Warning: Permanently added '[localhost]:46641' (ECDSA) to the list of known hosts. 2022/09/23 13:13:57 fuzzer started 2022/09/23 13:13:57 dialing manager at localhost:38881 syzkaller login: [ 35.769925] cgroup: Unknown subsys name 'net' [ 35.849660] cgroup: Unknown subsys name 'rlimit' 2022/09/23 13:14:12 syscalls: 2215 2022/09/23 13:14:12 code coverage: enabled 2022/09/23 13:14:12 comparison tracing: enabled 2022/09/23 13:14:12 extra coverage: enabled 2022/09/23 13:14:12 setuid sandbox: enabled 2022/09/23 13:14:12 namespace sandbox: enabled 2022/09/23 13:14:12 Android sandbox: enabled 2022/09/23 13:14:12 fault injection: enabled 2022/09/23 13:14:12 leak checking: enabled 2022/09/23 13:14:12 net packet injection: enabled 2022/09/23 13:14:12 net device setup: enabled 2022/09/23 13:14:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/23 13:14:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/23 13:14:12 USB emulation: enabled 2022/09/23 13:14:12 hci packet injection: enabled 2022/09/23 13:14:12 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/23 13:14:12 802.15.4 emulation: enabled 2022/09/23 13:14:12 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/23 13:14:12 fetching corpus: 50, signal 29383/32786 (executing program) 2022/09/23 13:14:13 fetching corpus: 100, signal 42059/46818 (executing program) 2022/09/23 13:14:13 fetching corpus: 150, signal 47135/53295 (executing program) 2022/09/23 13:14:13 fetching corpus: 200, signal 54756/62079 (executing program) 2022/09/23 13:14:13 fetching corpus: 250, signal 59557/68012 (executing program) 2022/09/23 13:14:13 fetching corpus: 300, signal 64537/74046 (executing program) 2022/09/23 13:14:13 fetching corpus: 350, signal 68668/79183 (executing program) 2022/09/23 13:14:13 fetching corpus: 400, signal 73962/85356 (executing program) 2022/09/23 13:14:13 fetching corpus: 450, signal 78252/90461 (executing program) 2022/09/23 13:14:13 fetching corpus: 500, signal 81872/94952 (executing program) 2022/09/23 13:14:14 fetching corpus: 550, signal 84730/98664 (executing program) 2022/09/23 13:14:14 fetching corpus: 600, signal 86844/101724 (executing program) 2022/09/23 13:14:14 fetching corpus: 650, signal 89109/104853 (executing program) 2022/09/23 13:14:14 fetching corpus: 700, signal 91825/108353 (executing program) 2022/09/23 13:14:14 fetching corpus: 750, signal 94225/111462 (executing program) 2022/09/23 13:14:14 fetching corpus: 800, signal 97653/115455 (executing program) 2022/09/23 13:14:14 fetching corpus: 850, signal 100245/118677 (executing program) 2022/09/23 13:14:14 fetching corpus: 900, signal 102237/121311 (executing program) 2022/09/23 13:14:14 fetching corpus: 950, signal 103320/123182 (executing program) 2022/09/23 13:14:15 fetching corpus: 1000, signal 104490/125098 (executing program) 2022/09/23 13:14:15 fetching corpus: 1050, signal 106421/127631 (executing program) 2022/09/23 13:14:15 fetching corpus: 1100, signal 108403/130163 (executing program) 2022/09/23 13:14:15 fetching corpus: 1150, signal 111486/133498 (executing program) 2022/09/23 13:14:15 fetching corpus: 1200, signal 114723/136825 (executing program) 2022/09/23 13:14:15 fetching corpus: 1250, signal 116247/138828 (executing program) 2022/09/23 13:14:15 fetching corpus: 1300, signal 117468/140570 (executing program) 2022/09/23 13:14:15 fetching corpus: 1350, signal 119359/142774 (executing program) 2022/09/23 13:14:16 fetching corpus: 1400, signal 120809/144649 (executing program) 2022/09/23 13:14:16 fetching corpus: 1450, signal 123733/147594 (executing program) 2022/09/23 13:14:16 fetching corpus: 1500, signal 125100/149325 (executing program) 2022/09/23 13:14:16 fetching corpus: 1550, signal 126806/151276 (executing program) 2022/09/23 13:14:16 fetching corpus: 1600, signal 127977/152851 (executing program) 2022/09/23 13:14:16 fetching corpus: 1650, signal 130032/154907 (executing program) 2022/09/23 13:14:16 fetching corpus: 1700, signal 132119/156958 (executing program) 2022/09/23 13:14:16 fetching corpus: 1750, signal 133834/158748 (executing program) 2022/09/23 13:14:17 fetching corpus: 1800, signal 134435/159865 (executing program) 2022/09/23 13:14:17 fetching corpus: 1850, signal 135959/161511 (executing program) 2022/09/23 13:14:17 fetching corpus: 1900, signal 136979/162797 (executing program) 2022/09/23 13:14:17 fetching corpus: 1950, signal 138261/164266 (executing program) 2022/09/23 13:14:17 fetching corpus: 2000, signal 139398/165600 (executing program) 2022/09/23 13:14:17 fetching corpus: 2050, signal 140212/166746 (executing program) 2022/09/23 13:14:17 fetching corpus: 2100, signal 141380/168054 (executing program) 2022/09/23 13:14:17 fetching corpus: 2150, signal 142931/169572 (executing program) 2022/09/23 13:14:18 fetching corpus: 2200, signal 144898/171292 (executing program) 2022/09/23 13:14:18 fetching corpus: 2250, signal 147602/173325 (executing program) 2022/09/23 13:14:18 fetching corpus: 2300, signal 148436/174372 (executing program) 2022/09/23 13:14:18 fetching corpus: 2350, signal 149503/175481 (executing program) 2022/09/23 13:14:18 fetching corpus: 2400, signal 150319/176435 (executing program) 2022/09/23 13:14:18 fetching corpus: 2450, signal 151947/177784 (executing program) 2022/09/23 13:14:18 fetching corpus: 2500, signal 152950/178796 (executing program) 2022/09/23 13:14:19 fetching corpus: 2550, signal 155248/180461 (executing program) 2022/09/23 13:14:19 fetching corpus: 2600, signal 157016/181819 (executing program) 2022/09/23 13:14:19 fetching corpus: 2650, signal 157943/182727 (executing program) 2022/09/23 13:14:19 fetching corpus: 2700, signal 160686/184509 (executing program) 2022/09/23 13:14:19 fetching corpus: 2750, signal 161695/185410 (executing program) 2022/09/23 13:14:19 fetching corpus: 2800, signal 162662/186275 (executing program) 2022/09/23 13:14:19 fetching corpus: 2850, signal 163806/187200 (executing program) 2022/09/23 13:14:20 fetching corpus: 2900, signal 165108/188160 (executing program) 2022/09/23 13:14:20 fetching corpus: 2950, signal 165816/188883 (executing program) 2022/09/23 13:14:20 fetching corpus: 3000, signal 167216/189805 (executing program) 2022/09/23 13:14:20 fetching corpus: 3050, signal 168150/190524 (executing program) 2022/09/23 13:14:20 fetching corpus: 3100, signal 170004/191628 (executing program) 2022/09/23 13:14:20 fetching corpus: 3150, signal 170504/192131 (executing program) 2022/09/23 13:14:20 fetching corpus: 3200, signal 171551/192873 (executing program) 2022/09/23 13:14:20 fetching corpus: 3250, signal 172368/193495 (executing program) 2022/09/23 13:14:21 fetching corpus: 3300, signal 173109/194079 (executing program) 2022/09/23 13:14:21 fetching corpus: 3350, signal 173633/194565 (executing program) 2022/09/23 13:14:21 fetching corpus: 3400, signal 175059/195317 (executing program) 2022/09/23 13:14:21 fetching corpus: 3450, signal 175871/195856 (executing program) 2022/09/23 13:14:21 fetching corpus: 3500, signal 176611/196364 (executing program) 2022/09/23 13:14:21 fetching corpus: 3550, signal 177881/197088 (executing program) 2022/09/23 13:14:21 fetching corpus: 3600, signal 178400/197539 (executing program) 2022/09/23 13:14:21 fetching corpus: 3650, signal 179367/198084 (executing program) 2022/09/23 13:14:22 fetching corpus: 3700, signal 180365/198650 (executing program) 2022/09/23 13:14:22 fetching corpus: 3750, signal 181046/199096 (executing program) 2022/09/23 13:14:22 fetching corpus: 3800, signal 181774/199515 (executing program) 2022/09/23 13:14:22 fetching corpus: 3850, signal 183032/200017 (executing program) 2022/09/23 13:14:22 fetching corpus: 3900, signal 183709/200442 (executing program) 2022/09/23 13:14:22 fetching corpus: 3950, signal 184857/200898 (executing program) 2022/09/23 13:14:22 fetching corpus: 4000, signal 185753/201296 (executing program) 2022/09/23 13:14:22 fetching corpus: 4050, signal 186594/201619 (executing program) 2022/09/23 13:14:23 fetching corpus: 4100, signal 187098/201897 (executing program) 2022/09/23 13:14:23 fetching corpus: 4150, signal 188167/202287 (executing program) 2022/09/23 13:14:23 fetching corpus: 4200, signal 188706/202555 (executing program) 2022/09/23 13:14:23 fetching corpus: 4250, signal 189774/202896 (executing program) 2022/09/23 13:14:23 fetching corpus: 4300, signal 190663/203183 (executing program) 2022/09/23 13:14:23 fetching corpus: 4350, signal 191243/203422 (executing program) 2022/09/23 13:14:23 fetching corpus: 4400, signal 192078/203674 (executing program) 2022/09/23 13:14:23 fetching corpus: 4450, signal 192722/203884 (executing program) 2022/09/23 13:14:23 fetching corpus: 4500, signal 193318/204106 (executing program) 2022/09/23 13:14:24 fetching corpus: 4550, signal 193943/204303 (executing program) 2022/09/23 13:14:24 fetching corpus: 4600, signal 194505/204449 (executing program) 2022/09/23 13:14:24 fetching corpus: 4650, signal 195098/204600 (executing program) 2022/09/23 13:14:24 fetching corpus: 4700, signal 196061/204978 (executing program) 2022/09/23 13:14:24 fetching corpus: 4750, signal 196484/205099 (executing program) 2022/09/23 13:14:24 fetching corpus: 4800, signal 197128/205203 (executing program) 2022/09/23 13:14:24 fetching corpus: 4850, signal 197844/205306 (executing program) 2022/09/23 13:14:24 fetching corpus: 4900, signal 198867/205523 (executing program) 2022/09/23 13:14:25 fetching corpus: 4950, signal 199594/205618 (executing program) 2022/09/23 13:14:25 fetching corpus: 4970, signal 199978/205662 (executing program) 2022/09/23 13:14:25 fetching corpus: 4970, signal 199978/205662 (executing program) 2022/09/23 13:14:27 starting 8 fuzzer processes 13:14:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x7) fadvise64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x81, 0x2, 0x0, 0x0, 0x100a1, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x4}, 0x8, 0x4, 0xffff, 0x4, 0x40, 0x0, 0xe000, 0x0, 0x9, 0x0, 0x7}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000001) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x28e4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000880), &(0x7f00000008c0)) 13:14:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_elf32(r0, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 13:14:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x3c}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 13:14:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xe0000064) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1600010d) 13:14:28 executing program 4: sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4040850) fork() wait4(0x0, 0x0, 0x2, &(0x7f0000000300)) getpid() wait4(0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x90, 0x0) getrusage(0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) fork() socket$unix(0x1, 0x1, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000ac0), 0x2, 0x0) [ 66.210595] audit: type=1400 audit(1663938868.037:6): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:14:28 executing program 6: clock_adjtime(0x0, &(0x7f0000000200)={0xfffffffffffffffd}) 13:14:28 executing program 5: clock_adjtime(0x0, &(0x7f0000000300)={0x3, 0x0, 0x20000}) clock_adjtime(0x0, &(0x7f0000000a00)={0x2}) 13:14:28 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000009140)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) [ 67.535524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.537482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.539227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.542751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.544612] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.546264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.552620] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.598840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.606460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.614045] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.615961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.618689] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.620659] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.621981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.627226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.647603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.649047] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.650791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.653656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.657141] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.659224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.661401] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.662619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.664232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.667279] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.670441] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.674178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.677305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.678893] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.680186] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.680693] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.693993] Bluetooth: hci6: HCI_REQ-0x0c1a [ 67.694517] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.698223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.699443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.702693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.704932] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 67.706177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.708377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.712302] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.713492] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.714839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.724440] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.724576] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.726809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.734453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.735924] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.737406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.741573] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.793038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.812583] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.814342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.839332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.851396] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.862831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.879336] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.617720] Bluetooth: hci0: command 0x0409 tx timeout [ 69.744191] Bluetooth: hci2: command 0x0409 tx timeout [ 69.744781] Bluetooth: hci1: command 0x0409 tx timeout [ 69.745391] Bluetooth: hci5: command 0x0409 tx timeout [ 69.745895] Bluetooth: hci3: command 0x0409 tx timeout [ 69.746412] Bluetooth: hci7: command 0x0409 tx timeout [ 69.808181] Bluetooth: hci6: command 0x0409 tx timeout [ 69.936705] Bluetooth: hci4: command 0x0409 tx timeout [ 71.664175] Bluetooth: hci0: command 0x041b tx timeout [ 71.792360] Bluetooth: hci7: command 0x041b tx timeout [ 71.793209] Bluetooth: hci3: command 0x041b tx timeout [ 71.793939] Bluetooth: hci5: command 0x041b tx timeout [ 71.794921] Bluetooth: hci1: command 0x041b tx timeout [ 71.795699] Bluetooth: hci2: command 0x041b tx timeout [ 71.857246] Bluetooth: hci6: command 0x041b tx timeout [ 71.984230] Bluetooth: hci4: command 0x041b tx timeout [ 73.713154] Bluetooth: hci0: command 0x040f tx timeout [ 73.841171] Bluetooth: hci2: command 0x040f tx timeout [ 73.841661] Bluetooth: hci1: command 0x040f tx timeout [ 73.842068] Bluetooth: hci5: command 0x040f tx timeout [ 73.842949] Bluetooth: hci3: command 0x040f tx timeout [ 73.843621] Bluetooth: hci7: command 0x040f tx timeout [ 73.905129] Bluetooth: hci6: command 0x040f tx timeout [ 74.032136] Bluetooth: hci4: command 0x040f tx timeout [ 75.761168] Bluetooth: hci0: command 0x0419 tx timeout [ 75.889177] Bluetooth: hci7: command 0x0419 tx timeout [ 75.889621] Bluetooth: hci3: command 0x0419 tx timeout [ 75.890036] Bluetooth: hci5: command 0x0419 tx timeout [ 75.890790] Bluetooth: hci1: command 0x0419 tx timeout [ 75.891219] Bluetooth: hci2: command 0x0419 tx timeout [ 75.952187] Bluetooth: hci6: command 0x0419 tx timeout [ 76.080142] Bluetooth: hci4: command 0x0419 tx timeout [ 123.929014] audit: type=1400 audit(1663938925.757:7): avc: denied { watch_reads } for pid=3732 comm="syz-executor.3" path="/syzkaller-testdir360184220/syzkaller.PljWBG/0/file0" dev="sda" ino=15975 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 13:15:25 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) 13:15:26 executing program 7: syz_genetlink_get_family_id$mptcp(&(0x7f0000005900), 0xffffffffffffffff) utime(&(0x7f0000005ac0)='./file0\x00', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000005c00), 0xffffffffffffffff) 13:15:26 executing program 3: shmget$private(0x0, 0x2000, 0xc80, &(0x7f0000ffe000/0x2000)=nil) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = io_uring_setup(0x6346, &(0x7f0000001900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)=[0xffffffffffffffff]}, 0x1) [ 126.139587] audit: type=1400 audit(1663938927.967:8): avc: denied { open } for pid=3876 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.141335] audit: type=1400 audit(1663938927.968:9): avc: denied { kernel } for pid=3876 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.149821] ------------[ cut here ]------------ [ 126.149854] [ 126.149860] ====================================================== [ 126.149866] WARNING: possible circular locking dependency detected [ 126.149872] 6.0.0-rc6-next-20220923 #1 Not tainted [ 126.149883] ------------------------------------------------------ [ 126.149888] syz-executor.0/3879 is trying to acquire lock: [ 126.149899] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.149960] [ 126.149960] but task is already holding lock: [ 126.149964] ffff88803e59c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.150012] [ 126.150012] which lock already depends on the new lock. [ 126.150012] [ 126.150017] [ 126.150017] the existing dependency chain (in reverse order) is: [ 126.150023] [ 126.150023] -> #3 (&ctx->lock){....}-{2:2}: [ 126.150046] _raw_spin_lock+0x2a/0x40 [ 126.150083] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.150109] __schedule+0xedd/0x2470 [ 126.150132] schedule+0xda/0x1b0 [ 126.150154] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.150174] syscall_exit_to_user_mode+0x19/0x40 [ 126.150196] do_syscall_64+0x48/0x90 [ 126.150225] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.150246] [ 126.150246] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.150270] _raw_spin_lock_nested+0x30/0x40 [ 126.150302] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.150324] task_fork_fair+0x63/0x4d0 [ 126.150352] sched_cgroup_fork+0x3d0/0x540 [ 126.150376] copy_process+0x4183/0x6e20 [ 126.150393] kernel_clone+0xe7/0x890 [ 126.150410] user_mode_thread+0xad/0xf0 [ 126.150428] rest_init+0x24/0x250 [ 126.150447] arch_call_rest_init+0xf/0x14 [ 126.150476] start_kernel+0x4c1/0x4e6 [ 126.150502] secondary_startup_64_no_verify+0xe0/0xeb [ 126.150526] [ 126.150526] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.150550] _raw_spin_lock_irqsave+0x39/0x60 [ 126.150582] try_to_wake_up+0xab/0x1930 [ 126.150605] up+0x75/0xb0 [ 126.150628] __up_console_sem+0x6e/0x80 [ 126.150655] console_unlock+0x46a/0x590 [ 126.150682] vt_ioctl+0x2822/0x2ca0 [ 126.150704] tty_ioctl+0x7c4/0x1700 [ 126.150724] __x64_sys_ioctl+0x19a/0x210 [ 126.150749] do_syscall_64+0x3b/0x90 [ 126.150778] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.150799] [ 126.150799] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.150823] __lock_acquire+0x2a02/0x5e70 [ 126.150852] lock_acquire+0x1a2/0x530 [ 126.150879] _raw_spin_lock_irqsave+0x39/0x60 [ 126.150911] down_trylock+0xe/0x70 [ 126.150936] __down_trylock_console_sem+0x3b/0xd0 [ 126.150964] vprintk_emit+0x16b/0x560 [ 126.150992] vprintk+0x84/0xa0 [ 126.151019] _printk+0xba/0xf1 [ 126.151038] report_bug.cold+0x72/0xab [ 126.151065] handle_bug+0x3c/0x70 [ 126.151093] exc_invalid_op+0x14/0x50 [ 126.151122] asm_exc_invalid_op+0x16/0x20 [ 126.151141] group_sched_out.part.0+0x2c7/0x460 [ 126.151160] ctx_sched_out+0x8f1/0xc10 [ 126.151178] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.151200] __schedule+0xedd/0x2470 [ 126.151222] schedule+0xda/0x1b0 [ 126.151245] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.151263] syscall_exit_to_user_mode+0x19/0x40 [ 126.151285] do_syscall_64+0x48/0x90 [ 126.151313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.151334] [ 126.151334] other info that might help us debug this: [ 126.151334] [ 126.151338] Chain exists of: [ 126.151338] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.151338] [ 126.151364] Possible unsafe locking scenario: [ 126.151364] [ 126.151368] CPU0 CPU1 [ 126.151372] ---- ---- [ 126.151376] lock(&ctx->lock); [ 126.151385] lock(&rq->__lock); [ 126.151396] lock(&ctx->lock); [ 126.151407] lock((console_sem).lock); [ 126.151417] [ 126.151417] *** DEADLOCK *** [ 126.151417] [ 126.151420] 2 locks held by syz-executor.0/3879: [ 126.151432] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.151483] #1: ffff88803e59c420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.151532] [ 126.151532] stack backtrace: [ 126.151536] CPU: 0 PID: 3879 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220923 #1 [ 126.151557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.151571] Call Trace: [ 126.151576] [ 126.151583] dump_stack_lvl+0x8b/0xb3 [ 126.151614] check_noncircular+0x263/0x2e0 [ 126.151642] ? format_decode+0x26c/0xb50 [ 126.151670] ? print_circular_bug+0x450/0x450 [ 126.151700] ? enable_ptr_key_workfn+0x20/0x20 [ 126.151728] ? format_decode+0x26c/0xb50 [ 126.151758] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.151788] __lock_acquire+0x2a02/0x5e70 [ 126.151826] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.151865] lock_acquire+0x1a2/0x530 [ 126.151894] ? down_trylock+0xe/0x70 [ 126.151923] ? lock_release+0x750/0x750 [ 126.151959] ? vprintk+0x84/0xa0 [ 126.151990] _raw_spin_lock_irqsave+0x39/0x60 [ 126.152023] ? down_trylock+0xe/0x70 [ 126.152050] down_trylock+0xe/0x70 [ 126.152077] ? vprintk+0x84/0xa0 [ 126.152106] __down_trylock_console_sem+0x3b/0xd0 [ 126.152137] vprintk_emit+0x16b/0x560 [ 126.152169] vprintk+0x84/0xa0 [ 126.152199] _printk+0xba/0xf1 [ 126.152219] ? record_print_text.cold+0x16/0x16 [ 126.152247] ? report_bug.cold+0x66/0xab [ 126.152277] ? group_sched_out.part.0+0x2c7/0x460 [ 126.152298] report_bug.cold+0x72/0xab [ 126.152330] handle_bug+0x3c/0x70 [ 126.152360] exc_invalid_op+0x14/0x50 [ 126.152391] asm_exc_invalid_op+0x16/0x20 [ 126.152412] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.152436] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.152456] RSP: 0018:ffff88801bcffc48 EFLAGS: 00010006 [ 126.152471] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.152485] RDX: ffff88801da78000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 126.152498] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 126.152511] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88803e59c400 [ 126.152524] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 126.152543] ? group_sched_out.part.0+0x2c7/0x460 [ 126.152567] ? group_sched_out.part.0+0x2c7/0x460 [ 126.152590] ctx_sched_out+0x8f1/0xc10 [ 126.152613] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.152640] ? lock_is_held_type+0xd7/0x130 [ 126.152664] ? __perf_cgroup_move+0x160/0x160 [ 126.152685] ? set_next_entity+0x304/0x550 [ 126.152715] ? update_curr+0x267/0x740 [ 126.152747] ? lock_is_held_type+0xd7/0x130 [ 126.152771] __schedule+0xedd/0x2470 [ 126.152800] ? io_schedule_timeout+0x150/0x150 [ 126.152828] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.152863] schedule+0xda/0x1b0 [ 126.152888] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.152910] syscall_exit_to_user_mode+0x19/0x40 [ 126.152933] do_syscall_64+0x48/0x90 [ 126.152963] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.152985] RIP: 0033:0x7f9cf7923b19 [ 126.153000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.153019] RSP: 002b:00007f9cf4e99218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.153038] RAX: 0000000000000001 RBX: 00007f9cf7a36f68 RCX: 00007f9cf7923b19 [ 126.153051] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9cf7a36f6c [ 126.153064] RBP: 00007f9cf7a36f60 R08: 000000000000000e R09: 0000000000000000 [ 126.153077] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9cf7a36f6c [ 126.153090] R13: 00007ffdb120839f R14: 00007f9cf4e99300 R15: 0000000000022000 [ 126.153112] [ 126.245631] WARNING: CPU: 0 PID: 3879 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.246726] Modules linked in: [ 126.247115] CPU: 0 PID: 3879 Comm: syz-executor.0 Not tainted 6.0.0-rc6-next-20220923 #1 [ 126.248076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.249391] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.250038] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.252171] RSP: 0018:ffff88801bcffc48 EFLAGS: 00010006 [ 126.252814] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.253693] RDX: ffff88801da78000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 126.254546] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 126.255403] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88803e59c400 [ 126.256246] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002 [ 126.257087] FS: 00007f9cf4e99700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.258042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.258730] CR2: 00005642706eefa8 CR3: 000000003ea62000 CR4: 0000000000350ef0 [ 126.259568] Call Trace: [ 126.259881] [ 126.260162] ctx_sched_out+0x8f1/0xc10 [ 126.260635] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.261256] ? lock_is_held_type+0xd7/0x130 [ 126.261799] ? __perf_cgroup_move+0x160/0x160 [ 126.262357] ? set_next_entity+0x304/0x550 [ 126.262883] ? update_curr+0x267/0x740 [ 126.263373] ? lock_is_held_type+0xd7/0x130 [ 126.263901] __schedule+0xedd/0x2470 [ 126.264366] ? io_schedule_timeout+0x150/0x150 [ 126.264932] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.265532] schedule+0xda/0x1b0 [ 126.265947] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.266533] syscall_exit_to_user_mode+0x19/0x40 [ 126.267093] do_syscall_64+0x48/0x90 [ 126.267547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.268167] RIP: 0033:0x7f9cf7923b19 [ 126.268609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.270735] RSP: 002b:00007f9cf4e99218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.271612] RAX: 0000000000000001 RBX: 00007f9cf7a36f68 RCX: 00007f9cf7923b19 [ 126.272445] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9cf7a36f6c [ 126.273281] RBP: 00007f9cf7a36f60 R08: 000000000000000e R09: 0000000000000000 [ 126.274123] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9cf7a36f6c [ 126.274950] R13: 00007ffdb120839f R14: 00007f9cf4e99300 R15: 0000000000022000 [ 126.275794] [ 126.276084] irq event stamp: 908 [ 126.276479] hardirqs last enabled at (907): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.277569] hardirqs last disabled at (908): [] __schedule+0x1225/0x2470 [ 126.278533] softirqs last enabled at (740): [] __irq_exit_rcu+0x11b/0x180 [ 126.279528] softirqs last disabled at (563): [] __irq_exit_rcu+0x11b/0x180 [ 126.280522] ---[ end trace 0000000000000000 ]--- [ 129.047620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.048477] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.050986] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.053306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.055613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.057148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.063297] Bluetooth: hci2: HCI_REQ-0x0c1a [ 129.097237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.100157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.100830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.102507] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.110762] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.111742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.114292] Bluetooth: hci5: HCI_REQ-0x0c1a [ 131.056111] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 131.056646] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 131.120139] Bluetooth: hci2: command 0x0409 tx timeout [ 131.120208] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 131.184252] Bluetooth: hci5: command 0x0409 tx timeout [ 133.169143] Bluetooth: hci2: command 0x041b tx timeout [ 133.233254] Bluetooth: hci5: command 0x041b tx timeout [ 133.236329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.236980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.238186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.240835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.241746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.242699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.244564] Bluetooth: hci0: HCI_REQ-0x0c1a [ 135.216133] Bluetooth: hci2: command 0x040f tx timeout [ 135.280170] Bluetooth: hci5: command 0x040f tx timeout [ 135.281191] Bluetooth: hci0: command 0x0409 tx timeout [ 135.409137] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 135.472116] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 13:15:28 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88801bcff698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9cf4e99700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005642706eefa8 CR3=000000003ea62000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f9cf7a0a7c0 00007f9cf7a0a7c8 YMM02=0000000000000000 0000000000000000 00007f9cf7a0a7e0 00007f9cf7a0a7c0 YMM03=0000000000000000 0000000000000000 00007f9cf7a0a7c8 00007f9cf7a0a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffffffff0b7749a RBX=ffffffff85bba4d4 RCX=ffffffff81785067 RDX=0000000000000000 RSI=ffffffff85edd684 RDI=ffffffff85bba4b0 RBP=ffffffff85bba4b0 RSP=ffff88803fe472c0 R8 =ffffffff85edd684 R9 =ffffffff85edd4d8 R10=ffffed1007fc8e7e R11=000000000003603d R12=ffffffff85bba4fc R13=ffffffff85bba4b0 R14=ffffffff85bba4b0 R15=dffffc0000000000 RIP=ffffffff81119bef RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4235f718e0 CR3=000000000e3c0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000