Warning: Permanently added '[localhost]:32464' (ECDSA) to the list of known hosts. 2022/09/23 12:53:21 fuzzer started 2022/09/23 12:53:22 dialing manager at localhost:38881 syzkaller login: [ 36.372296] cgroup: Unknown subsys name 'net' [ 36.472878] cgroup: Unknown subsys name 'rlimit' 2022/09/23 12:53:36 syscalls: 2215 2022/09/23 12:53:36 code coverage: enabled 2022/09/23 12:53:36 comparison tracing: enabled 2022/09/23 12:53:36 extra coverage: enabled 2022/09/23 12:53:36 setuid sandbox: enabled 2022/09/23 12:53:36 namespace sandbox: enabled 2022/09/23 12:53:36 Android sandbox: enabled 2022/09/23 12:53:36 fault injection: enabled 2022/09/23 12:53:36 leak checking: enabled 2022/09/23 12:53:36 net packet injection: enabled 2022/09/23 12:53:36 net device setup: enabled 2022/09/23 12:53:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/23 12:53:36 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/23 12:53:36 USB emulation: enabled 2022/09/23 12:53:36 hci packet injection: enabled 2022/09/23 12:53:36 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/23 12:53:36 802.15.4 emulation: enabled 2022/09/23 12:53:36 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/23 12:53:36 fetching corpus: 50, signal 23662/27151 (executing program) 2022/09/23 12:53:36 fetching corpus: 100, signal 38647/43410 (executing program) 2022/09/23 12:53:36 fetching corpus: 150, signal 44942/51014 (executing program) 2022/09/23 12:53:36 fetching corpus: 200, signal 49915/57260 (executing program) 2022/09/23 12:53:36 fetching corpus: 250, signal 55069/63554 (executing program) 2022/09/23 12:53:36 fetching corpus: 300, signal 59930/69456 (executing program) 2022/09/23 12:53:36 fetching corpus: 350, signal 64088/74656 (executing program) 2022/09/23 12:53:36 fetching corpus: 400, signal 67153/78794 (executing program) 2022/09/23 12:53:36 fetching corpus: 450, signal 70276/82819 (executing program) 2022/09/23 12:53:36 fetching corpus: 500, signal 74571/87860 (executing program) 2022/09/23 12:53:36 fetching corpus: 550, signal 76560/90849 (executing program) 2022/09/23 12:53:37 fetching corpus: 600, signal 80206/95196 (executing program) 2022/09/23 12:53:37 fetching corpus: 650, signal 86856/102025 (executing program) 2022/09/23 12:53:37 fetching corpus: 700, signal 89125/105102 (executing program) 2022/09/23 12:53:37 fetching corpus: 750, signal 93118/109492 (executing program) 2022/09/23 12:53:37 fetching corpus: 800, signal 95353/112407 (executing program) 2022/09/23 12:53:37 fetching corpus: 850, signal 98078/115684 (executing program) 2022/09/23 12:53:37 fetching corpus: 900, signal 100137/118312 (executing program) 2022/09/23 12:53:37 fetching corpus: 950, signal 102992/121558 (executing program) 2022/09/23 12:53:38 fetching corpus: 1000, signal 104545/123719 (executing program) 2022/09/23 12:53:38 fetching corpus: 1050, signal 107909/127233 (executing program) 2022/09/23 12:53:38 fetching corpus: 1100, signal 109794/129537 (executing program) 2022/09/23 12:53:38 fetching corpus: 1150, signal 112064/132146 (executing program) 2022/09/23 12:53:38 fetching corpus: 1200, signal 113170/133762 (executing program) 2022/09/23 12:53:38 fetching corpus: 1250, signal 115696/136383 (executing program) 2022/09/23 12:53:38 fetching corpus: 1300, signal 118101/138965 (executing program) 2022/09/23 12:53:38 fetching corpus: 1350, signal 119492/140650 (executing program) 2022/09/23 12:53:39 fetching corpus: 1400, signal 121442/142780 (executing program) 2022/09/23 12:53:39 fetching corpus: 1450, signal 122894/144503 (executing program) 2022/09/23 12:53:39 fetching corpus: 1500, signal 124511/146317 (executing program) 2022/09/23 12:53:39 fetching corpus: 1550, signal 125407/147601 (executing program) 2022/09/23 12:53:39 fetching corpus: 1600, signal 126899/149280 (executing program) 2022/09/23 12:53:39 fetching corpus: 1650, signal 128333/150941 (executing program) 2022/09/23 12:53:39 fetching corpus: 1700, signal 129457/152317 (executing program) 2022/09/23 12:53:39 fetching corpus: 1750, signal 131118/154005 (executing program) 2022/09/23 12:53:40 fetching corpus: 1800, signal 132053/155203 (executing program) 2022/09/23 12:53:40 fetching corpus: 1850, signal 133594/156757 (executing program) 2022/09/23 12:53:40 fetching corpus: 1900, signal 134901/158115 (executing program) 2022/09/23 12:53:40 fetching corpus: 1950, signal 136539/159688 (executing program) 2022/09/23 12:53:40 fetching corpus: 2000, signal 137560/160866 (executing program) 2022/09/23 12:53:40 fetching corpus: 2050, signal 139793/162708 (executing program) 2022/09/23 12:53:40 fetching corpus: 2100, signal 141717/164337 (executing program) 2022/09/23 12:53:40 fetching corpus: 2150, signal 142542/165348 (executing program) 2022/09/23 12:53:41 fetching corpus: 2198, signal 143684/166449 (executing program) 2022/09/23 12:53:41 fetching corpus: 2248, signal 144753/167510 (executing program) 2022/09/23 12:53:41 fetching corpus: 2298, signal 147520/169482 (executing program) 2022/09/23 12:53:41 fetching corpus: 2348, signal 148591/170522 (executing program) 2022/09/23 12:53:41 fetching corpus: 2398, signal 149635/171506 (executing program) 2022/09/23 12:53:41 fetching corpus: 2448, signal 150916/172598 (executing program) 2022/09/23 12:53:41 fetching corpus: 2496, signal 151861/173496 (executing program) 2022/09/23 12:53:41 fetching corpus: 2546, signal 152874/174325 (executing program) 2022/09/23 12:53:42 fetching corpus: 2595, signal 154827/175615 (executing program) 2022/09/23 12:53:42 fetching corpus: 2645, signal 155403/176266 (executing program) 2022/09/23 12:53:42 fetching corpus: 2695, signal 156490/177157 (executing program) 2022/09/23 12:53:42 fetching corpus: 2745, signal 158040/178153 (executing program) 2022/09/23 12:53:42 fetching corpus: 2795, signal 158510/178680 (executing program) 2022/09/23 12:53:42 fetching corpus: 2844, signal 159318/179367 (executing program) 2022/09/23 12:53:42 fetching corpus: 2894, signal 160544/180181 (executing program) 2022/09/23 12:53:42 fetching corpus: 2942, signal 161140/180715 (executing program) 2022/09/23 12:53:43 fetching corpus: 2992, signal 162726/181784 (executing program) 2022/09/23 12:53:43 fetching corpus: 3041, signal 164076/182553 (executing program) 2022/09/23 12:53:43 fetching corpus: 3091, signal 165023/183203 (executing program) 2022/09/23 12:53:43 fetching corpus: 3140, signal 165716/183727 (executing program) 2022/09/23 12:53:43 fetching corpus: 3190, signal 166743/184302 (executing program) 2022/09/23 12:53:43 fetching corpus: 3239, signal 167567/184895 (executing program) 2022/09/23 12:53:43 fetching corpus: 3289, signal 168130/185337 (executing program) 2022/09/23 12:53:43 fetching corpus: 3339, signal 169071/185862 (executing program) 2022/09/23 12:53:43 fetching corpus: 3389, signal 170714/186515 (executing program) 2022/09/23 12:53:43 fetching corpus: 3439, signal 171742/186996 (executing program) 2022/09/23 12:53:44 fetching corpus: 3489, signal 172413/187373 (executing program) 2022/09/23 12:53:44 fetching corpus: 3538, signal 173379/187840 (executing program) 2022/09/23 12:53:44 fetching corpus: 3586, signal 173924/188167 (executing program) 2022/09/23 12:53:44 fetching corpus: 3636, signal 174393/188464 (executing program) 2022/09/23 12:53:44 fetching corpus: 3685, signal 174957/188794 (executing program) 2022/09/23 12:53:44 fetching corpus: 3735, signal 176034/189186 (executing program) 2022/09/23 12:53:44 fetching corpus: 3785, signal 176878/189505 (executing program) 2022/09/23 12:53:44 fetching corpus: 3833, signal 177865/189853 (executing program) 2022/09/23 12:53:44 fetching corpus: 3882, signal 178574/190127 (executing program) 2022/09/23 12:53:45 fetching corpus: 3932, signal 179000/190343 (executing program) 2022/09/23 12:53:45 fetching corpus: 3982, signal 179579/190553 (executing program) 2022/09/23 12:53:45 fetching corpus: 4032, signal 180204/190776 (executing program) 2022/09/23 12:53:45 fetching corpus: 4082, signal 181258/191019 (executing program) 2022/09/23 12:53:45 fetching corpus: 4131, signal 181965/191221 (executing program) 2022/09/23 12:53:45 fetching corpus: 4179, signal 183089/191521 (executing program) 2022/09/23 12:53:45 fetching corpus: 4228, signal 183757/191692 (executing program) 2022/09/23 12:53:45 fetching corpus: 4278, signal 184571/191871 (executing program) 2022/09/23 12:53:45 fetching corpus: 4328, signal 185081/191991 (executing program) 2022/09/23 12:53:46 fetching corpus: 4378, signal 185345/192134 (executing program) 2022/09/23 12:53:46 fetching corpus: 4428, signal 185869/192246 (executing program) 2022/09/23 12:53:46 fetching corpus: 4477, signal 186742/192372 (executing program) 2022/09/23 12:53:46 fetching corpus: 4503, signal 187090/192451 (executing program) 2022/09/23 12:53:46 fetching corpus: 4503, signal 187093/192507 (executing program) 2022/09/23 12:53:46 fetching corpus: 4503, signal 187093/192569 (executing program) 2022/09/23 12:53:46 fetching corpus: 4503, signal 187093/192573 (executing program) 2022/09/23 12:53:46 fetching corpus: 4503, signal 187093/192573 (executing program) 2022/09/23 12:53:48 starting 8 fuzzer processes 12:53:48 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) 12:53:48 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) getitimer(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:53:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0x17, 0x0, 0x0, @private1}}}, 0x108) 12:53:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000023c0)={0x24, 0x12, 0x0, 0x101, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x3c}]}]}, 0x24}}, 0x0) 12:53:48 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f00000007c0)) 12:53:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000007c0)) [ 62.714351] audit: type=1400 audit(1663937628.750:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:53:48 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000540), 0x1ff, 0x102) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b5", 0x1}], 0x1, 0x0, 0x0) 12:53:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000840)='2', 0x1, 0x83b2) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) [ 64.020998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.023300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.024967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.026613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.029397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.030862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.032852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.034031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.035200] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.039315] Bluetooth: hci0: HCI_REQ-0x0c1a [ 64.064831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.074359] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.076230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.077392] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.079023] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.080944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.084878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.093169] Bluetooth: hci1: HCI_REQ-0x0c1a [ 64.108685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.109510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.110281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.112227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.114954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.132023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.133096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.134574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.136756] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.138207] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.138380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.141384] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.142494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.144548] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.148058] Bluetooth: hci3: HCI_REQ-0x0c1a [ 64.149021] Bluetooth: hci2: HCI_REQ-0x0c1a [ 64.160841] Bluetooth: hci4: HCI_REQ-0x0c1a [ 64.194204] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.197078] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.199779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.204608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.206628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.206928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.211226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.215680] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 64.217153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.224560] Bluetooth: hci7: HCI_REQ-0x0c1a [ 64.226080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.265757] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.269043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.277403] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.101190] Bluetooth: hci1: command 0x0409 tx timeout [ 66.102272] Bluetooth: hci0: command 0x0409 tx timeout [ 66.165352] Bluetooth: hci2: command 0x0409 tx timeout [ 66.166515] Bluetooth: hci3: command 0x0409 tx timeout [ 66.167689] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 66.228544] Bluetooth: hci7: command 0x0409 tx timeout [ 66.229691] Bluetooth: hci4: command 0x0409 tx timeout [ 66.293523] Bluetooth: hci5: command 0x0409 tx timeout [ 68.149494] Bluetooth: hci0: command 0x041b tx timeout [ 68.149927] Bluetooth: hci1: command 0x041b tx timeout [ 68.212512] Bluetooth: hci3: command 0x041b tx timeout [ 68.212990] Bluetooth: hci2: command 0x041b tx timeout [ 68.276567] Bluetooth: hci4: command 0x041b tx timeout [ 68.277057] Bluetooth: hci7: command 0x041b tx timeout [ 68.341570] Bluetooth: hci5: command 0x041b tx timeout [ 69.310204] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.318777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.329395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.343530] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.363640] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.365101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.372207] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.196582] Bluetooth: hci1: command 0x040f tx timeout [ 70.197348] Bluetooth: hci0: command 0x040f tx timeout [ 70.260546] Bluetooth: hci2: command 0x040f tx timeout [ 70.261260] Bluetooth: hci3: command 0x040f tx timeout [ 70.324556] Bluetooth: hci7: command 0x040f tx timeout [ 70.325225] Bluetooth: hci4: command 0x040f tx timeout [ 70.388588] Bluetooth: hci5: command 0x040f tx timeout [ 71.412632] Bluetooth: hci6: command 0x0409 tx timeout [ 72.244618] Bluetooth: hci0: command 0x0419 tx timeout [ 72.245425] Bluetooth: hci1: command 0x0419 tx timeout [ 72.308547] Bluetooth: hci3: command 0x0419 tx timeout [ 72.309312] Bluetooth: hci2: command 0x0419 tx timeout [ 72.372858] Bluetooth: hci4: command 0x0419 tx timeout [ 72.373695] Bluetooth: hci7: command 0x0419 tx timeout [ 72.436520] Bluetooth: hci5: command 0x0419 tx timeout [ 73.460619] Bluetooth: hci6: command 0x041b tx timeout [ 75.508595] Bluetooth: hci6: command 0x040f tx timeout [ 77.556485] Bluetooth: hci6: command 0x0419 tx timeout 12:54:51 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000540), 0x1ff, 0x102) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b5", 0x1}], 0x1, 0x0, 0x0) 12:54:51 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000540), 0x1ff, 0x102) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b5", 0x1}], 0x1, 0x0, 0x0) 12:54:51 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000000540), 0x1ff, 0x102) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b5", 0x1}], 0x1, 0x0, 0x0) 12:54:51 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 125.803303] audit: type=1400 audit(1663937691.839:7): avc: denied { open } for pid=3819 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.805084] audit: type=1400 audit(1663937691.839:8): avc: denied { kernel } for pid=3819 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.810855] ------------[ cut here ]------------ [ 125.811390] WARNING: CPU: 0 PID: 55 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 125.812038] Modules linked in: [ 125.812284] CPU: 0 PID: 55 Comm: kmemleak Not tainted 6.0.0-rc6-next-20220923 #1 [ 125.812863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.813711] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 125.814275] Code: 85 d5 f8 ff ff e8 72 5b ee ff 65 44 8b 25 36 c6 aa 7e 31 ff 44 89 e6 e8 10 58 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 52 5b ee ff <0f> 0b e9 a9 f8 ff ff e8 46 5b ee ff 65 8b 1d 0b c6 aa 7e 31 ff 89 [ 125.816114] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 125.816867] RAX: 0000000080010002 RBX: ffff8880086685c8 RCX: 0000000000000000 [ 125.817404] RDX: ffff88800c0d5040 RSI: ffffffff8157af9e RDI: 0000000000000005 [ 125.817944] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.818486] R10: 0000000000000000 R11: ffffffff865b001b R12: 0000000000000000 [ 125.819023] R13: ffff888008668658 R14: ffff88806ce3d140 R15: ffff8880086685c8 [ 125.819574] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.820177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.820616] CR2: 00007f3ab109f850 CR3: 000000003dd90000 CR4: 0000000000350ef0 [ 125.821149] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.821683] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.822217] Call Trace: [ 125.822416] [ 125.822590] ? perf_event_idx_default+0x10/0x10 [ 125.822953] ? event_sched_out+0x71c/0xcd0 [ 125.823284] __perf_remove_from_context+0x71e/0xb20 [ 125.823685] event_function+0x297/0x3d0 [ 125.823994] ? perf_output_read+0xf80/0xf80 [ 125.824326] remote_function+0x125/0x1b0 [ 125.824647] __flush_smp_call_function_queue+0x1df/0x5a0 [ 125.825055] ? perf_duration_warn+0x40/0x40 [ 125.825397] __sysvec_call_function_single+0x92/0x3a0 [ 125.825795] sysvec_call_function_single+0x89/0xc0 [ 125.826171] [ 125.826348] [ 125.826523] asm_sysvec_call_function_single+0x16/0x20 [ 125.826923] RIP: 0010:finish_task_switch.isra.0+0x237/0x8a0 [ 125.827354] Code: 89 ff 48 c7 03 00 00 00 00 e8 45 b5 3f 03 4d 85 e4 75 ba 4c 89 ff e8 b8 87 06 03 e8 43 5e 2c 00 fb 65 48 8b 1c 25 c0 6e 02 00 <48> 8d bb 10 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 125.828738] RSP: 0018:ffff88800f84fca8 EFLAGS: 00000202 [ 125.829144] RAX: 0000000000184bc1 RBX: ffff88800c0d5040 RCX: ffffffff81297aaf [ 125.829682] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 125.830215] RBP: ffff88800f84fce8 R08: 0000000000000001 R09: ffffffff86ccf817 [ 125.830749] R10: fffffbfff0d99f02 R11: 0000000000000001 R12: ffff88806ce37d18 [ 125.831276] R13: ffff88800ffb1ac0 R14: ffff88800c0d54f0 R15: ffff88806ce37d00 [ 125.831833] ? mark_lock.part.0+0xef/0x2f70 [ 125.832177] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 125.832565] ? __switch_to+0x5bf/0xf20 [ 125.832874] __schedule+0x89b/0x2470 [ 125.833174] ? io_schedule_timeout+0x150/0x150 [ 125.833532] ? lock_is_held_type+0xd7/0x130 [ 125.833864] ? __cond_resched+0x17/0x30 [ 125.834173] preempt_schedule_common+0x45/0xc0 [ 125.834530] __cond_resched+0x17/0x30 [ 125.834832] scan_gray_list+0x5b/0x400 [ 125.835139] kmemleak_scan+0x7ae/0x16e0 [ 125.835459] ? paint_ptr+0xc0/0xc0 [ 125.835740] ? __kthread_parkme+0x15a/0x220 [ 125.836072] ? kmemleak_write.cold+0x29/0x29 [ 125.836415] kmemleak_scan_thread+0x8f/0xb1 [ 125.836749] kthread+0x2ed/0x3a0 [ 125.837014] ? kthread_complete_and_exit+0x40/0x40 [ 125.837397] ret_from_fork+0x22/0x30 [ 125.837709] [ 125.837894] irq event stamp: 1592258 [ 125.838172] hardirqs last enabled at (1592257): [] finish_task_switch.isra.0+0x22d/0x8a0 [ 125.838891] hardirqs last disabled at (1592258): [] sysvec_call_function_single+0xb/0xc0 [ 125.839616] softirqs last enabled at (1592246): [] __irq_exit_rcu+0x11b/0x180 [ 125.840280] softirqs last disabled at (1592091): [] __irq_exit_rcu+0x11b/0x180 [ 125.840945] ---[ end trace 0000000000000000 ]--- [ 125.841327] ------------[ cut here ]------------ [ 125.841682] WARNING: CPU: 0 PID: 55 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 125.842336] Modules linked in: [ 125.842592] CPU: 0 PID: 55 Comm: kmemleak Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 125.843270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.844137] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 125.844537] Code: ff 0f 0b e9 a9 f8 ff ff e8 46 5b ee ff 65 8b 1d 0b c6 aa 7e 31 ff 89 de e8 e6 57 ee ff 85 db 0f 84 86 04 00 00 e8 29 5b ee ff <0f> 0b e9 0e fa ff ff e8 1d 5b ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 125.845934] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 125.846356] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.846920] RDX: ffff88800c0d5040 RSI: ffffffff8157afc7 RDI: 0000000000000005 [ 125.847488] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.848045] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff8880086685c8 [ 125.848608] R13: ffff8880086685c8 R14: ffff88806ce3d140 R15: ffff8880086685c8 [ 125.849159] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.849783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.850233] CR2: 00007f3ab109f850 CR3: 000000003dd90000 CR4: 0000000000350ef0 [ 125.850794] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.851351] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.851914] Call Trace: [ 125.852118] [ 125.852296] ? perf_event_idx_default+0x10/0x10 [ 125.852669] ? event_sched_out+0x71c/0xcd0 [ 125.853009] __perf_remove_from_context+0x71e/0xb20 [ 125.853409] event_function+0x297/0x3d0 [ 125.853733] ? perf_output_read+0xf80/0xf80 [ 125.854074] remote_function+0x125/0x1b0 [ 125.854394] __flush_smp_call_function_queue+0x1df/0x5a0 [ 125.854819] ? perf_duration_warn+0x40/0x40 [ 125.855163] __sysvec_call_function_single+0x92/0x3a0 [ 125.855585] sysvec_call_function_single+0x89/0xc0 [ 125.855976] [ 125.856149] [ 125.856332] asm_sysvec_call_function_single+0x16/0x20 [ 125.856750] RIP: 0010:finish_task_switch.isra.0+0x237/0x8a0 [ 125.857201] Code: 89 ff 48 c7 03 00 00 00 00 e8 45 b5 3f 03 4d 85 e4 75 ba 4c 89 ff e8 b8 87 06 03 e8 43 5e 2c 00 fb 65 48 8b 1c 25 c0 6e 02 00 <48> 8d bb 10 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 125.858600] RSP: 0018:ffff88800f84fca8 EFLAGS: 00000202 [ 125.859019] RAX: 0000000000184bc1 RBX: ffff88800c0d5040 RCX: ffffffff81297aaf [ 125.859584] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 125.860132] RBP: ffff88800f84fce8 R08: 0000000000000001 R09: ffffffff86ccf817 [ 125.860683] R10: fffffbfff0d99f02 R11: 0000000000000001 R12: ffff88806ce37d18 [ 125.861243] R13: ffff88800ffb1ac0 R14: ffff88800c0d54f0 R15: ffff88806ce37d00 [ 125.861804] ? mark_lock.part.0+0xef/0x2f70 [ 125.862153] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 125.862547] ? __switch_to+0x5bf/0xf20 [ 125.862855] __schedule+0x89b/0x2470 [ 125.863154] ? io_schedule_timeout+0x150/0x150 [ 125.863539] ? lock_is_held_type+0xd7/0x130 [ 125.863879] ? __cond_resched+0x17/0x30 [ 125.864192] preempt_schedule_common+0x45/0xc0 [ 125.864552] __cond_resched+0x17/0x30 [ 125.864858] scan_gray_list+0x5b/0x400 [ 125.865169] kmemleak_scan+0x7ae/0x16e0 [ 125.865493] ? paint_ptr+0xc0/0xc0 [ 125.865786] ? __kthread_parkme+0x15a/0x220 [ 125.866127] ? kmemleak_write.cold+0x29/0x29 [ 125.866484] kmemleak_scan_thread+0x8f/0xb1 [ 125.866829] kthread+0x2ed/0x3a0 [ 125.867097] ? kthread_complete_and_exit+0x40/0x40 [ 125.867508] ret_from_fork+0x22/0x30 [ 125.867821] [ 125.868008] irq event stamp: 1592258 [ 125.868294] hardirqs last enabled at (1592257): [] finish_task_switch.isra.0+0x22d/0x8a0 [ 125.869041] hardirqs last disabled at (1592258): [] sysvec_call_function_single+0xb/0xc0 [ 125.869787] softirqs last enabled at (1592246): [] __irq_exit_rcu+0x11b/0x180 [ 125.870481] softirqs last disabled at (1592091): [] __irq_exit_rcu+0x11b/0x180 [ 125.871169] ---[ end trace 0000000000000000 ]--- [ 125.871582] ------------[ cut here ]------------ [ 125.871956] WARNING: CPU: 0 PID: 55 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 125.872703] Modules linked in: [ 125.872961] CPU: 0 PID: 55 Comm: kmemleak Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 125.873638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 125.874516] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 125.874954] Code: 5e 41 5f e9 3d d9 f0 ff e8 38 d9 f0 ff 65 8b 1d fd 43 ad 7e 31 ff 89 de e8 d8 d5 f0 ff 85 db 0f 84 d3 02 00 00 e8 1b d9 f0 ff <0f> 0b eb 97 e8 12 d9 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 125.876344] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 [ 125.876737] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.877249] RDX: ffff88800c0d5040 RSI: ffffffff815531d5 RDI: 0000000000000005 [ 125.877765] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 125.878276] R10: 0000000000000000 R11: ffffffff865b001b R12: 0000000000000000 [ 125.878794] R13: ffff888008668670 R14: 0000000000000001 R15: 0000000000000001 [ 125.879319] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 125.879919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.880343] CR2: 00007f3ab109f850 CR3: 000000003dd90000 CR4: 0000000000350ef0 [ 125.880869] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.881391] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 125.881933] Call Trace: [ 125.882132] [ 125.882298] ? lock_is_held_type+0xd7/0x130 [ 125.882619] ? perf_event_update_time+0x285/0x380 [ 125.882984] list_del_event+0x524/0x860 [ 125.883289] __perf_remove_from_context+0xd2/0xb20 [ 125.883672] event_function+0x297/0x3d0 [ 125.883974] ? perf_output_read+0xf80/0xf80 [ 125.884300] remote_function+0x125/0x1b0 [ 125.884608] __flush_smp_call_function_queue+0x1df/0x5a0 [ 125.885003] ? perf_duration_warn+0x40/0x40 [ 125.885354] __sysvec_call_function_single+0x92/0x3a0 [ 125.885741] sysvec_call_function_single+0x89/0xc0 [ 125.886103] [ 125.886280] [ 125.886466] asm_sysvec_call_function_single+0x16/0x20 [ 125.886882] RIP: 0010:finish_task_switch.isra.0+0x237/0x8a0 [ 125.887329] Code: 89 ff 48 c7 03 00 00 00 00 e8 45 b5 3f 03 4d 85 e4 75 ba 4c 89 ff e8 b8 87 06 03 e8 43 5e 2c 00 fb 65 48 8b 1c 25 c0 6e 02 00 <48> 8d bb 10 14 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 125.888744] RSP: 0018:ffff88800f84fca8 EFLAGS: 00000202 [ 125.889166] RAX: 0000000000184bc1 RBX: ffff88800c0d5040 RCX: ffffffff81297aaf [ 125.889717] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 125.890273] RBP: ffff88800f84fce8 R08: 0000000000000001 R09: ffffffff86ccf817 [ 125.890829] R10: fffffbfff0d99f02 R11: 0000000000000001 R12: ffff88806ce37d18 [ 125.891389] R13: ffff88800ffb1ac0 R14: ffff88800c0d54f0 R15: ffff88806ce37d00 [ 125.891956] ? mark_lock.part.0+0xef/0x2f70 [ 125.892306] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 125.892702] ? __switch_to+0x5bf/0xf20 [ 125.893021] __schedule+0x89b/0x2470 [ 125.893326] ? io_schedule_timeout+0x150/0x150 [ 125.893691] ? lock_is_held_type+0xd7/0x130 [ 125.894036] ? __cond_resched+0x17/0x30 [ 125.894348] preempt_schedule_common+0x45/0xc0 [ 125.894711] __cond_resched+0x17/0x30 [ 125.895020] scan_gray_list+0x5b/0x400 [ 125.895336] kmemleak_scan+0x7ae/0x16e0 [ 125.895664] ? paint_ptr+0xc0/0xc0 [ 125.895949] ? __kthread_parkme+0x15a/0x220 [ 125.896284] ? kmemleak_write.cold+0x29/0x29 [ 125.896643] kmemleak_scan_thread+0x8f/0xb1 [ 125.896987] kthread+0x2ed/0x3a0 [ 125.897262] ? kthread_complete_and_exit+0x40/0x40 [ 125.897665] ret_from_fork+0x22/0x30 [ 125.897976] [ 125.898163] irq event stamp: 1592258 [ 125.898456] hardirqs last enabled at (1592257): [] finish_task_switch.isra.0+0x22d/0x8a0 [ 125.899200] hardirqs last disabled at (1592258): [] sysvec_call_function_single+0xb/0xc0 [ 125.899955] softirqs last enabled at (1592246): [] __irq_exit_rcu+0x11b/0x180 [ 125.900645] softirqs last disabled at (1592091): [] __irq_exit_rcu+0x11b/0x180 [ 125.901324] ---[ end trace 0000000000000000 ]--- 12:54:51 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 12:54:51 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 12:54:52 executing program 6: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 126.036705] ------------[ cut here ]------------ [ 126.037133] WARNING: CPU: 0 PID: 14 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 126.037825] Modules linked in: [ 126.038083] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 126.038782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.039654] RIP: 0010:event_filter_match+0x422/0x660 [ 126.040146] Code: 00 00 00 e9 7c fc ff ff e8 1b 1e f1 ff 65 8b 2d e0 88 ad 7e 31 ff 89 ee e8 bb 1a f1 ff 85 ed 0f 84 ef 00 00 00 e8 fe 1d f1 ff <0f> 0b eb 9f e8 c5 80 23 00 e9 17 fc ff ff e8 eb 1d f1 ff 48 8d 7b [ 126.041988] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046 [ 126.042539] RAX: 0000000000000000 RBX: ffff888036eb0000 RCX: 0000000000000100 [ 126.043270] RDX: ffff888008639ac0 RSI: ffffffff8154ecf2 RDI: 0000000000000005 [ 126.044006] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 126.044730] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff888036eb0220 [ 126.045459] R13: 0000000000000000 R14: ffff888036eb00a8 R15: ffff888036eb0220 [ 126.046193] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.047012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.047625] CR2: 0000555556675708 CR3: 0000000015c72000 CR4: 0000000000350ef0 [ 126.048358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.049086] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 126.049817] Call Trace: [ 126.050089] [ 126.050330] merge_sched_in+0x107/0x1110 [ 126.050770] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 126.051415] ? merge_sched_in+0x1110/0x1110 [ 126.051858] ? lock_is_held_type+0xd7/0x130 [ 126.052201] ctx_sched_in+0x2e6/0x770 [ 126.052499] ? lock_acquire+0x1b2/0x530 [ 126.052819] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 126.053293] ? lock_is_held_type+0xd7/0x130 [ 126.053637] perf_event_sched_in+0x75/0x80 [ 126.053975] ctx_resched+0x1ce/0x390 [ 126.054271] __perf_install_in_context+0x285/0x9c0 [ 126.054652] ? ctx_resched+0x390/0x390 [ 126.054964] remote_function+0x125/0x1b0 [ 126.055298] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.055733] ? perf_duration_warn+0x40/0x40 [ 126.056074] __sysvec_call_function_single+0x92/0x3a0 [ 126.056478] sysvec_call_function_single+0x89/0xc0 [ 126.056871] [ 126.057059] [ 126.057240] asm_sysvec_call_function_single+0x16/0x20 [ 126.057652] RIP: 0010:mod_objcg_state+0x3af/0x9e0 [ 126.058038] Code: 00 00 49 c7 44 24 28 00 00 00 00 48 c7 c6 47 e6 7a 81 4c 89 e7 e8 e1 31 af ff 48 83 3c 24 00 74 06 e8 c5 fb d1 ff fb 4d 85 ff <0f> 84 95 00 00 00 48 83 c4 28 4c 89 ff 5b 5d 41 5c 41 5d 41 5e 41 [ 126.059439] RSP: 0018:ffff88800864fc98 EFLAGS: 00000246 [ 126.059856] RAX: 0000000000381ab0 RBX: ffff88806ce34be0 RCX: 1ffffffff0b603d1 [ 126.060404] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000 [ 126.060942] RBP: ffff88806ce34c08 R08: 0000000000000001 R09: 0000000000000001 [ 126.061492] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806ce34be0 [ 126.062032] R13: ffff88807ffdc000 R14: 0000000000000006 R15: 0000000000000000 [ 126.062592] ? mod_objcg_state+0x3ab/0x9e0 [ 126.062929] ? rcu_core+0x7e2/0x2080 [ 126.063234] kmem_cache_free+0x4cb/0x610 [ 126.063597] rcu_core+0x7e2/0x2080 [ 126.063901] ? rcu_report_dead+0x540/0x540 [ 126.064252] ? __schedule+0x89b/0x2470 [ 126.064582] ? lock_is_held_type+0xd7/0x130 [ 126.064935] __do_softirq+0x1c3/0x8f5 [ 126.065243] ? __irq_exit_rcu+0x180/0x180 [ 126.065576] run_ksoftirqd+0x31/0x60 [ 126.065875] smpboot_thread_fn+0x66f/0xa10 [ 126.066216] ? sort_range+0x30/0x30 [ 126.066511] kthread+0x2ed/0x3a0 [ 126.066781] ? kthread_complete_and_exit+0x40/0x40 [ 126.067168] ret_from_fork+0x22/0x30 [ 126.067488] [ 126.067675] irq event stamp: 3676849 [ 126.067956] hardirqs last enabled at (3676848): [] mod_objcg_state+0x3ab/0x9e0 [ 126.068639] hardirqs last disabled at (3676849): [] sysvec_call_function_single+0xb/0xc0 [ 126.069374] softirqs last enabled at (3676806): [] run_ksoftirqd+0x31/0x60 [ 126.070027] softirqs last disabled at (3676811): [] run_ksoftirqd+0x31/0x60 [ 126.070709] ---[ end trace 0000000000000000 ]--- [ 126.071116] ------------[ cut here ]------------ [ 126.071510] WARNING: CPU: 0 PID: 14 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 126.072182] Modules linked in: [ 126.072455] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W 6.0.0-rc6-next-20220923 #1 [ 126.073172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.074044] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 126.074432] Code: ff ff e8 c8 1a ef ff 65 8b 05 8d 85 ab 7e 31 ff 89 c6 89 04 24 e8 65 17 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 a5 1a ef ff <0f> 0b e9 c4 fb ff ff e8 99 1a ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 126.075858] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046 [ 126.076293] RAX: 0000000000000000 RBX: ffff88806ce3d140 RCX: 0000000000000100 [ 126.076885] RDX: ffff888008639ac0 RSI: ffffffff8156f04b RDI: 0000000000000005 [ 126.077446] RBP: ffff888036eb0000 R08: 0000000000000005 R09: 0000000000000001 [ 126.078004] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88806ce3d140 [ 126.078560] R13: ffff88806ce00000 R14: ffff888036eb00a8 R15: ffff888036eb0220 [ 126.079118] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.079789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.080269] CR2: 0000555556675708 CR3: 0000000015c72000 CR4: 0000000000350ef0 [ 126.080829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.081388] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000010602 [ 126.081952] Call Trace: [ 126.082166] [ 126.082356] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 126.082843] ? merge_sched_in+0x1110/0x1110 [ 126.083191] ? lock_is_held_type+0xd7/0x130 [ 126.083554] ctx_sched_in+0x2e6/0x770 [ 126.083868] ? lock_acquire+0x1b2/0x530 [ 126.084195] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 126.084685] ? lock_is_held_type+0xd7/0x130 [ 126.085043] perf_event_sched_in+0x75/0x80 [ 126.085383] ctx_resched+0x1ce/0x390 [ 126.085688] __perf_install_in_context+0x285/0x9c0 [ 126.086088] ? ctx_resched+0x390/0x390 [ 126.086404] remote_function+0x125/0x1b0 [ 126.086739] __flush_smp_call_function_queue+0x1df/0x5a0 [ 126.087167] ? perf_duration_warn+0x40/0x40 [ 126.087533] __sysvec_call_function_single+0x92/0x3a0 [ 126.087954] sysvec_call_function_single+0x89/0xc0 [ 126.088346] [ 126.088528] [ 126.088715] asm_sysvec_call_function_single+0x16/0x20 [ 126.089139] RIP: 0010:mod_objcg_state+0x3af/0x9e0 [ 126.089550] Code: 00 00 49 c7 44 24 28 00 00 00 00 48 c7 c6 47 e6 7a 81 4c 89 e7 e8 e1 31 af ff 48 83 3c 24 00 74 06 e8 c5 fb d1 ff fb 4d 85 ff <0f> 84 95 00 00 00 48 83 c4 28 4c 89 ff 5b 5d 41 5c 41 5d 41 5e 41 [ 126.090999] RSP: 0018:ffff88800864fc98 EFLAGS: 00000246 [ 126.091430] RAX: 0000000000381ab0 RBX: ffff88806ce34be0 RCX: 1ffffffff0b603d1 [ 126.091999] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000000 [ 126.092568] RBP: ffff88806ce34c08 R08: 0000000000000001 R09: 0000000000000001 [ 126.093119] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88806ce34be0 [ 126.093692] R13: ffff88807ffdc000 R14: 0000000000000006 R15: 0000000000000000 [ 126.094269] ? mod_objcg_state+0x3ab/0x9e0 [ 126.094625] ? rcu_core+0x7e2/0x2080 [ 126.094926] kmem_cache_free+0x4cb/0x610 [ 126.095260] rcu_core+0x7e2/0x2080 [ 126.095575] ? rcu_report_dead+0x540/0x540 [ 126.095908] ? __schedule+0x89b/0x2470 [ 126.096216] ? lock_is_held_type+0xd7/0x130 [ 126.096552] __do_softirq+0x1c3/0x8f5 [ 126.096854] ? __irq_exit_rcu+0x180/0x180 [ 126.097179] run_ksoftirqd+0x31/0x60 [ 126.097477] smpboot_thread_fn+0x66f/0xa10 [ 126.097805] ? sort_range+0x30/0x30 [ 126.098093] kthread+0x2ed/0x3a0 [ 126.098359] ? kthread_complete_and_exit+0x40/0x40 [ 126.098742] ret_from_fork+0x22/0x30 [ 126.099044] [ 126.099226] irq event stamp: 3676849 [ 126.099518] hardirqs last enabled at (3676848): [] mod_objcg_state+0x3ab/0x9e0 [ 126.100190] hardirqs last disabled at (3676849): [] sysvec_call_function_single+0xb/0xc0 [ 126.100940] softirqs last enabled at (3676806): [] run_ksoftirqd+0x31/0x60 [ 126.101612] softirqs last disabled at (3676811): [] run_ksoftirqd+0x31/0x60 [ 126.102296] ---[ end trace 0000000000000000 ]--- 12:54:52 executing program 6: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0), 0x0, 0x0) [ 126.165047] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.166099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.166806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.168081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.168919] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 126.169647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 126.174815] Bluetooth: hci1: HCI_REQ-0x0c1a [ 126.265953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.267871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.269708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.270405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.272933] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.278729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.279418] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.282490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.283024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.284718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.285819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 126.286714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.294784] Bluetooth: hci3: HCI_REQ-0x0c1a [ 126.295255] Bluetooth: hci2: HCI_REQ-0x0c1a [ 126.364628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.379819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.381317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.411694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.417286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.421360] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.423211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.432087] Bluetooth: hci4: HCI_REQ-0x0c1a [ 126.456304] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.457250] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.464760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.465903] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.467076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.474485] Bluetooth: hci5: HCI_REQ-0x0c1a [ 127.796701] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 128.181528] Bluetooth: hci1: command 0x0409 tx timeout [ 128.308533] Bluetooth: hci3: command 0x0409 tx timeout [ 128.309153] Bluetooth: hci2: command 0x0409 tx timeout [ 128.372639] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 128.500580] Bluetooth: hci4: command 0x0409 tx timeout [ 128.501647] Bluetooth: hci5: command 0x0409 tx timeout [ 130.228542] Bluetooth: hci1: command 0x041b tx timeout [ 130.356845] Bluetooth: hci2: command 0x041b tx timeout [ 130.357294] Bluetooth: hci3: command 0x041b tx timeout [ 130.548497] Bluetooth: hci5: command 0x041b tx timeout [ 130.548973] Bluetooth: hci4: command 0x041b tx timeout [ 132.212562] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 132.277519] Bluetooth: hci1: command 0x040f tx timeout [ 132.405514] Bluetooth: hci3: command 0x040f tx timeout [ 132.405531] Bluetooth: hci2: command 0x040f tx timeout [ 132.596506] Bluetooth: hci4: command 0x040f tx timeout [ 132.596525] Bluetooth: hci5: command 0x040f tx timeout [ 132.853496] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 134.324548] Bluetooth: hci1: command 0x0419 tx timeout [ 134.452556] Bluetooth: hci3: command 0x0419 tx timeout [ 134.453048] Bluetooth: hci2: command 0x0419 tx timeout [ 134.644527] Bluetooth: hci4: command 0x0419 tx timeout [ 134.648129] Bluetooth: hci5: command 0x0419 tx timeout [ 134.686188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.688362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.689169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.691417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.692733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.693479] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.712748] Bluetooth: hci0: HCI_REQ-0x0c1a [ 135.312108] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.326121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.327416] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.352005] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.356015] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 135.357913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 135.363575] Bluetooth: hci7: HCI_REQ-0x0c1a VM DIAGNOSIS: 12:54:52 Registers: info registers vcpu 0 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88806ce09788 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ab109f850 CR3=000000003dd90000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6a732f57c0 00007f6a732f57c8 YMM02=0000000000000000 0000000000000000 00007f6a732f57e0 00007f6a732f57c0 YMM03=0000000000000000 0000000000000000 00007f6a732f57c8 00007f6a732f57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11002f8cf5c RCX=0000000000000000 RDX=ffff888010009ac0 RSI=ffffffff813bb2f3 RDI=0000000000000005 RBP=ffff888017c67b90 RSP=ffff888017c67ac0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bb2f5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556675400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6a73295b42 CR3=000000003dd90000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000010000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007f6a732f57c8 00007f6a732f57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000