Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:48607' (ECDSA) to the list of known hosts. 2025/04/22 18:56:17 fuzzer started 2025/04/22 18:56:17 dialing manager at localhost:42253 syzkaller login: [ 102.651726] cgroup: Unknown subsys name 'net' [ 102.800929] cgroup: Unknown subsys name 'cpuset' [ 102.845117] cgroup: Unknown subsys name 'rlimit' 2025/04/22 18:56:43 syscalls: 2214 2025/04/22 18:56:43 code coverage: enabled 2025/04/22 18:56:43 comparison tracing: enabled 2025/04/22 18:56:43 extra coverage: enabled 2025/04/22 18:56:43 setuid sandbox: enabled 2025/04/22 18:56:43 namespace sandbox: enabled 2025/04/22 18:56:43 Android sandbox: enabled 2025/04/22 18:56:43 fault injection: enabled 2025/04/22 18:56:43 leak checking: enabled 2025/04/22 18:56:43 net packet injection: enabled 2025/04/22 18:56:43 net device setup: enabled 2025/04/22 18:56:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/04/22 18:56:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/04/22 18:56:43 USB emulation: enabled 2025/04/22 18:56:43 hci packet injection: enabled 2025/04/22 18:56:43 wifi device emulation: enabled 2025/04/22 18:56:43 802.15.4 emulation: enabled 2025/04/22 18:56:43 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 18:56:43 fetching corpus: 0, signal 0/0 (executing program) 2025/04/22 18:56:44 starting 8 fuzzer processes 18:56:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640), &(0x7f0000002680)=@v2, 0x14, 0x0) 18:56:44 executing program 1: perf_event_open$cgroup(&(0x7f0000001840)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:56:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004", 0x1b, 0x2200}], 0x0, &(0x7f0000000040)) [ 129.711291] audit: type=1400 audit(1745348204.843:7): avc: denied { execmem } for pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:56:44 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) 18:56:44 executing program 4: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 18:56:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 18:56:44 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) 18:56:44 executing program 7: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) [ 131.194413] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 131.197032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.202554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 131.204267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.206863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 131.210399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.218177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.221591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.225676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.231254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.260947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.271843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.298943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.309477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 131.310972] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.317819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.325656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.332513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 131.334999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 131.335077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.341029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.341598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.351920] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 131.374959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.381231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.397575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 131.401824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 131.409229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 131.413004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 131.419691] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.430493] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.437149] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.438833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 131.440582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.442773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.489862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 131.495892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.529077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 131.571718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 131.578391] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 133.328984] Bluetooth: hci0: command tx timeout [ 133.330674] Bluetooth: hci1: command tx timeout [ 133.392477] Bluetooth: hci2: command tx timeout [ 133.520486] Bluetooth: hci6: command tx timeout [ 133.522727] Bluetooth: hci4: command tx timeout [ 133.522927] Bluetooth: hci3: command tx timeout [ 133.586388] Bluetooth: hci5: command tx timeout [ 133.648483] Bluetooth: hci7: command tx timeout [ 135.377570] Bluetooth: hci0: command tx timeout [ 135.378029] Bluetooth: hci1: command tx timeout [ 135.440726] Bluetooth: hci2: command tx timeout [ 135.570881] Bluetooth: hci6: command tx timeout [ 135.571786] Bluetooth: hci3: command tx timeout [ 135.571828] Bluetooth: hci4: command tx timeout [ 135.632460] Bluetooth: hci5: command tx timeout [ 135.696417] Bluetooth: hci7: command tx timeout [ 137.425154] Bluetooth: hci1: command tx timeout [ 137.426461] Bluetooth: hci0: command tx timeout [ 137.488423] Bluetooth: hci2: command tx timeout [ 137.616437] Bluetooth: hci4: command tx timeout [ 137.617252] Bluetooth: hci3: command tx timeout [ 137.617421] Bluetooth: hci6: command tx timeout [ 137.680432] Bluetooth: hci5: command tx timeout [ 137.745368] Bluetooth: hci7: command tx timeout [ 139.472475] Bluetooth: hci1: command tx timeout [ 139.472531] Bluetooth: hci0: command tx timeout [ 139.536485] Bluetooth: hci2: command tx timeout [ 139.664483] Bluetooth: hci6: command tx timeout [ 139.665021] Bluetooth: hci4: command tx timeout [ 139.665627] Bluetooth: hci3: command tx timeout [ 139.728547] Bluetooth: hci5: command tx timeout [ 139.792647] Bluetooth: hci7: command tx timeout [ 190.917126] syz-executor.1 (283) used greatest stack depth: 24472 bytes left [ 191.120556] syz-executor.3 (288) used greatest stack depth: 24368 bytes left [ 193.636416] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.644932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.651012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.658884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.664962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.727970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.733703] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.738138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.749848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.755133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.778165] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.806444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.813852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.836567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.861666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.866955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.868819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.871689] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.875850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.887199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.896209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.902697] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.905270] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.907637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.924230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.948136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.950931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.956109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.957629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.959095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.968356] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.971043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.974579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.995187] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.996734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.998609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 194.005500] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 194.034670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 194.052879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 194.071781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 195.730376] Bluetooth: hci0: command tx timeout [ 195.792665] Bluetooth: hci1: command tx timeout [ 195.985675] Bluetooth: hci3: command tx timeout [ 196.048412] Bluetooth: hci2: command tx timeout [ 196.113368] Bluetooth: hci6: command tx timeout [ 196.113409] Bluetooth: hci4: command tx timeout [ 196.114413] Bluetooth: hci5: command tx timeout [ 196.176393] Bluetooth: hci7: command tx timeout [ 197.776503] Bluetooth: hci0: command tx timeout [ 197.840449] Bluetooth: hci1: command tx timeout [ 198.032490] Bluetooth: hci3: command tx timeout [ 198.098399] Bluetooth: hci2: command tx timeout [ 198.160745] Bluetooth: hci5: command tx timeout [ 198.161983] Bluetooth: hci6: command tx timeout [ 198.162045] Bluetooth: hci4: command tx timeout [ 198.226473] Bluetooth: hci7: command tx timeout [ 199.825550] Bluetooth: hci0: command tx timeout [ 199.888388] Bluetooth: hci1: command tx timeout [ 200.082388] Bluetooth: hci3: command tx timeout [ 200.144489] Bluetooth: hci2: command tx timeout [ 200.208410] Bluetooth: hci6: command tx timeout [ 200.208784] Bluetooth: hci5: command tx timeout [ 200.209033] Bluetooth: hci4: command tx timeout [ 200.272534] Bluetooth: hci7: command tx timeout [ 201.873503] Bluetooth: hci0: command tx timeout [ 201.936371] Bluetooth: hci1: command tx timeout [ 202.128403] Bluetooth: hci3: command tx timeout [ 202.192380] Bluetooth: hci2: command tx timeout [ 202.256422] Bluetooth: hci5: command tx timeout [ 202.257715] Bluetooth: hci4: command tx timeout [ 202.258598] Bluetooth: hci6: command tx timeout [ 202.320565] Bluetooth: hci7: command tx timeout [ 255.910540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.913677] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.917872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.926033] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.930188] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.105380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.107865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.110839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.122991] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.126939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.172222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.178031] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.191584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.205100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.225064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.271497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.287144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.293751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.302800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.308555] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.310379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.317928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.334666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.361768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.365087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.466713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.470669] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.474280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.480606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.484190] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.528061] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.540884] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.543758] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.546002] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.562000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.563627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.594334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.616018] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.634629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.654229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.003413] Bluetooth: hci0: command tx timeout [ 258.192491] Bluetooth: hci1: command tx timeout [ 258.321518] Bluetooth: hci3: command tx timeout [ 258.384378] Bluetooth: hci4: command tx timeout [ 258.448635] Bluetooth: hci2: command tx timeout [ 258.512377] Bluetooth: hci6: command tx timeout [ 258.704741] Bluetooth: hci7: command tx timeout [ 258.768783] Bluetooth: hci5: command tx timeout [ 260.048712] Bluetooth: hci0: command tx timeout [ 260.240392] Bluetooth: hci1: command tx timeout [ 260.368651] Bluetooth: hci3: command tx timeout [ 260.434379] Bluetooth: hci4: command tx timeout [ 260.497807] Bluetooth: hci2: command tx timeout [ 260.560648] Bluetooth: hci6: command tx timeout [ 260.752629] Bluetooth: hci7: command tx timeout [ 260.817329] Bluetooth: hci5: command tx timeout [ 262.096832] Bluetooth: hci0: command tx timeout [ 262.289369] Bluetooth: hci1: command tx timeout [ 262.416829] Bluetooth: hci3: command tx timeout [ 262.480441] Bluetooth: hci4: command tx timeout [ 262.544423] Bluetooth: hci2: command tx timeout [ 262.608417] Bluetooth: hci6: command tx timeout [ 262.800857] Bluetooth: hci7: command tx timeout [ 262.865364] Bluetooth: hci5: command tx timeout [ 264.144392] Bluetooth: hci0: command tx timeout [ 264.338362] Bluetooth: hci1: command tx timeout [ 264.464798] Bluetooth: hci3: command tx timeout [ 264.528506] Bluetooth: hci4: command tx timeout [ 264.592429] Bluetooth: hci2: command tx timeout [ 264.656703] Bluetooth: hci6: command tx timeout [ 264.848612] Bluetooth: hci7: command tx timeout [ 264.912662] Bluetooth: hci5: command tx timeout [ 318.183812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 318.187163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 318.192103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 318.205642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 318.216177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 318.433887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.438566] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.443056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.456891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.464860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.543647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.548865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.554415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.562630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.564563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.569282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.571947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.574639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.582164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.587059] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.593757] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.597841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.599719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.601090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.618018] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.625760] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.659699] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.667534] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.668933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.684729] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.687066] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 318.689835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 318.697977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 318.719554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.721139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.727152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.728608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.762552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 318.766095] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.775019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.272413] Bluetooth: hci0: command tx timeout [ 320.530349] Bluetooth: hci1: command tx timeout [ 320.784564] Bluetooth: hci5: command tx timeout [ 320.785489] Bluetooth: hci2: command tx timeout [ 320.786058] Bluetooth: hci4: command tx timeout [ 320.849532] Bluetooth: hci3: command tx timeout [ 320.850145] Bluetooth: hci7: command tx timeout [ 320.912654] Bluetooth: hci6: command tx timeout [ 322.320915] Bluetooth: hci0: command tx timeout [ 322.576810] Bluetooth: hci1: command tx timeout [ 322.833150] Bluetooth: hci4: command tx timeout [ 322.833903] Bluetooth: hci2: command tx timeout [ 322.834592] Bluetooth: hci5: command tx timeout [ 322.898383] Bluetooth: hci7: command tx timeout [ 322.899146] Bluetooth: hci3: command tx timeout [ 322.960396] Bluetooth: hci6: command tx timeout [ 324.369381] Bluetooth: hci0: command tx timeout [ 324.624454] Bluetooth: hci1: command tx timeout [ 324.881555] Bluetooth: hci4: command tx timeout [ 324.882052] Bluetooth: hci2: command tx timeout [ 324.882592] Bluetooth: hci5: command tx timeout [ 324.944429] Bluetooth: hci3: command tx timeout [ 324.944881] Bluetooth: hci7: command tx timeout [ 325.008373] Bluetooth: hci6: command tx timeout [ 326.416930] Bluetooth: hci0: command tx timeout [ 326.673080] Bluetooth: hci1: command tx timeout [ 326.928447] Bluetooth: hci5: command tx timeout [ 326.928961] Bluetooth: hci2: command tx timeout [ 326.929807] Bluetooth: hci4: command tx timeout [ 326.993411] Bluetooth: hci7: command tx timeout [ 326.993902] Bluetooth: hci3: command tx timeout [ 327.057391] Bluetooth: hci6: command tx timeout [ 380.334094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.340038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.343567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.362889] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.368909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.515611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 380.518853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 380.521063] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 380.526218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 380.529871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.669283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.682863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.701843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.721825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.758806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.773227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.797717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.800256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.802852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.808533] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.812735] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.814138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.826896] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.828990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.834553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.846144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 380.849797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.861053] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.862594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.868861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.887878] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 380.892026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.893999] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.936823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 380.940742] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.986808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 380.992127] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.053583] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.081016] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.087933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.418658] Bluetooth: hci0: command tx timeout [ 382.545369] Bluetooth: hci1: command tx timeout [ 382.928415] Bluetooth: hci2: command tx timeout [ 382.993595] Bluetooth: hci3: command tx timeout [ 383.056433] Bluetooth: hci4: command tx timeout [ 383.057449] Bluetooth: hci5: command tx timeout [ 383.120409] Bluetooth: hci6: command tx timeout [ 383.184448] Bluetooth: hci7: command tx timeout [ 384.465592] Bluetooth: hci0: command tx timeout [ 384.592560] Bluetooth: hci1: command tx timeout [ 384.977430] Bluetooth: hci2: command tx timeout [ 385.040972] Bluetooth: hci3: command tx timeout [ 385.106359] Bluetooth: hci5: command tx timeout [ 385.106808] Bluetooth: hci4: command tx timeout [ 385.169098] Bluetooth: hci6: command tx timeout [ 385.232527] Bluetooth: hci7: command tx timeout [ 386.513365] Bluetooth: hci0: command tx timeout [ 386.641270] Bluetooth: hci1: command tx timeout [ 387.024412] Bluetooth: hci2: command tx timeout [ 387.088407] Bluetooth: hci3: command tx timeout [ 387.152708] Bluetooth: hci4: command tx timeout [ 387.153098] Bluetooth: hci5: command tx timeout [ 387.218634] Bluetooth: hci6: command tx timeout [ 387.280710] Bluetooth: hci7: command tx timeout [ 388.560548] Bluetooth: hci0: command tx timeout [ 388.688468] Bluetooth: hci1: command tx timeout [ 389.072488] Bluetooth: hci2: command tx timeout [ 389.137333] Bluetooth: hci3: command tx timeout [ 389.200477] Bluetooth: hci5: command tx timeout [ 389.200959] Bluetooth: hci4: command tx timeout [ 389.265537] Bluetooth: hci6: command tx timeout [ 389.328387] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:01:45 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffff88800960f990 RCX=ffff88800960f81c RDX=1ffff110012c1f4b RSI=ffffffff8120489a RDI=ffff88800960f99c RBP=ffff88800960fa58 RSP=ffff88800960f8a8 R8 =0000000000000001 R9 =ffff88800960f908 R10=000000000003b0b4 R11=0000000000003cd4 R12=ffff88800960f990 R13=0000000000000000 R14=ffff8880095f9bc0 R15=ffff88800e003250 RIP=ffffffff81600557 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e564d000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fabb03713c0 CR3=00000000320aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff817affa6 RDX=fffffbfff0c81da3 RSI=0000000000000008 RDI=ffffffff8640ed10 RBP=ffff88801315bf80 RSP=ffff88802fca7a98 R8 =0000000000000000 R9 =fffffbfff0c81da2 R10=ffffffff8640ed17 R11=0000000000000000 R12=0000000000000293 R13=0000000000000010 R14=1ffff11005f94f5c R15=ffff88801315bfd8 RIP=ffffffff817affae RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7987969540 00000000 00000000 GS =0000 ffff8880e574d000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79879d09f0 CR3=000000002f8d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000