Warning: Permanently added '[localhost]:5225' (ECDSA) to the list of known hosts. 2022/09/13 15:26:03 fuzzer started 2022/09/13 15:26:04 dialing manager at localhost:36597 syzkaller login: [ 35.374566] cgroup: Unknown subsys name 'net' [ 35.460075] cgroup: Unknown subsys name 'rlimit' [ 47.433613] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2022/09/13 15:26:16 syscalls: 2215 2022/09/13 15:26:16 code coverage: enabled 2022/09/13 15:26:16 comparison tracing: enabled 2022/09/13 15:26:16 extra coverage: enabled 2022/09/13 15:26:16 setuid sandbox: enabled 2022/09/13 15:26:16 namespace sandbox: enabled 2022/09/13 15:26:16 Android sandbox: enabled 2022/09/13 15:26:16 fault injection: enabled 2022/09/13 15:26:16 leak checking: enabled 2022/09/13 15:26:16 net packet injection: enabled 2022/09/13 15:26:16 net device setup: enabled 2022/09/13 15:26:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 15:26:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 15:26:16 USB emulation: enabled 2022/09/13 15:26:16 hci packet injection: enabled 2022/09/13 15:26:16 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 15:26:16 802.15.4 emulation: enabled 2022/09/13 15:26:16 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/13 15:26:16 fetching corpus: 50, signal 35143/38547 (executing program) 2022/09/13 15:26:17 fetching corpus: 100, signal 45482/50312 (executing program) 2022/09/13 15:26:17 fetching corpus: 150, signal 57979/64011 (executing program) 2022/09/13 15:26:17 fetching corpus: 200, signal 69741/76761 (executing program) 2022/09/13 15:26:17 fetching corpus: 250, signal 74672/82827 (executing program) 2022/09/13 15:26:17 fetching corpus: 300, signal 78029/87382 (executing program) 2022/09/13 15:26:17 fetching corpus: 350, signal 82895/93286 (executing program) 2022/09/13 15:26:18 fetching corpus: 400, signal 86826/98216 (executing program) 2022/09/13 15:26:18 fetching corpus: 450, signal 89215/101654 (executing program) 2022/09/13 15:26:18 fetching corpus: 500, signal 92233/105622 (executing program) 2022/09/13 15:26:18 fetching corpus: 550, signal 96076/110362 (executing program) 2022/09/13 15:26:18 fetching corpus: 600, signal 100598/115646 (executing program) 2022/09/13 15:26:18 fetching corpus: 650, signal 103720/119554 (executing program) 2022/09/13 15:26:18 fetching corpus: 700, signal 106326/122980 (executing program) 2022/09/13 15:26:19 fetching corpus: 750, signal 109263/126650 (executing program) 2022/09/13 15:26:19 fetching corpus: 800, signal 111606/129742 (executing program) 2022/09/13 15:26:19 fetching corpus: 850, signal 113905/132776 (executing program) 2022/09/13 15:26:19 fetching corpus: 900, signal 115452/135125 (executing program) 2022/09/13 15:26:19 fetching corpus: 950, signal 117709/137996 (executing program) 2022/09/13 15:26:19 fetching corpus: 1000, signal 120904/141649 (executing program) 2022/09/13 15:26:19 fetching corpus: 1050, signal 122962/144366 (executing program) 2022/09/13 15:26:19 fetching corpus: 1100, signal 124408/146498 (executing program) 2022/09/13 15:26:20 fetching corpus: 1150, signal 126879/149434 (executing program) 2022/09/13 15:26:20 fetching corpus: 1200, signal 129162/152203 (executing program) 2022/09/13 15:26:20 fetching corpus: 1250, signal 131154/154689 (executing program) 2022/09/13 15:26:20 fetching corpus: 1300, signal 133073/157076 (executing program) 2022/09/13 15:26:20 fetching corpus: 1350, signal 134729/159246 (executing program) 2022/09/13 15:26:20 fetching corpus: 1400, signal 136417/161431 (executing program) 2022/09/13 15:26:21 fetching corpus: 1450, signal 139113/164266 (executing program) 2022/09/13 15:26:21 fetching corpus: 1500, signal 140900/166413 (executing program) 2022/09/13 15:26:21 fetching corpus: 1550, signal 142573/168463 (executing program) 2022/09/13 15:26:21 fetching corpus: 1600, signal 143823/170227 (executing program) 2022/09/13 15:26:21 fetching corpus: 1650, signal 146222/172773 (executing program) 2022/09/13 15:26:21 fetching corpus: 1700, signal 148409/175062 (executing program) 2022/09/13 15:26:21 fetching corpus: 1750, signal 149562/176620 (executing program) 2022/09/13 15:26:21 fetching corpus: 1800, signal 150993/178380 (executing program) 2022/09/13 15:26:22 fetching corpus: 1850, signal 153748/181012 (executing program) 2022/09/13 15:26:22 fetching corpus: 1900, signal 156527/183615 (executing program) 2022/09/13 15:26:22 fetching corpus: 1950, signal 157365/184864 (executing program) 2022/09/13 15:26:22 fetching corpus: 2000, signal 159057/186702 (executing program) 2022/09/13 15:26:22 fetching corpus: 2050, signal 160432/188227 (executing program) 2022/09/13 15:26:22 fetching corpus: 2100, signal 161449/189554 (executing program) 2022/09/13 15:26:23 fetching corpus: 2150, signal 162641/190918 (executing program) 2022/09/13 15:26:23 fetching corpus: 2200, signal 164013/192420 (executing program) 2022/09/13 15:26:23 fetching corpus: 2250, signal 165327/193874 (executing program) 2022/09/13 15:26:23 fetching corpus: 2300, signal 166578/195267 (executing program) 2022/09/13 15:26:23 fetching corpus: 2350, signal 167372/196407 (executing program) 2022/09/13 15:26:23 fetching corpus: 2400, signal 168476/197681 (executing program) 2022/09/13 15:26:23 fetching corpus: 2450, signal 169553/198930 (executing program) 2022/09/13 15:26:23 fetching corpus: 2500, signal 170591/200094 (executing program) 2022/09/13 15:26:24 fetching corpus: 2550, signal 171345/201118 (executing program) 2022/09/13 15:26:24 fetching corpus: 2600, signal 172546/202387 (executing program) 2022/09/13 15:26:24 fetching corpus: 2650, signal 174088/203748 (executing program) 2022/09/13 15:26:24 fetching corpus: 2700, signal 175467/205065 (executing program) 2022/09/13 15:26:24 fetching corpus: 2750, signal 176233/206069 (executing program) 2022/09/13 15:26:24 fetching corpus: 2800, signal 177218/207054 (executing program) 2022/09/13 15:26:25 fetching corpus: 2850, signal 178040/208008 (executing program) 2022/09/13 15:26:25 fetching corpus: 2900, signal 178860/208974 (executing program) 2022/09/13 15:26:25 fetching corpus: 2950, signal 180185/210116 (executing program) 2022/09/13 15:26:25 fetching corpus: 3000, signal 181192/211141 (executing program) 2022/09/13 15:26:25 fetching corpus: 3050, signal 182365/212240 (executing program) 2022/09/13 15:26:25 fetching corpus: 3100, signal 182996/213063 (executing program) 2022/09/13 15:26:25 fetching corpus: 3150, signal 184746/214348 (executing program) 2022/09/13 15:26:25 fetching corpus: 3200, signal 185516/215167 (executing program) 2022/09/13 15:26:26 fetching corpus: 3250, signal 186744/216112 (executing program) 2022/09/13 15:26:26 fetching corpus: 3300, signal 187455/216911 (executing program) 2022/09/13 15:26:26 fetching corpus: 3350, signal 188724/217880 (executing program) 2022/09/13 15:26:26 fetching corpus: 3400, signal 190272/218988 (executing program) 2022/09/13 15:26:26 fetching corpus: 3450, signal 191377/219839 (executing program) 2022/09/13 15:26:26 fetching corpus: 3500, signal 192242/220598 (executing program) 2022/09/13 15:26:27 fetching corpus: 3550, signal 193008/221327 (executing program) 2022/09/13 15:26:27 fetching corpus: 3600, signal 194348/222230 (executing program) 2022/09/13 15:26:27 fetching corpus: 3650, signal 195376/223018 (executing program) 2022/09/13 15:26:27 fetching corpus: 3700, signal 196173/223707 (executing program) 2022/09/13 15:26:27 fetching corpus: 3750, signal 196734/224272 (executing program) 2022/09/13 15:26:27 fetching corpus: 3800, signal 197492/224927 (executing program) 2022/09/13 15:26:27 fetching corpus: 3850, signal 198261/225535 (executing program) 2022/09/13 15:26:28 fetching corpus: 3900, signal 199376/226271 (executing program) 2022/09/13 15:26:28 fetching corpus: 3950, signal 200464/226993 (executing program) 2022/09/13 15:26:28 fetching corpus: 4000, signal 200843/227420 (executing program) 2022/09/13 15:26:28 fetching corpus: 4050, signal 201472/227918 (executing program) 2022/09/13 15:26:28 fetching corpus: 4100, signal 202156/228455 (executing program) 2022/09/13 15:26:28 fetching corpus: 4150, signal 202737/228944 (executing program) 2022/09/13 15:26:28 fetching corpus: 4200, signal 203446/229540 (executing program) 2022/09/13 15:26:28 fetching corpus: 4250, signal 204449/230174 (executing program) 2022/09/13 15:26:29 fetching corpus: 4300, signal 205117/230662 (executing program) 2022/09/13 15:26:29 fetching corpus: 4350, signal 206002/231190 (executing program) 2022/09/13 15:26:29 fetching corpus: 4400, signal 206768/231694 (executing program) 2022/09/13 15:26:29 fetching corpus: 4450, signal 207609/232168 (executing program) 2022/09/13 15:26:29 fetching corpus: 4500, signal 208327/232599 (executing program) 2022/09/13 15:26:29 fetching corpus: 4550, signal 209118/233026 (executing program) 2022/09/13 15:26:29 fetching corpus: 4600, signal 209789/233472 (executing program) 2022/09/13 15:26:30 fetching corpus: 4650, signal 210847/233945 (executing program) 2022/09/13 15:26:30 fetching corpus: 4700, signal 212090/234426 (executing program) 2022/09/13 15:26:30 fetching corpus: 4750, signal 212955/234833 (executing program) 2022/09/13 15:26:30 fetching corpus: 4800, signal 213672/235171 (executing program) 2022/09/13 15:26:30 fetching corpus: 4850, signal 214344/235504 (executing program) 2022/09/13 15:26:30 fetching corpus: 4900, signal 214700/235772 (executing program) 2022/09/13 15:26:31 fetching corpus: 4950, signal 215480/236106 (executing program) 2022/09/13 15:26:31 fetching corpus: 5000, signal 215851/236363 (executing program) 2022/09/13 15:26:31 fetching corpus: 5050, signal 217038/236750 (executing program) 2022/09/13 15:26:31 fetching corpus: 5100, signal 217577/237016 (executing program) 2022/09/13 15:26:31 fetching corpus: 5150, signal 217961/237280 (executing program) 2022/09/13 15:26:31 fetching corpus: 5200, signal 218808/237662 (executing program) 2022/09/13 15:26:31 fetching corpus: 5250, signal 219430/237882 (executing program) 2022/09/13 15:26:32 fetching corpus: 5300, signal 220258/238115 (executing program) 2022/09/13 15:26:32 fetching corpus: 5350, signal 220786/238360 (executing program) 2022/09/13 15:26:32 fetching corpus: 5400, signal 221306/238550 (executing program) 2022/09/13 15:26:32 fetching corpus: 5450, signal 221952/238787 (executing program) 2022/09/13 15:26:32 fetching corpus: 5500, signal 222764/239008 (executing program) 2022/09/13 15:26:32 fetching corpus: 5550, signal 223190/239199 (executing program) 2022/09/13 15:26:32 fetching corpus: 5600, signal 223966/239464 (executing program) 2022/09/13 15:26:32 fetching corpus: 5650, signal 224515/239604 (executing program) 2022/09/13 15:26:32 fetching corpus: 5700, signal 225097/239739 (executing program) 2022/09/13 15:26:33 fetching corpus: 5750, signal 225923/239904 (executing program) 2022/09/13 15:26:33 fetching corpus: 5800, signal 227193/239995 (executing program) 2022/09/13 15:26:33 fetching corpus: 5850, signal 228032/240000 (executing program) 2022/09/13 15:26:33 fetching corpus: 5900, signal 228511/240006 (executing program) 2022/09/13 15:26:33 fetching corpus: 5950, signal 228802/240008 (executing program) 2022/09/13 15:26:33 fetching corpus: 6000, signal 229440/240058 (executing program) 2022/09/13 15:26:33 fetching corpus: 6050, signal 229917/240060 (executing program) 2022/09/13 15:26:33 fetching corpus: 6100, signal 230426/240065 (executing program) 2022/09/13 15:26:34 fetching corpus: 6150, signal 230907/240067 (executing program) 2022/09/13 15:26:34 fetching corpus: 6151, signal 230912/240067 (executing program) 2022/09/13 15:26:34 fetching corpus: 6151, signal 230912/240067 (executing program) 2022/09/13 15:26:36 starting 8 fuzzer processes 15:26:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 15:26:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, 0x0, 0x0) 15:26:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000470008000f80100200040000300000000000000800029842f98f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f", 0x36, 0x1e0}], 0x0, &(0x7f0000010f00)) [ 67.412901] audit: type=1400 audit(1663082796.418:6): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:26:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001600)) 15:26:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) gettid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x4, 0x85, 0xf, 0x9, 0x0, 0xb6, 0x40121, 0x4ce85b42c354d306, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_config_ext={0x0, 0x3}, 0x4000, 0x4, 0x0, 0x8, 0x3195, 0x3, 0xfffa, 0x0, 0xfac, 0x0, 0x81}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe60}}, {0x10, 0xb, 0x4}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040894) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000500)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:26:36 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000080}) 15:26:36 executing program 6: r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0xcaf6b0a5a16e9a41}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:26:36 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000340)=[0x0]) [ 68.629601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.631945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.633251] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.634923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.638039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.641195] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.643346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.644895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.658342] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.720029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.751984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.754126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.756214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.757948] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.759611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.761036] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.763301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.764549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.765850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.766963] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.768315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.769689] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.770923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.772083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.773318] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.774623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.776987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.782869] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.795332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.800276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.802188] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.804565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.806447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.807591] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.809996] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.811247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.812368] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.813984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.815173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.816354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.820518] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.821507] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.824303] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.826908] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.840604] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.841637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.849661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.870105] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.876936] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.713172] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 70.713289] Bluetooth: hci1: command 0x0409 tx timeout [ 70.840751] Bluetooth: hci6: command 0x0409 tx timeout [ 70.840875] Bluetooth: hci0: command 0x0409 tx timeout [ 70.904758] Bluetooth: hci7: command 0x0409 tx timeout [ 70.905019] Bluetooth: hci5: command 0x0409 tx timeout [ 70.905210] Bluetooth: hci4: command 0x0409 tx timeout [ 70.906327] Bluetooth: hci2: command 0x0409 tx timeout [ 72.761073] Bluetooth: hci1: command 0x041b tx timeout [ 72.888764] Bluetooth: hci0: command 0x041b tx timeout [ 72.889488] Bluetooth: hci6: command 0x041b tx timeout [ 72.952790] Bluetooth: hci2: command 0x041b tx timeout [ 72.953459] Bluetooth: hci4: command 0x041b tx timeout [ 72.954687] Bluetooth: hci5: command 0x041b tx timeout [ 72.955342] Bluetooth: hci7: command 0x041b tx timeout [ 74.809985] Bluetooth: hci1: command 0x040f tx timeout [ 74.936762] Bluetooth: hci6: command 0x040f tx timeout [ 74.937280] Bluetooth: hci0: command 0x040f tx timeout [ 75.001809] Bluetooth: hci7: command 0x040f tx timeout [ 75.003054] Bluetooth: hci5: command 0x040f tx timeout [ 75.003506] Bluetooth: hci4: command 0x040f tx timeout [ 75.004257] Bluetooth: hci2: command 0x040f tx timeout [ 75.832765] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 76.857988] Bluetooth: hci1: command 0x0419 tx timeout [ 76.985832] Bluetooth: hci0: command 0x0419 tx timeout [ 76.986563] Bluetooth: hci6: command 0x0419 tx timeout [ 77.049758] Bluetooth: hci2: command 0x0419 tx timeout [ 77.050188] Bluetooth: hci4: command 0x0419 tx timeout [ 77.050600] Bluetooth: hci5: command 0x0419 tx timeout [ 77.051317] Bluetooth: hci7: command 0x0419 tx timeout [ 80.440826] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 85.368943] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 88.337145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.339976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.343149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.360411] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.365851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.369412] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.382546] Bluetooth: hci3: HCI_REQ-0x0c1a [ 90.425793] Bluetooth: hci3: command 0x0409 tx timeout [ 92.472865] Bluetooth: hci3: command 0x041b tx timeout [ 94.521855] Bluetooth: hci3: command 0x040f tx timeout [ 96.568781] Bluetooth: hci3: command 0x0419 tx timeout 15:27:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) [ 126.204278] audit: type=1400 audit(1663082855.210:7): avc: denied { open } for pid=3631 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.207336] audit: type=1400 audit(1663082855.210:8): avc: denied { kernel } for pid=3631 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.214167] audit: type=1400 audit(1663082855.219:9): avc: denied { tracepoint } for pid=3631 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.229842] ------------[ cut here ]------------ [ 126.229863] [ 126.229867] ====================================================== [ 126.229871] WARNING: possible circular locking dependency detected [ 126.229875] 6.0.0-rc5-next-20220913 #1 Not tainted [ 126.229882] ------------------------------------------------------ [ 126.229885] syz-executor.2/3632 is trying to acquire lock: [ 126.229892] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.229928] [ 126.229928] but task is already holding lock: [ 126.229930] ffff888017496c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.229957] [ 126.229957] which lock already depends on the new lock. [ 126.229957] [ 126.229960] [ 126.229960] the existing dependency chain (in reverse order) is: [ 126.229963] [ 126.229963] -> #3 (&ctx->lock){....}-{2:2}: [ 126.229977] _raw_spin_lock+0x2a/0x40 [ 126.229995] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.230009] __schedule+0xedd/0x2470 [ 126.230021] schedule+0xda/0x1b0 [ 126.230030] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.230050] syscall_exit_to_user_mode+0x19/0x40 [ 126.230068] do_syscall_64+0x48/0x90 [ 126.230081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.230098] [ 126.230098] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.230112] _raw_spin_lock_nested+0x30/0x40 [ 126.230127] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.230139] task_fork_fair+0x63/0x4d0 [ 126.230156] sched_cgroup_fork+0x3d0/0x540 [ 126.230170] copy_process+0x3f9e/0x6df0 [ 126.230181] kernel_clone+0xe7/0x890 [ 126.230190] user_mode_thread+0xad/0xf0 [ 126.230200] rest_init+0x24/0x250 [ 126.230216] arch_call_rest_init+0xf/0x14 [ 126.230235] start_kernel+0x4c1/0x4e6 [ 126.230253] secondary_startup_64_no_verify+0xe0/0xeb [ 126.230267] [ 126.230267] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.230280] _raw_spin_lock_irqsave+0x39/0x60 [ 126.230295] try_to_wake_up+0xab/0x1920 [ 126.230309] up+0x75/0xb0 [ 126.230320] __up_console_sem+0x6e/0x80 [ 126.230336] console_unlock+0x46a/0x590 [ 126.230352] vt_ioctl+0x2822/0x2ca0 [ 126.230364] tty_ioctl+0x7c4/0x1700 [ 126.230375] __x64_sys_ioctl+0x19a/0x210 [ 126.230390] do_syscall_64+0x3b/0x90 [ 126.230403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.230420] [ 126.230420] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.230433] __lock_acquire+0x2a02/0x5e70 [ 126.230450] lock_acquire+0x1a2/0x530 [ 126.230466] _raw_spin_lock_irqsave+0x39/0x60 [ 126.230481] down_trylock+0xe/0x70 [ 126.230493] __down_trylock_console_sem+0x3b/0xd0 [ 126.230510] vprintk_emit+0x16b/0x560 [ 126.230527] vprintk+0x84/0xa0 [ 126.230543] _printk+0xba/0xf1 [ 126.230561] report_bug.cold+0x72/0xab [ 126.230573] handle_bug+0x3c/0x70 [ 126.230586] exc_invalid_op+0x14/0x50 [ 126.230599] asm_exc_invalid_op+0x16/0x20 [ 126.230615] group_sched_out.part.0+0x2c7/0x460 [ 126.230625] ctx_sched_out+0x8f1/0xc10 [ 126.230635] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.230647] __schedule+0xedd/0x2470 [ 126.230657] schedule+0xda/0x1b0 [ 126.230666] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.230685] syscall_exit_to_user_mode+0x19/0x40 [ 126.230702] do_syscall_64+0x48/0x90 [ 126.230715] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.230732] [ 126.230732] other info that might help us debug this: [ 126.230732] [ 126.230735] Chain exists of: [ 126.230735] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.230735] [ 126.230750] Possible unsafe locking scenario: [ 126.230750] [ 126.230752] CPU0 CPU1 [ 126.230754] ---- ---- [ 126.230756] lock(&ctx->lock); [ 126.230762] lock(&rq->__lock); [ 126.230768] lock(&ctx->lock); [ 126.230774] lock((console_sem).lock); [ 126.230780] [ 126.230780] *** DEADLOCK *** [ 126.230780] [ 126.230782] 2 locks held by syz-executor.2/3632: [ 126.230789] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.230814] #1: ffff888017496c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.230841] [ 126.230841] stack backtrace: [ 126.230844] CPU: 0 PID: 3632 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1 [ 126.230857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.230865] Call Trace: [ 126.230868] [ 126.230872] dump_stack_lvl+0x8b/0xb3 [ 126.230886] check_noncircular+0x263/0x2e0 [ 126.230903] ? format_decode+0x26c/0xb50 [ 126.230918] ? print_circular_bug+0x450/0x450 [ 126.230935] ? enable_ptr_key_workfn+0x20/0x20 [ 126.230950] ? format_decode+0x26c/0xb50 [ 126.230966] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.230983] __lock_acquire+0x2a02/0x5e70 [ 126.231005] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.231028] lock_acquire+0x1a2/0x530 [ 126.231045] ? down_trylock+0xe/0x70 [ 126.231060] ? rcu_read_unlock+0x40/0x40 [ 126.231081] ? vprintk+0x84/0xa0 [ 126.231099] _raw_spin_lock_irqsave+0x39/0x60 [ 126.231115] ? down_trylock+0xe/0x70 [ 126.231128] down_trylock+0xe/0x70 [ 126.231142] ? vprintk+0x84/0xa0 [ 126.231159] __down_trylock_console_sem+0x3b/0xd0 [ 126.231177] vprintk_emit+0x16b/0x560 [ 126.231196] vprintk+0x84/0xa0 [ 126.231214] _printk+0xba/0xf1 [ 126.231231] ? record_print_text.cold+0x16/0x16 [ 126.231254] ? report_bug.cold+0x66/0xab [ 126.231268] ? group_sched_out.part.0+0x2c7/0x460 [ 126.231279] report_bug.cold+0x72/0xab [ 126.231294] handle_bug+0x3c/0x70 [ 126.231316] exc_invalid_op+0x14/0x50 [ 126.231330] asm_exc_invalid_op+0x16/0x20 [ 126.231348] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.231361] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.231373] RSP: 0018:ffff888017787c48 EFLAGS: 00010006 [ 126.231382] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.231389] RDX: ffff88801a670000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 126.231397] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.231404] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888017496c00 [ 126.231412] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 126.231423] ? group_sched_out.part.0+0x2c7/0x460 [ 126.231436] ? group_sched_out.part.0+0x2c7/0x460 [ 126.231449] ctx_sched_out+0x8f1/0xc10 [ 126.231461] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.231477] ? lock_is_held_type+0xd7/0x130 [ 126.231495] ? __perf_cgroup_move+0x160/0x160 [ 126.231507] ? set_next_entity+0x304/0x550 [ 126.231525] ? update_curr+0x267/0x740 [ 126.231544] ? lock_is_held_type+0xd7/0x130 [ 126.231562] __schedule+0xedd/0x2470 [ 126.231575] ? io_schedule_timeout+0x150/0x150 [ 126.231588] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.231608] schedule+0xda/0x1b0 [ 126.231619] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.231640] syscall_exit_to_user_mode+0x19/0x40 [ 126.231658] do_syscall_64+0x48/0x90 [ 126.231673] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.231690] RIP: 0033:0x7fcba9765b19 [ 126.231699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.231710] RSP: 002b:00007fcba6cdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.231721] RAX: 0000000000000001 RBX: 00007fcba9878f68 RCX: 00007fcba9765b19 [ 126.231728] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcba9878f6c [ 126.231736] RBP: 00007fcba9878f60 R08: 000000000000000e R09: 0000000000000000 [ 126.231743] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcba9878f6c [ 126.231750] R13: 00007ffe94d2908f R14: 00007fcba6cdb300 R15: 0000000000022000 [ 126.231763] [ 126.287388] WARNING: CPU: 0 PID: 3632 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.288086] Modules linked in: [ 126.288340] CPU: 0 PID: 3632 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1 [ 126.288932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.289770] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.290173] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.291495] RSP: 0018:ffff888017787c48 EFLAGS: 00010006 [ 126.291888] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.292409] RDX: ffff88801a670000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 126.292929] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.293456] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888017496c00 [ 126.293984] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 126.294513] FS: 00007fcba6cdb700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.295108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.295547] CR2: 00007fe8357b8368 CR3: 000000001011a000 CR4: 0000000000350ef0 [ 126.296071] Call Trace: [ 126.296271] [ 126.296443] ctx_sched_out+0x8f1/0xc10 [ 126.296733] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.297129] ? lock_is_held_type+0xd7/0x130 [ 126.297454] ? __perf_cgroup_move+0x160/0x160 [ 126.297793] ? set_next_entity+0x304/0x550 [ 126.298116] ? update_curr+0x267/0x740 [ 126.298411] ? lock_is_held_type+0xd7/0x130 [ 126.298741] __schedule+0xedd/0x2470 [ 126.299025] ? io_schedule_timeout+0x150/0x150 [ 126.299379] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.299747] schedule+0xda/0x1b0 [ 126.300005] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.300396] syscall_exit_to_user_mode+0x19/0x40 [ 126.300752] do_syscall_64+0x48/0x90 [ 126.301043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.301435] RIP: 0033:0x7fcba9765b19 [ 126.301714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.303042] RSP: 002b:00007fcba6cdb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.303618] RAX: 0000000000000001 RBX: 00007fcba9878f68 RCX: 00007fcba9765b19 [ 126.304140] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcba9878f6c [ 126.304662] RBP: 00007fcba9878f60 R08: 000000000000000e R09: 0000000000000000 [ 126.305186] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcba9878f6c [ 126.305706] R13: 00007ffe94d2908f R14: 00007fcba6cdb300 R15: 0000000000022000 [ 126.306235] [ 126.306409] irq event stamp: 2352 [ 126.306664] hardirqs last enabled at (2351): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.307372] hardirqs last disabled at (2352): [] __schedule+0x1225/0x2470 [ 126.307982] softirqs last enabled at (1362): [] __irq_exit_rcu+0x11b/0x180 [ 126.308625] softirqs last disabled at (1305): [] __irq_exit_rcu+0x11b/0x180 [ 126.309252] ---[ end trace 0000000000000000 ]--- 15:27:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 15:27:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 15:27:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 15:27:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 15:27:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd4(r2, &(0x7f0000000000)={[0x6]}, 0x8, 0x800) 15:27:36 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000340)=[0x0]) 15:27:36 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getgroups(0x1, &(0x7f0000000340)=[0x0]) [ 132.024733] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 132.088729] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 132.152817] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 134.337749] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.340105] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.342479] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.345454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.347773] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.349436] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.352988] Bluetooth: hci6: HCI_REQ-0x0c1a VM DIAGNOSIS: 15:27:35 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888017787698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcba6cdb700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe8357b8368 CR3=000000001011a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fcba984c7c0 00007fcba984c7c8 YMM02=0000000000000000 0000000000000000 00007fcba984c7e0 00007fcba984c7c0 YMM03=0000000000000000 0000000000000000 00007fcba984c7c8 00007fcba984c7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff812a3828 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff85b02310 RBP=1ffff11002ba7e9f RSP=ffff888015d3f4d8 R8 =0000000000000000 R9 =ffffffff85b02317 R10=fffffbfff0b60462 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffffffff8544d3a8 R15=ffff888040505290 RIP=ffffffff8130ca9d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc869aa38e0 CR3=0000000018a08000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000