Warning: Permanently added '[localhost]:10300' (ECDSA) to the list of known hosts.
2022/09/14 11:28:16 fuzzer started
2022/09/14 11:28:16 dialing manager at localhost:33849
syzkaller login: [ 40.666495] cgroup: Unknown subsys name 'net'
[ 40.786028] cgroup: Unknown subsys name 'rlimit'
2022/09/14 11:28:31 syscalls: 2215
2022/09/14 11:28:31 code coverage: enabled
2022/09/14 11:28:31 comparison tracing: enabled
2022/09/14 11:28:31 extra coverage: enabled
2022/09/14 11:28:31 setuid sandbox: enabled
2022/09/14 11:28:31 namespace sandbox: enabled
2022/09/14 11:28:31 Android sandbox: enabled
2022/09/14 11:28:31 fault injection: enabled
2022/09/14 11:28:31 leak checking: enabled
2022/09/14 11:28:31 net packet injection: enabled
2022/09/14 11:28:31 net device setup: enabled
2022/09/14 11:28:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/14 11:28:31 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/14 11:28:31 USB emulation: enabled
2022/09/14 11:28:31 hci packet injection: enabled
2022/09/14 11:28:31 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914 )
2022/09/14 11:28:31 802.15.4 emulation: enabled
2022/09/14 11:28:31 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/14 11:28:32 fetching corpus: 50, signal 32312/35400 (executing program)
2022/09/14 11:28:32 fetching corpus: 100, signal 47008/50971 (executing program)
2022/09/14 11:28:32 fetching corpus: 150, signal 53940/58871 (executing program)
2022/09/14 11:28:32 fetching corpus: 200, signal 61055/66618 (executing program)
2022/09/14 11:28:32 fetching corpus: 250, signal 69144/75174 (executing program)
2022/09/14 11:28:32 fetching corpus: 300, signal 75956/82256 (executing program)
2022/09/14 11:28:33 fetching corpus: 349, signal 81050/87583 (executing program)
2022/09/14 11:28:33 fetching corpus: 399, signal 85736/92437 (executing program)
2022/09/14 11:28:33 fetching corpus: 449, signal 90681/97464 (executing program)
2022/09/14 11:28:33 fetching corpus: 499, signal 93220/100239 (executing program)
2022/09/14 11:28:33 fetching corpus: 549, signal 97300/104188 (executing program)
2022/09/14 11:28:34 fetching corpus: 599, signal 99699/106760 (executing program)
2022/09/14 11:28:34 fetching corpus: 649, signal 102054/109269 (executing program)
2022/09/14 11:28:34 fetching corpus: 699, signal 104632/111706 (executing program)
2022/09/14 11:28:34 fetching corpus: 749, signal 107055/114006 (executing program)
2022/09/14 11:28:34 fetching corpus: 799, signal 110078/116600 (executing program)
2022/09/14 11:28:34 fetching corpus: 849, signal 112910/119041 (executing program)
2022/09/14 11:28:34 fetching corpus: 899, signal 115314/121256 (executing program)
2022/09/14 11:28:35 fetching corpus: 949, signal 117163/122784 (executing program)
2022/09/14 11:28:35 fetching corpus: 999, signal 120219/125101 (executing program)
2022/09/14 11:28:35 fetching corpus: 1049, signal 122192/126599 (executing program)
2022/09/14 11:28:35 fetching corpus: 1099, signal 124957/128609 (executing program)
2022/09/14 11:28:35 fetching corpus: 1147, signal 127616/130395 (executing program)
2022/09/14 11:28:36 fetching corpus: 1196, signal 129291/131602 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132501 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132569 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132643 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132712 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132792 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132860 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132923 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/132998 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133081 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133151 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133224 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133295 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133371 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133445 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133533 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133620 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133688 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133749 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133821 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133900 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/133978 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134044 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134112 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134190 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134272 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134350 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134421 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134495 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134574 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134649 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134727 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134803 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134873 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/134961 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/135037 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/135071 (executing program)
2022/09/14 11:28:36 fetching corpus: 1235, signal 130651/135071 (executing program)
2022/09/14 11:28:39 starting 8 fuzzer processes
11:28:39 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4)
11:28:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
11:28:39 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="efffffff00000000180000", @ANYRES32, @ANYBLOB="060c0000000000002e2f66696c653000"])
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'})
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
getresgid(&(0x7f0000000180), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x100, 0x2a)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x6, 0x4, 0x9, 0x0, 0x1ff, 0x8040, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x4, 0x8}, 0x40408, 0x6, 0xb0d5, 0x4, 0x1f, 0x100, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x10000000008, 0x400080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
tee(0xffffffffffffffff, r1, 0x8, 0x2)
getpid()
11:28:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801002000400003000000000000008000297902a1f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e20202020202020202020100022eb70325132510000eb7032510300000000002e2e202020202020202020100022eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200022eb70325132510000eb70325104001a040000", 0x80, 0x2200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3200}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x4200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8200}], 0x0, &(0x7f0000010f00))
[ 63.223802] audit: type=1400 audit(1663154919.381:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:28:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180))
11:28:39 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000180))
11:28:39 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
11:28:39 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup(r2)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1)
[ 64.558690] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 64.560348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 64.562691] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 64.563880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 64.565393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.568051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 64.569285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 64.574603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 64.575693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 64.577760] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 64.578975] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 64.580396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 64.581547] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 64.597013] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 64.606799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 64.608876] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 64.609767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 64.612553] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 64.620975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 64.647731] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 64.649115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 64.649682] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 64.676686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 64.677900] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 64.679098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 64.681440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 64.685167] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 64.690302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.697477] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 64.698798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 64.704617] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 64.720585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 64.720719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.726718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 64.734472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.735096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 64.738910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 64.740578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 64.741102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 64.748747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 64.759399] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 64.760190] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 64.785872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 64.800257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 64.834593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 64.847531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 64.858584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 64.861090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 64.862625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 64.863920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 64.866768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 64.882169] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 64.887011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 64.961097] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 64.963150] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 64.994361] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 66.631710] Bluetooth: hci1: command 0x0409 tx timeout
[ 66.631709] Bluetooth: hci2: command 0x0409 tx timeout
[ 66.695276] Bluetooth: hci4: command 0x0409 tx timeout
[ 66.759417] Bluetooth: hci7: command 0x0409 tx timeout
[ 66.823424] Bluetooth: hci3: command 0x0409 tx timeout
[ 66.824320] Bluetooth: hci0: command 0x0409 tx timeout
[ 66.951316] Bluetooth: hci5: command 0x0409 tx timeout
[ 67.015949] Bluetooth: hci6: command 0x0409 tx timeout
[ 68.679386] Bluetooth: hci1: command 0x041b tx timeout
[ 68.682161] Bluetooth: hci2: command 0x041b tx timeout
[ 68.743311] Bluetooth: hci4: command 0x041b tx timeout
[ 68.807394] Bluetooth: hci7: command 0x041b tx timeout
[ 68.871518] Bluetooth: hci0: command 0x041b tx timeout
[ 68.872617] Bluetooth: hci3: command 0x041b tx timeout
[ 68.999360] Bluetooth: hci5: command 0x041b tx timeout
[ 69.063322] Bluetooth: hci6: command 0x041b tx timeout
[ 70.728325] Bluetooth: hci2: command 0x040f tx timeout
[ 70.728851] Bluetooth: hci1: command 0x040f tx timeout
[ 70.791302] Bluetooth: hci4: command 0x040f tx timeout
[ 70.855333] Bluetooth: hci7: command 0x040f tx timeout
[ 70.919348] Bluetooth: hci3: command 0x040f tx timeout
[ 70.919874] Bluetooth: hci0: command 0x040f tx timeout
[ 71.048329] Bluetooth: hci5: command 0x040f tx timeout
[ 71.111280] Bluetooth: hci6: command 0x040f tx timeout
[ 72.776286] Bluetooth: hci1: command 0x0419 tx timeout
[ 72.776763] Bluetooth: hci2: command 0x0419 tx timeout
[ 72.840263] Bluetooth: hci4: command 0x0419 tx timeout
[ 72.904304] Bluetooth: hci7: command 0x0419 tx timeout
[ 72.967339] Bluetooth: hci0: command 0x0419 tx timeout
[ 72.967980] Bluetooth: hci3: command 0x0419 tx timeout
[ 73.096398] Bluetooth: hci5: command 0x0419 tx timeout
[ 73.160323] Bluetooth: hci6: command 0x0419 tx timeout
[ 126.624859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 126.628936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 126.630470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 126.639570] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 126.644560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 126.646039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 126.654961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 126.655333] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 126.693490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 126.695198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 126.698617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 126.701039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 126.702956] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 126.704196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 126.705745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 126.705893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 126.714622] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 126.715625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 126.734521] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 126.734968] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 126.739348] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 126.741596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 126.746033] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 126.746038] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 126.766135] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 126.772681] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 126.774285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 126.786329] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 128.648310] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 128.711299] Bluetooth: hci0: command 0x0409 tx timeout
[ 128.775537] Bluetooth: hci6: command 0x0409 tx timeout
[ 128.776500] Bluetooth: hci3: command 0x0409 tx timeout
[ 128.840320] Bluetooth: hci5: command 0x0409 tx timeout
[ 130.759436] Bluetooth: hci0: command 0x041b tx timeout
[ 130.823374] Bluetooth: hci3: command 0x041b tx timeout
[ 130.826781] Bluetooth: hci6: command 0x041b tx timeout
[ 130.887343] Bluetooth: hci5: command 0x041b tx timeout
[ 132.808270] Bluetooth: hci0: command 0x040f tx timeout
[ 132.872281] Bluetooth: hci6: command 0x040f tx timeout
[ 132.872727] Bluetooth: hci3: command 0x040f tx timeout
[ 132.936341] Bluetooth: hci5: command 0x040f tx timeout
[ 133.063450] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 134.855378] Bluetooth: hci0: command 0x0419 tx timeout
[ 134.919313] Bluetooth: hci3: command 0x0419 tx timeout
[ 134.919786] Bluetooth: hci6: command 0x0419 tx timeout
[ 134.983301] Bluetooth: hci5: command 0x0419 tx timeout
[ 137.480369] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 141.831389] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 146.183332] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 150.535317] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 152.884205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 152.886536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 152.889501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 152.892607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 152.894367] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 152.895105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 152.901315] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 154.951317] Bluetooth: hci1: command 0x0409 tx timeout
[ 155.936673] audit: type=1400 audit(1663155012.093:7): avc: denied { open } for pid=5705 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 155.938562] audit: type=1400 audit(1663155012.094:8): avc: denied { kernel } for pid=5705 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 155.952461] ------------[ cut here ]------------
[ 155.952482]
[ 155.952485] ======================================================
[ 155.952489] WARNING: possible circular locking dependency detected
[ 155.952493] 6.0.0-rc5-next-20220914 #1 Not tainted
[ 155.952500] ------------------------------------------------------
[ 155.952503] syz-executor.7/5706 is trying to acquire lock:
[ 155.952509] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 155.952548]
[ 155.952548] but task is already holding lock:
[ 155.952551] ffff888031f33020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 155.952578]
[ 155.952578] which lock already depends on the new lock.
[ 155.952578]
[ 155.952582]
[ 155.952582] the existing dependency chain (in reverse order) is:
[ 155.952585]
[ 155.952585] -> #3 (&ctx->lock){....}-{2:2}:
[ 155.952599] _raw_spin_lock+0x2a/0x40
[ 155.952617] __perf_event_task_sched_out+0x53b/0x18d0
[ 155.952629] __schedule+0xedd/0x2470
[ 155.952640] schedule+0xda/0x1b0
[ 155.952650] exit_to_user_mode_prepare+0x114/0x1a0
[ 155.952672] syscall_exit_to_user_mode+0x19/0x40
[ 155.952690] do_syscall_64+0x48/0x90
[ 155.952704] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 155.952722]
[ 155.952722] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 155.952736] _raw_spin_lock_nested+0x30/0x40
[ 155.952751] raw_spin_rq_lock_nested+0x1e/0x30
[ 155.952764] task_fork_fair+0x63/0x4d0
[ 155.952781] sched_cgroup_fork+0x3d0/0x540
[ 155.952796] copy_process+0x4183/0x6e20
[ 155.952806] kernel_clone+0xe7/0x890
[ 155.952816] user_mode_thread+0xad/0xf0
[ 155.952826] rest_init+0x24/0x250
[ 155.952843] arch_call_rest_init+0xf/0x14
[ 155.952855] start_kernel+0x4c1/0x4e6
[ 155.952865] secondary_startup_64_no_verify+0xe0/0xeb
[ 155.952879]
[ 155.952879] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 155.952893] _raw_spin_lock_irqsave+0x39/0x60
[ 155.952909] try_to_wake_up+0xab/0x1920
[ 155.952922] up+0x75/0xb0
[ 155.952933] __up_console_sem+0x6e/0x80
[ 155.952950] console_unlock+0x46a/0x590
[ 155.952966] do_con_write+0xc05/0x1d50
[ 155.952978] con_write+0x21/0x40
[ 155.952987] n_tty_write+0x4d4/0xfe0
[ 155.953000] file_tty_write.constprop.0+0x49c/0x8f0
[ 155.953012] vfs_write+0x9c3/0xd90
[ 155.953031] ksys_write+0x127/0x250
[ 155.953048] do_syscall_64+0x3b/0x90
[ 155.953061] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 155.953079]
[ 155.953079] -> #0 ((console_sem).lock){....}-{2:2}:
[ 155.953093] __lock_acquire+0x2a02/0x5e70
[ 155.953110] lock_acquire+0x1a2/0x530
[ 155.953126] _raw_spin_lock_irqsave+0x39/0x60
[ 155.953141] down_trylock+0xe/0x70
[ 155.953153] __down_trylock_console_sem+0x3b/0xd0
[ 155.953170] vprintk_emit+0x16b/0x560
[ 155.953187] vprintk+0x84/0xa0
[ 155.953203] _printk+0xba/0xf1
[ 155.953221] report_bug.cold+0x72/0xab
[ 155.953234] handle_bug+0x3c/0x70
[ 155.953247] exc_invalid_op+0x14/0x50
[ 155.953260] asm_exc_invalid_op+0x16/0x20
[ 155.953277] group_sched_out.part.0+0x2c7/0x460
[ 155.953288] ctx_sched_out+0x8f1/0xc10
[ 155.953297] __perf_event_task_sched_out+0x6d0/0x18d0
[ 155.953310] __schedule+0xedd/0x2470
[ 155.953319] schedule+0xda/0x1b0
[ 155.953329] exit_to_user_mode_prepare+0x114/0x1a0
[ 155.953348] syscall_exit_to_user_mode+0x19/0x40
[ 155.953365] do_syscall_64+0x48/0x90
[ 155.953378] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 155.953396]
[ 155.953396] other info that might help us debug this:
[ 155.953396]
[ 155.953399] Chain exists of:
[ 155.953399] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 155.953399]
[ 155.953414] Possible unsafe locking scenario:
[ 155.953414]
[ 155.953416] CPU0 CPU1
[ 155.953418] ---- ----
[ 155.953421] lock(&ctx->lock);
[ 155.953426] lock(&rq->__lock);
[ 155.953433] lock(&ctx->lock);
[ 155.953439] lock((console_sem).lock);
[ 155.953445]
[ 155.953445] *** DEADLOCK ***
[ 155.953445]
[ 155.953447] 2 locks held by syz-executor.7/5706:
[ 155.953454] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 155.953479] #1: ffff888031f33020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 155.953507]
[ 155.953507] stack backtrace:
[ 155.953510] CPU: 1 PID: 5706 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220914 #1
[ 155.953522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 155.953530] Call Trace:
[ 155.953534]
[ 155.953538] dump_stack_lvl+0x8b/0xb3
[ 155.953553] check_noncircular+0x263/0x2e0
[ 155.953570] ? format_decode+0x26c/0xb50
[ 155.953585] ? print_circular_bug+0x450/0x450
[ 155.953602] ? enable_ptr_key_workfn+0x20/0x20
[ 155.953616] ? __lockdep_reset_lock+0x180/0x180
[ 155.953633] ? format_decode+0x26c/0xb50
[ 155.953649] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 155.953667] __lock_acquire+0x2a02/0x5e70
[ 155.953688] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 155.953711] lock_acquire+0x1a2/0x530
[ 155.953728] ? down_trylock+0xe/0x70
[ 155.953743] ? rcu_read_unlock+0x40/0x40
[ 155.953762] ? find_held_lock+0x2c/0x110
[ 155.953779] ? vprintk+0x84/0xa0
[ 155.953797] _raw_spin_lock_irqsave+0x39/0x60
[ 155.953813] ? down_trylock+0xe/0x70
[ 155.953827] down_trylock+0xe/0x70
[ 155.953840] ? vprintk+0x84/0xa0
[ 155.953857] __down_trylock_console_sem+0x3b/0xd0
[ 155.953875] vprintk_emit+0x16b/0x560
[ 155.953894] vprintk+0x84/0xa0
[ 155.953912] _printk+0xba/0xf1
[ 155.953930] ? record_print_text.cold+0x16/0x16
[ 155.953950] ? hrtimer_try_to_cancel+0x163/0x2c0
[ 155.953964] ? lock_downgrade+0x6d0/0x6d0
[ 155.953982] ? report_bug.cold+0x66/0xab
[ 155.953997] ? group_sched_out.part.0+0x2c7/0x460
[ 155.954008] report_bug.cold+0x72/0xab
[ 155.954023] handle_bug+0x3c/0x70
[ 155.954037] exc_invalid_op+0x14/0x50
[ 155.954053] asm_exc_invalid_op+0x16/0x20
[ 155.954074] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 155.954088] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 155.954099] RSP: 0018:ffff888030c67c48 EFLAGS: 00010006
[ 155.954109] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 155.954116] RDX: ffff88803ae21ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[ 155.954124] RBP: ffff88803dac05c8 R08: 0000000000000005 R09: 0000000000000001
[ 155.954132] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888031f33000
[ 155.954139] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002
[ 155.954150] ? group_sched_out.part.0+0x2c7/0x460
[ 155.954163] ? group_sched_out.part.0+0x2c7/0x460
[ 155.954176] ctx_sched_out+0x8f1/0xc10
[ 155.954188] __perf_event_task_sched_out+0x6d0/0x18d0
[ 155.954204] ? lock_is_held_type+0xd7/0x130
[ 155.954222] ? __perf_cgroup_move+0x160/0x160
[ 155.954234] ? set_next_entity+0x304/0x550
[ 155.954252] ? update_curr+0x267/0x740
[ 155.954287] ? lock_is_held_type+0xd7/0x130
[ 155.954305] __schedule+0xedd/0x2470
[ 155.954319] ? io_schedule_timeout+0x150/0x150
[ 155.954331] ? rcu_read_lock_sched_held+0x3e/0x80
[ 155.954353] schedule+0xda/0x1b0
[ 155.954364] exit_to_user_mode_prepare+0x114/0x1a0
[ 155.954385] syscall_exit_to_user_mode+0x19/0x40
[ 155.954403] do_syscall_64+0x48/0x90
[ 155.954417] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 155.954435] RIP: 0033:0x7fcae376cb19
[ 155.954444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 155.954455] RSP: 002b:00007fcae0ce2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 155.954466] RAX: 0000000000000001 RBX: 00007fcae387ff68 RCX: 00007fcae376cb19
[ 155.954473] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcae387ff6c
[ 155.954481] RBP: 00007fcae387ff60 R08: 000000000000000e R09: 0000000000000000
[ 155.954488] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcae387ff6c
[ 155.954495] R13: 00007fff551e67ff R14: 00007fcae0ce2300 R15: 0000000000022000
[ 155.954508]
[ 156.011352] WARNING: CPU: 1 PID: 5706 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 156.012017] Modules linked in:
[ 156.012263] CPU: 1 PID: 5706 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220914 #1
[ 156.012853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 156.013684] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 156.014084] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 156.015411] RSP: 0018:ffff888030c67c48 EFLAGS: 00010006
[ 156.015795] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 156.016322] RDX: ffff88803ae21ac0 RSI: ffffffff81566027 RDI: 0000000000000005
[ 156.016842] RBP: ffff88803dac05c8 R08: 0000000000000005 R09: 0000000000000001
[ 156.017357] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888031f33000
[ 156.017879] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002
[ 156.018417] FS: 00007fcae0ce2700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 156.018999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 156.019433] CR2: 0000001b2db24000 CR3: 000000001d6e0000 CR4: 0000000000350ee0
[ 156.019951] Call Trace:
[ 156.020143]
[ 156.020313] ctx_sched_out+0x8f1/0xc10
[ 156.020606] __perf_event_task_sched_out+0x6d0/0x18d0
[ 156.020988] ? lock_is_held_type+0xd7/0x130
[ 156.021314] ? __perf_cgroup_move+0x160/0x160
[ 156.021650] ? set_next_entity+0x304/0x550
[ 156.021966] ? update_curr+0x267/0x740
[ 156.022261] ? lock_is_held_type+0xd7/0x130
[ 156.022594] __schedule+0xedd/0x2470
[ 156.022871] ? io_schedule_timeout+0x150/0x150
[ 156.023209] ? rcu_read_lock_sched_held+0x3e/0x80
[ 156.023571] schedule+0xda/0x1b0
[ 156.023824] exit_to_user_mode_prepare+0x114/0x1a0
[ 156.024192] syscall_exit_to_user_mode+0x19/0x40
[ 156.024548] do_syscall_64+0x48/0x90
[ 156.024829] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 156.025217] RIP: 0033:0x7fcae376cb19
[ 156.025495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 156.026832] RSP: 002b:00007fcae0ce2218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 156.027389] RAX: 0000000000000001 RBX: 00007fcae387ff68 RCX: 00007fcae376cb19
[ 156.027909] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcae387ff6c
[ 156.028435] RBP: 00007fcae387ff60 R08: 000000000000000e R09: 0000000000000000
[ 156.028958] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fcae387ff6c
[ 156.029494] R13: 00007fff551e67ff R14: 00007fcae0ce2300 R15: 0000000000022000
[ 156.030024]
[ 156.030201] irq event stamp: 1872
[ 156.030468] hardirqs last enabled at (1871): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 156.031162] hardirqs last disabled at (1872): [] __schedule+0x1225/0x2470
[ 156.031767] softirqs last enabled at (1194): [] __irq_exit_rcu+0x11b/0x180
[ 156.032394] softirqs last disabled at (889): [] __irq_exit_rcu+0x11b/0x180
[ 156.033008] ---[ end trace 0000000000000000 ]---
[ 156.211942] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 156.249405] syz-executor.7 (5706) used greatest stack depth: 22872 bytes left
[ 156.999299] Bluetooth: hci1: command 0x041b tx timeout
[ 159.047279] Bluetooth: hci1: command 0x040f tx timeout
[ 161.095330] Bluetooth: hci1: command 0x0419 tx timeout
VM DIAGNOSIS:
11:30:12 Registers:
info registers vcpu 0
RAX=1ffff920000d321c RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=ffffffff8153be79 RDI=ffffc900006990e4 RBP=ffff88803e4bfd28 RSP=ffff88803e4bfc60
R8 =0000000000000006 R9 =00000000c000003e R10=0000000040000003 R11=0000000000000001
R12=00000000000000b4 R13=ffff88803e4bfd60 R14=00000000000000b4 R15=ffffc900006990e0
RIP=ffffffff8153be88 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f8e83e658c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c3c696368 CR3=000000001a5d4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM01=0000000000000000 0000000000000000 00ff000000000000 000000ff00ff00ff
YMM02=0000000000000000 0000000000000000 00ff000000000000 000000ff000000ff
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000
YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 2f003a7372657669 72642b0075256e00
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000002000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff888030c67698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001
R12=000000000000002e R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0
RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcae0ce2700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2db24000 CR3=000000001d6e0000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000