Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:45230' (ECDSA) to the list of known hosts. 2025/01/24 02:24:01 fuzzer started 2025/01/24 02:24:02 dialing manager at localhost:45511 syzkaller login: [ 62.162167] cgroup: Unknown subsys name 'net' [ 62.305679] cgroup: Unknown subsys name 'cpuset' [ 62.370413] cgroup: Unknown subsys name 'rlimit' [ 67.562394] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/24 02:24:20 syscalls: 205 2025/01/24 02:24:20 code coverage: enabled 2025/01/24 02:24:20 comparison tracing: enabled 2025/01/24 02:24:20 extra coverage: enabled 2025/01/24 02:24:20 setuid sandbox: enabled 2025/01/24 02:24:20 namespace sandbox: enabled 2025/01/24 02:24:20 Android sandbox: enabled 2025/01/24 02:24:20 fault injection: enabled 2025/01/24 02:24:20 leak checking: enabled 2025/01/24 02:24:20 net packet injection: enabled 2025/01/24 02:24:20 net device setup: enabled 2025/01/24 02:24:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/24 02:24:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/24 02:24:20 USB emulation: enabled 2025/01/24 02:24:20 hci packet injection: enabled 2025/01/24 02:24:20 wifi device emulation: enabled 2025/01/24 02:24:20 802.15.4 emulation: enabled 2025/01/24 02:24:20 fetching corpus: 0, signal 0/0 (executing program) 2025/01/24 02:24:22 starting 8 fuzzer processes 02:24:22 executing program 0: unshare(0x44000000) unshare(0x10000) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) tgkill(0x0, 0x0, 0xf) r0 = syz_io_uring_setup(0x66b8, &(0x7f0000000080)={0x0, 0xc802, 0x10, 0x3, 0x16a}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x71b8, &(0x7f0000000180)={0x0, 0xcea3, 0x2, 0x3, 0x3e3, 0x0, r0}) getpgrp(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000200), 0x6e, &(0x7f0000002700)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/243, 0xf3}, {&(0x7f0000001380)=""/254, 0xfe}, {&(0x7f0000001480)=""/200, 0xc8}, {&(0x7f0000001580)=""/173, 0xad}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/108, 0x6c}], 0x8, &(0x7f0000002780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000002900)=0x9, &(0x7f0000002940)=0x2) r4 = syz_open_dev$mouse(&(0x7f0000002980), 0x0, 0x2000) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000029c0)) unshare(0x4000000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000002a00)=0xd0c) unshare(0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000002a40)={{0x1, 0x1, 0x7, 0x3, 0x5}, 0x6, 0x2, 0x7}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000002ac0)={0x8000, "56b38b"}, 0x6) set_tid_address(&(0x7f0000002b00)) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000002b40)={0x4, 0x564a, 0x4, 0x3f, 0x0, 0x6b, 0x8}, 0xc) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) 02:24:22 executing program 1: socketpair(0xb, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0xfe, &(0x7f0000000080)=0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x200, "b84358", 0xa5, 0x1f}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x6) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000001c0)={0xc000200e}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@remote, @remote}, &(0x7f0000000240)=0xc) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000002c0)=0x9, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = syz_open_dev$mouse(&(0x7f0000000380), 0xfff, 0x149002) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000003c0)) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x32, &(0x7f0000000440)={0x0, 0x252e, 0x0, 0x3, 0x141, 0x0, r6}, &(0x7f0000feb000/0x13000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000540)=0x7, &(0x7f0000000580)=0x2) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000005c0)=0x3, 0x1) 02:24:22 executing program 2: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x100) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x6, 0xfffffffe, 0xfffffff7}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000000c0)={0x80000000}) recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/102, 0x66}], 0x5, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000100) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000600)={0x1, 0xffffffff, 0x0, 0x0, 0x8, 0x2}) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x12, &(0x7f00000006c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "8acc62a4", {0x3, 0x107, 0x0, 0x4, 0xffe0, 0x0, 0xe1}}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000000700)={r5, r2, 0x1}) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r9, 0x2285, &(0x7f00000009c0)={0x0, 0xfffffffffffffffb, 0x7e, 0xf9, @scatter={0x1, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/206, 0xce}]}, &(0x7f00000008c0)="d0b799935fbe8af9f0827ab6de8c9df3369ee6bc7d66899b7381db1c29386423e4e38af0e8ca38ada51c505a1753953b62c66ce6fe7374e96a2f5c9f5227d002c6f9e9b95d4b51d3437a121e92ec1723f58c3bd147b3148effbcdc3fdec06d6fbbc23437946a8601dbd38d862b0a5cf358c3b0c3cbdb39eb97509025a2e3", &(0x7f0000000940)=""/52, 0x3ff, 0x20, 0xffffffffffffffff, &(0x7f0000000980)}) syz_usb_disconnect(r8) tgkill(r4, r4, 0x41) recvmsg$unix(r7, &(0x7f0000001340)={&(0x7f0000000d40), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/226, 0xe2}, {&(0x7f0000000f00)=""/136, 0x88}, {&(0x7f0000000fc0)=""/108, 0x6c}, {&(0x7f0000001040)=""/212, 0xd4}, {&(0x7f0000001140)=""/237, 0xed}], 0x6, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x1) pipe2$9p(&(0x7f0000001380)={0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000013c0)={0x40000003}) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r12, 0x40485404, &(0x7f0000001440)={{0x0, 0x3, 0x82, 0x1, 0x9}, 0xff, 0xe0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3ff) [ 82.362838] audit: type=1400 audit(1737685462.611:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:24:22 executing program 3: ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)={0x4, "01da92"}, 0x6) r2 = openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0) r3 = getpgrp(0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000480)='io.stat\x00', 0x0, 0x0) r5 = clone3(&(0x7f00000004c0)={0x180204000, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x1}, &(0x7f0000000280)=""/43, 0x2b, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=[0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x9, {r4}}, 0x58) r8 = syz_open_dev$sg(&(0x7f0000001800), 0xfffffffffffffffd, 0x202) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000001840)={'\x00', 0x1000, 0x2fa, 0xb7b1, 0x7ff, 0xfff, r5}) openat$cgroup_subtree(r0, &(0x7f00000018c0), 0x2, 0x0) timer_create(0x0, &(0x7f0000001ac0)={0x0, 0x21, 0x1, @thr={&(0x7f0000001900)="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", &(0x7f0000001a00)="82653cf63a2ccfd04ed09768d2bee03bbdde879771ef84e2ef4356206275b55a59504a8cf9adcc6a21479d4f9d5cd578c39600d42cc840ac59a1930f90d849b0a76d2e0091badea670f0aff9d9f7d202ec3aae03f2f2a9481630bb087cbd2861d8ea74469b151dce63b35f8fb68ca922b15a38c13fb62ba124c4f8bc844f13eea06fc0a0d075563202dbb25e684929067f42c23083180d8453d967d20dd4d7684bfaf969be50b6f6a0351e44c32892f2eba7139a4a"}}, &(0x7f0000001b00)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b40)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000002d80)={0x12000, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0, &(0x7f0000001c00), {0x4}, &(0x7f0000001c40)=""/4096, 0x1000, &(0x7f0000002c40)=""/248, &(0x7f0000002d40)=[r3, r7, r7, r6, r3], 0x5, {r9}}, 0x58) ptrace$setsig(0x4203, r10, 0x4c, &(0x7f0000002e00)={0x28, 0x1, 0x2}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000002e80)) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000033c0)='cpu.pressure\x00', 0x2, 0x0) 02:24:22 executing program 4: getrusage(0x1, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000140)={0x1f}, 0x2) r3 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000001c0)={{0x3, 0x1, 0x7, 0x0, 0x1}, 0x7, 0x7, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x7f9e, 0xfffffffffffffffa}) openat$cgroup_int(r2, &(0x7f00000002c0)='cpu.max\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x7, 0x12) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380), 0x2) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x101, @any, 0x4, 0x1}, 0xe) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x20010, r4, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000400)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x0, @fd=r3, 0x3, 0x800, 0x101, 0x2, 0x1, {0x1}}, 0x400) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x3, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, @local, 0x8, 0x40, 0x5f, 0x8150}}) r7 = syz_open_dev$mouse(&(0x7f0000000e40), 0xe42, 0x40100) clone3(&(0x7f0000000e80)={0x205061000, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00), {0x3b}, &(0x7f0000000c40)=""/199, 0xc7, &(0x7f0000000d40)=""/169, &(0x7f0000000e00), 0x0, {r7}}, 0x58) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r7, &(0x7f0000000f40)={0x2000}) 02:24:22 executing program 5: mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x6811, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x3, 0x5, 0x3, 0xcd0}}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x3, 0x1, 0x800, 0x1, 0x80000000}, 0x9, 0x5, 0x592c53fb}) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000200)) syz_io_uring_setup(0x73a4, &(0x7f0000000280)={0x0, 0x80fa, 0x2, 0x2, 0x21c, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380), 0x1) r3 = syz_open_dev$mouse(&(0x7f00000003c0), 0x1000, 0x2) write$P9_RSTAT(r3, &(0x7f0000000400)={0x4d, 0x7d, 0x1, {0x0, 0x46, 0x20, 0x7, {0x4, 0x0, 0x5}, 0x10000, 0x2, 0x4, 0x5, 0x0, '', 0x10, 'memory.swap.max\x00', 0x2, '$\xef', 0x1, '.'}}, 0x4d) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000480)=""/205) recvmsg$unix(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/92, 0x5c}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/107, 0x6b}, {&(0x7f0000002940)=""/230, 0xe6}], 0x9, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x100010, r5, 0x0) pkey_free(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000002c80)=""/21) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000002d00)={0x14, 0x49, 0x1, {0x8, 0x1, 0x5}}, 0x14) 02:24:22 executing program 7: timer_create(0x1, &(0x7f0000000100)={0x0, 0x16, 0x2, @thr={&(0x7f0000000000)="e0f2b04f8bbeb33da0f7195753535c1bebccf7b0948edbcf193812ada75c81d6892adaee6c794a30bc81784ec0ec38d85fbf3da35a000f4a395eb969419ad1524609c999212a18e3b6ba6a4829dc3cb0cea8bee7c906be91e6fc73051c0e5f53a10dfda9ba9f9ded5927be20932653ba7d1962c49200ba6daa59d44c87aae4a0ec127116e057f6305f16e2e46ff6", &(0x7f00000000c0)="0e05760ed6e1a866857e0dc47d49e9e9a2036ee446de71941a9973d5289e2a28f31aec2fe4cac16c1aee8aee6931cf8a2bbc7d"}}, &(0x7f0000000140)=0x0) timer_delete(r0) timer_settime(r0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000240)={{r1, r2+10000000}, {0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x3ff, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000002c0)=0x0) timer_gettime(r3, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '/'}, 0x200}}, 0xe) timer_getoverrun(r3) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000440)) write$P9_RLERRORu(r4, &(0x7f0000000480)={0xe, 0x7, 0x2, {{0x1, '@'}, 0x200}}, 0xe) recvmsg(r4, &(0x7f0000001900)={&(0x7f00000004c0)=@un=@abs, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)}, {&(0x7f0000001640)=""/133, 0x85}, {&(0x7f0000001700)=""/162, 0xa2}, {&(0x7f00000017c0)=""/70, 0x46}], 0x6, &(0x7f00000018c0)=""/39, 0x27}, 0x40) timer_create(0x4, &(0x7f0000001a00)={0x0, 0x5, 0x1, @thr={&(0x7f0000001940)="e7ab14d1ca9bf8fd5528dd6010b6281c741a26c1f1ce4e2f4fbd636008202074357e02f49a5230b5d555df5732", &(0x7f0000001980)="c4777be955f11481083f8713ed044fc17131700041146d63100d879a4c5576afb74c6347e6890ea0dbd285bbd44e15df9a8bd8d48723e75ea19b59ed58e98889854bb20395edb7426cd8e9b128e3c0507fc4261f"}}, &(0x7f0000001a40)=0x0) timer_gettime(r5, &(0x7f0000001a80)) openat$cgroup_pressure(r4, &(0x7f0000001ac0)='memory.pressure\x00', 0x2, 0x0) write$P9_RMKDIR(r4, &(0x7f0000001b00)={0x14, 0x49, 0x1, {0x4, 0x3, 0x3}}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000001c00)={0x14, 0x49, 0x2, {0x1, 0x0, 0x4}}, 0x14) 02:24:22 executing program 6: ptrace$peek(0x1, 0xffffffffffffffff, &(0x7f0000000000)) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x1f, 0x1}) sched_getscheduler(0x0) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x26, 0x0, 0xfffffff9}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'veth0_macvtap\x00', @ifru_addrs=@generic}}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0x6, 0x4) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x390f7d86, 0x18040) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000300), 0x1, 0x40) process_vm_writev(0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/130, 0x82}, {&(0x7f0000000740)=""/233, 0xe9}, {&(0x7f0000000840)=""/31, 0x1f}], 0x8, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000980)=""/63, 0x3f}, {&(0x7f00000009c0)=""/9, 0x9}, {&(0x7f0000000a00)=""/52, 0x34}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000b00)=""/214, 0xd6}, {&(0x7f0000000c00)=""/45, 0x2d}], 0x7, 0x0) r2 = getpgrp(0x0) r3 = clone3(&(0x7f0000000fc0)={0x200001100, &(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40), {0x1c}, &(0x7f0000000d80)=""/225, 0xe1, &(0x7f0000000e80)=""/237, &(0x7f0000000f80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r1}}, 0x58) r5 = accept4(r1, &(0x7f0000001040)=@caif, &(0x7f00000010c0)=0x80, 0x800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, r5, &(0x7f0000001100)={0xffffffffffffffff, r6, 0xb2d4}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001140)={@multicast1, @initdev}, &(0x7f0000001180)=0xc) process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000011c0)=""/135, 0x87}, {&(0x7f0000001280)=""/92, 0x5c}, {&(0x7f0000001300)=""/97, 0x61}, {&(0x7f0000001380)=""/166, 0xa6}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000001540)=""/223, 0xdf}], 0x6, &(0x7f0000001b00)=[{&(0x7f00000016c0)=""/247, 0xf7}, {&(0x7f00000017c0)=""/149, 0x95}, {&(0x7f0000001880)=""/6, 0x6}, {&(0x7f00000018c0)=""/154, 0x9a}, {&(0x7f0000001980)=""/1, 0x1}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/71, 0x47}], 0x8, 0x0) clone3(&(0x7f0000001d80)={0x10004000, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00), {0x7}, &(0x7f0000001c40)=""/85, 0x55, &(0x7f0000001cc0)=""/75, &(0x7f0000001d40)=[r4], 0x1, {r1}}, 0x58) [ 83.736065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.740353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.744445] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.752880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.755849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.760549] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.795956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.798708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.800635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.805868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.811616] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.813695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.871434] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.874769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.886020] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.888808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.890535] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.901765] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.907479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.913040] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.915427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.940516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.950984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.953019] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.955662] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.957026] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.958822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.964492] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.968252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.970941] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.973263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.984505] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.002027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.008956] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.019028] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.029280] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.033226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.041065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.045251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.055620] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.059492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.070061] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.077503] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.096222] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.099777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.101444] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.104882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.112323] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.822220] Bluetooth: hci0: command tx timeout [ 85.885366] Bluetooth: hci1: command tx timeout [ 86.014400] Bluetooth: hci2: command tx timeout [ 86.080461] Bluetooth: hci4: command tx timeout [ 86.082323] Bluetooth: hci3: command tx timeout [ 86.141336] Bluetooth: hci5: command tx timeout [ 86.205633] Bluetooth: hci6: command tx timeout [ 86.207302] Bluetooth: hci7: command tx timeout [ 87.869680] Bluetooth: hci0: command tx timeout [ 87.933531] Bluetooth: hci1: command tx timeout [ 88.062363] Bluetooth: hci2: command tx timeout [ 88.125405] Bluetooth: hci3: command tx timeout [ 88.126317] Bluetooth: hci4: command tx timeout [ 88.190339] Bluetooth: hci5: command tx timeout [ 88.254379] Bluetooth: hci6: command tx timeout [ 88.255367] Bluetooth: hci7: command tx timeout [ 89.917243] Bluetooth: hci0: command tx timeout [ 89.981291] Bluetooth: hci1: command tx timeout [ 90.109257] Bluetooth: hci2: command tx timeout [ 90.173703] Bluetooth: hci3: command tx timeout [ 90.174689] Bluetooth: hci4: command tx timeout [ 90.237491] Bluetooth: hci5: command tx timeout [ 90.301449] Bluetooth: hci6: command tx timeout [ 90.302385] Bluetooth: hci7: command tx timeout [ 91.965242] Bluetooth: hci0: command tx timeout [ 92.029246] Bluetooth: hci1: command tx timeout [ 92.157270] Bluetooth: hci2: command tx timeout [ 92.221269] Bluetooth: hci4: command tx timeout [ 92.222080] Bluetooth: hci3: command tx timeout [ 92.286447] Bluetooth: hci5: command tx timeout [ 92.349392] Bluetooth: hci6: command tx timeout [ 92.350541] Bluetooth: hci7: command tx timeout [ 146.311675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.315613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.317908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.323230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.327045] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.329351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.385158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.386465] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.389376] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.393446] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.394945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.397054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.400962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.405024] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.408393] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.411557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.416283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.427718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.457737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.465803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.473465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.475708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.479745] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.482580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.484520] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.491343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.495393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.510314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.516583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.526797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.532993] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.535294] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.538614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.548001] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.558613] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.563931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.600818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.613025] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.622218] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.636663] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.640926] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.644908] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.665726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.670791] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.675017] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.698418] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.728686] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.736396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.416735] Bluetooth: hci0: command tx timeout [ 148.477504] Bluetooth: hci2: command tx timeout [ 148.477587] Bluetooth: hci1: command tx timeout [ 148.541368] Bluetooth: hci4: command tx timeout [ 148.605341] Bluetooth: hci3: command tx timeout [ 148.670471] Bluetooth: hci6: command tx timeout [ 148.670546] Bluetooth: hci5: command tx timeout [ 148.799180] Bluetooth: hci7: command tx timeout [ 150.462187] Bluetooth: hci0: command tx timeout [ 150.525294] Bluetooth: hci1: command tx timeout [ 150.526680] Bluetooth: hci2: command tx timeout [ 150.589209] Bluetooth: hci4: command tx timeout [ 150.653144] Bluetooth: hci3: command tx timeout [ 150.717183] Bluetooth: hci6: command tx timeout [ 150.719452] Bluetooth: hci5: command tx timeout [ 150.845173] Bluetooth: hci7: command tx timeout [ 152.509169] Bluetooth: hci0: command tx timeout [ 152.573311] Bluetooth: hci2: command tx timeout [ 152.573449] Bluetooth: hci1: command tx timeout [ 152.637217] Bluetooth: hci4: command tx timeout [ 152.701200] Bluetooth: hci3: command tx timeout [ 152.765267] Bluetooth: hci5: command tx timeout [ 152.765459] Bluetooth: hci6: command tx timeout [ 152.894178] Bluetooth: hci7: command tx timeout [ 154.557411] Bluetooth: hci0: command tx timeout [ 154.621260] Bluetooth: hci2: command tx timeout [ 154.624276] Bluetooth: hci1: command tx timeout [ 154.686197] Bluetooth: hci4: command tx timeout [ 154.750288] Bluetooth: hci3: command tx timeout [ 154.813323] Bluetooth: hci6: command tx timeout [ 154.814160] Bluetooth: hci5: command tx timeout [ 154.942781] Bluetooth: hci7: command tx timeout [ 208.399439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.404517] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.411736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.421449] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.428860] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.430676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.456729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.459563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.463655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.474196] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.502228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.511197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.587584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.595686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.597508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.607928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.613622] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.614953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.642854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.645886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.647693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.652436] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.655268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.656671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.689159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.697446] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.699654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.712458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.720956] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.723675] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.725962] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.728457] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.730519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.733097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.734629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.735940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.738611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.745711] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.748251] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.764297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.795673] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.808429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.809444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.826241] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.850884] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.862380] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.875558] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.887452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.494400] Bluetooth: hci0: command tx timeout [ 210.557270] Bluetooth: hci1: command tx timeout [ 210.685251] Bluetooth: hci3: command tx timeout [ 210.686037] Bluetooth: hci2: command tx timeout [ 210.814189] Bluetooth: hci6: command tx timeout [ 210.814963] Bluetooth: hci4: command tx timeout [ 210.878645] Bluetooth: hci5: command tx timeout [ 210.942143] Bluetooth: hci7: command tx timeout [ 212.541858] Bluetooth: hci0: command tx timeout [ 212.605505] Bluetooth: hci1: command tx timeout [ 212.733274] Bluetooth: hci2: command tx timeout [ 212.734399] Bluetooth: hci3: command tx timeout [ 212.861340] Bluetooth: hci4: command tx timeout [ 212.862369] Bluetooth: hci6: command tx timeout [ 212.926741] Bluetooth: hci5: command tx timeout [ 212.989246] Bluetooth: hci7: command tx timeout [ 214.590141] Bluetooth: hci0: command tx timeout [ 214.654315] Bluetooth: hci1: command tx timeout [ 214.782292] Bluetooth: hci2: command tx timeout [ 214.782823] Bluetooth: hci3: command tx timeout [ 214.909180] Bluetooth: hci4: command tx timeout [ 214.909682] Bluetooth: hci6: command tx timeout [ 214.974618] Bluetooth: hci5: command tx timeout [ 215.037724] Bluetooth: hci7: command tx timeout [ 216.637269] Bluetooth: hci0: command tx timeout [ 216.701257] Bluetooth: hci1: command tx timeout [ 216.829486] Bluetooth: hci2: command tx timeout [ 216.831026] Bluetooth: hci3: command tx timeout [ 216.957247] Bluetooth: hci4: command tx timeout [ 216.958207] Bluetooth: hci6: command tx timeout [ 217.021275] Bluetooth: hci5: command tx timeout [ 217.085470] Bluetooth: hci7: command tx timeout [ 270.676380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.680792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.686435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.694707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.700557] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.702981] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.856142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.861214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.864481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.872824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.876398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.879033] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.935219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.937937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.940223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.949377] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.952317] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.958760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.993110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.996461] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.999024] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.003254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.007501] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.009318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.030645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.035214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.042290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.049547] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.053423] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.055021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.143458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.151715] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.153523] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.159632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.162527] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.173088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.217553] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.285013] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.303300] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.314441] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.318390] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.338892] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.341789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.346931] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.393642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.398863] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.402477] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.404923] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.766244] Bluetooth: hci0: command tx timeout [ 272.957200] Bluetooth: hci1: command tx timeout [ 273.086183] Bluetooth: hci3: command tx timeout [ 273.087146] Bluetooth: hci4: command tx timeout [ 273.087794] Bluetooth: hci2: command tx timeout [ 273.214141] Bluetooth: hci5: command tx timeout [ 273.405757] Bluetooth: hci6: command tx timeout [ 273.534478] Bluetooth: hci7: command tx timeout [ 274.813245] Bluetooth: hci0: command tx timeout [ 275.005265] Bluetooth: hci1: command tx timeout [ 275.133461] Bluetooth: hci3: command tx timeout [ 275.134498] Bluetooth: hci2: command tx timeout [ 275.135414] Bluetooth: hci4: command tx timeout [ 275.261753] Bluetooth: hci5: command tx timeout [ 275.453175] Bluetooth: hci6: command tx timeout [ 275.581330] Bluetooth: hci7: command tx timeout [ 276.861111] Bluetooth: hci0: command tx timeout [ 277.053197] Bluetooth: hci1: command tx timeout [ 277.181194] Bluetooth: hci3: command tx timeout [ 277.181695] Bluetooth: hci4: command tx timeout [ 277.182190] Bluetooth: hci2: command tx timeout [ 277.309120] Bluetooth: hci5: command tx timeout [ 277.501223] Bluetooth: hci6: command tx timeout [ 277.629212] Bluetooth: hci7: command tx timeout [ 278.909189] Bluetooth: hci0: command tx timeout [ 279.101384] Bluetooth: hci1: command tx timeout [ 279.230125] Bluetooth: hci2: command tx timeout [ 279.230627] Bluetooth: hci4: command tx timeout [ 279.231118] Bluetooth: hci3: command tx timeout [ 279.357145] Bluetooth: hci5: command tx timeout [ 279.549176] Bluetooth: hci6: command tx timeout [ 279.677203] Bluetooth: hci7: command tx timeout [ 332.627286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.631002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.633507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.645767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.650560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 332.652766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.198881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.202776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.205502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.213457] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.216489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.219382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.281771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.290540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.292730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.300793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.306595] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.309128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.401952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.414908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.423411] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.426495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.430922] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.454781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.467533] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.475694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.482561] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.485159] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.487200] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.489105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.491687] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.493515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.494884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.496736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.523363] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.530268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.553400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.561476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.585468] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.599706] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.601553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.618486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.624469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.627832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.629581] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.657257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.667473] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.676359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.718181] Bluetooth: hci0: command tx timeout [ 335.294227] Bluetooth: hci1: command tx timeout [ 335.357244] Bluetooth: hci2: command tx timeout [ 335.549293] Bluetooth: hci3: command tx timeout [ 335.613320] Bluetooth: hci4: command tx timeout [ 335.741380] Bluetooth: hci6: command tx timeout [ 335.742605] Bluetooth: hci5: command tx timeout [ 335.743268] Bluetooth: hci7: command tx timeout [ 336.766276] Bluetooth: hci0: command tx timeout [ 337.341321] Bluetooth: hci1: command tx timeout [ 337.405233] Bluetooth: hci2: command tx timeout [ 337.597235] Bluetooth: hci3: command tx timeout [ 337.661168] Bluetooth: hci4: command tx timeout [ 337.790076] Bluetooth: hci7: command tx timeout [ 337.790583] Bluetooth: hci6: command tx timeout [ 337.790999] Bluetooth: hci5: command tx timeout [ 338.813161] Bluetooth: hci0: command tx timeout [ 339.389194] Bluetooth: hci1: command tx timeout [ 339.455206] Bluetooth: hci2: command tx timeout [ 339.645140] Bluetooth: hci3: command tx timeout [ 339.709148] Bluetooth: hci4: command tx timeout [ 339.837530] Bluetooth: hci5: command tx timeout [ 339.837602] Bluetooth: hci6: command tx timeout [ 339.838626] Bluetooth: hci7: command tx timeout [ 340.861098] Bluetooth: hci0: command tx timeout [ 341.437250] Bluetooth: hci1: command tx timeout [ 341.501240] Bluetooth: hci2: command tx timeout [ 341.693203] Bluetooth: hci3: command tx timeout [ 341.757143] Bluetooth: hci4: command tx timeout [ 341.886184] Bluetooth: hci6: command tx timeout [ 341.887165] Bluetooth: hci7: command tx timeout [ 341.887216] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 02:29:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000202 RCX=1ffffffff0c80111 RDX=1ffff11006925839 RSI=0000000000000006 RDI=ffffffff84ab10bc RBP=ffff888009bf1940 RSP=ffff88802703fbb0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff864043d7 R11=0000000000000001 R12=ffff888008c41dc0 R13=0000000000000000 R14=ffffea0000938e00 R15=ffff888024e3c000 RIP=ffffffff8179ab2a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564df9cb0080 CR3=0000000024f16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11005dc7ea1 RCX=1ffff11005dc7e86 RDX=1ffff11002b564c1 RSI=0000000000000001 RDI=ffffffff878c0c38 RBP=0000000000000001 RSP=ffff88802ee3f4f0 R8 =0000000000000000 R9 =fffffbfff0fe15e6 R10=ffffffff87f0af37 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff85cef120 R15=0000000000000000 RIP=ffffffff81502e1c RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc0fee8ee8 CR3=000000001aab6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000