Debian GNU/Linux 11 syzkaller ttyS0
Warning: Permanently added '[localhost]:48170' (ECDSA) to the list of known hosts.
2022/10/01 03:49:37 fuzzer started
2022/10/01 03:49:37 dialing manager at localhost:35095
syzkaller login: [ 35.662297] cgroup: Unknown subsys name 'net'
[ 35.782543] cgroup: Unknown subsys name 'rlimit'
2022/10/01 03:49:52 syscalls: 2215
2022/10/01 03:49:52 code coverage: enabled
2022/10/01 03:49:52 comparison tracing: enabled
2022/10/01 03:49:52 extra coverage: enabled
2022/10/01 03:49:52 setuid sandbox: enabled
2022/10/01 03:49:52 namespace sandbox: enabled
2022/10/01 03:49:52 Android sandbox: enabled
2022/10/01 03:49:52 fault injection: enabled
2022/10/01 03:49:52 leak checking: enabled
2022/10/01 03:49:52 net packet injection: enabled
2022/10/01 03:49:52 net device setup: enabled
2022/10/01 03:49:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/01 03:49:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/01 03:49:52 USB emulation: enabled
2022/10/01 03:49:52 hci packet injection: enabled
2022/10/01 03:49:52 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930 )
2022/10/01 03:49:52 802.15.4 emulation: enabled
2022/10/01 03:49:52 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/01 03:49:52 fetching corpus: 50, signal 34844/38110 (executing program)
2022/10/01 03:49:52 fetching corpus: 100, signal 43897/48556 (executing program)
2022/10/01 03:49:52 fetching corpus: 150, signal 51447/57367 (executing program)
2022/10/01 03:49:52 fetching corpus: 200, signal 55652/62844 (executing program)
2022/10/01 03:49:52 fetching corpus: 250, signal 59254/67624 (executing program)
2022/10/01 03:49:53 fetching corpus: 300, signal 64826/74178 (executing program)
2022/10/01 03:49:53 fetching corpus: 350, signal 68727/79094 (executing program)
2022/10/01 03:49:53 fetching corpus: 400, signal 72075/83402 (executing program)
2022/10/01 03:49:53 fetching corpus: 450, signal 76317/88568 (executing program)
2022/10/01 03:49:53 fetching corpus: 500, signal 79472/92587 (executing program)
2022/10/01 03:49:53 fetching corpus: 550, signal 81377/95439 (executing program)
2022/10/01 03:49:53 fetching corpus: 600, signal 84417/99287 (executing program)
2022/10/01 03:49:53 fetching corpus: 650, signal 87006/102638 (executing program)
2022/10/01 03:49:53 fetching corpus: 700, signal 91179/107320 (executing program)
2022/10/01 03:49:54 fetching corpus: 750, signal 93583/110420 (executing program)
2022/10/01 03:49:54 fetching corpus: 800, signal 97743/114905 (executing program)
2022/10/01 03:49:54 fetching corpus: 850, signal 100051/117751 (executing program)
2022/10/01 03:49:54 fetching corpus: 900, signal 102216/120480 (executing program)
2022/10/01 03:49:54 fetching corpus: 950, signal 103648/122583 (executing program)
2022/10/01 03:49:54 fetching corpus: 1000, signal 104846/124517 (executing program)
2022/10/01 03:49:54 fetching corpus: 1050, signal 106348/126639 (executing program)
2022/10/01 03:49:55 fetching corpus: 1100, signal 109745/130175 (executing program)
2022/10/01 03:49:55 fetching corpus: 1150, signal 112763/133289 (executing program)
2022/10/01 03:49:55 fetching corpus: 1200, signal 115686/136355 (executing program)
2022/10/01 03:49:55 fetching corpus: 1250, signal 118293/139123 (executing program)
2022/10/01 03:49:55 fetching corpus: 1300, signal 119858/141044 (executing program)
2022/10/01 03:49:55 fetching corpus: 1350, signal 122514/143680 (executing program)
2022/10/01 03:49:55 fetching corpus: 1400, signal 123647/145295 (executing program)
2022/10/01 03:49:55 fetching corpus: 1450, signal 125395/147297 (executing program)
2022/10/01 03:49:56 fetching corpus: 1500, signal 126310/148706 (executing program)
2022/10/01 03:49:56 fetching corpus: 1550, signal 127873/150557 (executing program)
2022/10/01 03:49:56 fetching corpus: 1600, signal 128814/151937 (executing program)
2022/10/01 03:49:56 fetching corpus: 1650, signal 130339/153756 (executing program)
2022/10/01 03:49:56 fetching corpus: 1700, signal 131581/155229 (executing program)
2022/10/01 03:49:56 fetching corpus: 1750, signal 132592/156558 (executing program)
2022/10/01 03:49:56 fetching corpus: 1800, signal 134284/158229 (executing program)
2022/10/01 03:49:56 fetching corpus: 1850, signal 135594/159672 (executing program)
2022/10/01 03:49:57 fetching corpus: 1900, signal 137060/161164 (executing program)
2022/10/01 03:49:57 fetching corpus: 1950, signal 139100/163014 (executing program)
2022/10/01 03:49:57 fetching corpus: 2000, signal 140719/164570 (executing program)
2022/10/01 03:49:57 fetching corpus: 2050, signal 142265/166068 (executing program)
2022/10/01 03:49:57 fetching corpus: 2100, signal 144021/167594 (executing program)
2022/10/01 03:49:57 fetching corpus: 2150, signal 145448/168904 (executing program)
2022/10/01 03:49:57 fetching corpus: 2200, signal 146152/169841 (executing program)
2022/10/01 03:49:57 fetching corpus: 2250, signal 147685/171132 (executing program)
2022/10/01 03:49:57 fetching corpus: 2300, signal 149340/172477 (executing program)
2022/10/01 03:49:58 fetching corpus: 2350, signal 150930/173817 (executing program)
2022/10/01 03:49:58 fetching corpus: 2400, signal 151980/174792 (executing program)
2022/10/01 03:49:58 fetching corpus: 2450, signal 153047/175767 (executing program)
2022/10/01 03:49:58 fetching corpus: 2500, signal 154680/176960 (executing program)
2022/10/01 03:49:58 fetching corpus: 2550, signal 155869/178016 (executing program)
2022/10/01 03:49:58 fetching corpus: 2600, signal 157215/179040 (executing program)
2022/10/01 03:49:58 fetching corpus: 2650, signal 158050/179856 (executing program)
2022/10/01 03:49:58 fetching corpus: 2700, signal 159020/180654 (executing program)
2022/10/01 03:49:59 fetching corpus: 2750, signal 160623/181808 (executing program)
2022/10/01 03:49:59 fetching corpus: 2800, signal 161469/182549 (executing program)
2022/10/01 03:49:59 fetching corpus: 2850, signal 162596/183377 (executing program)
2022/10/01 03:49:59 fetching corpus: 2900, signal 164031/184325 (executing program)
2022/10/01 03:49:59 fetching corpus: 2950, signal 164921/184988 (executing program)
2022/10/01 03:49:59 fetching corpus: 3000, signal 166102/185751 (executing program)
2022/10/01 03:49:59 fetching corpus: 3050, signal 166603/186231 (executing program)
2022/10/01 03:49:59 fetching corpus: 3100, signal 167422/186842 (executing program)
2022/10/01 03:50:00 fetching corpus: 3150, signal 168438/187498 (executing program)
2022/10/01 03:50:00 fetching corpus: 3200, signal 169053/188028 (executing program)
2022/10/01 03:50:00 fetching corpus: 3250, signal 170199/188727 (executing program)
2022/10/01 03:50:00 fetching corpus: 3300, signal 170848/189249 (executing program)
2022/10/01 03:50:00 fetching corpus: 3350, signal 172406/190025 (executing program)
2022/10/01 03:50:00 fetching corpus: 3400, signal 173811/190712 (executing program)
2022/10/01 03:50:00 fetching corpus: 3450, signal 174601/191154 (executing program)
2022/10/01 03:50:00 fetching corpus: 3500, signal 175268/191593 (executing program)
2022/10/01 03:50:01 fetching corpus: 3550, signal 175866/191976 (executing program)
2022/10/01 03:50:01 fetching corpus: 3600, signal 176635/192392 (executing program)
2022/10/01 03:50:01 fetching corpus: 3650, signal 177240/192738 (executing program)
2022/10/01 03:50:01 fetching corpus: 3700, signal 178025/193103 (executing program)
2022/10/01 03:50:01 fetching corpus: 3750, signal 178962/193649 (executing program)
2022/10/01 03:50:01 fetching corpus: 3800, signal 180410/194189 (executing program)
2022/10/01 03:50:01 fetching corpus: 3850, signal 180815/194442 (executing program)
2022/10/01 03:50:01 fetching corpus: 3900, signal 181294/194688 (executing program)
2022/10/01 03:50:01 fetching corpus: 3950, signal 181790/194949 (executing program)
2022/10/01 03:50:02 fetching corpus: 4000, signal 182666/195235 (executing program)
2022/10/01 03:50:02 fetching corpus: 4050, signal 183426/195568 (executing program)
2022/10/01 03:50:02 fetching corpus: 4100, signal 184163/195824 (executing program)
2022/10/01 03:50:02 fetching corpus: 4150, signal 184665/196045 (executing program)
2022/10/01 03:50:02 fetching corpus: 4200, signal 185785/196367 (executing program)
2022/10/01 03:50:02 fetching corpus: 4250, signal 186276/196568 (executing program)
2022/10/01 03:50:02 fetching corpus: 4300, signal 186865/196730 (executing program)
2022/10/01 03:50:02 fetching corpus: 4350, signal 187381/196892 (executing program)
2022/10/01 03:50:03 fetching corpus: 4400, signal 188237/197087 (executing program)
2022/10/01 03:50:03 fetching corpus: 4450, signal 188867/197269 (executing program)
2022/10/01 03:50:03 fetching corpus: 4500, signal 189149/197386 (executing program)
2022/10/01 03:50:03 fetching corpus: 4550, signal 189692/197503 (executing program)
2022/10/01 03:50:03 fetching corpus: 4600, signal 190629/197627 (executing program)
2022/10/01 03:50:03 fetching corpus: 4650, signal 191219/197720 (executing program)
2022/10/01 03:50:03 fetching corpus: 4700, signal 191617/197910 (executing program)
2022/10/01 03:50:03 fetching corpus: 4750, signal 192444/198009 (executing program)
2022/10/01 03:50:03 fetching corpus: 4800, signal 193354/198028 (executing program)
2022/10/01 03:50:04 fetching corpus: 4850, signal 194130/198028 (executing program)
2022/10/01 03:50:04 fetching corpus: 4857, signal 194164/198028 (executing program)
2022/10/01 03:50:04 fetching corpus: 4857, signal 194164/198028 (executing program)
2022/10/01 03:50:06 starting 8 fuzzer processes
03:50:06 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x2, @empty, 0x4}}, 0x0, 0x0, 0x4, 0x0, "a746a17128ab789e5f70f170de3b09e7de49f919f5daa017ada1eadae7ef3b8be4b6bc597111d657c7039db2fb7beaf1d003a1fc7d14e5a1cc6db5be8e3aaffc6750fd094e7c1fdaf32ac14b0a7f4e58"}, 0xd8)
ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x27c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3dda, 0x5, 0x5})
03:50:06 executing program 1:
personality(0x400000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x80032, 0xffffffffffffffff, 0x0)
03:50:07 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
[ 64.795773] audit: type=1400 audit(1664596207.014:6): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:50:07 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8917, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8918, &(0x7f0000000000)={'lo\x00'})
03:50:07 executing program 4:
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r3, 0x0, 0x0, 0x87ffffc)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0)
r4 = memfd_create(&(0x7f0000000200)='-%@,/.(\x00', 0x6)
ftruncate(r0, 0x1)
dup(r4)
03:50:07 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001a00019c00ba664b3c27b57780"], 0x28}}, 0x0)
03:50:07 executing program 6:
syz_mount_image$tmpfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./file0/file0\x00', 0x840c0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00')
03:50:07 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, 0x1, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x24}}, 0x0)
[ 66.157002] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.158863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 66.160410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.161564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 66.163437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.164555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 66.169010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 66.170404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.171975] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 66.174026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.175474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 66.177335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 66.183213] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 66.187300] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 66.222468] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 66.224079] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 66.225727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 66.228613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 66.230592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 66.232507] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 66.233882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 66.237674] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 66.240297] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 66.241945] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 66.243571] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 66.245073] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 66.246556] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 66.248162] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 66.252439] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 66.253812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 66.262834] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 66.265563] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 66.271530] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 66.272798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 66.274961] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 66.276816] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 66.280496] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 66.280894] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 66.288447] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 66.290181] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 66.291713] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 66.296033] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 66.300802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 66.308605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 66.310083] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 66.315586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 66.320586] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 66.321977] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 66.333618] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 68.235736] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.236077] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 68.236871] Bluetooth: hci1: command 0x0409 tx timeout
[ 68.299377] Bluetooth: hci7: command 0x0409 tx timeout
[ 68.300651] Bluetooth: hci5: command 0x0409 tx timeout
[ 68.301571] Bluetooth: hci3: command 0x0409 tx timeout
[ 68.302479] Bluetooth: hci4: command 0x0409 tx timeout
[ 68.363628] Bluetooth: hci6: command 0x0409 tx timeout
[ 70.283424] Bluetooth: hci0: command 0x041b tx timeout
[ 70.284205] Bluetooth: hci1: command 0x041b tx timeout
[ 70.347419] Bluetooth: hci4: command 0x041b tx timeout
[ 70.348176] Bluetooth: hci3: command 0x041b tx timeout
[ 70.349197] Bluetooth: hci5: command 0x041b tx timeout
[ 70.349927] Bluetooth: hci7: command 0x041b tx timeout
[ 70.411324] Bluetooth: hci6: command 0x041b tx timeout
[ 72.331315] Bluetooth: hci1: command 0x040f tx timeout
[ 72.331364] Bluetooth: hci0: command 0x040f tx timeout
[ 72.395332] Bluetooth: hci7: command 0x040f tx timeout
[ 72.395822] Bluetooth: hci5: command 0x040f tx timeout
[ 72.396278] Bluetooth: hci3: command 0x040f tx timeout
[ 72.396684] Bluetooth: hci4: command 0x040f tx timeout
[ 72.459308] Bluetooth: hci6: command 0x040f tx timeout
[ 73.740510] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 74.379327] Bluetooth: hci0: command 0x0419 tx timeout
[ 74.379353] Bluetooth: hci1: command 0x0419 tx timeout
[ 74.443293] Bluetooth: hci4: command 0x0419 tx timeout
[ 74.443321] Bluetooth: hci3: command 0x0419 tx timeout
[ 74.443758] Bluetooth: hci5: command 0x0419 tx timeout
[ 74.444213] Bluetooth: hci7: command 0x0419 tx timeout
[ 74.507298] Bluetooth: hci6: command 0x0419 tx timeout
[ 78.347342] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 80.983472] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 80.985810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 80.987842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 80.993404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 81.000667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 81.024514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 81.047299] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 83.083366] Bluetooth: hci2: command 0x0409 tx timeout
[ 85.131407] Bluetooth: hci2: command 0x041b tx timeout
[ 87.179317] Bluetooth: hci2: command 0x040f tx timeout
[ 89.227728] Bluetooth: hci2: command 0x0419 tx timeout
03:51:02 executing program 3:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000015c0))
03:51:02 executing program 3:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000015c0))
03:51:02 executing program 3:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000015c0))
03:51:02 executing program 3:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000015c0))
03:51:03 executing program 3:
r0 = getpid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f00000001c0))
03:51:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r0, 0x0)
03:51:03 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/237)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
[ 121.192865] audit: type=1400 audit(1664596263.410:7): avc: denied { open } for pid=3713 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.194499] audit: type=1400 audit(1664596263.411:8): avc: denied { kernel } for pid=3713 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 121.210473] ------------[ cut here ]------------
[ 121.210495]
[ 121.210500] ======================================================
[ 121.210503] WARNING: possible circular locking dependency detected
[ 121.210507] 6.0.0-rc7-next-20220930 #1 Not tainted
[ 121.210514] ------------------------------------------------------
[ 121.210518] syz-executor.3/3714 is trying to acquire lock:
[ 121.210524] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 121.210567]
[ 121.210567] but task is already holding lock:
[ 121.210570] ffff88801876bc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 121.210598]
[ 121.210598] which lock already depends on the new lock.
[ 121.210598]
[ 121.210601]
[ 121.210601] the existing dependency chain (in reverse order) is:
[ 121.210604]
[ 121.210604] -> #3 (&ctx->lock){....}-{2:2}:
[ 121.210619] _raw_spin_lock+0x2a/0x40
[ 121.210631] __perf_event_task_sched_out+0x53b/0x18d0
[ 121.210643] __schedule+0xedd/0x2470
[ 121.210658] preempt_schedule_common+0x45/0xc0
[ 121.210675] __cond_resched+0x17/0x30
[ 121.210690] __mutex_lock+0xa3/0x14d0
[ 121.210706] __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.210718] do_syscall_64+0x3b/0x90
[ 121.210737] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 121.210751]
[ 121.210751] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 121.210766] _raw_spin_lock_nested+0x30/0x40
[ 121.210778] raw_spin_rq_lock_nested+0x1e/0x30
[ 121.210792] task_fork_fair+0x63/0x4d0
[ 121.210810] sched_cgroup_fork+0x3d0/0x540
[ 121.210825] copy_process+0x4183/0x6e20
[ 121.210837] kernel_clone+0xe7/0x890
[ 121.210847] user_mode_thread+0xad/0xf0
[ 121.210858] rest_init+0x24/0x250
[ 121.210871] arch_call_rest_init+0xf/0x14
[ 121.210889] start_kernel+0x4c6/0x4eb
[ 121.210906] secondary_startup_64_no_verify+0xe0/0xeb
[ 121.210921]
[ 121.210921] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 121.210936] _raw_spin_lock_irqsave+0x39/0x60
[ 121.210947] try_to_wake_up+0xab/0x1930
[ 121.210962] up+0x75/0xb0
[ 121.210977] __up_console_sem+0x6e/0x80
[ 121.210994] console_unlock+0x46a/0x590
[ 121.211011] vprintk_emit+0x1bd/0x560
[ 121.211028] vprintk+0x84/0xa0
[ 121.211045] _printk+0xba/0xf1
[ 121.211058] kauditd_hold_skb.cold+0x3f/0x4e
[ 121.211076] kauditd_send_queue+0x233/0x290
[ 121.211092] kauditd_thread+0x5f9/0x9c0
[ 121.211107] kthread+0x2ed/0x3a0
[ 121.211123] ret_from_fork+0x22/0x30
[ 121.211136]
[ 121.211136] -> #0 ((console_sem).lock){....}-{2:2}:
[ 121.211151] __lock_acquire+0x2a02/0x5e70
[ 121.211169] lock_acquire+0x1a2/0x530
[ 121.211186] _raw_spin_lock_irqsave+0x39/0x60
[ 121.211198] down_trylock+0xe/0x70
[ 121.211214] __down_trylock_console_sem+0x3b/0xd0
[ 121.211234] vprintk_emit+0x16b/0x560
[ 121.211252] vprintk+0x84/0xa0
[ 121.211269] _printk+0xba/0xf1
[ 121.211280] report_bug.cold+0x72/0xab
[ 121.211298] handle_bug+0x3c/0x70
[ 121.211315] exc_invalid_op+0x14/0x50
[ 121.211334] asm_exc_invalid_op+0x16/0x20
[ 121.211347] group_sched_out.part.0+0x2c7/0x460
[ 121.211366] ctx_sched_out+0x8f1/0xc10
[ 121.211384] __perf_event_task_sched_out+0x6d0/0x18d0
[ 121.211396] __schedule+0xedd/0x2470
[ 121.211411] preempt_schedule_common+0x45/0xc0
[ 121.211427] __cond_resched+0x17/0x30
[ 121.211442] __mutex_lock+0xa3/0x14d0
[ 121.211458] __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.211470] do_syscall_64+0x3b/0x90
[ 121.211488] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 121.211502]
[ 121.211502] other info that might help us debug this:
[ 121.211502]
[ 121.211505] Chain exists of:
[ 121.211505] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 121.211505]
[ 121.211521] Possible unsafe locking scenario:
[ 121.211521]
[ 121.211523] CPU0 CPU1
[ 121.211526] ---- ----
[ 121.211528] lock(&ctx->lock);
[ 121.211534] lock(&rq->__lock);
[ 121.211541] lock(&ctx->lock);
[ 121.211548] lock((console_sem).lock);
[ 121.211554]
[ 121.211554] *** DEADLOCK ***
[ 121.211554]
[ 121.211556] 2 locks held by syz-executor.3/3714:
[ 121.211563] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 121.211595] #1: ffff88801876bc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 121.211624]
[ 121.211624] stack backtrace:
[ 121.211627] CPU: 0 PID: 3714 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[ 121.211640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 121.211649] Call Trace:
[ 121.211652]
[ 121.211657] dump_stack_lvl+0x8b/0xb3
[ 121.211677] check_noncircular+0x263/0x2e0
[ 121.211695] ? format_decode+0x26c/0xb50
[ 121.211712] ? print_circular_bug+0x450/0x450
[ 121.211731] ? simple_strtoul+0x30/0x30
[ 121.211748] ? lock_release+0x547/0x750
[ 121.211766] ? format_decode+0x26c/0xb50
[ 121.211785] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 121.211804] __lock_acquire+0x2a02/0x5e70
[ 121.211827] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 121.211852] lock_acquire+0x1a2/0x530
[ 121.211873] ? down_trylock+0xe/0x70
[ 121.211892] ? lock_release+0x750/0x750
[ 121.211914] ? vprintk+0x84/0xa0
[ 121.211934] _raw_spin_lock_irqsave+0x39/0x60
[ 121.211946] ? down_trylock+0xe/0x70
[ 121.211964] down_trylock+0xe/0x70
[ 121.211981] ? vprintk+0x84/0xa0
[ 121.211999] __down_trylock_console_sem+0x3b/0xd0
[ 121.212018] vprintk_emit+0x16b/0x560
[ 121.212039] vprintk+0x84/0xa0
[ 121.212058] _printk+0xba/0xf1
[ 121.212070] ? record_print_text.cold+0x16/0x16
[ 121.212088] ? report_bug.cold+0x66/0xab
[ 121.212108] ? group_sched_out.part.0+0x2c7/0x460
[ 121.212128] report_bug.cold+0x72/0xab
[ 121.212148] handle_bug+0x3c/0x70
[ 121.212167] exc_invalid_op+0x14/0x50
[ 121.212187] asm_exc_invalid_op+0x16/0x20
[ 121.212201] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 121.212224] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 121.212236] RSP: 0018:ffff888040497978 EFLAGS: 00010006
[ 121.212246] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 121.212254] RDX: ffff88803fda9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005
[ 121.212262] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 121.212270] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88801876bc00
[ 121.212278] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[ 121.212291] ? group_sched_out.part.0+0x2c7/0x460
[ 121.212313] ? group_sched_out.part.0+0x2c7/0x460
[ 121.212334] ctx_sched_out+0x8f1/0xc10
[ 121.212356] __perf_event_task_sched_out+0x6d0/0x18d0
[ 121.212371] ? lock_is_held_type+0xd7/0x130
[ 121.212386] ? __perf_cgroup_move+0x160/0x160
[ 121.212398] ? set_next_entity+0x304/0x550
[ 121.212417] ? update_curr+0x267/0x740
[ 121.212437] ? lock_is_held_type+0xd7/0x130
[ 121.212453] __schedule+0xedd/0x2470
[ 121.212477] ? io_schedule_timeout+0x150/0x150
[ 121.212494] ? find_held_lock+0x2c/0x110
[ 121.212512] ? lock_is_held_type+0xd7/0x130
[ 121.212526] ? __cond_resched+0x17/0x30
[ 121.212543] preempt_schedule_common+0x45/0xc0
[ 121.212561] __cond_resched+0x17/0x30
[ 121.212577] __mutex_lock+0xa3/0x14d0
[ 121.212595] ? lock_is_held_type+0xd7/0x130
[ 121.212609] ? __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.212624] ? mutex_lock_io_nested+0x1310/0x1310
[ 121.212642] ? lock_release+0x3b2/0x750
[ 121.212661] ? __up_read+0x192/0x730
[ 121.212677] ? up_write+0x520/0x520
[ 121.212696] __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.212713] ? perf_compat_ioctl+0x130/0x130
[ 121.212725] ? xfd_validate_state+0x59/0x180
[ 121.212750] ? syscall_enter_from_user_mode+0x1d/0x50
[ 121.212766] ? syscall_enter_from_user_mode+0x1d/0x50
[ 121.212783] do_syscall_64+0x3b/0x90
[ 121.212802] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 121.212817] RIP: 0033:0x7f600e5beb19
[ 121.212826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 121.212838] RSP: 002b:00007f600bb34188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 121.212850] RAX: ffffffffffffffda RBX: 00007f600e6d1f60 RCX: 00007f600e5beb19
[ 121.212858] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080
[ 121.212866] RBP: 00007f600e618f6d R08: 0000000000000003 R09: 0000000000000000
[ 121.212874] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 121.212882] R13: 00007fff82e29bef R14: 00007f600bb34300 R15: 0000000000022000
[ 121.212896]
[ 121.278438] WARNING: CPU: 0 PID: 3714 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 121.279162] Modules linked in:
[ 121.279412] CPU: 0 PID: 3714 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[ 121.280031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 121.280881] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 121.281309] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 121.282697] RSP: 0018:ffff888040497978 EFLAGS: 00010006
[ 121.283108] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 121.283656] RDX: ffff88803fda9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005
[ 121.284196] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 121.284743] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88801876bc00
[ 121.285287] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[ 121.285827] FS: 00007f600bb34700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 121.286437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 121.286875] CR2: 00007f648ba77310 CR3: 000000000eabe000 CR4: 0000000000350ef0
[ 121.287422] Call Trace:
[ 121.287621]
[ 121.287799] ctx_sched_out+0x8f1/0xc10
[ 121.288111] __perf_event_task_sched_out+0x6d0/0x18d0
[ 121.288517] ? lock_is_held_type+0xd7/0x130
[ 121.288856] ? __perf_cgroup_move+0x160/0x160
[ 121.289202] ? set_next_entity+0x304/0x550
[ 121.289534] ? update_curr+0x267/0x740
[ 121.289840] ? lock_is_held_type+0xd7/0x130
[ 121.290174] __schedule+0xedd/0x2470
[ 121.290471] ? io_schedule_timeout+0x150/0x150
[ 121.290823] ? find_held_lock+0x2c/0x110
[ 121.291142] ? lock_is_held_type+0xd7/0x130
[ 121.291470] ? __cond_resched+0x17/0x30
[ 121.291780] preempt_schedule_common+0x45/0xc0
[ 121.292131] __cond_resched+0x17/0x30
[ 121.292428] __mutex_lock+0xa3/0x14d0
[ 121.292744] ? lock_is_held_type+0xd7/0x130
[ 121.293074] ? __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.293467] ? mutex_lock_io_nested+0x1310/0x1310
[ 121.293838] ? lock_release+0x3b2/0x750
[ 121.294145] ? __up_read+0x192/0x730
[ 121.294433] ? up_write+0x520/0x520
[ 121.294722] __do_sys_perf_event_open+0x1eec/0x32c0
[ 121.295104] ? perf_compat_ioctl+0x130/0x130
[ 121.295437] ? xfd_validate_state+0x59/0x180
[ 121.295782] ? syscall_enter_from_user_mode+0x1d/0x50
[ 121.296171] ? syscall_enter_from_user_mode+0x1d/0x50
[ 121.296565] do_syscall_64+0x3b/0x90
[ 121.296859] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 121.297246] RIP: 0033:0x7f600e5beb19
[ 121.297524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 121.298871] RSP: 002b:00007f600bb34188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 121.299436] RAX: ffffffffffffffda RBX: 00007f600e6d1f60 RCX: 00007f600e5beb19
[ 121.299978] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080
[ 121.300521] RBP: 00007f600e618f6d R08: 0000000000000003 R09: 0000000000000000
[ 121.301055] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 121.301584] R13: 00007fff82e29bef R14: 00007f600bb34300 R15: 0000000000022000
[ 121.302135]
[ 121.302316] irq event stamp: 1000
[ 121.302575] hardirqs last enabled at (999): [] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 121.303292] hardirqs last disabled at (1000): [] __schedule+0x1225/0x2470
[ 121.303924] softirqs last enabled at (998): [] __irq_exit_rcu+0x11b/0x180
[ 121.304558] softirqs last disabled at (953): [] __irq_exit_rcu+0x11b/0x180
[ 121.305189] ---[ end trace 0000000000000000 ]---
[ 121.567346] random: crng reseeded on system resumption
[ 121.572926] Restarting kernel threads ... done.
[ 121.623221] random: crng reseeded on system resumption
03:51:03 executing program 3:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000)
shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/237)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r2, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)
[ 121.745204] random: crng reseeded on system resumption
[ 121.763012] Restarting kernel threads ... done.
[ 122.800304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 122.804413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 123.949251] hrtimer: interrupt took 18475 ns
VM DIAGNOSIS:
03:51:03 Registers:
info registers vcpu 0
RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880404973c0
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001
R12=0000000000000074 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f600bb34700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f648ba77310 CR3=000000000eabe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f
YMM01=0000000000000000 0000000000000000 2f6b636f6c622f6c 6175747269762f73
YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 000055a7353fb850 000055a735438ed0
YMM06=0000000000000000 0000000000000000 000055a73542a790 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff815ac792 RDX=ffff888019d81ac0
RSI=0000000000000008 RDI=ffffffff85b06ed0 RBP=ffffffff848cccc0 RSP=ffff88801bf4fbc0
R8 =0000000000000000 R9 =ffff88806cf33b63 R10=ffffed100d9e676c R11=0000000000000001
R12=4000000000000000 R13=4000000000000002 R14=0000000000033984 R15=ffffffff848cccc0
RIP=ffffffff81787e94 RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8dcbc021f0 CR3=0000000020644000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c
YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000