Warning: Permanently added '[localhost]:63089' (ECDSA) to the list of known hosts. 2022/09/12 13:46:12 fuzzer started 2022/09/12 13:46:13 dialing manager at localhost:38027 syzkaller login: [ 44.536062] cgroup: Unknown subsys name 'net' [ 44.639546] cgroup: Unknown subsys name 'rlimit' 2022/09/12 13:46:28 syscalls: 2215 2022/09/12 13:46:28 code coverage: enabled 2022/09/12 13:46:28 comparison tracing: enabled 2022/09/12 13:46:28 extra coverage: enabled 2022/09/12 13:46:28 setuid sandbox: enabled 2022/09/12 13:46:28 namespace sandbox: enabled 2022/09/12 13:46:28 Android sandbox: enabled 2022/09/12 13:46:28 fault injection: enabled 2022/09/12 13:46:28 leak checking: enabled 2022/09/12 13:46:28 net packet injection: enabled 2022/09/12 13:46:28 net device setup: enabled 2022/09/12 13:46:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 13:46:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 13:46:28 USB emulation: enabled 2022/09/12 13:46:28 hci packet injection: enabled 2022/09/12 13:46:28 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 13:46:28 802.15.4 emulation: enabled 2022/09/12 13:46:28 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 13:46:29 fetching corpus: 35, signal 23621/27047 (executing program) 2022/09/12 13:46:29 fetching corpus: 85, signal 41918/46287 (executing program) 2022/09/12 13:46:29 fetching corpus: 135, signal 58378/63353 (executing program) 2022/09/12 13:46:29 fetching corpus: 185, signal 63482/69381 (executing program) 2022/09/12 13:46:29 fetching corpus: 235, signal 72098/78485 (executing program) 2022/09/12 13:46:30 fetching corpus: 285, signal 79048/85828 (executing program) 2022/09/12 13:46:30 fetching corpus: 335, signal 82866/90210 (executing program) 2022/09/12 13:46:30 fetching corpus: 385, signal 87487/95226 (executing program) 2022/09/12 13:46:30 fetching corpus: 435, signal 91326/99413 (executing program) 2022/09/12 13:46:30 fetching corpus: 485, signal 95224/103575 (executing program) 2022/09/12 13:46:30 fetching corpus: 535, signal 98608/107195 (executing program) 2022/09/12 13:46:31 fetching corpus: 585, signal 102995/111578 (executing program) 2022/09/12 13:46:31 fetching corpus: 635, signal 106507/115142 (executing program) 2022/09/12 13:46:31 fetching corpus: 685, signal 110280/118850 (executing program) 2022/09/12 13:46:31 fetching corpus: 735, signal 113106/121601 (executing program) 2022/09/12 13:46:31 fetching corpus: 785, signal 116128/124504 (executing program) 2022/09/12 13:46:31 fetching corpus: 834, signal 118434/126727 (executing program) 2022/09/12 13:46:32 fetching corpus: 884, signal 121286/129322 (executing program) 2022/09/12 13:46:32 fetching corpus: 934, signal 123103/131101 (executing program) 2022/09/12 13:46:32 fetching corpus: 984, signal 124985/132921 (executing program) 2022/09/12 13:46:32 fetching corpus: 1034, signal 127141/134885 (executing program) 2022/09/12 13:46:32 fetching corpus: 1084, signal 128663/136292 (executing program) 2022/09/12 13:46:33 fetching corpus: 1134, signal 130499/137903 (executing program) 2022/09/12 13:46:33 fetching corpus: 1184, signal 132017/139195 (executing program) 2022/09/12 13:46:33 fetching corpus: 1234, signal 133494/140456 (executing program) 2022/09/12 13:46:33 fetching corpus: 1284, signal 135123/141881 (executing program) 2022/09/12 13:46:33 fetching corpus: 1334, signal 136580/143079 (executing program) 2022/09/12 13:46:33 fetching corpus: 1384, signal 138007/144238 (executing program) 2022/09/12 13:46:34 fetching corpus: 1434, signal 139456/145304 (executing program) 2022/09/12 13:46:34 fetching corpus: 1484, signal 140970/146417 (executing program) 2022/09/12 13:46:34 fetching corpus: 1534, signal 142087/147303 (executing program) 2022/09/12 13:46:34 fetching corpus: 1584, signal 143629/148515 (executing program) 2022/09/12 13:46:34 fetching corpus: 1634, signal 144872/149366 (executing program) 2022/09/12 13:46:34 fetching corpus: 1684, signal 145900/150040 (executing program) 2022/09/12 13:46:35 fetching corpus: 1734, signal 147539/151015 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/151622 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/151699 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/151788 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/151876 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/151959 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152047 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152152 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152240 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152325 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152411 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152495 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152580 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152673 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152764 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152842 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/152936 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153017 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153092 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153159 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153233 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153297 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153383 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153459 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153549 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153640 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153716 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153797 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153867 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/153955 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154042 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154118 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154191 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154281 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154367 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154447 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154520 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154603 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154688 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154785 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154812 (executing program) 2022/09/12 13:46:35 fetching corpus: 1763, signal 148508/154812 (executing program) 2022/09/12 13:46:38 starting 8 fuzzer processes 13:46:38 executing program 0: epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xd1e) 13:46:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x18}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = gettid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0) process_vm_readv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1b, &(0x7f0000000240)=[{&(0x7f0000012940)=""/102400, 0x19000}], 0x3, 0x0) 13:46:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "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"}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r3, 0x0, 0x80000009, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0x7f, 0x100}, {0x80, 0xffffffff}]}, 0x18, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000055040)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x3, "bc386eff17b8c9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) socketpair(0x9, 0x5, 0xffffffff, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x78, "de1053e7ccc9aa"}) fstat(0xffffffffffffffff, &(0x7f0000001140)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001980)={r7, r9, "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", "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"}) 13:46:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r0, r1, 0x0, 0xffff) 13:46:38 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000cd57232709655734ffff"], 0x22) 13:46:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={0x0, 0x0, 0x20000}, 0x20) [ 69.850103] audit: type=1400 audit(1662990398.526:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:46:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r5 = dup(0xffffffffffffffff) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='Q'], 0x6) bind(r5, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESDEC], 0x220) 13:46:38 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) [ 71.201327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.204454] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.206301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.207716] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.209047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.210042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.211636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.212826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.213825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.246065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.248579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.250360] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.251455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.252798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.256373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.257392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.258720] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.260052] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.261026] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.261290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.263891] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.265693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.268995] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.269085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.270111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.272691] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.274118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.275471] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.276597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.277530] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.279225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.284202] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.284282] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.293547] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.293637] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.313659] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.313703] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.317303] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.321739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.325072] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.325242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.326899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.329248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.331291] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.333510] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.335067] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.336644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.338224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.339514] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.341471] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.345421] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.346850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.350691] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.351428] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.351553] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.365984] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.329634] Bluetooth: hci0: command 0x0409 tx timeout [ 73.329952] Bluetooth: hci2: command 0x0409 tx timeout [ 73.330832] Bluetooth: hci3: command 0x0409 tx timeout [ 73.331227] Bluetooth: hci1: command 0x0409 tx timeout [ 73.393027] Bluetooth: hci6: command 0x0409 tx timeout [ 73.393106] Bluetooth: hci7: command 0x0409 tx timeout [ 73.394764] Bluetooth: hci4: command 0x0409 tx timeout [ 73.395835] Bluetooth: hci5: command 0x0409 tx timeout [ 75.378010] Bluetooth: hci1: command 0x041b tx timeout [ 75.378516] Bluetooth: hci3: command 0x041b tx timeout [ 75.378974] Bluetooth: hci2: command 0x041b tx timeout [ 75.379396] Bluetooth: hci0: command 0x041b tx timeout [ 75.440925] Bluetooth: hci5: command 0x041b tx timeout [ 75.441475] Bluetooth: hci4: command 0x041b tx timeout [ 75.442378] Bluetooth: hci7: command 0x041b tx timeout [ 75.442825] Bluetooth: hci6: command 0x041b tx timeout [ 77.425954] Bluetooth: hci0: command 0x040f tx timeout [ 77.426486] Bluetooth: hci2: command 0x040f tx timeout [ 77.427442] Bluetooth: hci3: command 0x040f tx timeout [ 77.429551] Bluetooth: hci1: command 0x040f tx timeout [ 77.489952] Bluetooth: hci6: command 0x040f tx timeout [ 77.491402] Bluetooth: hci7: command 0x040f tx timeout [ 77.491840] Bluetooth: hci4: command 0x040f tx timeout [ 77.492665] Bluetooth: hci5: command 0x040f tx timeout [ 79.472977] Bluetooth: hci1: command 0x0419 tx timeout [ 79.473457] Bluetooth: hci3: command 0x0419 tx timeout [ 79.473888] Bluetooth: hci2: command 0x0419 tx timeout [ 79.474323] Bluetooth: hci0: command 0x0419 tx timeout [ 79.536940] Bluetooth: hci5: command 0x0419 tx timeout [ 79.537416] Bluetooth: hci4: command 0x0419 tx timeout [ 79.537815] Bluetooth: hci7: command 0x0419 tx timeout [ 79.538251] Bluetooth: hci6: command 0x0419 tx timeout [ 127.637177] Bluetooth: hci4: Invalid handle: 0xcd00 > 0x0eff [ 127.638792] Bluetooth: hci4: Invalid handle: 0xcd00 > 0x0eff 13:47:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000cd57232709655734ffff"], 0x22) [ 127.761179] Bluetooth: hci4: Invalid handle: 0xcd00 > 0x0eff 13:47:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000cd57232709655734ffff"], 0x22) [ 127.874603] Bluetooth: hci4: Invalid handle: 0xcd00 > 0x0eff 13:47:36 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a0000cd57232709655734ffff"], 0x22) [ 127.991074] Bluetooth: hci4: Invalid handle: 0xcd00 > 0x0eff 13:47:36 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @empty}}}}}}, 0x0) 13:47:36 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @empty}}}}}}, 0x0) 13:47:36 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @empty}}}}}}, 0x0) 13:47:37 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @empty}}}}}}, 0x0) 13:47:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r0, r0, 0x0) [ 128.573168] audit: type=1400 audit(1662990457.249:7): avc: denied { open } for pid=3817 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.574532] audit: type=1400 audit(1662990457.250:8): avc: denied { kernel } for pid=3817 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.593372] ------------[ cut here ]------------ [ 128.593393] [ 128.593396] ====================================================== [ 128.593399] WARNING: possible circular locking dependency detected [ 128.593404] 6.0.0-rc5-next-20220912 #1 Not tainted [ 128.593410] ------------------------------------------------------ [ 128.593413] syz-executor.4/3818 is trying to acquire lock: [ 128.593419] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.593458] [ 128.593458] but task is already holding lock: [ 128.593461] ffff88801757ac20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.593489] [ 128.593489] which lock already depends on the new lock. [ 128.593489] [ 128.593492] [ 128.593492] the existing dependency chain (in reverse order) is: [ 128.593495] [ 128.593495] -> #3 (&ctx->lock){....}-{2:2}: [ 128.593509] _raw_spin_lock+0x2a/0x40 [ 128.593526] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.593538] __schedule+0xedd/0x2470 [ 128.593548] schedule+0xda/0x1b0 [ 128.593557] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.593578] syscall_exit_to_user_mode+0x19/0x40 [ 128.593595] do_syscall_64+0x48/0x90 [ 128.593609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.593626] [ 128.593626] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.593640] _raw_spin_lock_nested+0x30/0x40 [ 128.593654] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.593668] task_fork_fair+0x63/0x4d0 [ 128.593686] sched_cgroup_fork+0x3d0/0x540 [ 128.593700] copy_process+0x3f9e/0x6df0 [ 128.593710] kernel_clone+0xe7/0x890 [ 128.593720] user_mode_thread+0xad/0xf0 [ 128.593730] rest_init+0x24/0x250 [ 128.593746] arch_call_rest_init+0xf/0x14 [ 128.593766] start_kernel+0x4c1/0x4e6 [ 128.593783] secondary_startup_64_no_verify+0xe0/0xeb [ 128.593797] [ 128.593797] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.593811] _raw_spin_lock_irqsave+0x39/0x60 [ 128.593826] try_to_wake_up+0xab/0x1920 [ 128.593839] up+0x75/0xb0 [ 128.593854] __up_console_sem+0x6e/0x80 [ 128.593870] console_unlock+0x46a/0x590 [ 128.593886] con_install+0x14e/0x5d0 [ 128.593906] tty_init_dev.part.0+0xa0/0x610 [ 128.593919] tty_open+0xbc0/0x1370 [ 128.593930] chrdev_open+0x268/0x6e0 [ 128.593944] do_dentry_open+0x6ca/0x12b0 [ 128.593958] path_openat+0x19e1/0x2800 [ 128.593969] do_filp_open+0x1b6/0x410 [ 128.593980] do_sys_openat2+0x171/0x4c0 [ 128.593995] __x64_sys_openat+0x13f/0x1f0 [ 128.594010] do_syscall_64+0x3b/0x90 [ 128.594023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.594039] [ 128.594039] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.594053] __lock_acquire+0x2a02/0x5e70 [ 128.594070] lock_acquire+0x1a2/0x530 [ 128.594086] _raw_spin_lock_irqsave+0x39/0x60 [ 128.594101] down_trylock+0xe/0x70 [ 128.594113] __down_trylock_console_sem+0x3b/0xd0 [ 128.594130] vprintk_emit+0x16b/0x560 [ 128.594147] vprintk+0x84/0xa0 [ 128.594163] _printk+0xba/0xf1 [ 128.594181] report_bug.cold+0x72/0xab [ 128.594193] handle_bug+0x3c/0x70 [ 128.594206] exc_invalid_op+0x14/0x50 [ 128.594219] asm_exc_invalid_op+0x16/0x20 [ 128.594235] group_sched_out.part.0+0x2c7/0x460 [ 128.594245] ctx_sched_out+0x8f1/0xc10 [ 128.594255] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.594267] __schedule+0xedd/0x2470 [ 128.594276] schedule+0xda/0x1b0 [ 128.594286] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.594305] syscall_exit_to_user_mode+0x19/0x40 [ 128.594322] do_syscall_64+0x48/0x90 [ 128.594334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.594351] [ 128.594351] other info that might help us debug this: [ 128.594351] [ 128.594354] Chain exists of: [ 128.594354] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.594354] [ 128.594369] Possible unsafe locking scenario: [ 128.594369] [ 128.594371] CPU0 CPU1 [ 128.594374] ---- ---- [ 128.594376] lock(&ctx->lock); [ 128.594382] lock(&rq->__lock); [ 128.594388] lock(&ctx->lock); [ 128.594395] lock((console_sem).lock); [ 128.594400] [ 128.594400] *** DEADLOCK *** [ 128.594400] [ 128.594402] 2 locks held by syz-executor.4/3818: [ 128.594409] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.594434] #1: ffff88801757ac20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.594462] [ 128.594462] stack backtrace: [ 128.594464] CPU: 0 PID: 3818 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1 [ 128.594477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.594486] Call Trace: [ 128.594489] [ 128.594493] dump_stack_lvl+0x8b/0xb3 [ 128.594507] check_noncircular+0x263/0x2e0 [ 128.594524] ? format_decode+0x26c/0xb50 [ 128.594539] ? print_circular_bug+0x450/0x450 [ 128.594557] ? enable_ptr_key_workfn+0x20/0x20 [ 128.594571] ? format_decode+0x26c/0xb50 [ 128.594587] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.594605] __lock_acquire+0x2a02/0x5e70 [ 128.594626] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.594649] lock_acquire+0x1a2/0x530 [ 128.594672] ? down_trylock+0xe/0x70 [ 128.594687] ? rcu_read_unlock+0x40/0x40 [ 128.594708] ? vprintk+0x84/0xa0 [ 128.594726] _raw_spin_lock_irqsave+0x39/0x60 [ 128.594742] ? down_trylock+0xe/0x70 [ 128.594755] down_trylock+0xe/0x70 [ 128.594769] ? vprintk+0x84/0xa0 [ 128.594786] __down_trylock_console_sem+0x3b/0xd0 [ 128.594804] vprintk_emit+0x16b/0x560 [ 128.594823] vprintk+0x84/0xa0 [ 128.594841] _printk+0xba/0xf1 [ 128.594859] ? record_print_text.cold+0x16/0x16 [ 128.594881] ? report_bug.cold+0x66/0xab [ 128.594895] ? group_sched_out.part.0+0x2c7/0x460 [ 128.594906] report_bug.cold+0x72/0xab [ 128.594921] handle_bug+0x3c/0x70 [ 128.594934] exc_invalid_op+0x14/0x50 [ 128.594949] asm_exc_invalid_op+0x16/0x20 [ 128.594966] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.594979] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.594991] RSP: 0018:ffff88803e96fc48 EFLAGS: 00010006 [ 128.595000] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.595008] RDX: ffff888018bc9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.595016] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.595023] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88801757ac00 [ 128.595031] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.595042] ? group_sched_out.part.0+0x2c7/0x460 [ 128.595056] ? group_sched_out.part.0+0x2c7/0x460 [ 128.595068] ctx_sched_out+0x8f1/0xc10 [ 128.595081] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.595096] ? lock_is_held_type+0xd7/0x130 [ 128.595115] ? __perf_cgroup_move+0x160/0x160 [ 128.595127] ? set_next_entity+0x304/0x550 [ 128.595145] ? update_curr+0x267/0x740 [ 128.595164] ? lock_is_held_type+0xd7/0x130 [ 128.595182] __schedule+0xedd/0x2470 [ 128.595195] ? io_schedule_timeout+0x150/0x150 [ 128.595207] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.595228] schedule+0xda/0x1b0 [ 128.595239] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.595260] syscall_exit_to_user_mode+0x19/0x40 [ 128.595278] do_syscall_64+0x48/0x90 [ 128.595292] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.595309] RIP: 0033:0x7f4dae23ab19 [ 128.595318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.595329] RSP: 002b:00007f4dab7b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.595340] RAX: 0000000000000001 RBX: 00007f4dae34df68 RCX: 00007f4dae23ab19 [ 128.595347] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4dae34df6c [ 128.595355] RBP: 00007f4dae34df60 R08: 000000000000000e R09: 0000000000000000 [ 128.595362] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4dae34df6c [ 128.595369] R13: 00007fff38b9ad1f R14: 00007f4dab7b0300 R15: 0000000000022000 [ 128.595382] [ 128.646693] WARNING: CPU: 0 PID: 3818 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.647297] Modules linked in: [ 128.647513] CPU: 0 PID: 3818 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1 [ 128.648039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.648769] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.649128] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.650299] RSP: 0018:ffff88803e96fc48 EFLAGS: 00010006 [ 128.650651] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.651126] RDX: ffff888018bc9ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.651590] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.652065] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88801757ac00 [ 128.652534] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.653008] FS: 00007f4dab7b0700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.653532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.653917] CR2: 00007f3b2679d368 CR3: 0000000015f00000 CR4: 0000000000350ef0 [ 128.654385] Call Trace: [ 128.654558] [ 128.654725] ctx_sched_out+0x8f1/0xc10 [ 128.654996] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.655339] ? lock_is_held_type+0xd7/0x130 [ 128.655632] ? __perf_cgroup_move+0x160/0x160 [ 128.655936] ? set_next_entity+0x304/0x550 [ 128.656227] ? update_curr+0x267/0x740 [ 128.656498] ? lock_is_held_type+0xd7/0x130 [ 128.656795] __schedule+0xedd/0x2470 [ 128.657053] ? io_schedule_timeout+0x150/0x150 [ 128.657361] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.657694] schedule+0xda/0x1b0 [ 128.657925] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.658259] syscall_exit_to_user_mode+0x19/0x40 [ 128.658581] do_syscall_64+0x48/0x90 [ 128.658844] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.659194] RIP: 0033:0x7f4dae23ab19 [ 128.659446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.660615] RSP: 002b:00007f4dab7b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.661108] RAX: 0000000000000001 RBX: 00007f4dae34df68 RCX: 00007f4dae23ab19 [ 128.661573] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4dae34df6c [ 128.662038] RBP: 00007f4dae34df60 R08: 000000000000000e R09: 0000000000000000 [ 128.662506] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4dae34df6c [ 128.662985] R13: 00007fff38b9ad1f R14: 00007f4dab7b0300 R15: 0000000000022000 [ 128.663458] [ 128.663619] irq event stamp: 718 [ 128.663845] hardirqs last enabled at (717): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.664458] hardirqs last disabled at (718): [] __schedule+0x1225/0x2470 [ 128.665002] softirqs last enabled at (282): [] __irq_exit_rcu+0x11b/0x180 [ 128.665559] softirqs last disabled at (273): [] __irq_exit_rcu+0x11b/0x180 [ 128.666114] ---[ end trace 0000000000000000 ]--- [ 129.516319] audit: type=1400 audit(1662990458.193:9): avc: denied { write } for pid=3896 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.384919] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 134.385022] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 134.386951] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 134.387948] Bluetooth: hci1: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 13:47:37 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803e96f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4dab7b0700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3b2679d368 CR3=0000000015f00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4dae3217c0 00007f4dae3217c8 YMM02=0000000000000000 0000000000000000 00007f4dae3217e0 00007f4dae3217c0 YMM03=0000000000000000 0000000000000000 00007f4dae3217c8 00007f4dae3217c0 YMM04=0000000000000000 0000000000000000 ffffffffffffff00 ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff87056700 RBX=0000000000000001 RCX=0000000000000001 RDX=dffffc0000000000 RSI=ffff88801c0c7c20 RDI=0000000000000001 RBP=ffff88801c0c0000 RSP=ffff88801c0c7538 R8 =ffffffff85eca174 R9 =ffffffff85eca178 R10=ffffed1003818ec6 R11=ffff88801c0c7608 R12=ffff88801c0c7609 R13=ffff88801c0c7628 R14=ffff88801c0c75c8 R15=0000000000000001 RIP=ffffffff81203864 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f53c98bd610 CR3=000000000f44a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000