syzkaller login: [ 42.587553] sshd (242) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:42032' (ECDSA) to the list of known hosts. 2022/09/19 13:27:12 fuzzer started 2022/09/19 13:27:12 dialing manager at localhost:42121 [ 44.744251] cgroup: Unknown subsys name 'net' [ 44.844589] cgroup: Unknown subsys name 'rlimit' 2022/09/19 13:27:26 syscalls: 2215 2022/09/19 13:27:26 code coverage: enabled 2022/09/19 13:27:26 comparison tracing: enabled 2022/09/19 13:27:26 extra coverage: enabled 2022/09/19 13:27:26 setuid sandbox: enabled 2022/09/19 13:27:26 namespace sandbox: enabled 2022/09/19 13:27:26 Android sandbox: enabled 2022/09/19 13:27:26 fault injection: enabled 2022/09/19 13:27:26 leak checking: enabled 2022/09/19 13:27:26 net packet injection: enabled 2022/09/19 13:27:26 net device setup: enabled 2022/09/19 13:27:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/19 13:27:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/19 13:27:26 USB emulation: enabled 2022/09/19 13:27:26 hci packet injection: enabled 2022/09/19 13:27:26 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220919) 2022/09/19 13:27:26 802.15.4 emulation: enabled 2022/09/19 13:27:26 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/19 13:27:26 fetching corpus: 50, signal 30372/33587 (executing program) 2022/09/19 13:27:26 fetching corpus: 100, signal 42408/46765 (executing program) 2022/09/19 13:27:26 fetching corpus: 150, signal 49379/54798 (executing program) 2022/09/19 13:27:26 fetching corpus: 200, signal 53576/60052 (executing program) 2022/09/19 13:27:27 fetching corpus: 250, signal 63377/70330 (executing program) 2022/09/19 13:27:27 fetching corpus: 300, signal 67961/75653 (executing program) 2022/09/19 13:27:27 fetching corpus: 349, signal 73308/81492 (executing program) 2022/09/19 13:27:27 fetching corpus: 399, signal 78208/86890 (executing program) 2022/09/19 13:27:27 fetching corpus: 449, signal 83795/92718 (executing program) 2022/09/19 13:27:27 fetching corpus: 498, signal 86755/96198 (executing program) 2022/09/19 13:27:27 fetching corpus: 548, signal 89160/99104 (executing program) 2022/09/19 13:27:28 fetching corpus: 598, signal 92831/102994 (executing program) 2022/09/19 13:27:28 fetching corpus: 646, signal 95183/105712 (executing program) 2022/09/19 13:27:28 fetching corpus: 695, signal 97700/108497 (executing program) 2022/09/19 13:27:28 fetching corpus: 743, signal 99315/110475 (executing program) 2022/09/19 13:27:28 fetching corpus: 793, signal 101550/112982 (executing program) 2022/09/19 13:27:28 fetching corpus: 843, signal 105867/116933 (executing program) 2022/09/19 13:27:28 fetching corpus: 893, signal 108391/119480 (executing program) 2022/09/19 13:27:29 fetching corpus: 941, signal 110161/121418 (executing program) 2022/09/19 13:27:29 fetching corpus: 990, signal 112176/123447 (executing program) 2022/09/19 13:27:29 fetching corpus: 1040, signal 114184/125410 (executing program) 2022/09/19 13:27:29 fetching corpus: 1090, signal 116727/127797 (executing program) 2022/09/19 13:27:29 fetching corpus: 1139, signal 119232/129985 (executing program) 2022/09/19 13:27:29 fetching corpus: 1189, signal 120240/131185 (executing program) 2022/09/19 13:27:29 fetching corpus: 1239, signal 121643/132518 (executing program) 2022/09/19 13:27:30 fetching corpus: 1289, signal 123406/134087 (executing program) 2022/09/19 13:27:30 fetching corpus: 1339, signal 124527/135164 (executing program) 2022/09/19 13:27:30 fetching corpus: 1389, signal 126529/137060 (executing program) 2022/09/19 13:27:30 fetching corpus: 1439, signal 128129/138452 (executing program) 2022/09/19 13:27:30 fetching corpus: 1489, signal 131085/140792 (executing program) 2022/09/19 13:27:30 fetching corpus: 1539, signal 133154/142334 (executing program) 2022/09/19 13:27:30 fetching corpus: 1589, signal 134737/143475 (executing program) 2022/09/19 13:27:31 fetching corpus: 1639, signal 136686/144806 (executing program) 2022/09/19 13:27:31 fetching corpus: 1689, signal 137614/145543 (executing program) 2022/09/19 13:27:31 fetching corpus: 1739, signal 138376/146172 (executing program) 2022/09/19 13:27:31 fetching corpus: 1789, signal 140527/147487 (executing program) 2022/09/19 13:27:31 fetching corpus: 1838, signal 142120/148475 (executing program) 2022/09/19 13:27:31 fetching corpus: 1888, signal 143677/149359 (executing program) 2022/09/19 13:27:31 fetching corpus: 1937, signal 144664/150023 (executing program) 2022/09/19 13:27:32 fetching corpus: 1986, signal 146043/150777 (executing program) 2022/09/19 13:27:32 fetching corpus: 2036, signal 146909/151260 (executing program) 2022/09/19 13:27:32 fetching corpus: 2086, signal 147856/151771 (executing program) 2022/09/19 13:27:32 fetching corpus: 2135, signal 149594/152563 (executing program) 2022/09/19 13:27:32 fetching corpus: 2185, signal 150484/152987 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153125 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153175 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153234 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153281 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153324 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153384 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153438 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153484 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153541 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153600 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153634 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153698 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153764 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153814 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153859 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153909 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153950 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/153998 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154060 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154129 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154189 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154240 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154292 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154336 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154379 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154420 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154476 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154519 (executing program) 2022/09/19 13:27:32 fetching corpus: 2196, signal 150656/154575 (executing program) 2022/09/19 13:27:33 fetching corpus: 2196, signal 150656/154622 (executing program) 2022/09/19 13:27:33 fetching corpus: 2196, signal 150656/154649 (executing program) 2022/09/19 13:27:33 fetching corpus: 2196, signal 150656/154649 (executing program) 2022/09/19 13:27:35 starting 8 fuzzer processes 13:27:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x20000040) listen(r0, 0x3) 13:27:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101242) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x5}, {{0x0, 0xea60}, 0x1, 0xd62}], 0x30) 13:27:36 executing program 3: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmdt(r0) syz_open_dev$mouse(0x0, 0x1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) 13:27:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)={0x14, 0x20, 0x1, 0x0, 0x0, "", [@nested={0x5}]}, 0x14}], 0x1}, 0x0) [ 67.674761] audit: type=1400 audit(1663594056.030:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:27:36 executing program 4: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='((\\{^!)\x00') 13:27:36 executing program 5: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000340)) 13:27:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00']) fcntl$setlease(r2, 0x402, 0x3) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x10, 0x0, 0x7ffc) r5 = fcntl$dupfd(r4, 0x0, r3) sendfile(r3, r5, 0x0, 0x1ff) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000440)=""/150, 0x96}], 0x4) syncfs(0xffffffffffffffff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/39, 0x27, 0x610) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) 13:27:36 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000}) [ 69.053076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.054881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.057040] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.058505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.060239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.061297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.062553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.064020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.065655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.087239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.106416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.108648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.111779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.113273] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.115552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.116532] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.117966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.119077] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.121172] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.122647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.124151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.125326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.126669] Bluetooth: hci3: HCI_REQ-0x0c1a [ 69.140829] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.151130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.153926] Bluetooth: hci2: HCI_REQ-0x0c1a [ 69.165655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.167468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.168652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.169497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.171000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.172245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.176990] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.177212] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.183991] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.184970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.186122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.188012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.189387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.192304] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.194640] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.195806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.197355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.198327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.199754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.201527] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.202751] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.204438] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.205678] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.210380] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.220369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.224830] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.236487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.238717] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.243199] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.247249] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.179303] Bluetooth: hci2: command 0x0409 tx timeout [ 71.180137] Bluetooth: hci0: command 0x0409 tx timeout [ 71.180740] Bluetooth: hci3: command 0x0409 tx timeout [ 71.242831] Bluetooth: hci4: command 0x0409 tx timeout [ 71.242846] Bluetooth: hci6: command 0x0409 tx timeout [ 71.243838] Bluetooth: hci7: command 0x0409 tx timeout [ 71.244082] Bluetooth: hci1: command 0x0409 tx timeout [ 71.306772] Bluetooth: hci5: command 0x0409 tx timeout [ 73.226783] Bluetooth: hci3: command 0x041b tx timeout [ 73.227311] Bluetooth: hci0: command 0x041b tx timeout [ 73.228133] Bluetooth: hci2: command 0x041b tx timeout [ 73.290778] Bluetooth: hci1: command 0x041b tx timeout [ 73.291273] Bluetooth: hci7: command 0x041b tx timeout [ 73.291882] Bluetooth: hci6: command 0x041b tx timeout [ 73.292321] Bluetooth: hci4: command 0x041b tx timeout [ 73.354760] Bluetooth: hci5: command 0x041b tx timeout [ 75.274858] Bluetooth: hci2: command 0x040f tx timeout [ 75.275371] Bluetooth: hci0: command 0x040f tx timeout [ 75.276170] Bluetooth: hci3: command 0x040f tx timeout [ 75.339078] Bluetooth: hci4: command 0x040f tx timeout [ 75.339644] Bluetooth: hci6: command 0x040f tx timeout [ 75.340146] Bluetooth: hci7: command 0x040f tx timeout [ 75.340577] Bluetooth: hci1: command 0x040f tx timeout [ 75.402742] Bluetooth: hci5: command 0x040f tx timeout [ 77.322761] Bluetooth: hci3: command 0x0419 tx timeout [ 77.323260] Bluetooth: hci0: command 0x0419 tx timeout [ 77.323661] Bluetooth: hci2: command 0x0419 tx timeout [ 77.386765] Bluetooth: hci1: command 0x0419 tx timeout [ 77.387246] Bluetooth: hci7: command 0x0419 tx timeout [ 77.387665] Bluetooth: hci6: command 0x0419 tx timeout [ 77.388745] Bluetooth: hci4: command 0x0419 tx timeout [ 77.450741] Bluetooth: hci5: command 0x0419 tx timeout 13:28:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000}) 13:28:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000}) 13:28:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0x1ff00000000000}) 13:28:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004080)={0x0, 0x0, 0x1e00, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"}) 13:28:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004080)={0x0, 0x0, 0x1e00, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"}) 13:28:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004080)={0x0, 0x0, 0x1e00, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"}) 13:28:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101242) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x5}, {{0x0, 0xea60}, 0x1, 0xd62}], 0x30) 13:28:34 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004040), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004080)={0x0, 0x0, 0x1e00, 0x0, 0x0, "53a14f361e559084047112d4b940ce874276eb"}) [ 126.786066] audit: type=1400 audit(1663594115.142:7): avc: denied { open } for pid=3854 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.787823] audit: type=1400 audit(1663594115.142:8): avc: denied { kernel } for pid=3854 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.806061] audit: type=1400 audit(1663594115.162:9): avc: denied { write } for pid=3854 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.810222] ------------[ cut here ]------------ [ 126.811090] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 126.812242] Modules linked in: [ 126.812725] CPU: 0 PID: 3850 Comm: modprobe Not tainted 6.0.0-rc6-next-20220919 #1 [ 126.813739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.815786] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 126.816786] Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 46 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 1b b5 aa 7e 31 ff 89 [ 126.819089] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 126.819797] RAX: 0000000080010002 RBX: ffff8880086605c8 RCX: 0000000000000000 [ 126.820752] RDX: ffff88800c691ac0 RSI: ffffffff8157c08e RDI: 0000000000000005 [ 126.821707] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.822654] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 126.823605] R13: ffff888008660658 R14: ffff88806ce3d140 R15: ffff8880086605c8 [ 126.824552] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.825604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.826375] CR2: 00007fbe7eba58e0 CR3: 000000001875e000 CR4: 0000000000350ef0 [ 126.827315] Call Trace: [ 126.827670] [ 126.827972] ? perf_event_idx_default+0x10/0x10 [ 126.828628] ? event_sched_out+0x71c/0xcd0 [ 126.829222] __perf_remove_from_context+0x71e/0xb20 [ 126.829905] event_function+0x297/0x3d0 [ 126.830453] ? perf_output_read+0xf80/0xf80 [ 126.831036] remote_function+0x125/0x1b0 [ 126.831601] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.832326] ? perf_duration_warn+0x40/0x40 [ 126.832930] __sysvec_call_function_single+0x92/0x3a0 [ 126.833640] sysvec_call_function_single+0x89/0xc0 [ 126.834302] [ 126.834607] [ 126.834916] asm_sysvec_call_function_single+0x16/0x20 [ 126.835621] RIP: 0010:unwind_next_frame+0x232/0x20b0 [ 126.836310] Code: 00 00 fc ff df 48 8d 3c 95 48 b1 26 86 49 89 f8 49 c1 e8 03 45 0f b6 04 00 48 89 f8 83 e0 07 83 c0 03 44 38 c0 7c 30 45 84 c0 <74> 2b 48 89 54 24 30 48 89 74 24 28 89 4c 24 20 44 89 5c 24 18 e8 [ 126.838659] RSP: 0018:ffff888019e3f8f0 EFLAGS: 00000246 [ 126.839357] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 00000000000039c1 [ 126.840270] RDX: 0000000000000ad7 RSI: 0000000000000ad6 RDI: ffffffff8626dca4 [ 126.841205] RBP: ffff888019e3fa18 R08: 0000000000000000 R09: ffffffff85e3c336 [ 126.842125] R10: ffffed10033c7f45 R11: 000000000003603d R12: ffff888019e3fa01 [ 126.843059] R13: ffff888019e3fa20 R14: ffff888019e3f9c0 R15: ffffffff810ad6fe [ 126.844005] ? arch_stack_walk+0x5e/0xf0 [ 126.844620] ? arch_stack_walk+0x5f/0xf0 [ 126.845190] ? get_stack_info_noinstr+0x12/0xf0 [ 126.845819] __unwind_start+0x50f/0x7c0 [ 126.846356] ? write_profile+0x3e0/0x3e0 [ 126.846907] arch_stack_walk+0x5f/0xf0 [ 126.847451] ? arch_stack_walk+0x5f/0xf0 [ 126.848008] stack_trace_save+0x8c/0xc0 [ 126.848562] ? filter_irq_stacks+0x90/0x90 [ 126.849118] ? lockdep_init_map_type+0x21a/0x7e0 [ 126.849757] ? __raw_spin_lock_init+0x36/0x110 [ 126.850369] __create_object+0x389/0xc10 [ 126.850907] ? kasan_set_track+0x21/0x30 [ 126.851459] kmem_cache_alloc_bulk+0x3fe/0x7a0 [ 126.852079] mas_alloc_nodes+0x2ff/0x800 [ 126.852650] mas_preallocate+0x1bb/0x360 [ 126.853198] mmap_region+0x774/0x1a00 [ 126.853729] ? do_munmap+0x100/0x100 [ 126.854241] ? security_mmap_addr+0x79/0xa0 [ 126.854830] ? get_unmapped_area+0x1e5/0x3e0 [ 126.855438] do_mmap+0x828/0xf40 [ 126.855916] vm_mmap_pgoff+0x1af/0x270 [ 126.856458] ? randomize_page+0xb0/0xb0 [ 126.857029] ksys_mmap_pgoff+0x3d0/0x4f0 [ 126.857591] do_syscall_64+0x3b/0x90 [ 126.858100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.858800] RIP: 0033:0x7fbe7eea9d82 [ 126.859296] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00 [ 126.861658] RSP: 002b:00007ffd4d2cd908 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.862651] RAX: ffffffffffffffda RBX: 0000000000000802 RCX: 00007fbe7eea9d82 [ 126.863582] RDX: 0000000000000001 RSI: 00000000001c4508 RDI: 0000000000000000 [ 126.864527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.865465] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fbe7ee88a20 [ 126.866398] R13: 00007ffd4d2cd920 R14: 0000000000000000 R15: 00007ffd4d2cdd40 [ 126.867348] [ 126.867660] irq event stamp: 6582 [ 126.868113] hardirqs last enabled at (6581): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 126.869360] hardirqs last disabled at (6582): [] sysvec_call_function_single+0xb/0xc0 [ 126.870592] softirqs last enabled at (6436): [] __irq_exit_rcu+0x11b/0x180 [ 126.871722] softirqs last disabled at (6403): [] __irq_exit_rcu+0x11b/0x180 [ 126.872856] ---[ end trace 0000000000000000 ]--- [ 126.873601] ------------[ cut here ]------------ [ 126.874236] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 126.875419] Modules linked in: [ 126.875855] CPU: 0 PID: 3850 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220919 #1 [ 126.877030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.878487] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 126.879172] Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 1b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 126.881569] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 126.882288] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.883231] RDX: ffff88800c691ac0 RSI: ffffffff8157c0b7 RDI: 0000000000000005 [ 126.884142] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.885091] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff8880086605c8 [ 126.886039] R13: ffff8880086605c8 R14: ffff88806ce3d140 R15: ffff8880086605c8 [ 126.886991] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.888064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.888844] CR2: 00007fbe7eba58e0 CR3: 000000001875e000 CR4: 0000000000350ef0 [ 126.889797] Call Trace: [ 126.890149] [ 126.890454] ? perf_event_idx_default+0x10/0x10 [ 126.891091] ? event_sched_out+0x71c/0xcd0 [ 126.891685] __perf_remove_from_context+0x71e/0xb20 [ 126.892374] event_function+0x297/0x3d0 [ 126.892942] ? perf_output_read+0xf80/0xf80 [ 126.893537] remote_function+0x125/0x1b0 [ 126.894099] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.894825] ? perf_duration_warn+0x40/0x40 [ 126.895429] __sysvec_call_function_single+0x92/0x3a0 [ 126.896117] sysvec_call_function_single+0x89/0xc0 [ 126.896799] [ 126.897111] [ 126.897426] asm_sysvec_call_function_single+0x16/0x20 [ 126.898138] RIP: 0010:unwind_next_frame+0x232/0x20b0 [ 126.898832] Code: 00 00 fc ff df 48 8d 3c 95 48 b1 26 86 49 89 f8 49 c1 e8 03 45 0f b6 04 00 48 89 f8 83 e0 07 83 c0 03 44 38 c0 7c 30 45 84 c0 <74> 2b 48 89 54 24 30 48 89 74 24 28 89 4c 24 20 44 89 5c 24 18 e8 [ 126.901228] RSP: 0018:ffff888019e3f8f0 EFLAGS: 00000246 [ 126.901936] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 00000000000039c1 [ 126.902877] RDX: 0000000000000ad7 RSI: 0000000000000ad6 RDI: ffffffff8626dca4 [ 126.903783] RBP: ffff888019e3fa18 R08: 0000000000000000 R09: ffffffff85e3c336 [ 126.904734] R10: ffffed10033c7f45 R11: 000000000003603d R12: ffff888019e3fa01 [ 126.905685] R13: ffff888019e3fa20 R14: ffff888019e3f9c0 R15: ffffffff810ad6fe [ 126.906630] ? arch_stack_walk+0x5e/0xf0 [ 126.907216] ? arch_stack_walk+0x5f/0xf0 [ 126.907784] ? get_stack_info_noinstr+0x12/0xf0 [ 126.908427] __unwind_start+0x50f/0x7c0 [ 126.908992] ? write_profile+0x3e0/0x3e0 [ 126.909561] arch_stack_walk+0x5f/0xf0 [ 126.910119] ? arch_stack_walk+0x5f/0xf0 [ 126.910690] stack_trace_save+0x8c/0xc0 [ 126.911240] ? filter_irq_stacks+0x90/0x90 [ 126.911817] ? lockdep_init_map_type+0x21a/0x7e0 [ 126.912475] ? __raw_spin_lock_init+0x36/0x110 [ 126.913123] __create_object+0x389/0xc10 [ 126.913676] ? kasan_set_track+0x21/0x30 [ 126.914239] kmem_cache_alloc_bulk+0x3fe/0x7a0 [ 126.914877] mas_alloc_nodes+0x2ff/0x800 [ 126.915453] mas_preallocate+0x1bb/0x360 [ 126.916019] mmap_region+0x774/0x1a00 [ 126.916579] ? do_munmap+0x100/0x100 [ 126.917104] ? security_mmap_addr+0x79/0xa0 [ 126.917692] ? get_unmapped_area+0x1e5/0x3e0 [ 126.918308] do_mmap+0x828/0xf40 [ 126.918802] vm_mmap_pgoff+0x1af/0x270 [ 126.919345] ? randomize_page+0xb0/0xb0 [ 126.919908] ksys_mmap_pgoff+0x3d0/0x4f0 [ 126.920473] do_syscall_64+0x3b/0x90 [ 126.921011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.921717] RIP: 0033:0x7fbe7eea9d82 [ 126.922225] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00 [ 126.924565] RSP: 002b:00007ffd4d2cd908 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.925536] RAX: ffffffffffffffda RBX: 0000000000000802 RCX: 00007fbe7eea9d82 [ 126.926445] RDX: 0000000000000001 RSI: 00000000001c4508 RDI: 0000000000000000 [ 126.927389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.928330] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fbe7ee88a20 [ 126.929286] R13: 00007ffd4d2cd920 R14: 0000000000000000 R15: 00007ffd4d2cdd40 [ 126.930259] [ 126.930590] irq event stamp: 6582 [ 126.931052] hardirqs last enabled at (6581): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 126.932300] hardirqs last disabled at (6582): [] sysvec_call_function_single+0xb/0xc0 [ 126.933560] softirqs last enabled at (6436): [] __irq_exit_rcu+0x11b/0x180 [ 126.934697] softirqs last disabled at (6403): [] __irq_exit_rcu+0x11b/0x180 [ 126.935836] ---[ end trace 0000000000000000 ]--- [ 126.936526] ------------[ cut here ]------------ [ 126.937149] WARNING: CPU: 0 PID: 3850 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 126.938441] Modules linked in: [ 126.938878] CPU: 0 PID: 3850 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220919 #1 [ 126.940061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.941558] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 126.942378] Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d 7d 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 126.944772] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 [ 126.945479] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.946428] RDX: ffff88800c691ac0 RSI: ffffffff81555255 RDI: 0000000000000005 [ 126.947370] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.948317] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 126.949276] R13: ffff888008660670 R14: 0000000000000001 R15: 0000000000000001 [ 126.950233] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.951298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.952076] CR2: 00007fbe7eba58e0 CR3: 000000001875e000 CR4: 0000000000350ef0 [ 126.953046] Call Trace: [ 126.953400] [ 126.953702] ? lock_is_held_type+0xd7/0x130 [ 126.954298] ? perf_event_update_time+0x285/0x380 [ 126.954968] list_del_event+0x524/0x860 [ 126.955532] __perf_remove_from_context+0xd2/0xb20 [ 126.956211] event_function+0x297/0x3d0 [ 126.956778] ? perf_output_read+0xf80/0xf80 [ 126.957376] remote_function+0x125/0x1b0 [ 126.957938] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.958670] ? perf_duration_warn+0x40/0x40 [ 126.959268] __sysvec_call_function_single+0x92/0x3a0 [ 126.959972] sysvec_call_function_single+0x89/0xc0 [ 126.960667] [ 126.960983] [ 126.961302] asm_sysvec_call_function_single+0x16/0x20 [ 126.962025] RIP: 0010:unwind_next_frame+0x232/0x20b0 [ 126.962722] Code: 00 00 fc ff df 48 8d 3c 95 48 b1 26 86 49 89 f8 49 c1 e8 03 45 0f b6 04 00 48 89 f8 83 e0 07 83 c0 03 44 38 c0 7c 30 45 84 c0 <74> 2b 48 89 54 24 30 48 89 74 24 28 89 4c 24 20 44 89 5c 24 18 e8 [ 126.965123] RSP: 0018:ffff888019e3f8f0 EFLAGS: 00000246 [ 126.965837] RAX: 0000000000000007 RBX: 0000000000000001 RCX: 00000000000039c1 [ 126.966784] RDX: 0000000000000ad7 RSI: 0000000000000ad6 RDI: ffffffff8626dca4 [ 126.967734] RBP: ffff888019e3fa18 R08: 0000000000000000 R09: ffffffff85e3c336 [ 126.968693] R10: ffffed10033c7f45 R11: 000000000003603d R12: ffff888019e3fa01 [ 126.969647] R13: ffff888019e3fa20 R14: ffff888019e3f9c0 R15: ffffffff810ad6fe [ 126.970594] ? arch_stack_walk+0x5e/0xf0 [ 126.971189] ? arch_stack_walk+0x5f/0xf0 [ 126.971747] ? get_stack_info_noinstr+0x12/0xf0 [ 126.972366] __unwind_start+0x50f/0x7c0 [ 126.972921] ? write_profile+0x3e0/0x3e0 [ 126.973466] arch_stack_walk+0x5f/0xf0 [ 126.974003] ? arch_stack_walk+0x5f/0xf0 [ 126.974561] stack_trace_save+0x8c/0xc0 [ 126.975094] ? filter_irq_stacks+0x90/0x90 [ 126.975648] ? lockdep_init_map_type+0x21a/0x7e0 [ 126.976285] ? __raw_spin_lock_init+0x36/0x110 [ 126.976907] __create_object+0x389/0xc10 [ 126.977440] ? kasan_set_track+0x21/0x30 [ 126.977990] kmem_cache_alloc_bulk+0x3fe/0x7a0 [ 126.978611] mas_alloc_nodes+0x2ff/0x800 [ 126.979168] mas_preallocate+0x1bb/0x360 [ 126.979719] mmap_region+0x774/0x1a00 [ 126.980242] ? do_munmap+0x100/0x100 [ 126.980767] ? security_mmap_addr+0x79/0xa0 [ 126.981344] ? get_unmapped_area+0x1e5/0x3e0 [ 126.981933] do_mmap+0x828/0xf40 [ 126.982423] vm_mmap_pgoff+0x1af/0x270 [ 126.982946] ? randomize_page+0xb0/0xb0 [ 126.983493] ksys_mmap_pgoff+0x3d0/0x4f0 [ 126.984040] do_syscall_64+0x3b/0x90 [ 126.984544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.985233] RIP: 0033:0x7fbe7eea9d82 [ 126.985730] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00 [ 126.988093] RSP: 002b:00007ffd4d2cd908 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.989084] RAX: ffffffffffffffda RBX: 0000000000000802 RCX: 00007fbe7eea9d82 [ 126.990011] RDX: 0000000000000001 RSI: 00000000001c4508 RDI: 0000000000000000 [ 126.990938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.991881] R10: 0000000000000802 R11: 0000000000000246 R12: 00007fbe7ee88a20 [ 126.992828] R13: 00007ffd4d2cd920 R14: 0000000000000000 R15: 00007ffd4d2cdd40 [ 126.993798] [ 126.994122] irq event stamp: 6582 [ 126.994579] hardirqs last enabled at (6581): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 126.995836] hardirqs last disabled at (6582): [] sysvec_call_function_single+0xb/0xc0 [ 126.997108] softirqs last enabled at (6436): [] __irq_exit_rcu+0x11b/0x180 [ 126.998224] softirqs last disabled at (6403): [] __irq_exit_rcu+0x11b/0x180 [ 126.999337] ---[ end trace 0000000000000000 ]--- [ 130.794439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.797410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.798919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.802900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.804649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.807787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.813396] Bluetooth: hci0: HCI_REQ-0x0c1a [ 130.856665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.860297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.863633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.868879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.870551] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.872889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.877521] Bluetooth: hci2: HCI_REQ-0x0c1a [ 130.906354] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.937268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.938762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.939529] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.941753] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.944448] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.946290] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 130.947591] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.954785] Bluetooth: hci7: HCI_REQ-0x0c1a [ 130.955643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.971326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.972917] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.976479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.978983] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.980296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.981415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.990830] Bluetooth: hci4: HCI_REQ-0x0c1a [ 131.004390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 131.017014] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 131.018630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 131.027493] Bluetooth: hci6: HCI_REQ-0x0c1a [ 132.874756] Bluetooth: hci0: command 0x0409 tx timeout [ 132.938849] Bluetooth: hci2: command 0x0409 tx timeout [ 133.002923] Bluetooth: hci4: command 0x0409 tx timeout [ 133.003593] Bluetooth: hci7: command 0x0409 tx timeout [ 133.066783] Bluetooth: hci6: command 0x0409 tx timeout [ 134.922788] Bluetooth: hci0: command 0x041b tx timeout [ 134.986884] Bluetooth: hci2: command 0x041b tx timeout [ 135.050857] Bluetooth: hci7: command 0x041b tx timeout [ 135.052201] Bluetooth: hci4: command 0x041b tx timeout [ 135.114940] Bluetooth: hci6: command 0x041b tx timeout VM DIAGNOSIS: 13:28:35 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b2e71 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88806ce09830 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b2e60 RIP=ffffffff822b2ec9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbe7eba58e0 CR3=000000001875e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11007e24f5c RCX=0000000000000000 RDX=ffff8880103a9ac0 RSI=ffffffff813bc163 RDI=0000000000000005 RBP=ffff88803f127b90 RSP=ffff88803f127ac0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bc165 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555654a400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2df22000 CR3=0000000020510000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007f86636027c8 00007f86636027c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000