Warning: Permanently added '[localhost]:41872' (ECDSA) to the list of known hosts.
2022/09/13 14:41:28 fuzzer started
2022/09/13 14:41:29 dialing manager at localhost:36597
syzkaller login: [   44.056549] cgroup: Unknown subsys name 'net'
[   44.160292] cgroup: Unknown subsys name 'rlimit'
2022/09/13 14:41:43 syscalls: 2215
2022/09/13 14:41:43 code coverage: enabled
2022/09/13 14:41:43 comparison tracing: enabled
2022/09/13 14:41:43 extra coverage: enabled
2022/09/13 14:41:43 setuid sandbox: enabled
2022/09/13 14:41:43 namespace sandbox: enabled
2022/09/13 14:41:43 Android sandbox: enabled
2022/09/13 14:41:43 fault injection: enabled
2022/09/13 14:41:43 leak checking: enabled
2022/09/13 14:41:43 net packet injection: enabled
2022/09/13 14:41:43 net device setup: enabled
2022/09/13 14:41:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/13 14:41:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/13 14:41:43 USB emulation: enabled
2022/09/13 14:41:43 hci packet injection: enabled
2022/09/13 14:41:43 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913                                          )
2022/09/13 14:41:43 802.15.4 emulation: enabled
2022/09/13 14:41:43 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/13 14:41:43 fetching corpus: 50, signal 31062/34458 (executing program)
2022/09/13 14:41:43 fetching corpus: 100, signal 41552/46386 (executing program)
2022/09/13 14:41:43 fetching corpus: 150, signal 53032/59074 (executing program)
2022/09/13 14:41:44 fetching corpus: 200, signal 59575/66868 (executing program)
2022/09/13 14:41:44 fetching corpus: 250, signal 68567/76789 (executing program)
2022/09/13 14:41:44 fetching corpus: 300, signal 72866/82194 (executing program)
2022/09/13 14:41:44 fetching corpus: 350, signal 77173/87498 (executing program)
2022/09/13 14:41:44 fetching corpus: 400, signal 81430/92680 (executing program)
2022/09/13 14:41:44 fetching corpus: 450, signal 85977/98058 (executing program)
2022/09/13 14:41:44 fetching corpus: 500, signal 90438/103292 (executing program)
2022/09/13 14:41:45 fetching corpus: 550, signal 94160/107764 (executing program)
2022/09/13 14:41:45 fetching corpus: 600, signal 96700/111090 (executing program)
2022/09/13 14:41:45 fetching corpus: 650, signal 99583/114693 (executing program)
2022/09/13 14:41:45 fetching corpus: 700, signal 102626/118407 (executing program)
2022/09/13 14:41:45 fetching corpus: 750, signal 105760/122191 (executing program)
2022/09/13 14:41:45 fetching corpus: 800, signal 109061/125981 (executing program)
2022/09/13 14:41:45 fetching corpus: 850, signal 112080/129472 (executing program)
2022/09/13 14:41:46 fetching corpus: 900, signal 116288/133871 (executing program)
2022/09/13 14:41:46 fetching corpus: 950, signal 118091/136229 (executing program)
2022/09/13 14:41:46 fetching corpus: 1000, signal 119593/138332 (executing program)
2022/09/13 14:41:46 fetching corpus: 1050, signal 120901/140265 (executing program)
2022/09/13 14:41:46 fetching corpus: 1100, signal 124110/143682 (executing program)
2022/09/13 14:41:46 fetching corpus: 1150, signal 126137/146142 (executing program)
2022/09/13 14:41:46 fetching corpus: 1200, signal 128761/148995 (executing program)
2022/09/13 14:41:46 fetching corpus: 1250, signal 130515/151185 (executing program)
2022/09/13 14:41:47 fetching corpus: 1300, signal 132581/153452 (executing program)
2022/09/13 14:41:47 fetching corpus: 1350, signal 135231/156210 (executing program)
2022/09/13 14:41:47 fetching corpus: 1400, signal 139064/159741 (executing program)
2022/09/13 14:41:47 fetching corpus: 1450, signal 140627/161612 (executing program)
2022/09/13 14:41:47 fetching corpus: 1500, signal 143037/164022 (executing program)
2022/09/13 14:41:48 fetching corpus: 1550, signal 144391/165638 (executing program)
2022/09/13 14:41:48 fetching corpus: 1600, signal 146498/167753 (executing program)
2022/09/13 14:41:48 fetching corpus: 1650, signal 148188/169505 (executing program)
2022/09/13 14:41:48 fetching corpus: 1700, signal 149296/170847 (executing program)
2022/09/13 14:41:48 fetching corpus: 1750, signal 151613/173004 (executing program)
2022/09/13 14:41:48 fetching corpus: 1800, signal 153234/174669 (executing program)
2022/09/13 14:41:48 fetching corpus: 1850, signal 155555/176783 (executing program)
2022/09/13 14:41:49 fetching corpus: 1900, signal 156800/178167 (executing program)
2022/09/13 14:41:49 fetching corpus: 1950, signal 158228/179628 (executing program)
2022/09/13 14:41:49 fetching corpus: 2000, signal 159874/181186 (executing program)
2022/09/13 14:41:49 fetching corpus: 2050, signal 161117/182509 (executing program)
2022/09/13 14:41:49 fetching corpus: 2100, signal 162091/183603 (executing program)
2022/09/13 14:41:49 fetching corpus: 2150, signal 163189/184755 (executing program)
2022/09/13 14:41:50 fetching corpus: 2200, signal 164478/186014 (executing program)
2022/09/13 14:41:50 fetching corpus: 2250, signal 166084/187432 (executing program)
2022/09/13 14:41:50 fetching corpus: 2300, signal 166837/188280 (executing program)
2022/09/13 14:41:50 fetching corpus: 2350, signal 168162/189482 (executing program)
2022/09/13 14:41:50 fetching corpus: 2400, signal 169054/190421 (executing program)
2022/09/13 14:41:50 fetching corpus: 2450, signal 169981/191385 (executing program)
2022/09/13 14:41:50 fetching corpus: 2500, signal 170989/192338 (executing program)
2022/09/13 14:41:51 fetching corpus: 2550, signal 171871/193235 (executing program)
2022/09/13 14:41:51 fetching corpus: 2600, signal 173312/194376 (executing program)
2022/09/13 14:41:51 fetching corpus: 2650, signal 174769/195493 (executing program)
2022/09/13 14:41:51 fetching corpus: 2700, signal 175821/196364 (executing program)
2022/09/13 14:41:51 fetching corpus: 2750, signal 176519/197094 (executing program)
2022/09/13 14:41:51 fetching corpus: 2800, signal 177504/197956 (executing program)
2022/09/13 14:41:51 fetching corpus: 2850, signal 178832/198924 (executing program)
2022/09/13 14:41:52 fetching corpus: 2900, signal 180595/200089 (executing program)
2022/09/13 14:41:52 fetching corpus: 2950, signal 182116/201113 (executing program)
2022/09/13 14:41:52 fetching corpus: 3000, signal 183124/201927 (executing program)
2022/09/13 14:41:52 fetching corpus: 3050, signal 184093/202580 (executing program)
2022/09/13 14:41:52 fetching corpus: 3100, signal 185436/203449 (executing program)
2022/09/13 14:41:52 fetching corpus: 3150, signal 186367/204124 (executing program)
2022/09/13 14:41:53 fetching corpus: 3200, signal 187405/204806 (executing program)
2022/09/13 14:41:53 fetching corpus: 3250, signal 188301/205401 (executing program)
2022/09/13 14:41:53 fetching corpus: 3300, signal 189381/206148 (executing program)
2022/09/13 14:41:53 fetching corpus: 3350, signal 190152/206658 (executing program)
2022/09/13 14:41:53 fetching corpus: 3400, signal 191050/207266 (executing program)
2022/09/13 14:41:53 fetching corpus: 3450, signal 191775/207770 (executing program)
2022/09/13 14:41:53 fetching corpus: 3500, signal 193117/208444 (executing program)
2022/09/13 14:41:54 fetching corpus: 3550, signal 194263/209024 (executing program)
2022/09/13 14:41:54 fetching corpus: 3600, signal 195158/209542 (executing program)
2022/09/13 14:41:54 fetching corpus: 3650, signal 196445/210166 (executing program)
2022/09/13 14:41:54 fetching corpus: 3700, signal 197139/210551 (executing program)
2022/09/13 14:41:54 fetching corpus: 3750, signal 198004/210962 (executing program)
2022/09/13 14:41:54 fetching corpus: 3800, signal 198872/211395 (executing program)
2022/09/13 14:41:54 fetching corpus: 3850, signal 199454/211668 (executing program)
2022/09/13 14:41:55 fetching corpus: 3900, signal 200102/212007 (executing program)
2022/09/13 14:41:55 fetching corpus: 3950, signal 200787/212300 (executing program)
2022/09/13 14:41:55 fetching corpus: 4000, signal 201345/212605 (executing program)
2022/09/13 14:41:55 fetching corpus: 4050, signal 201868/212846 (executing program)
2022/09/13 14:41:55 fetching corpus: 4100, signal 202657/213150 (executing program)
2022/09/13 14:41:55 fetching corpus: 4150, signal 203575/213508 (executing program)
2022/09/13 14:41:56 fetching corpus: 4200, signal 204593/213856 (executing program)
2022/09/13 14:41:56 fetching corpus: 4250, signal 205875/214200 (executing program)
2022/09/13 14:41:56 fetching corpus: 4300, signal 206678/214446 (executing program)
2022/09/13 14:41:56 fetching corpus: 4350, signal 207302/214689 (executing program)
2022/09/13 14:41:56 fetching corpus: 4400, signal 208492/214985 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215083 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215148 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215233 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215294 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215369 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215427 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215502 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215586 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215677 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215732 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215793 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215867 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/215944 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/216014 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/216079 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/216139 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/216144 (executing program)
2022/09/13 14:41:56 fetching corpus: 4405, signal 208538/216144 (executing program)
2022/09/13 14:41:59 starting 8 fuzzer processes
14:41:59 executing program 0:
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)

14:41:59 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x2000c040)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40)

14:42:00 executing program 2:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[   74.934351] audit: type=1400 audit(1663080120.037:6): avc:  denied  { execmem } for  pid=288 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:42:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})

14:42:00 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x401)
pipe2(&(0x7f0000001100)={<r0=>0xffffffffffffffff}, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000001140), &(0x7f0000001180)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)

14:42:00 executing program 5:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r3, r2, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)

14:42:00 executing program 6:
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
pidfd_open(r0, 0x0)
r1 = syz_io_uring_setup(0xeaf, &(0x7f00000003c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_enter(r1, 0x5e9a, 0x0, 0x0, 0x0, 0x0)

14:42:00 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000dead292f89cb8d47d567c02202f7bd4800000000c0ee11125d4d121b5f8159dc6d07efa640f53cf9689d443650f6c47eec8ed1445fe60cdbf8c22db93cc9479b60", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e200330080800000080211000001080211000000505050505050"], 0x100}}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0))
syz_io_uring_setup(0x2971, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400))
clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[   76.243421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.245680] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.247398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.248568] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.250526] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.251631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.256806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.258478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.260235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.261834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.262069] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.264109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.271980] Bluetooth: hci0: HCI_REQ-0x0c1a
[   76.273467] Bluetooth: hci1: HCI_REQ-0x0c1a
[   76.324301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.325937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.332769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.333871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.335466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.336530] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.351695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.355012] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.357774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.360952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.362900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   76.365910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.367424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.368854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.371000] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   76.374005] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   76.375176] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.376246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.377744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.379992] Bluetooth: hci4: HCI_REQ-0x0c1a
[   76.380530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   76.383637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   76.384726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.386931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   76.388446] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   76.388933] Bluetooth: hci2: HCI_REQ-0x0c1a
[   76.399376] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   76.399595] Bluetooth: hci5: HCI_REQ-0x0c1a
[   76.401415] Bluetooth: hci3: HCI_REQ-0x0c1a
[   76.402757] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   76.404103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   76.409350] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   76.415715] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   76.417084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   76.421717] Bluetooth: hci7: HCI_REQ-0x0c1a
[   76.422481] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   76.434826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   76.440975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   76.448114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   76.454558] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   76.459347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   76.466381] Bluetooth: hci6: HCI_REQ-0x0c1a
[   78.324581] Bluetooth: hci1: command 0x0409 tx timeout
[   78.325489] Bluetooth: hci0: command 0x0409 tx timeout
[   78.451241] Bluetooth: hci3: command 0x0409 tx timeout
[   78.451256] Bluetooth: hci7: command 0x0409 tx timeout
[   78.452071] Bluetooth: hci5: command 0x0409 tx timeout
[   78.452648] Bluetooth: hci2: command 0x0409 tx timeout
[   78.453319] Bluetooth: hci4: command 0x0409 tx timeout
[   78.515204] Bluetooth: hci6: command 0x0409 tx timeout
[   80.371212] Bluetooth: hci0: command 0x041b tx timeout
[   80.371775] Bluetooth: hci1: command 0x041b tx timeout
[   80.499644] Bluetooth: hci4: command 0x041b tx timeout
[   80.500212] Bluetooth: hci2: command 0x041b tx timeout
[   80.500678] Bluetooth: hci5: command 0x041b tx timeout
[   80.501987] Bluetooth: hci7: command 0x041b tx timeout
[   80.502493] Bluetooth: hci3: command 0x041b tx timeout
[   80.563211] Bluetooth: hci6: command 0x041b tx timeout
[   82.419219] Bluetooth: hci1: command 0x040f tx timeout
[   82.420919] Bluetooth: hci0: command 0x040f tx timeout
[   82.547339] Bluetooth: hci3: command 0x040f tx timeout
[   82.548250] Bluetooth: hci7: command 0x040f tx timeout
[   82.549049] Bluetooth: hci5: command 0x040f tx timeout
[   82.549966] Bluetooth: hci2: command 0x040f tx timeout
[   82.552919] Bluetooth: hci4: command 0x040f tx timeout
[   82.611338] Bluetooth: hci6: command 0x040f tx timeout
[   84.467169] Bluetooth: hci0: command 0x0419 tx timeout
[   84.467641] Bluetooth: hci1: command 0x0419 tx timeout
[   84.595217] Bluetooth: hci4: command 0x0419 tx timeout
[   84.595713] Bluetooth: hci2: command 0x0419 tx timeout
[   84.597690] Bluetooth: hci5: command 0x0419 tx timeout
[   84.598106] Bluetooth: hci7: command 0x0419 tx timeout
[   84.599002] Bluetooth: hci3: command 0x0419 tx timeout
[   84.659179] Bluetooth: hci6: command 0x0419 tx timeout
[  133.575770] audit: type=1400 audit(1663080178.677:7): avc:  denied  { open } for  pid=3827 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  133.578033] audit: type=1400 audit(1663080178.677:8): avc:  denied  { kernel } for  pid=3827 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  133.592864] ------------[ cut here ]------------
[  133.592893] 
[  133.592898] ======================================================
[  133.592903] WARNING: possible circular locking dependency detected
[  133.592909] 6.0.0-rc5-next-20220913 #1 Not tainted
[  133.592918] ------------------------------------------------------
[  133.592923] syz-executor.7/3828 is trying to acquire lock:
[  133.592933] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  133.592983] 
[  133.592983] but task is already holding lock:
[  133.592987] ffff8880182ad820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  133.593026] 
[  133.593026] which lock already depends on the new lock.
[  133.593026] 
[  133.593030] 
[  133.593030] the existing dependency chain (in reverse order) is:
[  133.593035] 
[  133.593035] -> #3 (&ctx->lock){....}-{2:2}:
[  133.593055]        _raw_spin_lock+0x2a/0x40
[  133.593079]        __perf_event_task_sched_out+0x53b/0x18d0
[  133.593098]        __schedule+0xedd/0x2470
[  133.593116]        schedule+0xda/0x1b0
[  133.593130]        futex_wait_queue+0xf5/0x1e0
[  133.593147]        futex_wait+0x28e/0x690
[  133.593161]        do_futex+0x2ff/0x380
[  133.593174]        __x64_sys_futex+0x1c6/0x4d0
[  133.593189]        do_syscall_64+0x3b/0x90
[  133.593208]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  133.593234] 
[  133.593234] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  133.593254]        _raw_spin_lock_nested+0x30/0x40
[  133.593280]        raw_spin_rq_lock_nested+0x1e/0x30
[  133.593298]        task_fork_fair+0x63/0x4d0
[  133.593324]        sched_cgroup_fork+0x3d0/0x540
[  133.593345]        copy_process+0x3f9e/0x6df0
[  133.593360]        kernel_clone+0xe7/0x890
[  133.593374]        user_mode_thread+0xad/0xf0
[  133.593389]        rest_init+0x24/0x250
[  133.593413]        arch_call_rest_init+0xf/0x14
[  133.593442]        start_kernel+0x4c1/0x4e6
[  133.593467]        secondary_startup_64_no_verify+0xe0/0xeb
[  133.593488] 
[  133.593488] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  133.593508]        _raw_spin_lock_irqsave+0x39/0x60
[  133.593530]        try_to_wake_up+0xab/0x1920
[  133.593550]        up+0x75/0xb0
[  133.593567]        __up_console_sem+0x6e/0x80
[  133.593591]        console_unlock+0x46a/0x590
[  133.593615]        vprintk_emit+0x1bd/0x560
[  133.593640]        vprintk+0x84/0xa0
[  133.593664]        _printk+0xba/0xf1
[  133.593689]        kauditd_hold_skb.cold+0x3f/0x4e
[  133.593710]        kauditd_send_queue+0x233/0x290
[  133.593731]        kauditd_thread+0x5da/0x9a0
[  133.593752]        kthread+0x2ed/0x3a0
[  133.593773]        ret_from_fork+0x22/0x30
[  133.593792] 
[  133.593792] -> #0 ((console_sem).lock){....}-{2:2}:
[  133.593812]        __lock_acquire+0x2a02/0x5e70
[  133.593837]        lock_acquire+0x1a2/0x530
[  133.593861]        _raw_spin_lock_irqsave+0x39/0x60
[  133.593883]        down_trylock+0xe/0x70
[  133.593902]        __down_trylock_console_sem+0x3b/0xd0
[  133.593926]        vprintk_emit+0x16b/0x560
[  133.593951]        vprintk+0x84/0xa0
[  133.593975]        _printk+0xba/0xf1
[  133.594000]        report_bug.cold+0x72/0xab
[  133.594018]        handle_bug+0x3c/0x70
[  133.594037]        exc_invalid_op+0x14/0x50
[  133.594057]        asm_exc_invalid_op+0x16/0x20
[  133.594081]        group_sched_out.part.0+0x2c7/0x460
[  133.594096]        ctx_sched_out+0x8f1/0xc10
[  133.594111]        __perf_event_task_sched_out+0x6d0/0x18d0
[  133.594129]        __schedule+0xedd/0x2470
[  133.594143]        schedule+0xda/0x1b0
[  133.594157]        futex_wait_queue+0xf5/0x1e0
[  133.594172]        futex_wait+0x28e/0x690
[  133.594186]        do_futex+0x2ff/0x380
[  133.594199]        __x64_sys_futex+0x1c6/0x4d0
[  133.594214]        do_syscall_64+0x3b/0x90
[  133.594233]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  133.594258] 
[  133.594258] other info that might help us debug this:
[  133.594258] 
[  133.594262] Chain exists of:
[  133.594262]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  133.594262] 
[  133.594284]  Possible unsafe locking scenario:
[  133.594284] 
[  133.594288]        CPU0                    CPU1
[  133.594291]        ----                    ----
[  133.594294]   lock(&ctx->lock);
[  133.594302]                                lock(&rq->__lock);
[  133.594312]                                lock(&ctx->lock);
[  133.594321]   lock((console_sem).lock);
[  133.594329] 
[  133.594329]  *** DEADLOCK ***
[  133.594329] 
[  133.594332] 2 locks held by syz-executor.7/3828:
[  133.594342]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  133.594380]  #1: ffff8880182ad820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  133.594421] 
[  133.594421] stack backtrace:
[  133.594425] CPU: 1 PID: 3828 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220913 #1
[  133.594444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  133.594456] Call Trace:
[  133.594460]  <TASK>
[  133.594466]  dump_stack_lvl+0x8b/0xb3
[  133.594487]  check_noncircular+0x263/0x2e0
[  133.594513]  ? format_decode+0x26c/0xb50
[  133.594534]  ? print_circular_bug+0x450/0x450
[  133.594560]  ? enable_ptr_key_workfn+0x20/0x20
[  133.594583]  ? format_decode+0x26c/0xb50
[  133.594605]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  133.594632]  __lock_acquire+0x2a02/0x5e70
[  133.594665]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  133.594699]  lock_acquire+0x1a2/0x530
[  133.594725]  ? down_trylock+0xe/0x70
[  133.594746]  ? rcu_read_unlock+0x40/0x40
[  133.594778]  ? vprintk+0x84/0xa0
[  133.594805]  _raw_spin_lock_irqsave+0x39/0x60
[  133.594829]  ? down_trylock+0xe/0x70
[  133.594849]  down_trylock+0xe/0x70
[  133.594869]  ? vprintk+0x84/0xa0
[  133.594895]  __down_trylock_console_sem+0x3b/0xd0
[  133.594922]  vprintk_emit+0x16b/0x560
[  133.594951]  vprintk+0x84/0xa0
[  133.594977]  _printk+0xba/0xf1
[  133.595004]  ? record_print_text.cold+0x16/0x16
[  133.595037]  ? report_bug.cold+0x66/0xab
[  133.595058]  ? group_sched_out.part.0+0x2c7/0x460
[  133.595075]  report_bug.cold+0x72/0xab
[  133.595098]  handle_bug+0x3c/0x70
[  133.595118]  exc_invalid_op+0x14/0x50
[  133.595140]  asm_exc_invalid_op+0x16/0x20
[  133.595166] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  133.595185] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  133.595202] RSP: 0018:ffff88801b6178f8 EFLAGS: 00010006
[  133.595216] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  133.595227] RDX: ffff8880102a8000 RSI: ffffffff81566027 RDI: 0000000000000005
[  133.595239] RBP: ffff888041040000 R08: 0000000000000005 R09: 0000000000000001
[  133.595250] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880182ad800
[  133.595261] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  133.595277]  ? group_sched_out.part.0+0x2c7/0x460
[  133.595297]  ? group_sched_out.part.0+0x2c7/0x460
[  133.595316]  ctx_sched_out+0x8f1/0xc10
[  133.595334]  __perf_event_task_sched_out+0x6d0/0x18d0
[  133.595357]  ? lock_is_held_type+0xd7/0x130
[  133.595385]  ? __perf_cgroup_move+0x160/0x160
[  133.595403]  ? set_next_entity+0x304/0x550
[  133.595433]  ? lock_is_held_type+0xd7/0x130
[  133.595461]  __schedule+0xedd/0x2470
[  133.595480]  ? io_schedule_timeout+0x150/0x150
[  133.595497]  ? futex_wait_setup+0x166/0x230
[  133.595519]  schedule+0xda/0x1b0
[  133.595535]  futex_wait_queue+0xf5/0x1e0
[  133.595553]  futex_wait+0x28e/0x690
[  133.595571]  ? futex_wait_setup+0x230/0x230
[  133.595591]  ? wake_up_q+0x8b/0xf0
[  133.595611]  ? do_raw_spin_unlock+0x4f/0x220
[  133.595640]  ? futex_wake+0x158/0x490
[  133.595664]  ? fd_install+0x1f9/0x640
[  133.595688]  do_futex+0x2ff/0x380
[  133.595704]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  133.595728]  __x64_sys_futex+0x1c6/0x4d0
[  133.595746]  ? __x64_sys_futex_time32+0x480/0x480
[  133.595765]  ? syscall_enter_from_user_mode+0x1d/0x50
[  133.595793]  ? syscall_enter_from_user_mode+0x1d/0x50
[  133.595823]  do_syscall_64+0x3b/0x90
[  133.595844]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  133.595871] RIP: 0033:0x7f7b646a3b19
[  133.595884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  133.595900] RSP: 002b:00007f7b61c19218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  133.595916] RAX: ffffffffffffffda RBX: 00007f7b647b6f68 RCX: 00007f7b646a3b19
[  133.595928] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b647b6f68
[  133.595939] RBP: 00007f7b647b6f60 R08: 0000000000000000 R09: 0000000000000000
[  133.595950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b647b6f6c
[  133.595960] R13: 00007ffd52fa5a8f R14: 00007f7b61c19300 R15: 0000000000022000
[  133.595980]  </TASK>
[  133.682342] WARNING: CPU: 1 PID: 3828 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  133.683309] Modules linked in:
[  133.683658] CPU: 1 PID: 3828 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220913 #1
[  133.684545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  133.685728] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  133.686304] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  133.688188] RSP: 0018:ffff88801b6178f8 EFLAGS: 00010006
[  133.688773] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  133.689512] RDX: ffff8880102a8000 RSI: ffffffff81566027 RDI: 0000000000000005
[  133.690283] RBP: ffff888041040000 R08: 0000000000000005 R09: 0000000000000001
[  133.691042] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880182ad800
[  133.691795] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  133.692591] FS:  00007f7b61c19700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  133.693438] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  133.694051] CR2: 0000557a588b7080 CR3: 000000000efd8000 CR4: 0000000000350ee0
[  133.694804] Call Trace:
[  133.695090]  <TASK>
[  133.695349]  ctx_sched_out+0x8f1/0xc10
[  133.695775]  __perf_event_task_sched_out+0x6d0/0x18d0
[  133.696336]  ? lock_is_held_type+0xd7/0x130
[  133.696813]  ? __perf_cgroup_move+0x160/0x160
[  133.697305]  ? set_next_entity+0x304/0x550
[  133.697775]  ? lock_is_held_type+0xd7/0x130
[  133.698247]  __schedule+0xedd/0x2470
[  133.698662]  ? io_schedule_timeout+0x150/0x150
[  133.699150]  ? futex_wait_setup+0x166/0x230
[  133.699624]  schedule+0xda/0x1b0
[  133.699994]  futex_wait_queue+0xf5/0x1e0
[  133.700446]  futex_wait+0x28e/0x690
[  133.700840]  ? futex_wait_setup+0x230/0x230
[  133.701323]  ? wake_up_q+0x8b/0xf0
[  133.701715]  ? do_raw_spin_unlock+0x4f/0x220
[  133.702209]  ? futex_wake+0x158/0x490
[  133.702634]  ? fd_install+0x1f9/0x640
[  133.703061]  do_futex+0x2ff/0x380
[  133.703443]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  133.704078]  __x64_sys_futex+0x1c6/0x4d0
[  133.704543]  ? __x64_sys_futex_time32+0x480/0x480
[  133.705066]  ? syscall_enter_from_user_mode+0x1d/0x50
[  133.705632]  ? syscall_enter_from_user_mode+0x1d/0x50
[  133.706200]  do_syscall_64+0x3b/0x90
[  133.706616]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  133.707173] RIP: 0033:0x7f7b646a3b19
[  133.707582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  133.709507] RSP: 002b:00007f7b61c19218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  133.710332] RAX: ffffffffffffffda RBX: 00007f7b647b6f68 RCX: 00007f7b646a3b19
[  133.711083] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7b647b6f68
[  133.711841] RBP: 00007f7b647b6f60 R08: 0000000000000000 R09: 0000000000000000
[  133.712602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b647b6f6c
[  133.713367] R13: 00007ffd52fa5a8f R14: 00007f7b61c19300 R15: 0000000000022000
[  133.714129]  </TASK>
[  133.714394] irq event stamp: 656
[  133.714749] hardirqs last  enabled at (655): [<ffffffff84241efd>] syscall_enter_from_user_mode+0x1d/0x50
[  133.715758] hardirqs last disabled at (656): [<ffffffff8424b1d5>] __schedule+0x1225/0x2470
[  133.716661] softirqs last  enabled at (416): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  133.717561] softirqs last disabled at (407): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  133.718455] ---[ end trace 0000000000000000 ]---
[  134.121864] audit: type=1400 audit(1663080179.225:9): avc:  denied  { relabelfrom } for  pid=3859 comm="syz-executor.4" name="" dev="pipefs" ino=14464 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[  134.126540] audit: type=1400 audit(1663080179.228:10): avc:  denied  { relabelto } for  pid=3859 comm="syz-executor.4" name="" dev="pipefs" ino=14464 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=fifo_file permissive=1
14:42:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x2)

14:42:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x2)

14:42:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x2)

14:42:59 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x2)

14:42:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBSENT(r0, 0x5410, 0x0)

14:42:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBSENT(r0, 0x5410, 0x0)

14:42:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpid()
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000dead292f89cb8d47d567c02202f7bd4800000000c0ee11125d4d121b5f8159dc6d07efa640f53cf9689d443650f6c47eec8ed1445fe60cdbf8c22db93cc9479b60", @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="e200330080800000080211000001080211000000505050505050"], 0x100}}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0))
syz_io_uring_setup(0x2971, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400))
clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

14:42:59 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDGKBSENT(r0, 0x5410, 0x0)

[  134.737259] device lo entered promiscuous mode
[  139.507206] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  139.571166] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  139.571172] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  139.571296] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  139.573494] Bluetooth: hci5: Opcode 0x c03 failed: -110

VM DIAGNOSIS:
14:42:59  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806cf3d420 RCX=0000000000000000 RDX=ffff88803fbd3580
RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88801f12f960
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d9e7a85 R13=ffff88806cf3d428 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555568b400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7b647ac6dc CR3=000000000efd8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f7b6478a7c0 00007f7b6478a7c8
YMM02=0000000000000000 0000000000000000 00007f7b6478a7e0 00007f7b6478a7c0
YMM03=0000000000000000 0000000000000000 00007f7b6478a7c8 00007f7b6478a7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88801b617348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001
R12=0000000000000038 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0
RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7b61c19700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557a588b7080 CR3=000000000efd8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f7b6478a7c0 00007f7b6478a7c8
YMM02=0000000000000000 0000000000000000 00007f7b6478a7e0 00007f7b6478a7c0
YMM03=0000000000000000 0000000000000000 00007f7b6478a7c8 00007f7b6478a7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000