Debian GNU/Linux 11 syzkaller ttyS0
syzkaller login: [ 33.576155] sshd (242) used greatest stack depth: 24768 bytes left
Warning: Permanently added '[localhost]:41937' (ECDSA) to the list of known hosts.
2022/09/13 15:11:12 fuzzer started
2022/09/13 15:11:12 dialing manager at localhost:36597
[ 35.828820] cgroup: Unknown subsys name 'net'
[ 35.930425] cgroup: Unknown subsys name 'rlimit'
2022/09/13 15:11:26 syscalls: 2215
2022/09/13 15:11:26 code coverage: enabled
2022/09/13 15:11:26 comparison tracing: enabled
2022/09/13 15:11:26 extra coverage: enabled
2022/09/13 15:11:26 setuid sandbox: enabled
2022/09/13 15:11:26 namespace sandbox: enabled
2022/09/13 15:11:26 Android sandbox: enabled
2022/09/13 15:11:26 fault injection: enabled
2022/09/13 15:11:26 leak checking: enabled
2022/09/13 15:11:26 net packet injection: enabled
2022/09/13 15:11:26 net device setup: enabled
2022/09/13 15:11:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/13 15:11:26 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/13 15:11:26 USB emulation: enabled
2022/09/13 15:11:26 hci packet injection: enabled
2022/09/13 15:11:26 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913 )
2022/09/13 15:11:26 802.15.4 emulation: enabled
2022/09/13 15:11:26 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/13 15:11:26 fetching corpus: 50, signal 36570/39964 (executing program)
2022/09/13 15:11:27 fetching corpus: 100, signal 52387/57092 (executing program)
2022/09/13 15:11:27 fetching corpus: 150, signal 63896/69739 (executing program)
2022/09/13 15:11:27 fetching corpus: 200, signal 70674/77677 (executing program)
2022/09/13 15:11:27 fetching corpus: 250, signal 75461/83604 (executing program)
2022/09/13 15:11:27 fetching corpus: 300, signal 82026/91070 (executing program)
2022/09/13 15:11:27 fetching corpus: 350, signal 87071/97034 (executing program)
2022/09/13 15:11:28 fetching corpus: 400, signal 93381/104111 (executing program)
2022/09/13 15:11:28 fetching corpus: 450, signal 97768/109329 (executing program)
2022/09/13 15:11:28 fetching corpus: 500, signal 101251/113663 (executing program)
2022/09/13 15:11:28 fetching corpus: 550, signal 106171/119150 (executing program)
2022/09/13 15:11:28 fetching corpus: 600, signal 108811/122570 (executing program)
2022/09/13 15:11:28 fetching corpus: 650, signal 112184/126561 (executing program)
2022/09/13 15:11:29 fetching corpus: 700, signal 114937/129926 (executing program)
2022/09/13 15:11:29 fetching corpus: 750, signal 117205/132944 (executing program)
2022/09/13 15:11:29 fetching corpus: 800, signal 119542/135930 (executing program)
2022/09/13 15:11:29 fetching corpus: 850, signal 121788/138767 (executing program)
2022/09/13 15:11:29 fetching corpus: 900, signal 123963/141515 (executing program)
2022/09/13 15:11:29 fetching corpus: 950, signal 126358/144430 (executing program)
2022/09/13 15:11:29 fetching corpus: 1000, signal 128027/146714 (executing program)
2022/09/13 15:11:30 fetching corpus: 1050, signal 130828/149869 (executing program)
2022/09/13 15:11:30 fetching corpus: 1100, signal 132494/152075 (executing program)
2022/09/13 15:11:30 fetching corpus: 1150, signal 134517/154568 (executing program)
2022/09/13 15:11:30 fetching corpus: 1200, signal 136125/156693 (executing program)
2022/09/13 15:11:30 fetching corpus: 1250, signal 137248/158385 (executing program)
2022/09/13 15:11:30 fetching corpus: 1300, signal 139277/160755 (executing program)
2022/09/13 15:11:30 fetching corpus: 1350, signal 140365/162410 (executing program)
2022/09/13 15:11:30 fetching corpus: 1400, signal 142459/164757 (executing program)
2022/09/13 15:11:30 fetching corpus: 1450, signal 144080/166749 (executing program)
2022/09/13 15:11:31 fetching corpus: 1500, signal 146597/169322 (executing program)
2022/09/13 15:11:31 fetching corpus: 1550, signal 148273/171312 (executing program)
2022/09/13 15:11:31 fetching corpus: 1600, signal 150560/173703 (executing program)
2022/09/13 15:11:31 fetching corpus: 1650, signal 152541/175808 (executing program)
2022/09/13 15:11:31 fetching corpus: 1700, signal 153729/177357 (executing program)
2022/09/13 15:11:31 fetching corpus: 1750, signal 155609/179345 (executing program)
2022/09/13 15:11:32 fetching corpus: 1800, signal 157272/181108 (executing program)
2022/09/13 15:11:32 fetching corpus: 1850, signal 158599/182655 (executing program)
2022/09/13 15:11:32 fetching corpus: 1900, signal 159776/184052 (executing program)
2022/09/13 15:11:32 fetching corpus: 1950, signal 161464/185784 (executing program)
2022/09/13 15:11:32 fetching corpus: 2000, signal 162794/187237 (executing program)
2022/09/13 15:11:32 fetching corpus: 2050, signal 163705/188459 (executing program)
2022/09/13 15:11:32 fetching corpus: 2100, signal 164999/189903 (executing program)
2022/09/13 15:11:32 fetching corpus: 2150, signal 166372/191336 (executing program)
2022/09/13 15:11:33 fetching corpus: 2200, signal 167608/192700 (executing program)
2022/09/13 15:11:33 fetching corpus: 2250, signal 168837/193984 (executing program)
2022/09/13 15:11:33 fetching corpus: 2300, signal 169676/195028 (executing program)
2022/09/13 15:11:33 fetching corpus: 2350, signal 170458/196013 (executing program)
2022/09/13 15:11:33 fetching corpus: 2400, signal 171503/197124 (executing program)
2022/09/13 15:11:33 fetching corpus: 2450, signal 172373/198185 (executing program)
2022/09/13 15:11:33 fetching corpus: 2500, signal 173700/199474 (executing program)
2022/09/13 15:11:33 fetching corpus: 2550, signal 175137/200736 (executing program)
2022/09/13 15:11:34 fetching corpus: 2600, signal 176797/202132 (executing program)
2022/09/13 15:11:34 fetching corpus: 2650, signal 177841/203173 (executing program)
2022/09/13 15:11:34 fetching corpus: 2700, signal 178471/204036 (executing program)
2022/09/13 15:11:34 fetching corpus: 2750, signal 179512/205044 (executing program)
2022/09/13 15:11:34 fetching corpus: 2800, signal 180225/205850 (executing program)
2022/09/13 15:11:34 fetching corpus: 2850, signal 181234/206834 (executing program)
2022/09/13 15:11:34 fetching corpus: 2900, signal 182134/207713 (executing program)
2022/09/13 15:11:34 fetching corpus: 2950, signal 182860/208512 (executing program)
2022/09/13 15:11:35 fetching corpus: 3000, signal 184031/209497 (executing program)
2022/09/13 15:11:35 fetching corpus: 3050, signal 185412/210571 (executing program)
2022/09/13 15:11:35 fetching corpus: 3100, signal 186212/211365 (executing program)
2022/09/13 15:11:35 fetching corpus: 3150, signal 186818/212041 (executing program)
2022/09/13 15:11:35 fetching corpus: 3200, signal 187604/212762 (executing program)
2022/09/13 15:11:35 fetching corpus: 3250, signal 188481/213539 (executing program)
2022/09/13 15:11:35 fetching corpus: 3300, signal 189144/214180 (executing program)
2022/09/13 15:11:36 fetching corpus: 3350, signal 190157/214998 (executing program)
2022/09/13 15:11:36 fetching corpus: 3400, signal 190765/215637 (executing program)
2022/09/13 15:11:36 fetching corpus: 3450, signal 191810/216421 (executing program)
2022/09/13 15:11:36 fetching corpus: 3500, signal 192727/217131 (executing program)
2022/09/13 15:11:36 fetching corpus: 3550, signal 193571/217764 (executing program)
2022/09/13 15:11:36 fetching corpus: 3600, signal 194575/218471 (executing program)
2022/09/13 15:11:36 fetching corpus: 3650, signal 195204/219024 (executing program)
2022/09/13 15:11:37 fetching corpus: 3700, signal 196042/219631 (executing program)
2022/09/13 15:11:37 fetching corpus: 3750, signal 196764/220196 (executing program)
2022/09/13 15:11:37 fetching corpus: 3800, signal 197500/220784 (executing program)
2022/09/13 15:11:37 fetching corpus: 3850, signal 198407/221412 (executing program)
2022/09/13 15:11:37 fetching corpus: 3900, signal 198999/221906 (executing program)
2022/09/13 15:11:37 fetching corpus: 3950, signal 199747/222439 (executing program)
2022/09/13 15:11:37 fetching corpus: 4000, signal 200443/222934 (executing program)
2022/09/13 15:11:38 fetching corpus: 4050, signal 201470/223492 (executing program)
2022/09/13 15:11:38 fetching corpus: 4100, signal 202470/224079 (executing program)
2022/09/13 15:11:38 fetching corpus: 4150, signal 203470/224645 (executing program)
2022/09/13 15:11:38 fetching corpus: 4200, signal 204342/225113 (executing program)
2022/09/13 15:11:38 fetching corpus: 4250, signal 204801/225479 (executing program)
2022/09/13 15:11:38 fetching corpus: 4300, signal 205517/225910 (executing program)
2022/09/13 15:11:38 fetching corpus: 4350, signal 206815/226446 (executing program)
2022/09/13 15:11:39 fetching corpus: 4400, signal 207365/226800 (executing program)
2022/09/13 15:11:39 fetching corpus: 4450, signal 207988/227203 (executing program)
2022/09/13 15:11:39 fetching corpus: 4500, signal 208632/227570 (executing program)
2022/09/13 15:11:39 fetching corpus: 4550, signal 209385/227911 (executing program)
2022/09/13 15:11:39 fetching corpus: 4600, signal 209988/228209 (executing program)
2022/09/13 15:11:39 fetching corpus: 4650, signal 210815/228610 (executing program)
2022/09/13 15:11:39 fetching corpus: 4700, signal 211788/229020 (executing program)
2022/09/13 15:11:40 fetching corpus: 4750, signal 212583/229321 (executing program)
2022/09/13 15:11:40 fetching corpus: 4800, signal 213097/229549 (executing program)
2022/09/13 15:11:40 fetching corpus: 4850, signal 213930/229854 (executing program)
2022/09/13 15:11:40 fetching corpus: 4900, signal 214385/230057 (executing program)
2022/09/13 15:11:40 fetching corpus: 4950, signal 215049/230337 (executing program)
2022/09/13 15:11:40 fetching corpus: 5000, signal 215715/230585 (executing program)
2022/09/13 15:11:40 fetching corpus: 5050, signal 217066/230915 (executing program)
2022/09/13 15:11:41 fetching corpus: 5100, signal 217479/231140 (executing program)
2022/09/13 15:11:41 fetching corpus: 5150, signal 217885/231310 (executing program)
2022/09/13 15:11:41 fetching corpus: 5200, signal 218825/231491 (executing program)
2022/09/13 15:11:41 fetching corpus: 5250, signal 219482/231762 (executing program)
2022/09/13 15:11:41 fetching corpus: 5300, signal 220084/231905 (executing program)
2022/09/13 15:11:41 fetching corpus: 5350, signal 220903/232071 (executing program)
2022/09/13 15:11:41 fetching corpus: 5400, signal 221434/232213 (executing program)
2022/09/13 15:11:41 fetching corpus: 5450, signal 221921/232402 (executing program)
2022/09/13 15:11:42 fetching corpus: 5500, signal 222541/232519 (executing program)
2022/09/13 15:11:42 fetching corpus: 5550, signal 223208/232628 (executing program)
2022/09/13 15:11:42 fetching corpus: 5600, signal 224053/232710 (executing program)
2022/09/13 15:11:42 fetching corpus: 5607, signal 224283/232713 (executing program)
2022/09/13 15:11:42 fetching corpus: 5607, signal 224283/232713 (executing program)
2022/09/13 15:11:44 starting 8 fuzzer processes
15:11:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
clone3(&(0x7f0000000640)={0x123363500, &(0x7f0000000080), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100)
15:11:44 executing program 2:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x7969, &(0x7f00000001c0)={0x0, 0xfc32, 0x0, 0x3, 0x109}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xea, 0x0, 0x6, 0x2020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x14844, 0xc03, 0x7f, 0x4, 0x4, 0x8, 0x80, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xc, r1, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6df0000000000000}, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001200))
r3 = syz_open_procfs(0x0, &(0x7f00000011c0)='mountinfo\x00')
preadv(r3, &(0x7f0000001140)=[{0x0}], 0x1, 0x0, 0x0)
sendfile(r0, r3, &(0x7f0000000140)=0x8, 0x9)
openat(0xffffffffffffffff, &(0x7f0000001180)='./file0\x00', 0x100, 0x8)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x650881, 0x0)
15:11:44 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
15:11:44 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@size={'size', 0x3d, [0x74]}}, {@mode}]})
15:11:45 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r0, 0x1, 0x27, 0x0, &(0x7f00000000c0))
15:11:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
sendfile(r1, r0, 0x0, 0xa000000000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc)
sendto$inet(r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0)
15:11:45 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000017c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8}, @algo_auth={0x48, 0x1, {{'sha256-avx2\x00'}}}]}, 0x140}}, 0x0)
15:11:45 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6f, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @gue={{0x2}, "0615e16f02864dbd64c8ab922cf06b51c173dc3dc98053831d60dc34dc0eac3e0044558fc101503ec203ddf9595d50ea00769ab63385664deade12130a"}}}}}}, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0)
[ 68.161151] audit: type=1400 audit(1663081905.056:6): avc: denied { execmem } for pid=286 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 69.479595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.492535] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 69.494830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 69.498313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 69.500590] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 69.502366] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 69.505646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 69.508007] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 69.509673] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 69.515271] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 69.518261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.526583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 69.528478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.531020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 69.534459] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.535938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 69.540470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 69.541877] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 69.543421] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 69.544897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 69.546635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.555966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 69.557852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 69.566016] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 69.567429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 69.569269] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 69.570898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 69.572673] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 69.572881] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 69.576609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 69.588333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 69.588401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 69.590941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 69.592374] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 69.601198] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 69.602209] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 69.604682] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 69.605124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 69.607827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 69.608886] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 69.610460] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 69.610657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 69.612828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 69.613147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 69.618620] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 69.619385] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 69.624362] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 69.625074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 69.627461] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 69.627826] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 69.636447] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 69.647084] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 69.648057] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 69.668489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 69.671043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 69.677252] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 71.539706] Bluetooth: hci4: command 0x0409 tx timeout
[ 71.602374] Bluetooth: hci0: command 0x0409 tx timeout
[ 71.603252] Bluetooth: hci2: command 0x0409 tx timeout
[ 71.666369] Bluetooth: hci7: command 0x0409 tx timeout
[ 71.667273] Bluetooth: hci3: command 0x0409 tx timeout
[ 71.667607] Bluetooth: hci6: command 0x0409 tx timeout
[ 71.669093] Bluetooth: hci1: command 0x0409 tx timeout
[ 71.730381] Bluetooth: hci5: command 0x0409 tx timeout
[ 73.586564] Bluetooth: hci4: command 0x041b tx timeout
[ 73.650403] Bluetooth: hci2: command 0x041b tx timeout
[ 73.651135] Bluetooth: hci0: command 0x041b tx timeout
[ 73.714313] Bluetooth: hci1: command 0x041b tx timeout
[ 73.714935] Bluetooth: hci6: command 0x041b tx timeout
[ 73.715532] Bluetooth: hci3: command 0x041b tx timeout
[ 73.716077] Bluetooth: hci7: command 0x041b tx timeout
[ 73.778280] Bluetooth: hci5: command 0x041b tx timeout
[ 75.634236] Bluetooth: hci4: command 0x040f tx timeout
[ 75.698282] Bluetooth: hci0: command 0x040f tx timeout
[ 75.698828] Bluetooth: hci2: command 0x040f tx timeout
[ 75.762248] Bluetooth: hci7: command 0x040f tx timeout
[ 75.762762] Bluetooth: hci3: command 0x040f tx timeout
[ 75.764307] Bluetooth: hci6: command 0x040f tx timeout
[ 75.764758] Bluetooth: hci1: command 0x040f tx timeout
[ 75.826213] Bluetooth: hci5: command 0x040f tx timeout
[ 77.682224] Bluetooth: hci4: command 0x0419 tx timeout
[ 77.746371] Bluetooth: hci2: command 0x0419 tx timeout
[ 77.746847] Bluetooth: hci0: command 0x0419 tx timeout
[ 77.810274] Bluetooth: hci1: command 0x0419 tx timeout
[ 77.810736] Bluetooth: hci6: command 0x0419 tx timeout
[ 77.811133] Bluetooth: hci3: command 0x0419 tx timeout
[ 77.812790] Bluetooth: hci7: command 0x0419 tx timeout
[ 77.874215] Bluetooth: hci5: command 0x0419 tx timeout
15:12:39 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@size={'size', 0x3d, [0x74]}}, {@mode}]})
15:12:39 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@size={'size', 0x3d, [0x74]}}, {@mode}]})
15:12:39 executing program 3:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@size={'size', 0x3d, [0x74]}}, {@mode}]})
15:12:39 executing program 3:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
15:12:39 executing program 3:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
15:12:39 executing program 3:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
15:12:40 executing program 3:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
15:12:40 executing program 3:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
[ 126.780523] process 'syz-executor.1' launched './file1' with NULL argv: empty string added
[ 128.120665] audit: type=1400 audit(1663081965.016:7): avc: denied { open } for pid=3910 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 128.127154] audit: type=1400 audit(1663081965.016:8): avc: denied { kernel } for pid=3910 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 128.132737] ------------[ cut here ]------------
[ 128.132763]
[ 128.132767] ======================================================
[ 128.132771] WARNING: possible circular locking dependency detected
[ 128.132777] 6.0.0-rc5-next-20220913 #1 Not tainted
[ 128.132784] ------------------------------------------------------
[ 128.132788] syz-executor.2/3911 is trying to acquire lock:
[ 128.132796] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 128.132841]
[ 128.132841] but task is already holding lock:
[ 128.132845] ffff888008dafc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 128.132878]
[ 128.132878] which lock already depends on the new lock.
[ 128.132878]
[ 128.132882]
[ 128.132882] the existing dependency chain (in reverse order) is:
[ 128.132886]
[ 128.132886] -> #3 (&ctx->lock){....}-{2:2}:
[ 128.132903] _raw_spin_lock+0x2a/0x40
[ 128.132924] __perf_event_task_sched_out+0x53b/0x18d0
[ 128.132939] __schedule+0xedd/0x2470
[ 128.132951] schedule+0xda/0x1b0
[ 128.132962] exit_to_user_mode_prepare+0x114/0x1a0
[ 128.132987] syscall_exit_to_user_mode+0x19/0x40
[ 128.133009] do_syscall_64+0x48/0x90
[ 128.133026] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 128.133047]
[ 128.133047] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 128.133063] _raw_spin_lock_nested+0x30/0x40
[ 128.133081] raw_spin_rq_lock_nested+0x1e/0x30
[ 128.133098] task_fork_fair+0x63/0x4d0
[ 128.133118] sched_cgroup_fork+0x3d0/0x540
[ 128.133136] copy_process+0x3f9e/0x6df0
[ 128.133172] kernel_clone+0xe7/0x890
[ 128.133184] user_mode_thread+0xad/0xf0
[ 128.133196] rest_init+0x24/0x250
[ 128.133216] arch_call_rest_init+0xf/0x14
[ 128.133240] start_kernel+0x4c1/0x4e6
[ 128.133261] secondary_startup_64_no_verify+0xe0/0xeb
[ 128.133279]
[ 128.133279] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 128.133295] _raw_spin_lock_irqsave+0x39/0x60
[ 128.133314] try_to_wake_up+0xab/0x1920
[ 128.133331] up+0x75/0xb0
[ 128.133346] __up_console_sem+0x6e/0x80
[ 128.133366] console_unlock+0x46a/0x590
[ 128.133385] vt_ioctl+0x2822/0x2ca0
[ 128.133400] tty_ioctl+0x7c4/0x1700
[ 128.133414] __x64_sys_ioctl+0x19a/0x210
[ 128.133432] do_syscall_64+0x3b/0x90
[ 128.133448] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 128.133468]
[ 128.133468] -> #0 ((console_sem).lock){....}-{2:2}:
[ 128.133485] __lock_acquire+0x2a02/0x5e70
[ 128.133505] lock_acquire+0x1a2/0x530
[ 128.133524] _raw_spin_lock_irqsave+0x39/0x60
[ 128.133542] down_trylock+0xe/0x70
[ 128.133557] __down_trylock_console_sem+0x3b/0xd0
[ 128.133576] vprintk_emit+0x16b/0x560
[ 128.133596] vprintk+0x84/0xa0
[ 128.133616] _printk+0xba/0xf1
[ 128.133637] report_bug.cold+0x72/0xab
[ 128.133652] handle_bug+0x3c/0x70
[ 128.133667] exc_invalid_op+0x14/0x50
[ 128.133683] asm_exc_invalid_op+0x16/0x20
[ 128.133702] group_sched_out.part.0+0x2c7/0x460
[ 128.133715] ctx_sched_out+0x8f1/0xc10
[ 128.133727] __perf_event_task_sched_out+0x6d0/0x18d0
[ 128.133741] __schedule+0xedd/0x2470
[ 128.133753] schedule+0xda/0x1b0
[ 128.133764] exit_to_user_mode_prepare+0x114/0x1a0
[ 128.133787] syscall_exit_to_user_mode+0x19/0x40
[ 128.133807] do_syscall_64+0x48/0x90
[ 128.133823] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 128.133843]
[ 128.133843] other info that might help us debug this:
[ 128.133843]
[ 128.133846] Chain exists of:
[ 128.133846] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 128.133846]
[ 128.133864] Possible unsafe locking scenario:
[ 128.133864]
[ 128.133867] CPU0 CPU1
[ 128.133870] ---- ----
[ 128.133873] lock(&ctx->lock);
[ 128.133880] lock(&rq->__lock);
[ 128.133887] lock(&ctx->lock);
[ 128.133895] lock((console_sem).lock);
[ 128.133902]
[ 128.133902] *** DEADLOCK ***
[ 128.133902]
[ 128.133904] 2 locks held by syz-executor.2/3911:
[ 128.133912] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 128.133943] #1: ffff888008dafc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 128.133976]
[ 128.133976] stack backtrace:
[ 128.133979] CPU: 1 PID: 3911 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1
[ 128.133994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 128.134004] Call Trace:
[ 128.134008]
[ 128.134013] dump_stack_lvl+0x8b/0xb3
[ 128.134031] check_noncircular+0x263/0x2e0
[ 128.134051] ? format_decode+0x26c/0xb50
[ 128.134069] ? print_circular_bug+0x450/0x450
[ 128.134090] ? enable_ptr_key_workfn+0x20/0x20
[ 128.134108] ? format_decode+0x26c/0xb50
[ 128.134126] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 128.134148] __lock_acquire+0x2a02/0x5e70
[ 128.134174] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 128.134201] lock_acquire+0x1a2/0x530
[ 128.134221] ? down_trylock+0xe/0x70
[ 128.134239] ? rcu_read_unlock+0x40/0x40
[ 128.134264] ? vprintk+0x84/0xa0
[ 128.134286] _raw_spin_lock_irqsave+0x39/0x60
[ 128.134305] ? down_trylock+0xe/0x70
[ 128.134321] down_trylock+0xe/0x70
[ 128.134337] ? vprintk+0x84/0xa0
[ 128.134360] __down_trylock_console_sem+0x3b/0xd0
[ 128.134384] vprintk_emit+0x16b/0x560
[ 128.134407] vprintk+0x84/0xa0
[ 128.134428] _printk+0xba/0xf1
[ 128.134450] ? record_print_text.cold+0x16/0x16
[ 128.134476] ? report_bug.cold+0x66/0xab
[ 128.134493] ? group_sched_out.part.0+0x2c7/0x460
[ 128.134507] report_bug.cold+0x72/0xab
[ 128.134524] handle_bug+0x3c/0x70
[ 128.134541] exc_invalid_op+0x14/0x50
[ 128.134558] asm_exc_invalid_op+0x16/0x20
[ 128.134579] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 128.134595] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 128.134609] RSP: 0018:ffff888041de7c48 EFLAGS: 00010006
[ 128.134620] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 128.134629] RDX: ffff88800fdf1ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[ 128.134638] RBP: ffff888041df8000 R08: 0000000000000005 R09: 0000000000000001
[ 128.134647] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888008dafc00
[ 128.134657] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 128.134670] ? group_sched_out.part.0+0x2c7/0x460
[ 128.134685] ? group_sched_out.part.0+0x2c7/0x460
[ 128.134701] ctx_sched_out+0x8f1/0xc10
[ 128.134716] __perf_event_task_sched_out+0x6d0/0x18d0
[ 128.134734] ? lock_is_held_type+0xd7/0x130
[ 128.134756] ? __perf_cgroup_move+0x160/0x160
[ 128.134771] ? set_next_entity+0x304/0x550
[ 128.134792] ? update_curr+0x267/0x740
[ 128.134815] ? lock_is_held_type+0xd7/0x130
[ 128.134837] __schedule+0xedd/0x2470
[ 128.134852] ? io_schedule_timeout+0x150/0x150
[ 128.134867] ? rcu_read_lock_sched_held+0x3e/0x80
[ 128.134892] schedule+0xda/0x1b0
[ 128.134905] exit_to_user_mode_prepare+0x114/0x1a0
[ 128.134930] syscall_exit_to_user_mode+0x19/0x40
[ 128.134952] do_syscall_64+0x48/0x90
[ 128.134969] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 128.134990] RIP: 0033:0x7fb3c68b7b19
[ 128.135001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 128.135014] RSP: 002b:00007fb3c3e2d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 128.135027] RAX: 0000000000000001 RBX: 00007fb3c69caf68 RCX: 00007fb3c68b7b19
[ 128.135036] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb3c69caf6c
[ 128.135045] RBP: 00007fb3c69caf60 R08: 000000000000000e R09: 0000000000000000
[ 128.135054] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb3c69caf6c
[ 128.135063] R13: 00007ffdf386f8ef R14: 00007fb3c3e2d300 R15: 0000000000022000
[ 128.135078]
[ 128.198776] WARNING: CPU: 1 PID: 3911 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 128.199529] Modules linked in:
[ 128.199797] CPU: 1 PID: 3911 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220913 #1
[ 128.200478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 128.201438] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 128.201896] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 128.203433] RSP: 0018:ffff888041de7c48 EFLAGS: 00010006
[ 128.203891] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 128.204472] RDX: ffff88800fdf1ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[ 128.205054] RBP: ffff888041df8000 R08: 0000000000000005 R09: 0000000000000001
[ 128.205654] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888008dafc00
[ 128.206232] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 128.206815] FS: 00007fb3c3e2d700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 128.207475] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 128.207950] CR2: 00007f89cc27f470 CR3: 0000000008a1a000 CR4: 0000000000350ee0
[ 128.208533] Call Trace:
[ 128.208749]
[ 128.208946] ctx_sched_out+0x8f1/0xc10
[ 128.209284] __perf_event_task_sched_out+0x6d0/0x18d0
[ 128.209714] ? lock_is_held_type+0xd7/0x130
[ 128.210075] ? __perf_cgroup_move+0x160/0x160
[ 128.210447] ? set_next_entity+0x304/0x550
[ 128.210803] ? update_curr+0x267/0x740
[ 128.211137] ? lock_is_held_type+0xd7/0x130
[ 128.211505] __schedule+0xedd/0x2470
[ 128.211824] ? io_schedule_timeout+0x150/0x150
[ 128.212197] ? rcu_read_lock_sched_held+0x3e/0x80
[ 128.212605] schedule+0xda/0x1b0
[ 128.212893] exit_to_user_mode_prepare+0x114/0x1a0
[ 128.213314] syscall_exit_to_user_mode+0x19/0x40
[ 128.213717] do_syscall_64+0x48/0x90
[ 128.214030] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 128.214462] RIP: 0033:0x7fb3c68b7b19
[ 128.214767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 128.216231] RSP: 002b:00007fb3c3e2d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 128.216835] RAX: 0000000000000001 RBX: 00007fb3c69caf68 RCX: 00007fb3c68b7b19
[ 128.217416] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb3c69caf6c
[ 128.217988] RBP: 00007fb3c69caf60 R08: 000000000000000e R09: 0000000000000000
[ 128.218552] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb3c69caf6c
[ 128.219119] R13: 00007ffdf386f8ef R14: 00007fb3c3e2d300 R15: 0000000000022000
[ 128.219695]
[ 128.219887] irq event stamp: 2202
[ 128.220168] hardirqs last enabled at (2201): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 128.220935] hardirqs last disabled at (2202): [] __schedule+0x1225/0x2470
[ 128.221612] softirqs last enabled at (1886): [] __irq_exit_rcu+0x11b/0x180
[ 128.222305] softirqs last disabled at (1679): [] __irq_exit_rcu+0x11b/0x180
[ 128.222992] ---[ end trace 0000000000000000 ]---
[ 128.225839] audit: type=1400 audit(1663081965.121:9): avc: denied { write } for pid=3910 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 128.262182] hrtimer: interrupt took 19286 ns
[ 132.786533] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 132.787517] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 137.010284] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 137.010284] Bluetooth: hci0: Opcode 0x c03 failed: -110
VM DIAGNOSIS:
15:12:45 Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=ffff888041f37c60 RCX=0000000080000001 RDX=ffff888020445040
RSI=ffffffff815b5c34 RDI=0000000000000001 RBP=ffffea000018dc00 RSP=ffff888041f37b40
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=dffffc0000000000 R14=ffffea000018dc34 R15=0000000000000024
RIP=ffffffff8146174d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f82d7c92269 CR3=0000000040cb6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ff00000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 657268747062696c
YMM02=0000000000000000 0000000000000000 0000000000000036 2e6f732e6362696c
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 ff00000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888041de7698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001
R12=0000000000000033 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0
RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb3c3e2d700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f89cc27f470 CR3=0000000008a1a000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fb3c699e7c0 00007fb3c699e7c8
YMM02=0000000000000000 0000000000000000 00007fb3c699e7e0 00007fb3c699e7c0
YMM03=0000000000000000 0000000000000000 00007fb3c699e7c8 00007fb3c699e7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000