Warning: Permanently added '[localhost]:27700' (ECDSA) to the list of known hosts.
2022/10/05 11:03:39 fuzzer started
2022/10/05 11:03:40 dialing manager at localhost:37193
syzkaller login: [ 45.058765] cgroup: Unknown subsys name 'net'
[ 45.175125] cgroup: Unknown subsys name 'rlimit'
2022/10/05 11:03:54 syscalls: 2215
2022/10/05 11:03:54 code coverage: enabled
2022/10/05 11:03:54 comparison tracing: enabled
2022/10/05 11:03:54 extra coverage: enabled
2022/10/05 11:03:54 setuid sandbox: enabled
2022/10/05 11:03:54 namespace sandbox: enabled
2022/10/05 11:03:54 Android sandbox: enabled
2022/10/05 11:03:54 fault injection: enabled
2022/10/05 11:03:54 leak checking: enabled
2022/10/05 11:03:54 net packet injection: enabled
2022/10/05 11:03:54 net device setup: enabled
2022/10/05 11:03:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/05 11:03:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/05 11:03:54 USB emulation: enabled
2022/10/05 11:03:54 hci packet injection: enabled
2022/10/05 11:03:54 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005 )
2022/10/05 11:03:54 802.15.4 emulation: enabled
2022/10/05 11:03:54 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/05 11:03:54 fetching corpus: 50, signal 30502/33294 (executing program)
2022/10/05 11:03:54 fetching corpus: 100, signal 37493/41247 (executing program)
2022/10/05 11:03:54 fetching corpus: 150, signal 44822/49196 (executing program)
2022/10/05 11:03:55 fetching corpus: 200, signal 50440/55393 (executing program)
2022/10/05 11:03:55 fetching corpus: 250, signal 53813/59351 (executing program)
2022/10/05 11:03:55 fetching corpus: 300, signal 58282/64093 (executing program)
2022/10/05 11:03:55 fetching corpus: 350, signal 60000/66353 (executing program)
2022/10/05 11:03:55 fetching corpus: 400, signal 61564/68459 (executing program)
2022/10/05 11:03:55 fetching corpus: 450, signal 65143/72065 (executing program)
2022/10/05 11:03:55 fetching corpus: 500, signal 69167/75914 (executing program)
2022/10/05 11:03:55 fetching corpus: 550, signal 72697/79240 (executing program)
2022/10/05 11:03:56 fetching corpus: 600, signal 75630/81921 (executing program)
2022/10/05 11:03:56 fetching corpus: 650, signal 78579/84495 (executing program)
2022/10/05 11:03:56 fetching corpus: 700, signal 81978/87321 (executing program)
2022/10/05 11:03:56 fetching corpus: 750, signal 84982/89733 (executing program)
2022/10/05 11:03:56 fetching corpus: 800, signal 87446/91671 (executing program)
2022/10/05 11:03:56 fetching corpus: 850, signal 88788/92762 (executing program)
2022/10/05 11:03:56 fetching corpus: 900, signal 91201/94541 (executing program)
2022/10/05 11:03:56 fetching corpus: 950, signal 92948/95753 (executing program)
2022/10/05 11:03:57 fetching corpus: 1000, signal 94438/96751 (executing program)
2022/10/05 11:03:57 fetching corpus: 1050, signal 96747/98186 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98683 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98740 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98784 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98824 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98859 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98915 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/98959 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99009 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99067 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99115 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99166 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99211 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99266 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99314 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99357 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99413 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99468 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99511 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99556 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99603 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99656 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99701 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99755 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99818 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99867 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99922 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/99976 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/100007 (executing program)
2022/10/05 11:03:57 fetching corpus: 1086, signal 97534/100007 (executing program)
2022/10/05 11:04:00 starting 8 fuzzer processes
11:04:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4156, 0x4)
sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/81, 0x51}}], 0x1, 0x40012301, 0x0)
11:04:00 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
11:04:00 executing program 2:
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
11:04:00 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
11:04:00 executing program 4:
clone3(&(0x7f0000007040)={0x21028000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
11:04:00 executing program 6:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')
[ 65.284130] audit: type=1400 audit(1664967840.645:6): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:04:00 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setgroups(0x4000000000000352, &(0x7f0000000300)=[0x0, 0x0])
11:04:00 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x39, 0x0, 0x0)
[ 66.553859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 66.556030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 66.558044] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 66.559290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 66.561463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 66.562702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 66.564261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 66.566642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 66.568014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 66.571480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 66.572827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 66.575011] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 66.576198] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 66.577459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 66.580277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 66.589567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 66.594386] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 66.597814] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 66.600720] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 66.602331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 66.604778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 66.624128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 66.625152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 66.633018] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 66.634017] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 66.636029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 66.637149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 66.638194] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 66.640777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 66.648943] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 66.652120] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 66.652952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 66.665415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 66.667287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 66.668717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 66.673231] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 66.693772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 66.695877] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 66.697248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 66.699591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 66.701303] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 66.702496] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 66.707491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 66.711657] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 66.714280] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 66.715876] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 66.735930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 66.741795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 66.742799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 66.753339] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 66.755848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 66.757496] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 66.762915] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 66.767227] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 66.768439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 66.778449] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 68.624829] Bluetooth: hci0: command 0x0409 tx timeout
[ 68.625397] Bluetooth: hci1: command 0x0409 tx timeout
[ 68.687640] Bluetooth: hci5: command 0x0409 tx timeout
[ 68.688241] Bluetooth: hci2: command 0x0409 tx timeout
[ 68.688716] Bluetooth: hci3: command 0x0409 tx timeout
[ 68.752606] Bluetooth: hci7: command 0x0409 tx timeout
[ 68.815648] Bluetooth: hci4: command 0x0409 tx timeout
[ 68.816266] Bluetooth: hci6: command 0x0409 tx timeout
[ 70.671598] Bluetooth: hci1: command 0x041b tx timeout
[ 70.672034] Bluetooth: hci0: command 0x041b tx timeout
[ 70.735608] Bluetooth: hci3: command 0x041b tx timeout
[ 70.736028] Bluetooth: hci2: command 0x041b tx timeout
[ 70.736389] Bluetooth: hci5: command 0x041b tx timeout
[ 70.799626] Bluetooth: hci7: command 0x041b tx timeout
[ 70.863633] Bluetooth: hci6: command 0x041b tx timeout
[ 70.864033] Bluetooth: hci4: command 0x041b tx timeout
[ 72.719658] Bluetooth: hci0: command 0x040f tx timeout
[ 72.720258] Bluetooth: hci1: command 0x040f tx timeout
[ 72.783712] Bluetooth: hci5: command 0x040f tx timeout
[ 72.784593] Bluetooth: hci2: command 0x040f tx timeout
[ 72.785329] Bluetooth: hci3: command 0x040f tx timeout
[ 72.847602] Bluetooth: hci7: command 0x040f tx timeout
[ 72.911675] Bluetooth: hci4: command 0x040f tx timeout
[ 72.912386] Bluetooth: hci6: command 0x040f tx timeout
[ 74.767637] Bluetooth: hci1: command 0x0419 tx timeout
[ 74.768069] Bluetooth: hci0: command 0x0419 tx timeout
[ 74.831620] Bluetooth: hci3: command 0x0419 tx timeout
[ 74.832423] Bluetooth: hci2: command 0x0419 tx timeout
[ 74.833211] Bluetooth: hci5: command 0x0419 tx timeout
[ 74.895587] Bluetooth: hci7: command 0x0419 tx timeout
[ 74.959677] Bluetooth: hci6: command 0x0419 tx timeout
[ 74.960426] Bluetooth: hci4: command 0x0419 tx timeout
11:04:58 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x39, 0x0, 0x0)
11:04:58 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x39, 0x0, 0x0)
11:04:58 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x39, 0x0, 0x0)
11:04:58 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
11:04:58 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
11:04:58 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
11:04:58 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
11:04:58 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
[ 124.339104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 124.347807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 124.864250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 124.865182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 125.115610] audit: type=1400 audit(1664967900.476:7): avc: denied { open } for pid=3954 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 125.117031] audit: type=1400 audit(1664967900.477:8): avc: denied { kernel } for pid=3954 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 125.126153] ------------[ cut here ]------------
[ 125.126175]
[ 125.126179] ======================================================
[ 125.126182] WARNING: possible circular locking dependency detected
[ 125.126187] 6.0.0-next-20221005 #1 Not tainted
[ 125.126193] ------------------------------------------------------
[ 125.126197] syz-executor.5/3955 is trying to acquire lock:
[ 125.126203] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 125.126244]
[ 125.126244] but task is already holding lock:
[ 125.126247] ffff88803d281c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 125.126275]
[ 125.126275] which lock already depends on the new lock.
[ 125.126275]
[ 125.126278]
[ 125.126278] the existing dependency chain (in reverse order) is:
[ 125.126281]
[ 125.126281] -> #3 (&ctx->lock){....}-{2:2}:
[ 125.126295] _raw_spin_lock+0x2a/0x40
[ 125.126307] __perf_event_task_sched_out+0x53b/0x18d0
[ 125.126318] __schedule+0xedd/0x2470
[ 125.126333] schedule+0xda/0x1b0
[ 125.126347] exit_to_user_mode_prepare+0x114/0x1a0
[ 125.126360] syscall_exit_to_user_mode+0x19/0x40
[ 125.126374] do_syscall_64+0x48/0x90
[ 125.126384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 125.126397]
[ 125.126397] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 125.126411] _raw_spin_lock_nested+0x30/0x40
[ 125.126422] raw_spin_rq_lock_nested+0x1e/0x30
[ 125.126436] task_fork_fair+0x63/0x4d0
[ 125.126453] sched_cgroup_fork+0x3d0/0x540
[ 125.126467] copy_process+0x4183/0x6e20
[ 125.126479] kernel_clone+0xe7/0x890
[ 125.126488] user_mode_thread+0xad/0xf0
[ 125.126501] rest_init+0x24/0x250
[ 125.126514] arch_call_rest_init+0xf/0x14
[ 125.126534] start_kernel+0x4c6/0x4eb
[ 125.126551] secondary_startup_64_no_verify+0xe0/0xeb
[ 125.126565]
[ 125.126565] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 125.126579] _raw_spin_lock_irqsave+0x39/0x60
[ 125.126590] try_to_wake_up+0xab/0x1930
[ 125.126603] up+0x75/0xb0
[ 125.126618] __up_console_sem+0x6e/0x80
[ 125.126635] console_unlock+0x46a/0x590
[ 125.126651] vt_ioctl+0x2822/0x2ca0
[ 125.126664] tty_ioctl+0x785/0x16b0
[ 125.126675] __x64_sys_ioctl+0x19a/0x210
[ 125.126689] do_syscall_64+0x3b/0x90
[ 125.126698] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 125.126712]
[ 125.126712] -> #0 ((console_sem).lock){....}-{2:2}:
[ 125.126725] __lock_acquire+0x2a02/0x5e70
[ 125.126742] lock_acquire+0x1a2/0x530
[ 125.126758] _raw_spin_lock_irqsave+0x39/0x60
[ 125.126769] down_trylock+0xe/0x70
[ 125.126785] __down_trylock_console_sem+0x3b/0xd0
[ 125.126801] vprintk_emit+0x16b/0x560
[ 125.126817] vprintk+0x84/0xa0
[ 125.126833] _printk+0xba/0xf1
[ 125.126846] report_bug.cold+0x72/0xab
[ 125.126863] handle_bug+0x3c/0x70
[ 125.126872] exc_invalid_op+0x14/0x50
[ 125.126882] asm_exc_invalid_op+0x16/0x20
[ 125.126895] group_sched_out.part.0+0x2c7/0x460
[ 125.126913] ctx_sched_out+0x8f1/0xc10
[ 125.126930] __perf_event_task_sched_out+0x6d0/0x18d0
[ 125.126940] __schedule+0xedd/0x2470
[ 125.126955] schedule+0xda/0x1b0
[ 125.126969] exit_to_user_mode_prepare+0x114/0x1a0
[ 125.126980] syscall_exit_to_user_mode+0x19/0x40
[ 125.126993] do_syscall_64+0x48/0x90
[ 125.127002] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 125.127015]
[ 125.127015] other info that might help us debug this:
[ 125.127015]
[ 125.127018] Chain exists of:
[ 125.127018] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 125.127018]
[ 125.127033] Possible unsafe locking scenario:
[ 125.127033]
[ 125.127035] CPU0 CPU1
[ 125.127037] ---- ----
[ 125.127040] lock(&ctx->lock);
[ 125.127045] lock(&rq->__lock);
[ 125.127052] lock(&ctx->lock);
[ 125.127058] lock((console_sem).lock);
[ 125.127063]
[ 125.127063] *** DEADLOCK ***
[ 125.127063]
[ 125.127065] 2 locks held by syz-executor.5/3955:
[ 125.127072] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 125.127102] #1: ffff88803d281c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 125.127128]
[ 125.127128] stack backtrace:
[ 125.127131] CPU: 0 PID: 3955 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1
[ 125.127144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 125.127150] Call Trace:
[ 125.127154]
[ 125.127158] dump_stack_lvl+0x8b/0xb3
[ 125.127178] check_noncircular+0x263/0x2e0
[ 125.127195] ? format_decode+0x26c/0xb50
[ 125.127212] ? print_circular_bug+0x450/0x450
[ 125.127230] ? simple_strtoul+0x30/0x30
[ 125.127247] ? format_decode+0x26c/0xb50
[ 125.127265] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 125.127283] __lock_acquire+0x2a02/0x5e70
[ 125.127305] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 125.127327] lock_acquire+0x1a2/0x530
[ 125.127344] ? down_trylock+0xe/0x70
[ 125.127362] ? lock_release+0x750/0x750
[ 125.127383] ? vprintk+0x84/0xa0
[ 125.127401] _raw_spin_lock_irqsave+0x39/0x60
[ 125.127413] ? down_trylock+0xe/0x70
[ 125.127431] down_trylock+0xe/0x70
[ 125.127447] ? vprintk+0x84/0xa0
[ 125.127465] __down_trylock_console_sem+0x3b/0xd0
[ 125.127482] vprintk_emit+0x16b/0x560
[ 125.127502] vprintk+0x84/0xa0
[ 125.127519] _printk+0xba/0xf1
[ 125.127532] ? record_print_text.cold+0x16/0x16
[ 125.127548] ? report_bug.cold+0x66/0xab
[ 125.127567] ? group_sched_out.part.0+0x2c7/0x460
[ 125.127586] report_bug.cold+0x72/0xab
[ 125.127606] handle_bug+0x3c/0x70
[ 125.127616] exc_invalid_op+0x14/0x50
[ 125.127627] asm_exc_invalid_op+0x16/0x20
[ 125.127640] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 125.127661] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 125.127673] RSP: 0018:ffff88801e72fc48 EFLAGS: 00010006
[ 125.127682] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 125.127689] RDX: ffff88803be9d040 RSI: ffffffff81566da7 RDI: 0000000000000005
[ 125.127697] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[ 125.127705] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88803d281c00
[ 125.127712] R13: ffff88806ce3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002
[ 125.127723] ? group_sched_out.part.0+0x2c7/0x460
[ 125.127743] ? group_sched_out.part.0+0x2c7/0x460
[ 125.127763] ctx_sched_out+0x8f1/0xc10
[ 125.127782] __perf_event_task_sched_out+0x6d0/0x18d0
[ 125.127796] ? lock_is_held_type+0xd7/0x130
[ 125.127810] ? __perf_cgroup_move+0x160/0x160
[ 125.127821] ? set_next_entity+0x304/0x550
[ 125.127838] ? update_curr+0x267/0x740
[ 125.127857] ? lock_is_held_type+0xd7/0x130
[ 125.127871] __schedule+0xedd/0x2470
[ 125.127889] ? io_schedule_timeout+0x150/0x150
[ 125.127906] ? rcu_read_lock_sched_held+0x3e/0x80
[ 125.127927] schedule+0xda/0x1b0
[ 125.127942] exit_to_user_mode_prepare+0x114/0x1a0
[ 125.127955] syscall_exit_to_user_mode+0x19/0x40
[ 125.127969] do_syscall_64+0x48/0x90
[ 125.127979] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 125.127993] RIP: 0033:0x7f18946c9b19
[ 125.128001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 125.128012] RSP: 002b:00007f1891c3f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 125.128023] RAX: 0000000000000001 RBX: 00007f18947dcf68 RCX: 00007f18946c9b19
[ 125.128030] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18947dcf6c
[ 125.128038] RBP: 00007f18947dcf60 R08: 000000000000000e R09: 0000000000000000
[ 125.128045] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f18947dcf6c
[ 125.128052] R13: 00007fff9c5191ef R14: 00007f1891c3f300 R15: 0000000000022000
[ 125.128065]
[ 125.184593] WARNING: CPU: 0 PID: 3955 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 125.185250] Modules linked in:
[ 125.185478] CPU: 0 PID: 3955 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1
[ 125.186020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 125.186593] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 125.186979] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 125.188251] RSP: 0018:ffff88801e72fc48 EFLAGS: 00010006
[ 125.188636] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 125.189145] RDX: ffff88803be9d040 RSI: ffffffff81566da7 RDI: 0000000000000005
[ 125.189643] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[ 125.190112] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88803d281c00
[ 125.190576] R13: ffff88806ce3d2c0 R14: ffffffff8547d1a0 R15: 0000000000000002
[ 125.191042] FS: 00007f1891c3f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 125.191566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 125.191949] CR2: 00007f22e1d03228 CR3: 000000003d242000 CR4: 0000000000350ef0
[ 125.192420] Call Trace:
[ 125.192594]
[ 125.192752] ctx_sched_out+0x8f1/0xc10
[ 125.193022] __perf_event_task_sched_out+0x6d0/0x18d0
[ 125.193365] ? lock_is_held_type+0xd7/0x130
[ 125.193657] ? __perf_cgroup_move+0x160/0x160
[ 125.193958] ? set_next_entity+0x304/0x550
[ 125.194246] ? update_curr+0x267/0x740
[ 125.194514] ? lock_is_held_type+0xd7/0x130
[ 125.194806] __schedule+0xedd/0x2470
[ 125.195062] ? io_schedule_timeout+0x150/0x150
[ 125.195372] ? rcu_read_lock_sched_held+0x3e/0x80
[ 125.195701] schedule+0xda/0x1b0
[ 125.195939] exit_to_user_mode_prepare+0x114/0x1a0
[ 125.196266] syscall_exit_to_user_mode+0x19/0x40
[ 125.196597] do_syscall_64+0x48/0x90
[ 125.196848] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 125.197191] RIP: 0033:0x7f18946c9b19
[ 125.197441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 125.198617] RSP: 002b:00007f1891c3f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 125.199111] RAX: 0000000000000001 RBX: 00007f18947dcf68 RCX: 00007f18946c9b19
[ 125.199574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18947dcf6c
[ 125.200042] RBP: 00007f18947dcf60 R08: 000000000000000e R09: 0000000000000000
[ 125.200516] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f18947dcf6c
[ 125.200977] R13: 00007fff9c5191ef R14: 00007f1891c3f300 R15: 0000000000022000
[ 125.201443]
[ 125.201607] irq event stamp: 884
[ 125.201848] hardirqs last enabled at (883): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 125.202518] hardirqs last disabled at (884): [] __schedule+0x1225/0x2470
[ 125.203108] softirqs last enabled at (632): [] __irq_exit_rcu+0x11b/0x180
[ 125.203710] softirqs last disabled at (437): [] __irq_exit_rcu+0x11b/0x180
[ 125.204336] ---[ end trace 0000000000000000 ]---
[ 127.577389] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 127.579682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 127.580945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 127.581955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 127.582949] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 127.583805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 127.585839] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 129.615570] Bluetooth: hci4: command 0x0409 tx timeout
[ 129.616377] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 131.664662] Bluetooth: hci4: command 0x041b tx timeout
[ 131.809069] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 131.818558] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 131.819919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 131.822168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 131.824149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 131.825209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 131.828660] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 133.711592] Bluetooth: hci4: command 0x040f tx timeout
[ 133.839590] Bluetooth: hci3: command 0x0409 tx timeout
VM DIAGNOSIS:
11:05:00 Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff823bda0c RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88801e72f5f8
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000007 R11=0000000000000001
R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0ecb984 R15=dffffc0000000000
RIP=ffffffff823bda61 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1891c3f700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f22e1d03228 CR3=000000003d242000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f18947b07c000007f18947b07c8
XMM02=00007f18947b07e000007f18947b07c0 XMM03=00007f18947b07c800007f18947b07c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000120011 RCX=dead000000120012 RDX=ffff88800f164000
RSI=ffffea00003c5900 RDI=0000000048800000 RBP=ffffea00003c5900 RSP=ffff88801bf3fcc8
R8 =0000000000000001 R9 =dead000080120011 R10=ffffea00003c5900 R11=0000000000000001
R12=0000000000000000 R13=ffff888007c4f780 R14=ffff88800f164000 R15=ffff88800f164000
RIP=ffffffff81783147 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff28e3278c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f103d0fd260 CR3=000000001e4fc000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffff00000000
XMM02=ffffffffffffffffff00000000000000 XMM03=0000000800000001000055a6c110f0a0
XMM04=000055a6c08abfe0000055a6c113c1e0 XMM05=0000000500000006000055a6c10f17a0
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=000000000000000000646d6574737973 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000