Warning: Permanently added '[localhost]:8172' (ECDSA) to the list of known hosts. 2023/02/24 11:29:22 fuzzer started 2023/02/24 11:29:22 dialing manager at localhost:41417 syzkaller login: [ 37.912556] cgroup: Unknown subsys name 'net' [ 38.023988] cgroup: Unknown subsys name 'rlimit' 2023/02/24 11:29:40 syscalls: 2217 2023/02/24 11:29:40 code coverage: enabled 2023/02/24 11:29:40 comparison tracing: enabled 2023/02/24 11:29:40 extra coverage: enabled 2023/02/24 11:29:40 setuid sandbox: enabled 2023/02/24 11:29:40 namespace sandbox: enabled 2023/02/24 11:29:40 Android sandbox: enabled 2023/02/24 11:29:40 fault injection: enabled 2023/02/24 11:29:40 leak checking: enabled 2023/02/24 11:29:40 net packet injection: enabled 2023/02/24 11:29:40 net device setup: enabled 2023/02/24 11:29:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/24 11:29:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/24 11:29:40 USB emulation: enabled 2023/02/24 11:29:40 hci packet injection: enabled 2023/02/24 11:29:40 wifi device emulation: enabled 2023/02/24 11:29:40 802.15.4 emulation: enabled 2023/02/24 11:29:40 fetching corpus: 0, signal 0/2000 (executing program) 2023/02/24 11:29:40 fetching corpus: 37, signal 15348/19094 (executing program) 2023/02/24 11:29:40 fetching corpus: 74, signal 33011/38237 (executing program) 2023/02/24 11:29:40 fetching corpus: 121, signal 40911/47635 (executing program) 2023/02/24 11:29:40 fetching corpus: 171, signal 52071/60041 (executing program) 2023/02/24 11:29:40 fetching corpus: 221, signal 63327/72394 (executing program) 2023/02/24 11:29:41 fetching corpus: 270, signal 70763/80997 (executing program) 2023/02/24 11:29:41 fetching corpus: 320, signal 77319/88659 (executing program) 2023/02/24 11:29:41 fetching corpus: 370, signal 81039/93553 (executing program) 2023/02/24 11:29:41 fetching corpus: 420, signal 85290/98889 (executing program) 2023/02/24 11:29:41 fetching corpus: 470, signal 88853/103487 (executing program) 2023/02/24 11:29:41 fetching corpus: 520, signal 95324/110690 (executing program) 2023/02/24 11:29:41 fetching corpus: 570, signal 98816/115170 (executing program) 2023/02/24 11:29:41 fetching corpus: 620, signal 102587/119794 (executing program) 2023/02/24 11:29:41 fetching corpus: 670, signal 105585/123731 (executing program) 2023/02/24 11:29:42 fetching corpus: 720, signal 108148/127202 (executing program) 2023/02/24 11:29:42 fetching corpus: 769, signal 112544/132264 (executing program) 2023/02/24 11:29:42 fetching corpus: 819, signal 115162/135676 (executing program) 2023/02/24 11:29:42 fetching corpus: 869, signal 117088/138493 (executing program) 2023/02/24 11:29:42 fetching corpus: 919, signal 119459/141663 (executing program) 2023/02/24 11:29:42 fetching corpus: 968, signal 122692/145496 (executing program) 2023/02/24 11:29:42 fetching corpus: 1018, signal 125645/149009 (executing program) 2023/02/24 11:29:42 fetching corpus: 1068, signal 127408/151570 (executing program) 2023/02/24 11:29:42 fetching corpus: 1118, signal 129479/154326 (executing program) 2023/02/24 11:29:43 fetching corpus: 1168, signal 131942/157436 (executing program) 2023/02/24 11:29:43 fetching corpus: 1218, signal 133663/159823 (executing program) 2023/02/24 11:29:43 fetching corpus: 1268, signal 135702/162472 (executing program) 2023/02/24 11:29:43 fetching corpus: 1318, signal 137371/164767 (executing program) 2023/02/24 11:29:43 fetching corpus: 1368, signal 138979/166950 (executing program) 2023/02/24 11:29:43 fetching corpus: 1418, signal 140510/169066 (executing program) 2023/02/24 11:29:43 fetching corpus: 1468, signal 142678/171708 (executing program) 2023/02/24 11:29:43 fetching corpus: 1517, signal 144014/173636 (executing program) 2023/02/24 11:29:44 fetching corpus: 1567, signal 145646/175801 (executing program) 2023/02/24 11:29:44 fetching corpus: 1617, signal 146794/177578 (executing program) 2023/02/24 11:29:44 fetching corpus: 1667, signal 147820/179226 (executing program) 2023/02/24 11:29:44 fetching corpus: 1717, signal 149204/181155 (executing program) 2023/02/24 11:29:44 fetching corpus: 1767, signal 150577/183036 (executing program) 2023/02/24 11:29:44 fetching corpus: 1817, signal 151902/184850 (executing program) 2023/02/24 11:29:44 fetching corpus: 1867, signal 153667/187000 (executing program) 2023/02/24 11:29:44 fetching corpus: 1917, signal 155292/189027 (executing program) 2023/02/24 11:29:44 fetching corpus: 1967, signal 156406/190634 (executing program) 2023/02/24 11:29:44 fetching corpus: 2017, signal 157577/192258 (executing program) 2023/02/24 11:29:45 fetching corpus: 2065, signal 158794/193896 (executing program) 2023/02/24 11:29:45 fetching corpus: 2115, signal 159515/195199 (executing program) 2023/02/24 11:29:45 fetching corpus: 2165, signal 161310/197167 (executing program) 2023/02/24 11:29:45 fetching corpus: 2215, signal 162218/198577 (executing program) 2023/02/24 11:29:45 fetching corpus: 2264, signal 163465/200230 (executing program) 2023/02/24 11:29:45 fetching corpus: 2314, signal 164738/201832 (executing program) 2023/02/24 11:29:45 fetching corpus: 2364, signal 165564/203125 (executing program) 2023/02/24 11:29:45 fetching corpus: 2414, signal 166941/204752 (executing program) 2023/02/24 11:29:45 fetching corpus: 2464, signal 167908/206139 (executing program) 2023/02/24 11:29:46 fetching corpus: 2514, signal 169242/207700 (executing program) 2023/02/24 11:29:46 fetching corpus: 2564, signal 170681/209314 (executing program) 2023/02/24 11:29:46 fetching corpus: 2614, signal 172371/211080 (executing program) 2023/02/24 11:29:46 fetching corpus: 2664, signal 173320/212351 (executing program) 2023/02/24 11:29:46 fetching corpus: 2714, signal 174375/213692 (executing program) 2023/02/24 11:29:46 fetching corpus: 2764, signal 175448/214990 (executing program) 2023/02/24 11:29:46 fetching corpus: 2814, signal 176449/216221 (executing program) 2023/02/24 11:29:46 fetching corpus: 2864, signal 177822/217700 (executing program) 2023/02/24 11:29:46 fetching corpus: 2913, signal 178758/218897 (executing program) 2023/02/24 11:29:47 fetching corpus: 2963, signal 179826/220149 (executing program) 2023/02/24 11:29:47 fetching corpus: 3013, signal 180814/221355 (executing program) 2023/02/24 11:29:47 fetching corpus: 3063, signal 182164/222736 (executing program) 2023/02/24 11:29:47 fetching corpus: 3113, signal 183107/223894 (executing program) 2023/02/24 11:29:47 fetching corpus: 3163, signal 184164/225107 (executing program) 2023/02/24 11:29:47 fetching corpus: 3213, signal 184977/226123 (executing program) 2023/02/24 11:29:47 fetching corpus: 3262, signal 185645/227074 (executing program) 2023/02/24 11:29:47 fetching corpus: 3312, signal 186561/228149 (executing program) 2023/02/24 11:29:47 fetching corpus: 3362, signal 187913/229388 (executing program) 2023/02/24 11:29:48 fetching corpus: 3411, signal 188753/230389 (executing program) 2023/02/24 11:29:48 fetching corpus: 3461, signal 190022/231550 (executing program) 2023/02/24 11:29:48 fetching corpus: 3510, signal 190840/232510 (executing program) 2023/02/24 11:29:48 fetching corpus: 3560, signal 191781/233541 (executing program) 2023/02/24 11:29:48 fetching corpus: 3610, signal 192482/234454 (executing program) 2023/02/24 11:29:48 fetching corpus: 3659, signal 193160/235364 (executing program) 2023/02/24 11:29:48 fetching corpus: 3709, signal 193823/236208 (executing program) 2023/02/24 11:29:48 fetching corpus: 3759, signal 194714/237116 (executing program) 2023/02/24 11:29:49 fetching corpus: 3809, signal 195460/238019 (executing program) 2023/02/24 11:29:49 fetching corpus: 3859, signal 196076/238817 (executing program) 2023/02/24 11:29:49 fetching corpus: 3909, signal 196813/239638 (executing program) 2023/02/24 11:29:49 fetching corpus: 3957, signal 197357/240376 (executing program) 2023/02/24 11:29:49 fetching corpus: 4007, signal 198027/241172 (executing program) 2023/02/24 11:29:49 fetching corpus: 4057, signal 198636/241941 (executing program) 2023/02/24 11:29:49 fetching corpus: 4107, signal 199290/242660 (executing program) 2023/02/24 11:29:49 fetching corpus: 4156, signal 200137/243493 (executing program) 2023/02/24 11:29:49 fetching corpus: 4206, signal 200925/244291 (executing program) 2023/02/24 11:29:49 fetching corpus: 4256, signal 201465/244971 (executing program) 2023/02/24 11:29:50 fetching corpus: 4305, signal 202129/245695 (executing program) 2023/02/24 11:29:50 fetching corpus: 4353, signal 203025/246509 (executing program) 2023/02/24 11:29:50 fetching corpus: 4403, signal 203620/247180 (executing program) 2023/02/24 11:29:50 fetching corpus: 4453, signal 204130/247815 (executing program) 2023/02/24 11:29:50 fetching corpus: 4503, signal 204674/248436 (executing program) 2023/02/24 11:29:50 fetching corpus: 4553, signal 205422/249143 (executing program) 2023/02/24 11:29:50 fetching corpus: 4603, signal 205838/249759 (executing program) 2023/02/24 11:29:50 fetching corpus: 4653, signal 206302/250378 (executing program) 2023/02/24 11:29:50 fetching corpus: 4703, signal 206693/250950 (executing program) 2023/02/24 11:29:51 fetching corpus: 4753, signal 207314/251644 (executing program) 2023/02/24 11:29:51 fetching corpus: 4803, signal 208117/252306 (executing program) 2023/02/24 11:29:51 fetching corpus: 4853, signal 208870/252990 (executing program) 2023/02/24 11:29:51 fetching corpus: 4903, signal 209816/253635 (executing program) 2023/02/24 11:29:51 fetching corpus: 4953, signal 210517/254258 (executing program) 2023/02/24 11:29:51 fetching corpus: 5003, signal 210925/254779 (executing program) 2023/02/24 11:29:51 fetching corpus: 5053, signal 211603/255377 (executing program) 2023/02/24 11:29:51 fetching corpus: 5103, signal 212340/255963 (executing program) 2023/02/24 11:29:52 fetching corpus: 5153, signal 213199/256590 (executing program) 2023/02/24 11:29:52 fetching corpus: 5203, signal 213863/257153 (executing program) 2023/02/24 11:29:52 fetching corpus: 5252, signal 214437/257687 (executing program) 2023/02/24 11:29:52 fetching corpus: 5301, signal 214831/258212 (executing program) 2023/02/24 11:29:52 fetching corpus: 5351, signal 215173/258654 (executing program) 2023/02/24 11:29:52 fetching corpus: 5401, signal 215934/259194 (executing program) 2023/02/24 11:29:52 fetching corpus: 5450, signal 216541/259682 (executing program) 2023/02/24 11:29:52 fetching corpus: 5500, signal 217234/260169 (executing program) 2023/02/24 11:29:52 fetching corpus: 5550, signal 217851/260636 (executing program) 2023/02/24 11:29:53 fetching corpus: 5600, signal 218229/261047 (executing program) 2023/02/24 11:29:53 fetching corpus: 5650, signal 219138/261540 (executing program) 2023/02/24 11:29:53 fetching corpus: 5700, signal 219684/261975 (executing program) 2023/02/24 11:29:53 fetching corpus: 5750, signal 220522/262456 (executing program) 2023/02/24 11:29:53 fetching corpus: 5800, signal 221029/262885 (executing program) 2023/02/24 11:29:53 fetching corpus: 5850, signal 221496/263315 (executing program) 2023/02/24 11:29:53 fetching corpus: 5899, signal 222037/263769 (executing program) 2023/02/24 11:29:54 fetching corpus: 5949, signal 222586/264183 (executing program) 2023/02/24 11:29:54 fetching corpus: 5999, signal 223232/264590 (executing program) 2023/02/24 11:29:54 fetching corpus: 6049, signal 223791/264995 (executing program) 2023/02/24 11:29:54 fetching corpus: 6099, signal 224456/265395 (executing program) 2023/02/24 11:29:54 fetching corpus: 6149, signal 225112/265756 (executing program) 2023/02/24 11:29:54 fetching corpus: 6199, signal 225502/266135 (executing program) 2023/02/24 11:29:54 fetching corpus: 6249, signal 226042/266466 (executing program) 2023/02/24 11:29:54 fetching corpus: 6299, signal 226614/266825 (executing program) 2023/02/24 11:29:55 fetching corpus: 6349, signal 227023/267148 (executing program) 2023/02/24 11:29:55 fetching corpus: 6399, signal 227551/267432 (executing program) 2023/02/24 11:29:55 fetching corpus: 6449, signal 228103/267772 (executing program) 2023/02/24 11:29:55 fetching corpus: 6499, signal 228371/268068 (executing program) 2023/02/24 11:29:55 fetching corpus: 6549, signal 228955/268411 (executing program) 2023/02/24 11:29:55 fetching corpus: 6599, signal 229436/268698 (executing program) 2023/02/24 11:29:55 fetching corpus: 6649, signal 230272/268821 (executing program) 2023/02/24 11:29:55 fetching corpus: 6699, signal 230787/268822 (executing program) 2023/02/24 11:29:55 fetching corpus: 6749, signal 231456/268822 (executing program) 2023/02/24 11:29:56 fetching corpus: 6799, signal 231859/268825 (executing program) 2023/02/24 11:29:56 fetching corpus: 6849, signal 232308/268831 (executing program) 2023/02/24 11:29:56 fetching corpus: 6899, signal 232588/268831 (executing program) 2023/02/24 11:29:56 fetching corpus: 6949, signal 233193/268832 (executing program) 2023/02/24 11:29:56 fetching corpus: 6999, signal 233749/268832 (executing program) 2023/02/24 11:29:56 fetching corpus: 7048, signal 234259/268832 (executing program) 2023/02/24 11:29:56 fetching corpus: 7097, signal 234693/268832 (executing program) 2023/02/24 11:29:56 fetching corpus: 7146, signal 234999/268860 (executing program) 2023/02/24 11:29:56 fetching corpus: 7196, signal 235385/268860 (executing program) 2023/02/24 11:29:56 fetching corpus: 7246, signal 235798/268860 (executing program) 2023/02/24 11:29:57 fetching corpus: 7296, signal 236306/268860 (executing program) 2023/02/24 11:29:57 fetching corpus: 7346, signal 236669/268860 (executing program) 2023/02/24 11:29:57 fetching corpus: 7396, signal 236940/268886 (executing program) 2023/02/24 11:29:57 fetching corpus: 7446, signal 237486/268886 (executing program) 2023/02/24 11:29:57 fetching corpus: 7496, signal 237741/268886 (executing program) 2023/02/24 11:29:57 fetching corpus: 7546, signal 238337/268892 (executing program) 2023/02/24 11:29:57 fetching corpus: 7596, signal 238654/268892 (executing program) 2023/02/24 11:29:57 fetching corpus: 7646, signal 238991/268892 (executing program) 2023/02/24 11:29:57 fetching corpus: 7696, signal 239313/268892 (executing program) 2023/02/24 11:29:58 fetching corpus: 7746, signal 239903/268892 (executing program) 2023/02/24 11:29:58 fetching corpus: 7796, signal 240233/268892 (executing program) 2023/02/24 11:29:58 fetching corpus: 7846, signal 240580/268892 (executing program) 2023/02/24 11:29:58 fetching corpus: 7896, signal 241068/268892 (executing program) 2023/02/24 11:29:58 fetching corpus: 7945, signal 241386/268916 (executing program) 2023/02/24 11:29:58 fetching corpus: 7995, signal 241817/268916 (executing program) 2023/02/24 11:29:58 fetching corpus: 8045, signal 242211/268916 (executing program) 2023/02/24 11:29:58 fetching corpus: 8095, signal 242769/268916 (executing program) 2023/02/24 11:29:58 fetching corpus: 8145, signal 243108/268916 (executing program) 2023/02/24 11:29:59 fetching corpus: 8195, signal 243596/268919 (executing program) 2023/02/24 11:29:59 fetching corpus: 8245, signal 243868/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8295, signal 244429/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8345, signal 244934/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8395, signal 245249/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8445, signal 245721/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8495, signal 245998/268955 (executing program) 2023/02/24 11:29:59 fetching corpus: 8545, signal 246412/268955 (executing program) 2023/02/24 11:30:00 fetching corpus: 8595, signal 246833/268955 (executing program) 2023/02/24 11:30:00 fetching corpus: 8645, signal 247337/268955 (executing program) 2023/02/24 11:30:00 fetching corpus: 8695, signal 247764/268958 (executing program) 2023/02/24 11:30:00 fetching corpus: 8745, signal 248346/268958 (executing program) 2023/02/24 11:30:00 fetching corpus: 8795, signal 248686/268958 (executing program) 2023/02/24 11:30:00 fetching corpus: 8845, signal 249102/268959 (executing program) 2023/02/24 11:30:00 fetching corpus: 8895, signal 249412/268959 (executing program) 2023/02/24 11:30:00 fetching corpus: 8945, signal 249860/268990 (executing program) 2023/02/24 11:30:01 fetching corpus: 8995, signal 250331/268990 (executing program) 2023/02/24 11:30:01 fetching corpus: 9045, signal 250707/268994 (executing program) 2023/02/24 11:30:01 fetching corpus: 9093, signal 250973/268996 (executing program) 2023/02/24 11:30:01 fetching corpus: 9143, signal 251324/268996 (executing program) 2023/02/24 11:30:01 fetching corpus: 9193, signal 251710/268997 (executing program) 2023/02/24 11:30:01 fetching corpus: 9243, signal 252017/268997 (executing program) 2023/02/24 11:30:01 fetching corpus: 9292, signal 252791/269000 (executing program) 2023/02/24 11:30:01 fetching corpus: 9342, signal 253114/269000 (executing program) 2023/02/24 11:30:01 fetching corpus: 9392, signal 253403/269006 (executing program) 2023/02/24 11:30:01 fetching corpus: 9442, signal 253777/269026 (executing program) 2023/02/24 11:30:02 fetching corpus: 9492, signal 254036/269026 (executing program) 2023/02/24 11:30:02 fetching corpus: 9542, signal 254411/269026 (executing program) 2023/02/24 11:30:02 fetching corpus: 9591, signal 254858/269026 (executing program) 2023/02/24 11:30:02 fetching corpus: 9641, signal 255164/269029 (executing program) 2023/02/24 11:30:02 fetching corpus: 9691, signal 255663/269029 (executing program) 2023/02/24 11:30:02 fetching corpus: 9741, signal 256044/269040 (executing program) 2023/02/24 11:30:02 fetching corpus: 9791, signal 256547/269040 (executing program) 2023/02/24 11:30:02 fetching corpus: 9841, signal 256838/269040 (executing program) 2023/02/24 11:30:03 fetching corpus: 9891, signal 257485/269040 (executing program) 2023/02/24 11:30:03 fetching corpus: 9941, signal 257733/269040 (executing program) 2023/02/24 11:30:03 fetching corpus: 9991, signal 258085/269040 (executing program) 2023/02/24 11:30:03 fetching corpus: 10041, signal 258422/269040 (executing program) 2023/02/24 11:30:03 fetching corpus: 10091, signal 258704/269042 (executing program) 2023/02/24 11:30:03 fetching corpus: 10141, signal 259039/269042 (executing program) 2023/02/24 11:30:03 fetching corpus: 10191, signal 259380/269049 (executing program) 2023/02/24 11:30:03 fetching corpus: 10240, signal 259784/269146 (executing program) 2023/02/24 11:30:04 fetching corpus: 10290, signal 260320/269146 (executing program) 2023/02/24 11:30:04 fetching corpus: 10340, signal 260748/269146 (executing program) 2023/02/24 11:30:04 fetching corpus: 10390, signal 261076/269146 (executing program) 2023/02/24 11:30:04 fetching corpus: 10440, signal 261660/269146 (executing program) 2023/02/24 11:30:04 fetching corpus: 10490, signal 261936/269155 (executing program) 2023/02/24 11:30:04 fetching corpus: 10540, signal 262176/269155 (executing program) 2023/02/24 11:30:04 fetching corpus: 10590, signal 262641/269155 (executing program) 2023/02/24 11:30:04 fetching corpus: 10640, signal 262909/269155 (executing program) 2023/02/24 11:30:05 fetching corpus: 10690, signal 263174/269155 (executing program) 2023/02/24 11:30:05 fetching corpus: 10740, signal 263861/269155 (executing program) 2023/02/24 11:30:05 fetching corpus: 10790, signal 264188/269160 (executing program) 2023/02/24 11:30:05 fetching corpus: 10840, signal 264495/269160 (executing program) 2023/02/24 11:30:05 fetching corpus: 10890, signal 264785/269165 (executing program) 2023/02/24 11:30:05 fetching corpus: 10940, signal 265152/269165 (executing program) 2023/02/24 11:30:05 fetching corpus: 10990, signal 265417/269168 (executing program) 2023/02/24 11:30:05 fetching corpus: 11014, signal 265564/269168 (executing program) 2023/02/24 11:30:05 fetching corpus: 11014, signal 265564/269168 (executing program) 2023/02/24 11:30:05 fetching corpus: 11014, signal 265564/269168 (executing program) 2023/02/24 11:30:08 starting 8 fuzzer processes 11:30:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xba, 0x6, 0x3f, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, @perf_bp={0x0}, 0xa0, 0x3, 0x40100000, 0x6, 0x2, 0x0, 0x7, 0x0, 0x623}, 0x0, 0x0, r0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0xa94, &(0x7f0000000440)="93671705d9f115264e075b05bb65fc2504540c184395841eb8d7e9c58c2ded9b96842b0fb61aa34e41ba") ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) copy_file_range(0xffffffffffffffff, &(0x7f0000000300)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) gettid() syz_io_uring_setup(0x3f1d, &(0x7f0000000340)={0x0, 0x7176, 0x4, 0x0, 0x23}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r3, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) 11:30:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000640)=""/217, 0xd9, 0x0) 11:30:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) close(r2) 11:30:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x401, 0x1400}, {0x0, 0xffff}], 0x2, 0x0) getpid() 11:30:08 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000b00)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}], 0x38}}], 0x2, 0x0) 11:30:08 executing program 3: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x7) r2 = getpid() r3 = getpid() r4 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000000)={r4}) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="fffe0b630e264f54ba3be0b4d665999c8e98b3c0ff193535ba72a849dff555a4ad62fb6da98303b4f49787aded65e32da3ec47dc05ffe4e18f9717fa4c6b08f0c5b820c260c31e057fa48cd28cb62cce053e5dff17d5decda9ed40ae1a5439de91388c8ca2b59ab957cc803c5c47a0839dea557c228830674a5ace271c5ae8bc2bdc", 0x82}, {&(0x7f0000000300)="e6fef1ae42ac5042855980566e73ef4c48306acd6322ed291d072c1f178ce8ae0e11ebc7ac76fe12f8946d5ed665e14bfb285403635a467235064a7166de4f04930ec003702f5b740f77ab46d71ba5976fc792b4b731ebd94f140dd6d2ba873e0490a753e4f9ca2057ad407cee5c49c304f7cf71153fb3f376ae4bc3ce1dd23c6df99f1685d53b4e8dbc0964db5eae1464e6130d6dd6f58a04d017ad91f33092a1d80852af5dc794f30a953062682ca137b128302c6ff5075a252339c0", 0xbd}, {&(0x7f0000000400)="79ee7a267096ad1454210608bc76bf7a89941d5589bcb4bb4d36237488e516a567dad45dc0ea68e9d7150738e907385dce90ccbdf8dada99c7f53895726b0d366522bf147d355a3aa666efaf151a32731d5e944aa276e1bb8b1cdf3a0cf33a6a904379e3513b7bb89eeb3628c8b2135408c353e2a408bd36da7de824a3e8311d0b6e7374c732b723208a8fc533c7acd758c9ddc02d5741121a8fd0be64d9705d549e448d47c3d03c2853859a4b4d20c590c4a044fcd847747730403c884b0a98ecf8d2749c6bc074c8afb9210ffc8f9a0953240baaa7639a7f920900426bfb", 0xdf}], 0x3, 0x0, 0x8001, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000008480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x401, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="208799f8a401ee539e3511cdbe95ec878318f9d5411957513038e8ea782c2dfb1754b043961ba82caa62f38f239cb5cfe23ccdb758eb1e33bc70b85c56542860e783f2dd39ec32de906e18343b6e390aed8350c2bc", 0x55}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 11:30:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) lseek(r0, 0x6, 0x0) getdents64(r0, 0x0, 0x0) [ 80.773803] audit: type=1400 audit(1677238208.723:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:30:08 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x0, 0x0, 0x20, 0x81, 0x0, 0x89}) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001280)) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x4, 0xb4, 0x0, 0x54176f4d, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb85, 0xeb76b2d4b41772c0, @perf_config_ext={0xffffffffffffff02, 0xffff}, 0x0, 0x26, 0x800, 0x5, 0x1f, 0x6, 0x8, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r0, 0xb) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1a23}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 81.985587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.988280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.989557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.993128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.994808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.997413] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.005501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.008421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.010880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.014313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.016210] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.017423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.037092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.038422] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.051587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.053231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.054061] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.054620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.055563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.055763] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.056431] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.058445] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.058456] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.059073] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.060275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.062250] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.063350] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.064464] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.065661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.067465] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.068060] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.068676] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.069669] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.070585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.071920] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.073412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.067090] Bluetooth: hci0: command 0x0409 tx timeout [ 84.068398] Bluetooth: hci1: command 0x0409 tx timeout [ 84.130783] Bluetooth: hci5: command 0x0409 tx timeout [ 84.130884] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 84.131887] Bluetooth: hci3: command 0x0409 tx timeout [ 84.133313] [ 84.133462] ====================================================== [ 84.133897] WARNING: possible circular locking dependency detected [ 84.134327] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 84.134331] 6.2.0-next-20230224 #1 Not tainted [ 84.135376] ------------------------------------------------------ [ 84.136675] syz-executor.2/274 is trying to acquire lock: [ 84.137977] ffff888019aa4880 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xd80 [ 84.139729] [ 84.139729] but task is already holding lock: [ 84.140168] ffff888019aa4920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 84.140852] [ 84.140852] which lock already depends on the new lock. [ 84.140852] [ 84.141396] [ 84.141396] the existing dependency chain (in reverse order) is: [ 84.141919] [ 84.141919] -> #1 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}: [ 84.142411] __mutex_lock+0x133/0x14a0 [ 84.142736] hci_cmd_sync_work+0x1e6/0x320 [ 84.143075] process_one_work+0xa0f/0x1790 [ 84.143412] worker_thread+0x63b/0x1260 [ 84.143736] kthread+0x2e9/0x3a0 [ 84.144019] ret_from_fork+0x2c/0x50 [ 84.144321] [ 84.144321] -> #0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}: [ 84.144882] __lock_acquire+0x2d56/0x6380 [ 84.145217] lock_acquire.part.0+0xea/0x320 [ 84.145563] __flush_work+0x109/0xd80 [ 84.145873] __cancel_work_timer+0x39c/0x4e0 [ 84.146216] hci_cmd_sync_clear+0x52/0x250 [ 84.146546] hci_unregister_dev+0xf9/0x410 [ 84.146876] vhci_release+0x80/0x100 [ 84.147177] __fput+0x263/0xa40 [ 84.147447] task_work_run+0x174/0x280 [ 84.147758] do_exit+0xad8/0x2800 [ 84.148058] do_group_exit+0xd4/0x2a0 [ 84.148385] __x64_sys_exit_group+0x3e/0x50 [ 84.148753] do_syscall_64+0x3f/0x90 [ 84.149065] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 84.149478] [ 84.149478] other info that might help us debug this: [ 84.149478] [ 84.150035] Possible unsafe locking scenario: [ 84.150035] [ 84.150463] CPU0 CPU1 [ 84.150800] ---- ---- [ 84.151131] lock(&hdev->cmd_sync_work_lock); [ 84.151464] lock((work_completion)(&hdev->cmd_sync_work)); [ 84.152039] lock(&hdev->cmd_sync_work_lock); [ 84.152528] lock((work_completion)(&hdev->cmd_sync_work)); [ 84.152929] [ 84.152929] *** DEADLOCK *** [ 84.152929] [ 84.153350] 1 lock held by syz-executor.2/274: [ 84.153677] #0: ffff888019aa4920 (&hdev->cmd_sync_work_lock){+.+.}-{3:3}, at: hci_cmd_sync_clear+0x45/0x250 [ 84.154390] [ 84.154390] stack backtrace: [ 84.154703] CPU: 1 PID: 274 Comm: syz-executor.2 Not tainted 6.2.0-next-20230224 #1 [ 84.155249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 84.155824] Call Trace: [ 84.156012] [ 84.156179] dump_stack_lvl+0x91/0xf0 [ 84.156462] check_noncircular+0x263/0x2e0 [ 84.156777] ? __pfx_check_noncircular+0x10/0x10 [ 84.157132] ? queued_spin_lock_slowpath+0xd1/0xc50 [ 84.157513] __lock_acquire+0x2d56/0x6380 [ 84.157828] ? lock_is_held_type+0x9f/0x120 [ 84.158151] ? __pfx___lock_acquire+0x10/0x10 [ 84.158493] ? __pfx_register_lock_class+0x10/0x10 [ 84.158866] ? __wait_for_common+0x394/0x550 [ 84.159199] ? __pfx_lock_release+0x10/0x10 [ 84.159531] lock_acquire.part.0+0xea/0x320 [ 84.159870] ? __flush_work+0xdd/0xd80 [ 84.160168] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.160532] ? __flush_work+0xdd/0xd80 [ 84.160819] ? rcu_read_lock_sched_held+0x42/0x80 [ 84.161170] ? trace_lock_acquire+0x170/0x1e0 [ 84.161506] ? __flush_work+0xdd/0xd80 [ 84.161801] ? lock_acquire+0x32/0xc0 [ 84.162087] ? __flush_work+0xdd/0xd80 [ 84.162381] __flush_work+0x109/0xd80 [ 84.162674] ? __flush_work+0xdd/0xd80 [ 84.162969] ? __pfx_mark_lock.part.0+0x10/0x10 [ 84.163325] ? __pfx___flush_work+0x10/0x10 [ 84.163644] ? lock_acquire.part.0+0xea/0x320 [ 84.163991] ? hci_cmd_sync_clear+0x45/0x250 [ 84.164321] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 84.164691] ? hci_cmd_sync_clear+0x45/0x250 [ 84.165022] ? rcu_read_lock_sched_held+0x42/0x80 [ 84.165381] ? trace_lock_acquire+0x170/0x1e0 [ 84.165725] ? lock_is_held_type+0x9f/0x120 [ 84.166049] ? mark_held_locks+0x9e/0xe0 [ 84.166360] __cancel_work_timer+0x39c/0x4e0 [ 84.166687] ? __pfx___cancel_work_timer+0x10/0x10 [ 84.167052] ? __cancel_work_timer+0x2aa/0x4e0 [ 84.167388] ? __pfx___cancel_work_timer+0x10/0x10 [ 84.167744] ? lock_release+0x1e3/0x710 [ 84.168065] ? __pfx_lock_release+0x10/0x10 [ 84.168395] ? do_raw_write_lock+0x11e/0x3b0 [ 84.168726] ? __pfx_vhci_release+0x10/0x10 [ 84.169052] hci_cmd_sync_clear+0x52/0x250 [ 84.169374] ? __pfx_vhci_release+0x10/0x10 [ 84.169698] hci_unregister_dev+0xf9/0x410 [ 84.170017] vhci_release+0x80/0x100 [ 84.170315] __fput+0x263/0xa40 [ 84.170578] task_work_run+0x174/0x280 [ 84.170876] ? __pfx_task_work_run+0x10/0x10 [ 84.171214] ? do_raw_spin_unlock+0x53/0x220 [ 84.171544] do_exit+0xad8/0x2800 [ 84.171816] ? lock_release+0x1e3/0x710 [ 84.172128] ? __pfx_lock_release+0x10/0x10 [ 84.172454] ? do_raw_spin_lock+0x125/0x270 [ 84.172772] ? __pfx_do_exit+0x10/0x10 [ 84.173070] do_group_exit+0xd4/0x2a0 [ 84.173352] __x64_sys_exit_group+0x3e/0x50 [ 84.173674] do_syscall_64+0x3f/0x90 [ 84.173952] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 84.174328] RIP: 0033:0x7f125d792b19 [ 84.174601] Code: Unable to access opcode bytes at 0x7f125d792aef. [ 84.175044] RSP: 002b:00007fff74699ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 84.175588] RAX: ffffffffffffffda RBX: 00007fff7469a6c8 RCX: 00007f125d792b19 [ 84.176103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 84.176604] RBP: 0000000000000000 R08: 0000000000000026 R09: 00007fff7469a6c8 [ 84.177120] R10: 0000000000000020 R11: 0000000000000246 R12: 00007f125d7ec233 [ 84.177619] R13: 0000000000000002 R14: 0000000000000000 R15: 00000000000000f8 [ 84.178127] [ 84.194757] Bluetooth: hci2: command 0x0409 tx timeout [ 84.195135] Bluetooth: hci4: command 0x0409 tx timeout [ 86.115794] Bluetooth: hci1: command 0x041b tx timeout [ 86.116384] Bluetooth: hci0: command 0x041b tx timeout [ 86.179862] Bluetooth: hci3: command 0x041b tx timeout [ 86.180382] Bluetooth: hci5: command 0x041b tx timeout [ 86.242753] Bluetooth: hci4: command 0x041b tx timeout [ 86.243243] Bluetooth: hci2: command 0x041b tx timeout [ 87.654023] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.655398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.656963] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.658543] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.660524] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.661596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 88.162776] Bluetooth: hci0: command 0x040f tx timeout [ 88.163447] Bluetooth: hci1: command 0x040f tx timeout [ 88.226770] Bluetooth: hci5: command 0x040f tx timeout [ 88.227454] Bluetooth: hci3: command 0x040f tx timeout [ 88.290816] Bluetooth: hci2: command 0x040f tx timeout [ 88.291491] Bluetooth: hci4: command 0x040f tx timeout [ 89.699728] Bluetooth: hci6: command 0x0409 tx timeout [ 90.082729] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 90.210773] Bluetooth: hci1: command 0x0419 tx timeout [ 90.211512] Bluetooth: hci0: command 0x0419 tx timeout [ 90.274838] Bluetooth: hci3: command 0x0419 tx timeout [ 90.275512] Bluetooth: hci5: command 0x0419 tx timeout [ 90.338753] Bluetooth: hci4: command 0x0419 tx timeout [ 90.339475] Bluetooth: hci2: command 0x0419 tx timeout [ 91.746751] Bluetooth: hci6: command 0x041b tx timeout [ 93.794757] Bluetooth: hci6: command 0x040f tx timeout VM DIAGNOSIS: 11:30:12 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000000f5 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000001 RDI=1ffffffff0ba517a RBP=000000000003f681 RSP=ffff888020447760 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88807ffdc500 R13=000000000003f680 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff816a4b73 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe4691457000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe4691455000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcac210e260 CR3=000000004166e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000006d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82502865 RDI=ffffffff87f10da0 RBP=ffffffff87f10d60 RSP=ffff88803d87f100 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006d R11=0000000000000001 R12=000000000000006d R13=ffffffff87f10d60 R14=0000000000000010 R15=ffffffff82502850 RIP=ffffffff825028bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe40f8d7c000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe40f8d7a000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3c6215b260 CR3=000000000ca06000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000