0), 0x101, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000700)=0x1, &(0x7f0000000740)=0x4) r7 = accept4$inet6(r4, &(0x7f0000000780)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000007c0)=0x1c, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000800)=@gcm_256={{0x304}, "770b99e067e5d7b7", "08df0109700632817c42df389d85a86cafe8d8dac235a671a5affa088f55ae7f", "81e4a115", "f95b3211906409bf"}, 0x38) 00:43:04 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @timestamp], 0x3) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/156, &(0x7f0000000140)=0x9c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "8c11de7adccedbcb", "6c3989d991aac7cedebb252062b4c9f7191c5dd82b070898393c26ac36da81fc", "b8dbfa37", "da67b3416c81261e"}, 0x38) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x400000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x9, 0x0, 0xff, 0x1, 0xaf, 0x3}, &(0x7f0000000240)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000340)=0x3, 0x2) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, "f90a4a07565621a4", "b22f7ae1110ddfec780061bbf2e8d9ca", "93506d2d", "d9510382dec62a75"}, 0x28) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@private, @in6=@local}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) pidfd_send_signal(r1, 0x7, &(0x7f0000000540)={0x4, 0x1, 0x2}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000600)={0x7, 0x1, 0x5, 0x710, 0xee1c}, 0x14) [ 104.974607] audit: type=1400 audit(1748392984.472:7): avc: denied { execmem } for pid=277 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:43:04 executing program 3: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x1, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x800) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x92840, 0x2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) write$bt_hci(r2, &(0x7f0000000340)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}}}, 0xb) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000380)=0x5a, &(0x7f00000003c0)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000400)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3e2, 0x0, 0xff, 0x0, 0xbd8, 0x7}, &(0x7f0000000440)=0x20) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000480)={0x0, @vsock={0x28, 0x0, 0x2710}, @in={0x2, 0x4e20, @remote}, @phonet={0x23, 0x7, 0x1f, 0x5}, 0x5, 0x0, 0x0, 0x0, 0xfd14, 0x0, 0x47760a69, 0x7, 0x3ff}) r5 = syz_open_dev$vcsu(&(0x7f0000000500), 0x200, 0x40000) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000540)={0x1a, 0x7, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xe6, 0x22, "f7bc9b6d5bf305facd53c43d615c27f360873a30f591a61e054cad36e9873d95a208"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) process_madvise(r2, &(0x7f00000006c0)=[{&(0x7f00000005c0)="569b56c9964799923c587811f170883efbf84f76449d606fcc5f8c43f70c229c5424d21022e2478e42f1b37c1eb6c249d61f12745e907500e76739be735d01ffdd8a7956dd8ab20f3485e900b2851d19b9fcab52e0c5ad230129e55538717c04c6889b64a02faad30d4711da86c43c0b2bd4e8153360956d23dbf97ff48a54ff995f6bb52090267c055915723167681eb28c8a05a54e81a88e371e6921feeffb592c344dac4baf7c8fe1caa5a3d5f1383e49b730beca404906cd3548c2795c498031e250b677f8138b45d081159d30e287ad8753d0adfeacd06e78c08039e3894d0c3e81", 0xe4}], 0x1, 0xf, 0x0) r6 = pidfd_getfd(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000700)={@remote}, 0x14) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e21, 0x3, @empty, 0x1}, {0xa, 0x4e20, 0xffffffff, @private0, 0xa4a2}, 0xf04f, [0x2, 0x8, 0x2, 0x81, 0x7, 0x2, 0x9, 0xbf3]}, 0x5c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="53f23d7078594a20ba5c71", 0xb, 0x8000, 0x0, 0x0) 00:43:04 executing program 4: clock_getres(0x0, &(0x7f0000000000)) futex(&(0x7f0000000040)=0x2, 0x5, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x1, 0x0) futex(&(0x7f0000000100)=0x2, 0x80, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x2) clock_gettime(0x0, &(0x7f00000001c0)) rt_sigtimedwait(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x989680}, 0x8) semtimedop(0x0, &(0x7f0000000300)=[{0x4, 0x5, 0x1800}, {0x3, 0x8000}, {0x4, 0x5, 0x3000}, {0x2, 0x9, 0x1800}], 0x4, &(0x7f0000000340)) clock_getres(0x5, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0x7ff, 0xe6d, 0x0, 0x2, 0x80, 0x3, 0x20, 0x3bb}, &(0x7f0000000400)={0xfffffffffffffffc, 0x400, 0x80000000, 0x6, 0x0, 0x4, 0x100, 0x1}, &(0x7f0000000440)={0x800, 0x3f, 0x6, 0x6, 0x6, 0x7, 0x5b, 0x8001}, &(0x7f00000004c0)={r0, r1+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x7]}, 0x8}) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd88}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcc}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x51) r2 = semget(0x3, 0x3, 0xc2) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x3000302) inotify_rm_watch(0xffffffffffffffff, r3) inotify_init1(0x800) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) semtimedop(r2, &(0x7f0000000780)=[{0x4, 0x8, 0x800}, {0x1, 0x5}, {0x2, 0x3, 0x1000}, {0x3, 0x0, 0x800}, {0x3, 0x2}], 0x5, &(0x7f00000007c0)) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000800), 0x80800) pselect6(0x40, &(0x7f0000000840)={0x3, 0x80000001, 0x3, 0x1, 0x0, 0x9, 0xffffffff}, &(0x7f0000000880)={0x9, 0xa2, 0xffffffffffff0000, 0xb7a, 0x2, 0x50b, 0x7fffffff}, &(0x7f00000008c0)={0x8, 0x8, 0x4, 0xc8a3, 0xf0, 0xf721, 0x20, 0xf69}, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000980)={&(0x7f0000000940)={[0x5]}, 0x8}) r4 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x6, 0x200180) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000a00)=@gcm_128={{0x304}, "7a59b26ebb004480", "34be156f87d3ddc4780e37cee785d5af", "6d84b6c8", "32fdf7f2584dded5"}, 0x28) 00:43:04 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x12b000, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x5, 0x5], 0xf4}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) socketpair(0x1a, 0xa, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = accept4(r0, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f0000000240)=0x80, 0x80800) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000280)=0x81, &(0x7f00000002c0)=0x2) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000300)) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000340)={0x8, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x84, 0xcb1, [0x2]}}, @generic={0xae, 0x2a, "02e86b3b5f23d68d548fcc42f7297db88331996e1e6e27d0026b9aa06d5f54c33dca658c84727fe65c4a"}, @pad1, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x0, [0x10001]}}]}, 0x68) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) syslog(0xa, &(0x7f0000000440)=""/203, 0xcb) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000540)={0x87, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @pad1, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0x800}]}, 0x20) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000580)=0x3, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x80, &(0x7f0000000600)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000640)={"e90909d97521e3b86e949227df43b684", 0x0, 0x0, {0x8, 0x8}, {0x4, 0x9}, 0x7, [0x718, 0xffffffffffff1975, 0x8001, 0x80, 0x7fffffff, 0xa19f, 0xfbb, 0x1, 0x200, 0x81, 0x8, 0x401, 0x80, 0x9, 0x1, 0x100000001]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000740)=r5) 00:43:04 executing program 6: setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x2f, 0x9, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0x8acc, [0xae, 0xf1b, 0x7f]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x7fff, [0x5]}}, @ra={0x5, 0x2, 0x1000}]}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x1, 0x2, 0x2, 0xd, 0x20, 0x200}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@local, r0}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0xec, 0x20000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x9, 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000340)={0x1f, {{0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x7, @empty, 0x80000000}}]}, 0x110) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000480)=0x5, 0x4) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x1ff, 0x0) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) write$snapshot(r5, &(0x7f0000000540)="01bec1d712120d42113a20ac296cc2fedf0d28e3307f6374c984b090e530a854fa9ab39b9c51317dff1bfef5", 0x2c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) socketpair(0x10, 0x80000, 0x7, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000600)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000740)=0xe8) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={0x0, @phonet={0x23, 0x2, 0x7, 0x4}, @phonet={0x23, 0x6, 0x7, 0x6}, @can={0x1d, r7}, 0x8, 0x0, 0x0, 0x0, 0xff01, &(0x7f0000000780)='bridge_slave_1\x00', 0x5, 0x0, 0x3}) 00:43:04 executing program 7: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000000)={0x100, {{0xa, 0x4e24, 0x5, @mcast1, 0x5}}}, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e23, 0x3, @remote, 0xe2}, {0xa, 0x4e20, 0x3f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffff7}, 0x401, [0x49c5, 0xee1, 0x1, 0x80000000, 0x8001, 0x0, 0x86, 0x1000]}, 0x5c) socketpair(0x23, 0x80000, 0x3b, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000002c0)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x101, 0x4800) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000340)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000003c0)={0x9, 0xffff0000, 0x0, 0x7}, 0x14) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000400)={0xffffffff, {{0xa, 0x4e21, 0xffffffff, @private1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000004c0)={0x3f, {{0xa, 0x4e21, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9}}}, 0x88) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000580)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000005c0)={0x32, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x0, 0x14, 0x0, 0x49, [0x1, 0x40, 0x2, 0x12, 0x5, 0x8, 0x951, 0x5, 0x8, 0x1]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x54e2}, @ra={0x5, 0x2, 0x81}]}, 0x90) r5 = pidfd_getfd(r4, r0, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000680)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000006c0)=0xfffffff7, 0x4) syz_open_dev$vcsn(&(0x7f0000000700), 0x0, 0xa00) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@empty, @in6=@loopback}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000840)=0xe8) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x1, 0x5d228f32, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x25}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x18}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) [ 106.463208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.472996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.475812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.487836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.499507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.523092] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.534723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.548825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.551891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.565428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.569104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.582318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.584837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.591899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.605304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.626667] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 106.628777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.640190] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 106.642428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.646542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.647159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.661825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.662896] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.670708] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 106.672281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.675136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 106.679901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.680751] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 106.687467] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 106.689483] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 106.692027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 106.736211] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 106.752458] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.764769] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 106.766567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.771118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.776522] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 106.782166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.816731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.820029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.602859] Bluetooth: hci0: command tx timeout [ 108.666411] Bluetooth: hci1: command tx timeout [ 108.729404] Bluetooth: hci2: command tx timeout [ 108.730141] Bluetooth: hci3: command tx timeout [ 108.795296] Bluetooth: hci7: command tx timeout [ 108.857361] Bluetooth: hci5: command tx timeout [ 108.858070] Bluetooth: hci6: command tx timeout [ 108.921328] Bluetooth: hci4: command tx timeout [ 110.649367] Bluetooth: hci0: command tx timeout [ 110.713508] Bluetooth: hci1: command tx timeout [ 110.778320] Bluetooth: hci3: command tx timeout [ 110.778821] Bluetooth: hci2: command tx timeout [ 110.841948] Bluetooth: hci7: command tx timeout [ 110.905409] Bluetooth: hci6: command tx timeout [ 110.905886] Bluetooth: hci5: command tx timeout [ 110.969286] Bluetooth: hci4: command tx timeout [ 112.699497] Bluetooth: hci0: command tx timeout [ 112.762317] Bluetooth: hci1: command tx timeout [ 112.827298] Bluetooth: hci2: command tx timeout [ 112.827786] Bluetooth: hci3: command tx timeout [ 112.889379] Bluetooth: hci7: command tx timeout [ 112.954460] Bluetooth: hci5: command tx timeout [ 112.954962] Bluetooth: hci6: command tx timeout [ 113.018364] Bluetooth: hci4: command tx timeout [ 114.746604] Bluetooth: hci0: command tx timeout [ 114.809565] Bluetooth: hci1: command tx timeout [ 114.874309] Bluetooth: hci3: command tx timeout [ 114.874809] Bluetooth: hci2: command tx timeout [ 114.938290] Bluetooth: hci7: command tx timeout [ 115.001399] Bluetooth: hci6: command tx timeout [ 115.002330] Bluetooth: hci5: command tx timeout [ 115.065492] Bluetooth: hci4: command tx timeout [ 168.857783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.862541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.865144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.873517] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.878648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.043204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.051547] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.053070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.061754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.070302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.076757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.078029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.087518] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.090548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.095818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.102115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.105149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.106266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.107592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.114012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.116139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.119437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.127017] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.140519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.141410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.142018] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.154982] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.163618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.168027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.184684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.196891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.203441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.223724] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.230025] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.230972] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.241540] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.245693] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.275539] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.280137] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.296454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.938473] Bluetooth: hci0: command tx timeout [ 171.193624] Bluetooth: hci2: command tx timeout [ 171.257371] Bluetooth: hci3: command tx timeout [ 171.257396] Bluetooth: hci1: command tx timeout [ 171.321546] Bluetooth: hci6: command tx timeout [ 171.321665] Bluetooth: hci5: command tx timeout [ 171.322909] Bluetooth: hci4: command tx timeout [ 171.450321] Bluetooth: hci7: command tx timeout [ 172.985497] Bluetooth: hci0: command tx timeout [ 173.243218] Bluetooth: hci2: command tx timeout [ 173.306547] Bluetooth: hci1: command tx timeout [ 173.307506] Bluetooth: hci3: command tx timeout [ 173.371326] Bluetooth: hci5: command tx timeout [ 173.372119] Bluetooth: hci4: command tx timeout [ 173.372178] Bluetooth: hci6: command tx timeout [ 173.497369] Bluetooth: hci7: command tx timeout [ 175.034307] Bluetooth: hci0: command tx timeout [ 175.290393] Bluetooth: hci2: command tx timeout [ 175.353513] Bluetooth: hci1: command tx timeout [ 175.353669] Bluetooth: hci3: command tx timeout [ 175.417332] Bluetooth: hci6: command tx timeout [ 175.418752] Bluetooth: hci4: command tx timeout [ 175.419176] Bluetooth: hci5: command tx timeout [ 175.545443] Bluetooth: hci7: command tx timeout [ 177.081314] Bluetooth: hci0: command tx timeout [ 177.337297] Bluetooth: hci2: command tx timeout [ 177.401466] Bluetooth: hci1: command tx timeout [ 177.402328] Bluetooth: hci3: command tx timeout [ 177.465336] Bluetooth: hci4: command tx timeout [ 177.466354] Bluetooth: hci5: command tx timeout [ 177.466416] Bluetooth: hci6: command tx timeout [ 177.593324] Bluetooth: hci7: command tx timeout [ 231.063128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.066075] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.072645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.074849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.077030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.081116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.082578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.088616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.098916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.112652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.228968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 231.233596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 231.243582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.244408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 231.251403] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.252903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 231.254181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.257638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.264589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.267209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.310874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.315407] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.317742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.365479] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.385334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 231.389081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.398653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 231.405922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 231.412508] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 231.426338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 231.432032] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 231.441258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 231.444609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 231.454101] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 231.454387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 231.461657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 231.463626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 231.476090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 231.504019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 231.507550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.145441] Bluetooth: hci0: command tx timeout [ 233.146414] Bluetooth: hci1: command tx timeout [ 233.339107] Bluetooth: hci2: command tx timeout [ 233.405298] Bluetooth: hci3: command tx timeout [ 233.466337] Bluetooth: hci4: command tx timeout [ 233.529401] Bluetooth: hci6: command tx timeout [ 233.531118] Bluetooth: hci5: command tx timeout [ 233.594446] Bluetooth: hci7: command tx timeout [ 235.194206] Bluetooth: hci0: command tx timeout [ 235.194769] Bluetooth: hci1: command tx timeout [ 235.386477] Bluetooth: hci2: command tx timeout [ 235.451297] Bluetooth: hci3: command tx timeout [ 235.514334] Bluetooth: hci4: command tx timeout [ 235.578380] Bluetooth: hci5: command tx timeout [ 235.578459] Bluetooth: hci6: command tx timeout [ 235.642853] Bluetooth: hci7: command tx timeout [ 237.241406] Bluetooth: hci0: command tx timeout [ 237.244298] Bluetooth: hci1: command tx timeout [ 237.434458] Bluetooth: hci2: command tx timeout [ 237.498305] Bluetooth: hci3: command tx timeout [ 237.562320] Bluetooth: hci4: command tx timeout [ 237.625487] Bluetooth: hci5: command tx timeout [ 237.626007] Bluetooth: hci6: command tx timeout [ 237.689908] Bluetooth: hci7: command tx timeout [ 239.289605] Bluetooth: hci1: command tx timeout [ 239.290158] Bluetooth: hci0: command tx timeout [ 239.481386] Bluetooth: hci2: command tx timeout [ 239.545305] Bluetooth: hci3: command tx timeout [ 239.609585] Bluetooth: hci4: command tx timeout [ 239.674457] Bluetooth: hci6: command tx timeout [ 239.674593] Bluetooth: hci5: command tx timeout [ 239.739304] Bluetooth: hci7: command tx timeout [ 293.900134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.903511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.908051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.923905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.930801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.984645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.990440] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.993958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.005882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.014930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.054551] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.058770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.069300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.075696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.084807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.183482] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.189820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.196109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.203764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.209790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.249146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.285851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.293754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.314012] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.320815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.347123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.349159] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 294.351867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.355487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.357063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 294.361141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 294.367791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.382874] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 294.401172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 294.409947] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.481656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.519723] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.544932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.591861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.633823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.995328] Bluetooth: hci0: command tx timeout [ 296.058526] Bluetooth: hci1: command tx timeout [ 296.121324] Bluetooth: hci2: command tx timeout [ 296.314284] Bluetooth: hci3: command tx timeout [ 296.441341] Bluetooth: hci4: command tx timeout [ 296.505350] Bluetooth: hci6: command tx timeout [ 296.569923] Bluetooth: hci7: command tx timeout [ 296.761299] Bluetooth: hci5: command tx timeout [ 298.042343] Bluetooth: hci0: command tx timeout [ 298.105420] Bluetooth: hci1: command tx timeout [ 298.169679] Bluetooth: hci2: command tx timeout [ 298.361504] Bluetooth: hci3: command tx timeout [ 298.491311] Bluetooth: hci4: command tx timeout [ 298.553292] Bluetooth: hci6: command tx timeout [ 298.617296] Bluetooth: hci7: command tx timeout [ 298.809297] Bluetooth: hci5: command tx timeout [ 300.089495] Bluetooth: hci0: command tx timeout [ 300.154054] Bluetooth: hci1: command tx timeout [ 300.218304] Bluetooth: hci2: command tx timeout [ 300.409460] Bluetooth: hci3: command tx timeout [ 300.537435] Bluetooth: hci4: command tx timeout [ 300.601554] Bluetooth: hci6: command tx timeout [ 300.665322] Bluetooth: hci7: command tx timeout [ 300.857457] Bluetooth: hci5: command tx timeout [ 302.137645] Bluetooth: hci0: command tx timeout [ 302.201570] Bluetooth: hci1: command tx timeout [ 302.266598] Bluetooth: hci2: command tx timeout [ 302.457402] Bluetooth: hci3: command tx timeout [ 302.586787] Bluetooth: hci4: command tx timeout [ 302.649484] Bluetooth: hci6: command tx timeout [ 302.715320] Bluetooth: hci7: command tx timeout [ 302.905609] Bluetooth: hci5: command tx timeout [ 356.447919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.455570] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.464913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.467628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.475110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.486918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.489625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.506658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.510424] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.532737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.597577] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.601288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.607859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.619767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.626660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.702998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.711923] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.741796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.765396] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.771664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.773623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.777067] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.785809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.793105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.794732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.804524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.841694] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.846922] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.863704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.868858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 356.901186] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 356.902930] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 356.918872] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 356.943927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 356.966748] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 356.968775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 356.996590] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.041590] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.053130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.083794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 358.585331] Bluetooth: hci1: command tx timeout [ 358.585362] Bluetooth: hci0: command tx timeout [ 358.714421] Bluetooth: hci2: command tx timeout [ 358.905551] Bluetooth: hci3: command tx timeout [ 358.969363] Bluetooth: hci5: command tx timeout [ 358.969385] Bluetooth: hci4: command tx timeout [ 359.098313] Bluetooth: hci7: command tx timeout [ 359.225307] Bluetooth: hci6: command tx timeout [ 360.633510] Bluetooth: hci0: command tx timeout [ 360.633536] Bluetooth: hci1: command tx timeout [ 360.761538] Bluetooth: hci2: command tx timeout [ 360.954376] Bluetooth: hci3: command tx timeout [ 361.017413] Bluetooth: hci4: command tx timeout [ 361.020256] Bluetooth: hci5: command tx timeout [ 361.145588] Bluetooth: hci7: command tx timeout [ 361.273681] Bluetooth: hci6: command tx timeout [ 362.681577] Bluetooth: hci0: command tx timeout [ 362.682365] Bluetooth: hci1: command tx timeout [ 362.811288] Bluetooth: hci2: command tx timeout [ 363.001291] Bluetooth: hci3: command tx timeout [ 363.065400] Bluetooth: hci5: command tx timeout [ 363.065857] Bluetooth: hci4: command tx timeout [ 363.193303] Bluetooth: hci7: command tx timeout [ 363.322586] Bluetooth: hci6: command tx timeout [ 364.729759] Bluetooth: hci1: command tx timeout [ 364.729787] Bluetooth: hci0: command tx timeout [ 364.857365] Bluetooth: hci2: command tx timeout [ 365.049279] Bluetooth: hci3: command tx timeout [ 365.113640] Bluetooth: hci4: command tx timeout [ 365.116241] Bluetooth: hci5: command tx timeout [ 365.241432] Bluetooth: hci7: command tx timeout [ 365.369466] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 00:48:14 Registers: info registers vcpu 0 RAX=1ffff11006586f4a RBX=ffff888032c37ab0 RCX=ffffffff819970c1 RDX=ffff88800af18000 RSI=0000000000000027 RDI=0000000000000029 RBP=dffffc0000000000 RSP=ffff88802c56f858 R8 =0000000000000001 R9 =ffffed10029430c8 R10=0000000000000029 R11=0000000000000001 R12=0000000000000029 R13=0000000000000029 R14=ffff888034266500 R15=0000000000000027 RIP=ffffffff817384a8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdd1c782540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdd1c96d620 CR3=000000002b271000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ff00ff00ff00ff00ff00ffffff00 XMM01=010001000100010001000100010100ff XMM02=61305f315f315f4c53534e45504f0030 XMM03=000000000000000000000000004f0030 XMM04=504f0061305f315f315f4c53534e4550 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=e6370c00286f3d0d RDX=0000000004ee94d0 RSI=00000000a8de4100 RDI=000000005e5d62b9 RBP=ffffffff85c1d1c0 RSP=ffff8880248f6de8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8151b09f RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005630b57e54c8 CR3=000000002f996000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000