Warning: Permanently added '[localhost]:35619' (ECDSA) to the list of known hosts.
2022/10/05 11:14:00 fuzzer started
2022/10/05 11:14:01 dialing manager at localhost:37193
syzkaller login: [ 35.918889] cgroup: Unknown subsys name 'net'
[ 36.021047] cgroup: Unknown subsys name 'rlimit'
2022/10/05 11:14:15 syscalls: 2215
2022/10/05 11:14:15 code coverage: enabled
2022/10/05 11:14:15 comparison tracing: enabled
2022/10/05 11:14:15 extra coverage: enabled
2022/10/05 11:14:15 setuid sandbox: enabled
2022/10/05 11:14:15 namespace sandbox: enabled
2022/10/05 11:14:15 Android sandbox: enabled
2022/10/05 11:14:15 fault injection: enabled
2022/10/05 11:14:15 leak checking: enabled
2022/10/05 11:14:15 net packet injection: enabled
2022/10/05 11:14:15 net device setup: enabled
2022/10/05 11:14:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/05 11:14:15 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/05 11:14:15 USB emulation: enabled
2022/10/05 11:14:15 hci packet injection: enabled
2022/10/05 11:14:15 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005 )
2022/10/05 11:14:15 802.15.4 emulation: enabled
2022/10/05 11:14:15 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/05 11:14:15 fetching corpus: 50, signal 19926/23252 (executing program)
2022/10/05 11:14:16 fetching corpus: 100, signal 38084/42261 (executing program)
2022/10/05 11:14:16 fetching corpus: 150, signal 44131/49335 (executing program)
2022/10/05 11:14:16 fetching corpus: 200, signal 49822/55881 (executing program)
2022/10/05 11:14:16 fetching corpus: 250, signal 53774/60647 (executing program)
2022/10/05 11:14:16 fetching corpus: 300, signal 57456/65102 (executing program)
2022/10/05 11:14:16 fetching corpus: 350, signal 63334/71262 (executing program)
2022/10/05 11:14:16 fetching corpus: 400, signal 66222/74677 (executing program)
2022/10/05 11:14:16 fetching corpus: 450, signal 69675/78489 (executing program)
2022/10/05 11:14:16 fetching corpus: 500, signal 72962/82097 (executing program)
2022/10/05 11:14:17 fetching corpus: 550, signal 75498/85047 (executing program)
2022/10/05 11:14:17 fetching corpus: 600, signal 78070/87865 (executing program)
2022/10/05 11:14:17 fetching corpus: 650, signal 80422/90426 (executing program)
2022/10/05 11:14:17 fetching corpus: 700, signal 83528/93481 (executing program)
2022/10/05 11:14:17 fetching corpus: 750, signal 85272/95428 (executing program)
2022/10/05 11:14:17 fetching corpus: 800, signal 86776/97169 (executing program)
2022/10/05 11:14:17 fetching corpus: 850, signal 88462/98944 (executing program)
2022/10/05 11:14:17 fetching corpus: 900, signal 90583/101006 (executing program)
2022/10/05 11:14:17 fetching corpus: 950, signal 93455/103518 (executing program)
2022/10/05 11:14:18 fetching corpus: 1000, signal 96517/105974 (executing program)
2022/10/05 11:14:18 fetching corpus: 1050, signal 99193/108181 (executing program)
2022/10/05 11:14:18 fetching corpus: 1100, signal 100747/109572 (executing program)
2022/10/05 11:14:18 fetching corpus: 1150, signal 102763/111157 (executing program)
2022/10/05 11:14:18 fetching corpus: 1200, signal 104395/112507 (executing program)
2022/10/05 11:14:18 fetching corpus: 1250, signal 105778/113643 (executing program)
2022/10/05 11:14:18 fetching corpus: 1300, signal 107384/114863 (executing program)
2022/10/05 11:14:18 fetching corpus: 1350, signal 108449/115731 (executing program)
2022/10/05 11:14:18 fetching corpus: 1400, signal 109805/116704 (executing program)
2022/10/05 11:14:19 fetching corpus: 1450, signal 111619/117852 (executing program)
2022/10/05 11:14:19 fetching corpus: 1500, signal 112549/118540 (executing program)
2022/10/05 11:14:19 fetching corpus: 1550, signal 113809/119376 (executing program)
2022/10/05 11:14:19 fetching corpus: 1600, signal 115107/120184 (executing program)
2022/10/05 11:14:19 fetching corpus: 1650, signal 116471/120980 (executing program)
2022/10/05 11:14:19 fetching corpus: 1700, signal 118094/121833 (executing program)
2022/10/05 11:14:19 fetching corpus: 1750, signal 120009/122721 (executing program)
2022/10/05 11:14:20 fetching corpus: 1800, signal 121318/123529 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124017 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124062 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124112 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124157 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124204 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124254 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124303 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124353 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124401 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124438 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124482 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124519 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124563 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124601 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124636 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124679 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124730 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124774 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124823 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124862 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124908 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124952 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/124999 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/125036 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/125081 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/125081 (executing program)
2022/10/05 11:14:20 fetching corpus: 1837, signal 122284/125081 (executing program)
2022/10/05 11:14:22 starting 8 fuzzer processes
11:14:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1)
11:14:22 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @loopback, @mcast1, 0x0, 0xe5})
11:14:22 executing program 4:
fsmount(0xffffffffffffffff, 0x0, 0x94)
11:14:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r1, 0x301, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0)
[ 56.383082] audit: type=1400 audit(1664968462.530:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:14:22 executing program 3:
syz_io_uring_setup(0x2e0c, &(0x7f0000002400), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/189)
11:14:22 executing program 6:
syz_emit_ethernet(0x19, &(0x7f0000005800)={@empty, @remote, @val, {@x25}}, 0x0)
11:14:22 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x11648136fa120029)
11:14:22 executing program 7:
socketpair(0xa, 0x1, 0x6, &(0x7f0000000000))
[ 57.584258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 57.585843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 57.587207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 57.590365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 57.592494] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 57.593973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 57.605894] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 57.637432] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 57.638923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 57.640553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 57.643157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 57.644851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 57.646313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 57.651062] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 57.717337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 57.720122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 57.721774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 57.723720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 57.725143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 57.726553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 57.727716] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 57.729018] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 57.730168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 57.731416] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 57.733552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 57.734778] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 57.736047] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 57.737479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 57.739064] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 57.741597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 57.742546] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 57.744184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 57.746531] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 57.747728] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 57.748673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 57.750205] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 57.752100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 57.754514] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 57.755876] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 57.757620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 57.758893] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 57.762455] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 57.763367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 57.764404] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 57.765637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 57.766717] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 57.771408] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 57.772869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 57.776881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 57.778834] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 57.781352] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 57.786043] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 57.786090] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 57.799833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 57.820291] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 57.820962] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 59.671803] Bluetooth: hci0: command 0x0409 tx timeout
[ 59.672722] Bluetooth: hci1: command 0x0409 tx timeout
[ 59.799326] Bluetooth: hci2: command 0x0409 tx timeout
[ 59.800091] Bluetooth: hci4: command 0x0409 tx timeout
[ 59.863410] Bluetooth: hci7: command 0x0409 tx timeout
[ 59.864704] Bluetooth: hci5: command 0x0409 tx timeout
[ 59.865373] Bluetooth: hci6: command 0x0409 tx timeout
[ 59.991338] Bluetooth: hci3: command 0x0409 tx timeout
[ 61.719287] Bluetooth: hci1: command 0x041b tx timeout
[ 61.719814] Bluetooth: hci0: command 0x041b tx timeout
[ 61.847314] Bluetooth: hci4: command 0x041b tx timeout
[ 61.847710] Bluetooth: hci2: command 0x041b tx timeout
[ 61.911311] Bluetooth: hci6: command 0x041b tx timeout
[ 61.911705] Bluetooth: hci5: command 0x041b tx timeout
[ 61.912061] Bluetooth: hci7: command 0x041b tx timeout
[ 62.039329] Bluetooth: hci3: command 0x041b tx timeout
[ 63.767311] Bluetooth: hci0: command 0x040f tx timeout
[ 63.767900] Bluetooth: hci1: command 0x040f tx timeout
[ 63.895309] Bluetooth: hci2: command 0x040f tx timeout
[ 63.895891] Bluetooth: hci4: command 0x040f tx timeout
[ 63.959374] Bluetooth: hci7: command 0x040f tx timeout
[ 63.959994] Bluetooth: hci5: command 0x040f tx timeout
[ 63.960565] Bluetooth: hci6: command 0x040f tx timeout
[ 64.087335] Bluetooth: hci3: command 0x040f tx timeout
[ 65.815299] Bluetooth: hci1: command 0x0419 tx timeout
[ 65.815734] Bluetooth: hci0: command 0x0419 tx timeout
[ 65.943339] Bluetooth: hci4: command 0x0419 tx timeout
[ 65.943776] Bluetooth: hci2: command 0x0419 tx timeout
[ 66.007295] Bluetooth: hci6: command 0x0419 tx timeout
[ 66.007725] Bluetooth: hci5: command 0x0419 tx timeout
[ 66.008084] Bluetooth: hci7: command 0x0419 tx timeout
[ 66.135312] Bluetooth: hci3: command 0x0419 tx timeout
11:15:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r1, 0x301, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0)
11:15:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r1, 0x301, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0)
11:15:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r1, 0x301, 0x0, 0x0, {0xd}, [@HEADER={0x4}]}, 0x18}}, 0x0)
11:15:19 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, 0x0, 0x0, 0x0)
11:15:19 executing program 2:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000e00)={0x0, 0x0, 'hHl', 0x1})
[ 113.045371] Bluetooth: hci0: HCI_REQ-0x0401
11:15:19 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x11648136fa120029)
11:15:19 executing program 5:
fsmount(0xffffffffffffffff, 0x0, 0x11648136fa120029)
11:15:19 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @loopback, @mcast1, 0x0, 0xe5})
[ 114.337194] audit: type=1400 audit(1664968520.484:7): avc: denied { open } for pid=3853 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 114.338764] audit: type=1400 audit(1664968520.484:8): avc: denied { kernel } for pid=3853 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 114.366100] ------------[ cut here ]------------
[ 114.366133]
[ 114.366139] ======================================================
[ 114.366145] WARNING: possible circular locking dependency detected
[ 114.366152] 6.0.0-next-20221005 #1 Not tainted
[ 114.366163] ------------------------------------------------------
[ 114.366169] syz-executor.0/3854 is trying to acquire lock:
[ 114.366180] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 114.366249]
[ 114.366249] but task is already holding lock:
[ 114.366254] ffff88800f395420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 114.366301]
[ 114.366301] which lock already depends on the new lock.
[ 114.366301]
[ 114.366306]
[ 114.366306] the existing dependency chain (in reverse order) is:
[ 114.366312]
[ 114.366312] -> #3 (&ctx->lock){....}-{2:2}:
[ 114.366337] _raw_spin_lock+0x2a/0x40
[ 114.366362] __perf_event_task_sched_out+0x53b/0x18d0
[ 114.366382] __schedule+0xedd/0x2470
[ 114.366409] schedule+0xda/0x1b0
[ 114.366435] exit_to_user_mode_prepare+0x114/0x1a0
[ 114.366456] syscall_exit_to_user_mode+0x19/0x40
[ 114.366481] do_syscall_64+0x48/0x90
[ 114.366498] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 114.366523]
[ 114.366523] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 114.366548] _raw_spin_lock_nested+0x30/0x40
[ 114.366569] raw_spin_rq_lock_nested+0x1e/0x30
[ 114.366591] task_fork_fair+0x63/0x4d0
[ 114.366621] sched_cgroup_fork+0x3d0/0x540
[ 114.366647] copy_process+0x4183/0x6e20
[ 114.366666] kernel_clone+0xe7/0x890
[ 114.366684] user_mode_thread+0xad/0xf0
[ 114.366703] rest_init+0x24/0x250
[ 114.366725] arch_call_rest_init+0xf/0x14
[ 114.366759] start_kernel+0x4c6/0x4eb
[ 114.366790] secondary_startup_64_no_verify+0xe0/0xeb
[ 114.366815]
[ 114.366815] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 114.366839] _raw_spin_lock_irqsave+0x39/0x60
[ 114.366861] try_to_wake_up+0xab/0x1930
[ 114.366885] up+0x75/0xb0
[ 114.366912] __up_console_sem+0x6e/0x80
[ 114.366940] console_unlock+0x46a/0x590
[ 114.366969] vt_ioctl+0x2822/0x2ca0
[ 114.366990] tty_ioctl+0x785/0x16b0
[ 114.367009] __x64_sys_ioctl+0x19a/0x210
[ 114.367034] do_syscall_64+0x3b/0x90
[ 114.367051] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 114.367076]
[ 114.367076] -> #0 ((console_sem).lock){....}-{2:2}:
[ 114.367100] __lock_acquire+0x2a02/0x5e70
[ 114.367131] lock_acquire+0x1a2/0x530
[ 114.367160] _raw_spin_lock_irqsave+0x39/0x60
[ 114.367181] down_trylock+0xe/0x70
[ 114.367210] __down_trylock_console_sem+0x3b/0xd0
[ 114.367239] vprintk_emit+0x16b/0x560
[ 114.367269] vprintk+0x84/0xa0
[ 114.367298] _printk+0xba/0xf1
[ 114.367319] report_bug.cold+0x72/0xab
[ 114.367350] handle_bug+0x3c/0x70
[ 114.367367] exc_invalid_op+0x14/0x50
[ 114.367385] asm_exc_invalid_op+0x16/0x20
[ 114.367408] group_sched_out.part.0+0x2c7/0x460
[ 114.367441] ctx_sched_out+0x8f1/0xc10
[ 114.367471] __perf_event_task_sched_out+0x6d0/0x18d0
[ 114.367492] __schedule+0xedd/0x2470
[ 114.367518] schedule+0xda/0x1b0
[ 114.367544] exit_to_user_mode_prepare+0x114/0x1a0
[ 114.367564] syscall_exit_to_user_mode+0x19/0x40
[ 114.367589] do_syscall_64+0x48/0x90
[ 114.367606] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 114.367630]
[ 114.367630] other info that might help us debug this:
[ 114.367630]
[ 114.367635] Chain exists of:
[ 114.367635] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 114.367635]
[ 114.367662] Possible unsafe locking scenario:
[ 114.367662]
[ 114.367666] CPU0 CPU1
[ 114.367670] ---- ----
[ 114.367673] lock(&ctx->lock);
[ 114.367683] lock(&rq->__lock);
[ 114.367695] lock(&ctx->lock);
[ 114.367706] lock((console_sem).lock);
[ 114.367717]
[ 114.367717] *** DEADLOCK ***
[ 114.367717]
[ 114.367720] 2 locks held by syz-executor.0/3854:
[ 114.367732] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 114.367788] #1: ffff88800f395420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 114.367836]
[ 114.367836] stack backtrace:
[ 114.367841] CPU: 0 PID: 3854 Comm: syz-executor.0 Not tainted 6.0.0-next-20221005 #1
[ 114.367864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 114.367875] Call Trace:
[ 114.367880]
[ 114.367888] dump_stack_lvl+0x8b/0xb3
[ 114.367924] check_noncircular+0x263/0x2e0
[ 114.367955] ? format_decode+0x26c/0xb50
[ 114.367986] ? print_circular_bug+0x450/0x450
[ 114.368028] ? simple_strtoul+0x30/0x30
[ 114.368059] ? format_decode+0x26c/0xb50
[ 114.368093] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 114.368126] __lock_acquire+0x2a02/0x5e70
[ 114.368167] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 114.368209] lock_acquire+0x1a2/0x530
[ 114.368241] ? down_trylock+0xe/0x70
[ 114.368275] ? lock_release+0x750/0x750
[ 114.368313] ? vprintk+0x84/0xa0
[ 114.368347] _raw_spin_lock_irqsave+0x39/0x60
[ 114.368370] ? down_trylock+0xe/0x70
[ 114.368402] down_trylock+0xe/0x70
[ 114.368434] ? vprintk+0x84/0xa0
[ 114.368466] __down_trylock_console_sem+0x3b/0xd0
[ 114.368499] vprintk_emit+0x16b/0x560
[ 114.368534] vprintk+0x84/0xa0
[ 114.368567] _printk+0xba/0xf1
[ 114.368590] ? record_print_text.cold+0x16/0x16
[ 114.368621] ? report_bug.cold+0x66/0xab
[ 114.368657] ? group_sched_out.part.0+0x2c7/0x460
[ 114.368692] report_bug.cold+0x72/0xab
[ 114.368729] handle_bug+0x3c/0x70
[ 114.368748] exc_invalid_op+0x14/0x50
[ 114.368768] asm_exc_invalid_op+0x16/0x20
[ 114.368793] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 114.368831] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 114.368852] RSP: 0018:ffff88803df47c48 EFLAGS: 00010006
[ 114.368868] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 114.368882] RDX: ffff88800ff55040 RSI: ffffffff81566da7 RDI: 0000000000000005
[ 114.368897] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 114.368910] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800f395400
[ 114.368924] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[ 114.368945] ? group_sched_out.part.0+0x2c7/0x460
[ 114.368982] ? group_sched_out.part.0+0x2c7/0x460
[ 114.369018] ctx_sched_out+0x8f1/0xc10
[ 114.369054] __perf_event_task_sched_out+0x6d0/0x18d0
[ 114.369081] ? lock_is_held_type+0xd7/0x130
[ 114.369108] ? __perf_cgroup_move+0x160/0x160
[ 114.369127] ? set_next_entity+0x304/0x550
[ 114.369160] ? update_curr+0x267/0x740
[ 114.369194] ? lock_is_held_type+0xd7/0x130
[ 114.369221] __schedule+0xedd/0x2470
[ 114.369254] ? io_schedule_timeout+0x150/0x150
[ 114.369286] ? rcu_read_lock_sched_held+0x3e/0x80
[ 114.369323] schedule+0xda/0x1b0
[ 114.369352] exit_to_user_mode_prepare+0x114/0x1a0
[ 114.369376] syscall_exit_to_user_mode+0x19/0x40
[ 114.369402] do_syscall_64+0x48/0x90
[ 114.369421] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 114.369447] RIP: 0033:0x7f7f80e8bb19
[ 114.369462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 114.369482] RSP: 002b:00007f7f7e401218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 114.369502] RAX: 0000000000000001 RBX: 00007f7f80f9ef68 RCX: 00007f7f80e8bb19
[ 114.369516] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f80f9ef6c
[ 114.369529] RBP: 00007f7f80f9ef60 R08: 000000000000000e R09: 0000000000000000
[ 114.369543] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7f80f9ef6c
[ 114.369556] R13: 00007ffc991e039f R14: 00007f7f7e401300 R15: 0000000000022000
[ 114.369580]
[ 114.461118] WARNING: CPU: 0 PID: 3854 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 114.462227] Modules linked in:
[ 114.462622] CPU: 0 PID: 3854 Comm: syz-executor.0 Not tainted 6.0.0-next-20221005 #1
[ 114.463538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 114.464525] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 114.465190] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 114.467318] RSP: 0018:ffff88803df47c48 EFLAGS: 00010006
[ 114.467956] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 114.468807] RDX: ffff88800ff55040 RSI: ffffffff81566da7 RDI: 0000000000000005
[ 114.469647] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 114.470490] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800f395400
[ 114.471339] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002
[ 114.472189] FS: 00007f7f7e401700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 114.473139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 114.473833] CR2: 00007f1e3bbdf260 CR3: 000000003db22000 CR4: 0000000000350ef0
[ 114.474691] Call Trace:
[ 114.475005]
[ 114.475291] ctx_sched_out+0x8f1/0xc10
[ 114.475792] __perf_event_task_sched_out+0x6d0/0x18d0
[ 114.476437] ? lock_is_held_type+0xd7/0x130
[ 114.476969] ? __perf_cgroup_move+0x160/0x160
[ 114.477513] ? set_next_entity+0x304/0x550
[ 114.478044] ? update_curr+0x267/0x740
[ 114.478534] ? lock_is_held_type+0xd7/0x130
[ 114.479067] __schedule+0xedd/0x2470
[ 114.479544] ? io_schedule_timeout+0x150/0x150
[ 114.480120] ? rcu_read_lock_sched_held+0x3e/0x80
[ 114.480723] schedule+0xda/0x1b0
[ 114.481158] exit_to_user_mode_prepare+0x114/0x1a0
[ 114.481759] syscall_exit_to_user_mode+0x19/0x40
[ 114.482346] do_syscall_64+0x48/0x90
[ 114.482805] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 114.483434] RIP: 0033:0x7f7f80e8bb19
[ 114.483891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 114.486036] RSP: 002b:00007f7f7e401218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 114.486946] RAX: 0000000000000001 RBX: 00007f7f80f9ef68 RCX: 00007f7f80e8bb19
[ 114.487798] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f80f9ef6c
[ 114.488657] RBP: 00007f7f80f9ef60 R08: 000000000000000e R09: 0000000000000000
[ 114.489510] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7f80f9ef6c
[ 114.490359] R13: 00007ffc991e039f R14: 00007f7f7e401300 R15: 0000000000022000
[ 114.491221]
[ 114.491519] irq event stamp: 1056
[ 114.491938] hardirqs last enabled at (1055): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 114.493088] hardirqs last disabled at (1056): [] __schedule+0x1225/0x2470
[ 114.494102] softirqs last enabled at (1040): [] __irq_exit_rcu+0x11b/0x180
[ 114.495137] softirqs last disabled at (863): [] __irq_exit_rcu+0x11b/0x180
[ 114.496194] ---[ end trace 0000000000000000 ]---
[ 114.720123] audit: type=1400 audit(1664968520.866:9): avc: denied { read } for pid=3853 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 115.095290] Bluetooth: hci0: command 0x0401 tx timeout
[ 119.258999] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 119.261627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 119.263113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 119.267314] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 119.269752] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 119.271187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 119.274713] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 121.303317] Bluetooth: hci2: command 0x0409 tx timeout
[ 123.351323] Bluetooth: hci2: command 0x041b tx timeout
VM DIAGNOSIS:
11:15:20 Registers:
info registers vcpu 0
RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88803df47690
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001
R12=000000000000002d R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80
RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f7f7e401700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e3bbdf260 CR3=000000003db22000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f7f80f727c000007f7f80f727c8
XMM02=00007f7f80f727e000007f7f80f727c0 XMM03=00007f7f80f727c800007f7f80f727c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88803c3f2300 RCX=0000000000000000 RDX=ffff888020733580
RSI=ffffffff840f3613 RDI=ffff88803c3f2348 RBP=00007fa17f62bfff RSP=ffff88803dfc7908
R8 =0000000000000007 R9 =0000000000000000 R10=00007fa17f62bfff R11=0000000000000001
R12=0000000000000309 R13=0000000000000009 R14=dffffc0000000000 R15=ffff88803dfc7ce0
RIP=ffffffff840f3669 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005588bfb304c8 CR3=000000000ffc8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000