Warning: Permanently added '[localhost]:25457' (ECDSA) to the list of known hosts. 2022/09/30 03:18:38 fuzzer started 2022/09/30 03:18:38 dialing manager at localhost:40535 syzkaller login: [ 45.367399] cgroup: Unknown subsys name 'net' [ 45.479840] cgroup: Unknown subsys name 'rlimit' 2022/09/30 03:18:52 syscalls: 2215 2022/09/30 03:18:52 code coverage: enabled 2022/09/30 03:18:52 comparison tracing: enabled 2022/09/30 03:18:52 extra coverage: enabled 2022/09/30 03:18:52 setuid sandbox: enabled 2022/09/30 03:18:52 namespace sandbox: enabled 2022/09/30 03:18:52 Android sandbox: enabled 2022/09/30 03:18:52 fault injection: enabled 2022/09/30 03:18:52 leak checking: enabled 2022/09/30 03:18:52 net packet injection: enabled 2022/09/30 03:18:52 net device setup: enabled 2022/09/30 03:18:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 03:18:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 03:18:52 USB emulation: enabled 2022/09/30 03:18:52 hci packet injection: enabled 2022/09/30 03:18:52 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 03:18:52 802.15.4 emulation: enabled 2022/09/30 03:18:52 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/30 03:18:53 fetching corpus: 50, signal 22812/26276 (executing program) 2022/09/30 03:18:53 fetching corpus: 100, signal 34554/39350 (executing program) 2022/09/30 03:18:53 fetching corpus: 150, signal 41732/47796 (executing program) 2022/09/30 03:18:53 fetching corpus: 200, signal 47855/55110 (executing program) 2022/09/30 03:18:53 fetching corpus: 250, signal 52222/60661 (executing program) 2022/09/30 03:18:53 fetching corpus: 300, signal 59904/69115 (executing program) 2022/09/30 03:18:53 fetching corpus: 350, signal 63790/73968 (executing program) 2022/09/30 03:18:53 fetching corpus: 400, signal 66178/77384 (executing program) 2022/09/30 03:18:53 fetching corpus: 450, signal 69117/81223 (executing program) 2022/09/30 03:18:53 fetching corpus: 500, signal 71303/84353 (executing program) 2022/09/30 03:18:54 fetching corpus: 550, signal 74654/88460 (executing program) 2022/09/30 03:18:54 fetching corpus: 600, signal 78058/92546 (executing program) 2022/09/30 03:18:54 fetching corpus: 650, signal 83127/97911 (executing program) 2022/09/30 03:18:54 fetching corpus: 700, signal 86064/101450 (executing program) 2022/09/30 03:18:54 fetching corpus: 750, signal 89354/105206 (executing program) 2022/09/30 03:18:54 fetching corpus: 800, signal 91714/108092 (executing program) 2022/09/30 03:18:54 fetching corpus: 850, signal 93100/110169 (executing program) 2022/09/30 03:18:54 fetching corpus: 900, signal 95187/112825 (executing program) 2022/09/30 03:18:55 fetching corpus: 950, signal 96846/115119 (executing program) 2022/09/30 03:18:55 fetching corpus: 1000, signal 98248/117047 (executing program) 2022/09/30 03:18:55 fetching corpus: 1050, signal 100864/119927 (executing program) 2022/09/30 03:18:55 fetching corpus: 1100, signal 102495/121984 (executing program) 2022/09/30 03:18:55 fetching corpus: 1150, signal 104534/124330 (executing program) 2022/09/30 03:18:55 fetching corpus: 1200, signal 106662/126701 (executing program) 2022/09/30 03:18:55 fetching corpus: 1250, signal 107936/128474 (executing program) 2022/09/30 03:18:55 fetching corpus: 1300, signal 109617/130432 (executing program) 2022/09/30 03:18:55 fetching corpus: 1350, signal 111757/132654 (executing program) 2022/09/30 03:18:56 fetching corpus: 1400, signal 115663/135996 (executing program) 2022/09/30 03:18:56 fetching corpus: 1450, signal 116988/137548 (executing program) 2022/09/30 03:18:56 fetching corpus: 1500, signal 119087/139567 (executing program) 2022/09/30 03:18:56 fetching corpus: 1550, signal 120474/141165 (executing program) 2022/09/30 03:18:56 fetching corpus: 1600, signal 122646/143114 (executing program) 2022/09/30 03:18:56 fetching corpus: 1650, signal 124696/144975 (executing program) 2022/09/30 03:18:56 fetching corpus: 1700, signal 125577/146082 (executing program) 2022/09/30 03:18:56 fetching corpus: 1750, signal 126491/147237 (executing program) 2022/09/30 03:18:56 fetching corpus: 1800, signal 128247/148801 (executing program) 2022/09/30 03:18:57 fetching corpus: 1850, signal 129101/149862 (executing program) 2022/09/30 03:18:57 fetching corpus: 1900, signal 130189/151048 (executing program) 2022/09/30 03:18:57 fetching corpus: 1950, signal 131435/152286 (executing program) 2022/09/30 03:18:57 fetching corpus: 2000, signal 132443/153355 (executing program) 2022/09/30 03:18:57 fetching corpus: 2050, signal 133442/154390 (executing program) 2022/09/30 03:18:57 fetching corpus: 2100, signal 135035/155838 (executing program) 2022/09/30 03:18:57 fetching corpus: 2150, signal 136384/157038 (executing program) 2022/09/30 03:18:57 fetching corpus: 2200, signal 137963/158290 (executing program) 2022/09/30 03:18:57 fetching corpus: 2250, signal 138988/159243 (executing program) 2022/09/30 03:18:58 fetching corpus: 2300, signal 140226/160275 (executing program) 2022/09/30 03:18:58 fetching corpus: 2350, signal 141281/161118 (executing program) 2022/09/30 03:18:58 fetching corpus: 2400, signal 141957/161829 (executing program) 2022/09/30 03:18:58 fetching corpus: 2450, signal 143215/162754 (executing program) 2022/09/30 03:18:58 fetching corpus: 2500, signal 143912/163414 (executing program) 2022/09/30 03:18:58 fetching corpus: 2550, signal 144916/164213 (executing program) 2022/09/30 03:18:58 fetching corpus: 2600, signal 145742/164883 (executing program) 2022/09/30 03:18:58 fetching corpus: 2650, signal 147801/166030 (executing program) 2022/09/30 03:18:59 fetching corpus: 2700, signal 148949/166794 (executing program) 2022/09/30 03:18:59 fetching corpus: 2750, signal 149894/167411 (executing program) 2022/09/30 03:18:59 fetching corpus: 2800, signal 151331/168454 (executing program) 2022/09/30 03:18:59 fetching corpus: 2850, signal 152331/169084 (executing program) 2022/09/30 03:18:59 fetching corpus: 2900, signal 152976/169567 (executing program) 2022/09/30 03:18:59 fetching corpus: 2950, signal 153862/170125 (executing program) 2022/09/30 03:18:59 fetching corpus: 3000, signal 155493/170897 (executing program) 2022/09/30 03:18:59 fetching corpus: 3050, signal 156050/171288 (executing program) 2022/09/30 03:18:59 fetching corpus: 3100, signal 156797/171777 (executing program) 2022/09/30 03:18:59 fetching corpus: 3150, signal 157645/172253 (executing program) 2022/09/30 03:19:00 fetching corpus: 3200, signal 159162/173008 (executing program) 2022/09/30 03:19:00 fetching corpus: 3250, signal 159993/173461 (executing program) 2022/09/30 03:19:00 fetching corpus: 3300, signal 160828/173859 (executing program) 2022/09/30 03:19:00 fetching corpus: 3350, signal 161524/174217 (executing program) 2022/09/30 03:19:00 fetching corpus: 3400, signal 162552/174612 (executing program) 2022/09/30 03:19:00 fetching corpus: 3450, signal 163855/175017 (executing program) 2022/09/30 03:19:00 fetching corpus: 3500, signal 164453/175315 (executing program) 2022/09/30 03:19:01 fetching corpus: 3550, signal 165147/175600 (executing program) 2022/09/30 03:19:01 fetching corpus: 3600, signal 165643/175849 (executing program) 2022/09/30 03:19:01 fetching corpus: 3650, signal 166289/176060 (executing program) 2022/09/30 03:19:01 fetching corpus: 3700, signal 166965/176264 (executing program) 2022/09/30 03:19:01 fetching corpus: 3750, signal 167427/176431 (executing program) 2022/09/30 03:19:01 fetching corpus: 3800, signal 168269/176687 (executing program) 2022/09/30 03:19:01 fetching corpus: 3850, signal 169107/176941 (executing program) 2022/09/30 03:19:01 fetching corpus: 3900, signal 169768/177107 (executing program) 2022/09/30 03:19:01 fetching corpus: 3950, signal 170692/177292 (executing program) 2022/09/30 03:19:02 fetching corpus: 4000, signal 171078/177429 (executing program) 2022/09/30 03:19:02 fetching corpus: 4050, signal 171735/177529 (executing program) 2022/09/30 03:19:02 fetching corpus: 4100, signal 172533/177635 (executing program) 2022/09/30 03:19:02 fetching corpus: 4150, signal 173212/177733 (executing program) 2022/09/30 03:19:02 fetching corpus: 4151, signal 173215/177796 (executing program) 2022/09/30 03:19:02 fetching corpus: 4151, signal 173215/177844 (executing program) 2022/09/30 03:19:02 fetching corpus: 4151, signal 173215/177900 (executing program) 2022/09/30 03:19:02 fetching corpus: 4151, signal 173215/177900 (executing program) 2022/09/30 03:19:04 starting 8 fuzzer processes 03:19:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 03:19:04 executing program 1: add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "11a3dd99749c5f7139761d5767c756fe79754e18571e2ee1ab83637cdb4648ba21231175189d25e1bc51220d29b11f3c7ee4716ee733d38047fba73063d323da"}, 0x48, 0xfffffffffffffffd) 03:19:04 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/cpuinfo\x00', 0x0, 0x0) [ 71.020424] audit: type=1400 audit(1664507944.741:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:19:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x80108906, 0x0) 03:19:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe2, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x12a600, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfe4a, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x1, 0x3f, 0x72, 0x0, 0x2, 0x8b000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x800, 0x8, 0x10000, 0x3, 0x49, 0x1, 0x6, 0x0, 0x369b, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf470, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x7f, 0x100}, {0x80, 0xffffffff}]}, 0x18, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 03:19:04 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd99}, 0xc) 03:19:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "be52c58e23fffc8e3137f5652f08ad0fbc860ffdef5764ecc2babdf4532bd3481826cf6eef3eda8fb88f66cf58d882bd67f6b5830b6a36cb74fe0fd62f8aea60"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xee00, 0x0) 03:19:04 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, 0x0, 0x0) [ 72.343698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.345419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.346370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.348389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.354085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.356418] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.357837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.362490] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.364791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.365542] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.397290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.398793] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.400364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.403956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.404975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.406071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.407611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.408606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.409589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.412996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.414312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.418226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.420196] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.421620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.424936] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.426296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.429961] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.431320] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.433188] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.435066] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.436307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.439091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.441566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.442690] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.445783] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.448898] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.454040] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.466208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.479827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.480836] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.481985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.489987] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.414825] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 74.415139] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 74.416466] Bluetooth: hci2: command 0x0409 tx timeout [ 74.479095] Bluetooth: hci1: command 0x0409 tx timeout [ 74.479671] Bluetooth: hci6: command 0x0409 tx timeout [ 74.480208] Bluetooth: hci7: command 0x0409 tx timeout [ 74.542841] Bluetooth: hci5: command 0x0409 tx timeout [ 74.543578] Bluetooth: hci0: command 0x0409 tx timeout [ 76.462787] Bluetooth: hci2: command 0x041b tx timeout [ 76.526797] Bluetooth: hci7: command 0x041b tx timeout [ 76.527292] Bluetooth: hci6: command 0x041b tx timeout [ 76.527671] Bluetooth: hci1: command 0x041b tx timeout [ 76.590784] Bluetooth: hci0: command 0x041b tx timeout [ 76.591272] Bluetooth: hci5: command 0x041b tx timeout [ 77.492077] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.495350] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.498866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.509094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.557349] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.569060] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.578656] Bluetooth: hci3: HCI_REQ-0x0c1a [ 77.654182] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.662108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.664184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.668845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.670616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.672136] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.677750] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.510777] Bluetooth: hci2: command 0x040f tx timeout [ 78.574789] Bluetooth: hci1: command 0x040f tx timeout [ 78.574824] Bluetooth: hci6: command 0x040f tx timeout [ 78.575268] Bluetooth: hci7: command 0x040f tx timeout [ 78.638952] Bluetooth: hci5: command 0x040f tx timeout [ 78.639426] Bluetooth: hci0: command 0x040f tx timeout [ 79.598915] Bluetooth: hci3: command 0x0409 tx timeout [ 79.726767] Bluetooth: hci4: command 0x0409 tx timeout [ 80.558768] Bluetooth: hci2: command 0x0419 tx timeout [ 80.622815] Bluetooth: hci7: command 0x0419 tx timeout [ 80.623245] Bluetooth: hci6: command 0x0419 tx timeout [ 80.623627] Bluetooth: hci1: command 0x0419 tx timeout [ 80.693763] Bluetooth: hci0: command 0x0419 tx timeout [ 80.694236] Bluetooth: hci5: command 0x0419 tx timeout [ 81.646814] Bluetooth: hci3: command 0x041b tx timeout [ 81.774762] Bluetooth: hci4: command 0x041b tx timeout [ 83.694797] Bluetooth: hci3: command 0x040f tx timeout [ 83.822748] Bluetooth: hci4: command 0x040f tx timeout [ 85.742779] Bluetooth: hci3: command 0x0419 tx timeout [ 85.870764] Bluetooth: hci4: command 0x0419 tx timeout [ 134.005508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.007396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.009376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.011968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.014373] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.015902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.019678] Bluetooth: hci0: HCI_REQ-0x0c1a [ 134.457420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.457863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.472431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.472686] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.475206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.489893] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.504546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.504562] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.517511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 134.517652] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.524653] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.525462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.536987] Bluetooth: hci2: HCI_REQ-0x0c1a [ 134.537466] Bluetooth: hci5: HCI_REQ-0x0c1a [ 134.647740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.649644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.652114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.654948] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.657221] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.658599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.669807] Bluetooth: hci6: HCI_REQ-0x0c1a [ 134.765224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.771307] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.772850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.776830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.780682] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 134.781551] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.806646] Bluetooth: hci7: HCI_REQ-0x0c1a 03:20:08 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x48800, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x5317, 0x0) 03:20:08 executing program 7: r0 = epoll_create(0x5) epoll_pwait(r0, &(0x7f00000052c0)=[{}], 0x1, 0x0, &(0x7f0000005300)={[0x90]}, 0x8) 03:20:08 executing program 7: socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 03:20:08 executing program 7: socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 03:20:09 executing program 7: socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 03:20:09 executing program 7: socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) [ 135.553298] audit: type=1400 audit(1664508009.274:7): avc: denied { open } for pid=3888 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.554978] audit: type=1400 audit(1664508009.274:8): avc: denied { kernel } for pid=3888 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.571988] ------------[ cut here ]------------ [ 135.572011] [ 135.572014] ====================================================== [ 135.572017] WARNING: possible circular locking dependency detected [ 135.572022] 6.0.0-rc7-next-20220929 #1 Not tainted [ 135.572028] ------------------------------------------------------ [ 135.572032] syz-executor.4/3889 is trying to acquire lock: [ 135.572038] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.572080] [ 135.572080] but task is already holding lock: [ 135.572083] ffff888008f16c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.572110] [ 135.572110] which lock already depends on the new lock. [ 135.572110] [ 135.572114] [ 135.572114] the existing dependency chain (in reverse order) is: [ 135.572117] [ 135.572117] -> #3 (&ctx->lock){....}-{2:2}: [ 135.572131] _raw_spin_lock+0x2a/0x40 [ 135.572142] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.572153] __schedule+0xedd/0x2470 [ 135.572168] schedule+0xda/0x1b0 [ 135.572181] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.572194] syscall_exit_to_user_mode+0x19/0x40 [ 135.572207] do_syscall_64+0x48/0x90 [ 135.572225] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.572238] [ 135.572238] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.572251] _raw_spin_lock_nested+0x30/0x40 [ 135.572262] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.572275] task_fork_fair+0x63/0x4d0 [ 135.572292] sched_cgroup_fork+0x3d0/0x540 [ 135.572306] copy_process+0x4183/0x6e20 [ 135.572317] kernel_clone+0xe7/0x890 [ 135.572327] user_mode_thread+0xad/0xf0 [ 135.572337] rest_init+0x24/0x250 [ 135.572349] arch_call_rest_init+0xf/0x14 [ 135.572366] start_kernel+0x4c6/0x4eb [ 135.572380] secondary_startup_64_no_verify+0xe0/0xeb [ 135.572395] [ 135.572395] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.572408] _raw_spin_lock_irqsave+0x39/0x60 [ 135.572419] try_to_wake_up+0xab/0x1930 [ 135.572432] up+0x75/0xb0 [ 135.572446] __up_console_sem+0x6e/0x80 [ 135.572462] console_unlock+0x46a/0x590 [ 135.572478] vprintk_emit+0x1bd/0x560 [ 135.572494] vprintk+0x84/0xa0 [ 135.572510] _printk+0xba/0xf1 [ 135.572522] regdb_fw_cb.cold+0x6c/0xa7 [ 135.572539] request_firmware_work_func+0x12e/0x240 [ 135.572559] process_one_work+0xa17/0x16a0 [ 135.572577] worker_thread+0x637/0x1260 [ 135.572593] kthread+0x2ed/0x3a0 [ 135.572608] ret_from_fork+0x22/0x30 [ 135.572620] [ 135.572620] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.572634] __lock_acquire+0x2a02/0x5e70 [ 135.572651] lock_acquire+0x1a2/0x530 [ 135.572667] _raw_spin_lock_irqsave+0x39/0x60 [ 135.572677] down_trylock+0xe/0x70 [ 135.572695] __down_trylock_console_sem+0x3b/0xd0 [ 135.572711] vprintk_emit+0x16b/0x560 [ 135.572726] vprintk+0x84/0xa0 [ 135.572742] _printk+0xba/0xf1 [ 135.572752] report_bug.cold+0x72/0xab [ 135.572768] handle_bug+0x3c/0x70 [ 135.572784] exc_invalid_op+0x14/0x50 [ 135.572801] asm_exc_invalid_op+0x16/0x20 [ 135.572813] group_sched_out.part.0+0x2c7/0x460 [ 135.572831] ctx_sched_out+0x8f1/0xc10 [ 135.572847] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.572858] __schedule+0xedd/0x2470 [ 135.572871] schedule+0xda/0x1b0 [ 135.572885] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.572895] syscall_exit_to_user_mode+0x19/0x40 [ 135.572908] do_syscall_64+0x48/0x90 [ 135.572924] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.572937] [ 135.572937] other info that might help us debug this: [ 135.572937] [ 135.572939] Chain exists of: [ 135.572939] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.572939] [ 135.572954] Possible unsafe locking scenario: [ 135.572954] [ 135.572957] CPU0 CPU1 [ 135.572959] ---- ---- [ 135.572962] lock(&ctx->lock); [ 135.572967] lock(&rq->__lock); [ 135.572974] lock(&ctx->lock); [ 135.572980] lock((console_sem).lock); [ 135.572986] [ 135.572986] *** DEADLOCK *** [ 135.572986] [ 135.572988] 2 locks held by syz-executor.4/3889: [ 135.572995] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.573024] #1: ffff888008f16c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.573050] [ 135.573050] stack backtrace: [ 135.573053] CPU: 1 PID: 3889 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 135.573066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.573074] Call Trace: [ 135.573077] [ 135.573081] dump_stack_lvl+0x8b/0xb3 [ 135.573099] check_noncircular+0x263/0x2e0 [ 135.573116] ? format_decode+0x26c/0xb50 [ 135.573132] ? print_circular_bug+0x450/0x450 [ 135.573149] ? enable_ptr_key_workfn+0x20/0x20 [ 135.573165] ? __lockdep_reset_lock+0x180/0x180 [ 135.573182] ? format_decode+0x26c/0xb50 [ 135.573199] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 135.573216] __lock_acquire+0x2a02/0x5e70 [ 135.573238] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.573260] lock_acquire+0x1a2/0x530 [ 135.573277] ? down_trylock+0xe/0x70 [ 135.573294] ? lock_release+0x750/0x750 [ 135.573311] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.573332] ? vprintk+0x84/0xa0 [ 135.573349] _raw_spin_lock_irqsave+0x39/0x60 [ 135.573360] ? down_trylock+0xe/0x70 [ 135.573376] down_trylock+0xe/0x70 [ 135.573392] ? vprintk+0x84/0xa0 [ 135.573409] __down_trylock_console_sem+0x3b/0xd0 [ 135.573426] vprintk_emit+0x16b/0x560 [ 135.573443] ? lock_downgrade+0x6d0/0x6d0 [ 135.573461] vprintk+0x84/0xa0 [ 135.573478] _printk+0xba/0xf1 [ 135.573490] ? record_print_text.cold+0x16/0x16 [ 135.573503] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 135.573518] ? lock_downgrade+0x6d0/0x6d0 [ 135.573535] ? report_bug.cold+0x66/0xab [ 135.573553] ? group_sched_out.part.0+0x2c7/0x460 [ 135.573571] report_bug.cold+0x72/0xab [ 135.573590] handle_bug+0x3c/0x70 [ 135.573607] exc_invalid_op+0x14/0x50 [ 135.573625] asm_exc_invalid_op+0x16/0x20 [ 135.573638] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.573658] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.573669] RSP: 0018:ffff88803deb7c48 EFLAGS: 00010006 [ 135.573678] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.573686] RDX: ffff88801daf0000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 135.573694] RBP: ffff88800dac85c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.573701] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008f16c00 [ 135.573709] R13: ffff88806cf3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 135.573720] ? group_sched_out.part.0+0x2c7/0x460 [ 135.573740] ? group_sched_out.part.0+0x2c7/0x460 [ 135.573760] ctx_sched_out+0x8f1/0xc10 [ 135.573779] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.573793] ? lock_is_held_type+0xd7/0x130 [ 135.573807] ? __perf_cgroup_move+0x160/0x160 [ 135.573818] ? set_next_entity+0x304/0x550 [ 135.573835] ? update_curr+0x267/0x740 [ 135.573853] ? lock_is_held_type+0xd7/0x130 [ 135.573867] __schedule+0xedd/0x2470 [ 135.573884] ? io_schedule_timeout+0x150/0x150 [ 135.573901] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.573921] schedule+0xda/0x1b0 [ 135.573936] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.573949] syscall_exit_to_user_mode+0x19/0x40 [ 135.573962] do_syscall_64+0x48/0x90 [ 135.573979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.573993] RIP: 0033:0x7f26089e2b19 [ 135.574001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.574011] RSP: 002b:00007f2605f58218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.574022] RAX: 0000000000000001 RBX: 00007f2608af5f68 RCX: 00007f26089e2b19 [ 135.574030] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2608af5f6c [ 135.574037] RBP: 00007f2608af5f60 R08: 000000000000000e R09: 0000000000000000 [ 135.574044] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f2608af5f6c [ 135.574051] R13: 00007ffcb1f044ef R14: 00007f2605f58300 R15: 0000000000022000 [ 135.574064] [ 135.632876] WARNING: CPU: 1 PID: 3889 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.633560] Modules linked in: [ 135.633799] CPU: 1 PID: 3889 Comm: syz-executor.4 Not tainted 6.0.0-rc7-next-20220929 #1 [ 135.634394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.635211] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.635621] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.636981] RSP: 0018:ffff88803deb7c48 EFLAGS: 00010006 [ 135.637384] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.637914] RDX: ffff88801daf0000 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 135.638442] RBP: ffff88800dac85c8 R08: 0000000000000005 R09: 0000000000000001 [ 135.638971] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008f16c00 [ 135.639507] R13: ffff88806cf3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002 [ 135.640047] FS: 00007f2605f58700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 135.640654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.641097] CR2: 0000001b2c422000 CR3: 0000000034b22000 CR4: 0000000000350ee0 [ 135.641632] Call Trace: [ 135.641830] [ 135.642007] ctx_sched_out+0x8f1/0xc10 [ 135.642316] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.642711] ? lock_is_held_type+0xd7/0x130 [ 135.643041] ? __perf_cgroup_move+0x160/0x160 [ 135.643380] ? set_next_entity+0x304/0x550 [ 135.643707] ? update_curr+0x267/0x740 [ 135.644019] ? lock_is_held_type+0xd7/0x130 [ 135.644348] __schedule+0xedd/0x2470 [ 135.644640] ? io_schedule_timeout+0x150/0x150 [ 135.644996] ? rcu_read_lock_sched_held+0x3e/0x80 [ 135.645359] schedule+0xda/0x1b0 [ 135.645618] exit_to_user_mode_prepare+0x114/0x1a0 [ 135.645988] syscall_exit_to_user_mode+0x19/0x40 [ 135.646343] do_syscall_64+0x48/0x90 [ 135.646631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.647013] RIP: 0033:0x7f26089e2b19 [ 135.647296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.648641] RSP: 002b:00007f2605f58218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.649196] RAX: 0000000000000001 RBX: 00007f2608af5f68 RCX: 00007f26089e2b19 [ 135.649723] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2608af5f6c [ 135.650244] RBP: 00007f2608af5f60 R08: 000000000000000e R09: 0000000000000000 [ 135.650775] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f2608af5f6c [ 135.651296] R13: 00007ffcb1f044ef R14: 00007f2605f58300 R15: 0000000000022000 [ 135.651822] [ 135.652024] irq event stamp: 836 [ 135.652270] hardirqs last enabled at (835): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 135.652957] hardirqs last disabled at (836): [] __schedule+0x1225/0x2470 [ 135.653569] softirqs last enabled at (410): [] __irq_exit_rcu+0x11b/0x180 [ 135.654203] softirqs last disabled at (377): [] __irq_exit_rcu+0x11b/0x180 [ 135.654829] ---[ end trace 0000000000000000 ]--- 03:20:09 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="671700", @void, {@ipv4={0x800, @igmp={{0x8, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) 03:20:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x0, 0x0, 0x0) [ 136.046733] Bluetooth: hci0: command 0x0409 tx timeout [ 136.366817] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 136.558775] Bluetooth: hci5: command 0x0409 tx timeout [ 136.558798] Bluetooth: hci2: command 0x0409 tx timeout [ 136.687375] Bluetooth: hci6: command 0x0409 tx timeout [ 136.816167] Bluetooth: hci7: command 0x0409 tx timeout [ 138.094782] Bluetooth: hci0: command 0x041b tx timeout [ 138.606772] Bluetooth: hci5: command 0x041b tx timeout [ 138.607747] Bluetooth: hci2: command 0x041b tx timeout [ 138.694465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.708235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.709362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.712162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.714353] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.716377] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.728254] Bluetooth: hci1: HCI_REQ-0x0c1a [ 138.735911] Bluetooth: hci6: command 0x041b tx timeout [ 138.863755] Bluetooth: hci7: command 0x041b tx timeout [ 140.142840] Bluetooth: hci0: command 0x040f tx timeout [ 140.654899] Bluetooth: hci5: command 0x040f tx timeout [ 140.655762] Bluetooth: hci2: command 0x040f tx timeout [ 140.782816] Bluetooth: hci6: command 0x040f tx timeout [ 140.782875] Bluetooth: hci1: command 0x0409 tx timeout [ 140.910740] Bluetooth: hci7: command 0x040f tx timeout [ 142.190812] Bluetooth: hci0: command 0x0419 tx timeout [ 142.702748] Bluetooth: hci2: command 0x0419 tx timeout [ 142.703165] Bluetooth: hci5: command 0x0419 tx timeout [ 142.830863] Bluetooth: hci1: command 0x041b tx timeout [ 142.831309] Bluetooth: hci6: command 0x0419 tx timeout [ 142.958731] Bluetooth: hci7: command 0x0419 tx timeout [ 144.878736] Bluetooth: hci1: command 0x040f tx timeout VM DIAGNOSIS: 03:20:09 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffffffff81785df8 RCX=0000000000000000 RDX=1ffff11002fdae90 RSI=ffff888017ed7780 RDI=ffffffff81785df8 RBP=ffffffff81785df8 RSP=ffff888017ed73e0 R8 =ffffffff85edf8a8 R9 =ffffffff85edf8ac R10=ffffed1002fdae92 R11=ffff888017ed7468 R12=ffff888017ed74f0 R13=0000000000000000 R14=ffff888018700000 R15=0000000000000dc0 RIP=ffffffff811d5f23 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8dc521368 CR3=000000003ac58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88803deb7690 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002f R11=0000000000000001 R12=000000000000002f R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2605f58700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c422000 CR3=0000000034b22000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f2608ac97c0 00007f2608ac97c8 YMM02=0000000000000000 0000000000000000 00007f2608ac97e0 00007f2608ac97c0 YMM03=0000000000000000 0000000000000000 00007f2608ac97c8 00007f2608ac97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000