Warning: Permanently added '[localhost]:56811' (ECDSA) to the list of known hosts.
2022/09/15 12:10:04 fuzzer started
2022/09/15 12:10:04 dialing manager at localhost:36559
syzkaller login: [ 40.822334] cgroup: Unknown subsys name 'net'
[ 40.959448] cgroup: Unknown subsys name 'rlimit'
2022/09/15 12:10:19 syscalls: 2215
2022/09/15 12:10:19 code coverage: enabled
2022/09/15 12:10:19 comparison tracing: enabled
2022/09/15 12:10:19 extra coverage: enabled
2022/09/15 12:10:19 setuid sandbox: enabled
2022/09/15 12:10:19 namespace sandbox: enabled
2022/09/15 12:10:19 Android sandbox: enabled
2022/09/15 12:10:19 fault injection: enabled
2022/09/15 12:10:19 leak checking: enabled
2022/09/15 12:10:19 net packet injection: enabled
2022/09/15 12:10:19 net device setup: enabled
2022/09/15 12:10:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/15 12:10:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/15 12:10:19 USB emulation: enabled
2022/09/15 12:10:19 hci packet injection: enabled
2022/09/15 12:10:19 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915 )
2022/09/15 12:10:19 802.15.4 emulation: enabled
2022/09/15 12:10:19 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/15 12:10:19 fetching corpus: 43, signal 24864/28324 (executing program)
2022/09/15 12:10:19 fetching corpus: 92, signal 36513/41312 (executing program)
2022/09/15 12:10:19 fetching corpus: 142, signal 46306/52234 (executing program)
2022/09/15 12:10:19 fetching corpus: 192, signal 51179/58344 (executing program)
2022/09/15 12:10:20 fetching corpus: 242, signal 61247/69180 (executing program)
2022/09/15 12:10:20 fetching corpus: 291, signal 70143/78822 (executing program)
2022/09/15 12:10:20 fetching corpus: 340, signal 75636/85094 (executing program)
2022/09/15 12:10:20 fetching corpus: 388, signal 81260/91380 (executing program)
2022/09/15 12:10:20 fetching corpus: 436, signal 85242/96078 (executing program)
2022/09/15 12:10:20 fetching corpus: 483, signal 88559/100115 (executing program)
2022/09/15 12:10:20 fetching corpus: 533, signal 92817/104905 (executing program)
2022/09/15 12:10:21 fetching corpus: 581, signal 96257/108920 (executing program)
2022/09/15 12:10:21 fetching corpus: 629, signal 98812/112115 (executing program)
2022/09/15 12:10:21 fetching corpus: 676, signal 101487/115328 (executing program)
2022/09/15 12:10:21 fetching corpus: 726, signal 103537/117957 (executing program)
2022/09/15 12:10:21 fetching corpus: 776, signal 105929/120899 (executing program)
2022/09/15 12:10:21 fetching corpus: 825, signal 108341/123783 (executing program)
2022/09/15 12:10:21 fetching corpus: 875, signal 110249/126129 (executing program)
2022/09/15 12:10:21 fetching corpus: 925, signal 112594/128796 (executing program)
2022/09/15 12:10:22 fetching corpus: 975, signal 115304/131739 (executing program)
2022/09/15 12:10:22 fetching corpus: 1024, signal 117614/134317 (executing program)
2022/09/15 12:10:22 fetching corpus: 1074, signal 120363/137193 (executing program)
2022/09/15 12:10:22 fetching corpus: 1124, signal 122874/139785 (executing program)
2022/09/15 12:10:22 fetching corpus: 1173, signal 124837/141981 (executing program)
2022/09/15 12:10:22 fetching corpus: 1223, signal 127396/144691 (executing program)
2022/09/15 12:10:22 fetching corpus: 1273, signal 129455/146780 (executing program)
2022/09/15 12:10:23 fetching corpus: 1323, signal 131327/148742 (executing program)
2022/09/15 12:10:23 fetching corpus: 1372, signal 133125/150628 (executing program)
2022/09/15 12:10:23 fetching corpus: 1422, signal 134799/152311 (executing program)
2022/09/15 12:10:23 fetching corpus: 1472, signal 136185/153835 (executing program)
2022/09/15 12:10:23 fetching corpus: 1522, signal 138071/155715 (executing program)
2022/09/15 12:10:23 fetching corpus: 1572, signal 139367/157145 (executing program)
2022/09/15 12:10:23 fetching corpus: 1622, signal 140686/158526 (executing program)
2022/09/15 12:10:24 fetching corpus: 1672, signal 141951/159902 (executing program)
2022/09/15 12:10:24 fetching corpus: 1722, signal 143440/161331 (executing program)
2022/09/15 12:10:24 fetching corpus: 1772, signal 144241/162300 (executing program)
2022/09/15 12:10:24 fetching corpus: 1822, signal 146107/164157 (executing program)
2022/09/15 12:10:24 fetching corpus: 1872, signal 148338/166247 (executing program)
2022/09/15 12:10:24 fetching corpus: 1922, signal 149759/167526 (executing program)
2022/09/15 12:10:24 fetching corpus: 1972, signal 150695/168496 (executing program)
2022/09/15 12:10:25 fetching corpus: 2022, signal 152118/169689 (executing program)
2022/09/15 12:10:25 fetching corpus: 2072, signal 153334/170741 (executing program)
2022/09/15 12:10:25 fetching corpus: 2122, signal 155717/172410 (executing program)
2022/09/15 12:10:25 fetching corpus: 2172, signal 157169/173553 (executing program)
2022/09/15 12:10:25 fetching corpus: 2222, signal 158224/174451 (executing program)
2022/09/15 12:10:25 fetching corpus: 2272, signal 159045/175164 (executing program)
2022/09/15 12:10:25 fetching corpus: 2322, signal 160022/175974 (executing program)
2022/09/15 12:10:26 fetching corpus: 2372, signal 161454/177040 (executing program)
2022/09/15 12:10:26 fetching corpus: 2422, signal 162418/177889 (executing program)
2022/09/15 12:10:26 fetching corpus: 2472, signal 163632/178776 (executing program)
2022/09/15 12:10:26 fetching corpus: 2522, signal 164863/179670 (executing program)
2022/09/15 12:10:26 fetching corpus: 2572, signal 165964/180482 (executing program)
2022/09/15 12:10:26 fetching corpus: 2622, signal 167083/181233 (executing program)
2022/09/15 12:10:26 fetching corpus: 2672, signal 168454/182310 (executing program)
2022/09/15 12:10:27 fetching corpus: 2722, signal 169196/182861 (executing program)
2022/09/15 12:10:27 fetching corpus: 2772, signal 170550/183702 (executing program)
2022/09/15 12:10:27 fetching corpus: 2822, signal 171451/184251 (executing program)
2022/09/15 12:10:27 fetching corpus: 2872, signal 172297/184803 (executing program)
2022/09/15 12:10:27 fetching corpus: 2922, signal 173018/185268 (executing program)
2022/09/15 12:10:27 fetching corpus: 2972, signal 174445/185938 (executing program)
2022/09/15 12:10:27 fetching corpus: 3022, signal 175324/186424 (executing program)
2022/09/15 12:10:27 fetching corpus: 3072, signal 176210/186912 (executing program)
2022/09/15 12:10:28 fetching corpus: 3122, signal 177019/187346 (executing program)
2022/09/15 12:10:28 fetching corpus: 3172, signal 178181/187881 (executing program)
2022/09/15 12:10:28 fetching corpus: 3222, signal 179191/188342 (executing program)
2022/09/15 12:10:28 fetching corpus: 3272, signal 179874/188670 (executing program)
2022/09/15 12:10:28 fetching corpus: 3322, signal 180561/188963 (executing program)
2022/09/15 12:10:28 fetching corpus: 3372, signal 181359/189307 (executing program)
2022/09/15 12:10:28 fetching corpus: 3422, signal 182456/189668 (executing program)
2022/09/15 12:10:29 fetching corpus: 3472, signal 183805/190084 (executing program)
2022/09/15 12:10:29 fetching corpus: 3522, signal 185041/190494 (executing program)
2022/09/15 12:10:29 fetching corpus: 3572, signal 185864/190729 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191054 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191109 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191161 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191224 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191285 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191352 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191421 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191487 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191550 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191622 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191693 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191766 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191830 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191896 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/191954 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/192019 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/192080 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/192158 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/192193 (executing program)
2022/09/15 12:10:29 fetching corpus: 3609, signal 186384/192193 (executing program)
2022/09/15 12:10:32 starting 8 fuzzer processes
12:10:32 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280))
12:10:32 executing program 1:
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
12:10:32 executing program 2:
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
12:10:32 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0xc}})
12:10:32 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
[ 68.363906] audit: type=1400 audit(1663243832.411:6): avc: denied { execmem } for pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:10:32 executing program 7:
unlinkat(0xffffffffffffffff, 0x0, 0x200)
12:10:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
12:10:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0})
[ 69.797187] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 69.799780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 69.801199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 69.802715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.803996] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 69.805619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 69.806767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 69.807831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 69.809078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.810305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 69.811652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 69.812968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 69.814149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 69.815322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.816459] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 69.821074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 69.823652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 69.824953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 69.825977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 69.827329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.828343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 69.830677] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 69.831983] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 69.833252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 69.834305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 69.835356] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 69.836726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 69.837919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 69.839194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 69.840233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 69.841271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 69.849151] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 69.850576] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 69.855311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 69.861352] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 69.864480] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 69.865325] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 69.870256] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 69.871402] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 69.873883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 69.876812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 69.895546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 69.897022] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 69.899526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 69.905357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 69.906830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 69.908267] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 69.919369] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 69.921344] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 69.927708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 69.929369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 69.934147] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 69.938386] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 69.938609] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 69.943011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 69.949297] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 71.888717] Bluetooth: hci0: command 0x0409 tx timeout
[ 71.952130] Bluetooth: hci3: command 0x0409 tx timeout
[ 71.952928] Bluetooth: hci5: command 0x0409 tx timeout
[ 71.953081] Bluetooth: hci6: command 0x0409 tx timeout
[ 71.953723] Bluetooth: hci1: command 0x0409 tx timeout
[ 71.955326] Bluetooth: hci4: command 0x0409 tx timeout
[ 72.018050] Bluetooth: hci7: command 0x0409 tx timeout
[ 72.019005] Bluetooth: hci2: command 0x0409 tx timeout
[ 73.937075] Bluetooth: hci0: command 0x041b tx timeout
[ 74.001171] Bluetooth: hci4: command 0x041b tx timeout
[ 74.003016] Bluetooth: hci1: command 0x041b tx timeout
[ 74.003494] Bluetooth: hci6: command 0x041b tx timeout
[ 74.003931] Bluetooth: hci5: command 0x041b tx timeout
[ 74.005252] Bluetooth: hci3: command 0x041b tx timeout
[ 74.065080] Bluetooth: hci2: command 0x041b tx timeout
[ 74.065580] Bluetooth: hci7: command 0x041b tx timeout
[ 75.985105] Bluetooth: hci0: command 0x040f tx timeout
[ 76.049152] Bluetooth: hci3: command 0x040f tx timeout
[ 76.049924] Bluetooth: hci5: command 0x040f tx timeout
[ 76.050400] Bluetooth: hci6: command 0x040f tx timeout
[ 76.050821] Bluetooth: hci1: command 0x040f tx timeout
[ 76.052797] Bluetooth: hci4: command 0x040f tx timeout
[ 76.113607] Bluetooth: hci7: command 0x040f tx timeout
[ 76.114122] Bluetooth: hci2: command 0x040f tx timeout
[ 78.032088] Bluetooth: hci0: command 0x0419 tx timeout
[ 78.096159] Bluetooth: hci4: command 0x0419 tx timeout
[ 78.096864] Bluetooth: hci1: command 0x0419 tx timeout
[ 78.098630] Bluetooth: hci6: command 0x0419 tx timeout
[ 78.099304] Bluetooth: hci5: command 0x0419 tx timeout
[ 78.099943] Bluetooth: hci3: command 0x0419 tx timeout
[ 78.161133] Bluetooth: hci2: command 0x0419 tx timeout
[ 78.161896] Bluetooth: hci7: command 0x0419 tx timeout
[ 127.412534] audit: type=1400 audit(1663243891.460:7): avc: denied { open } for pid=3920 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 127.415527] audit: type=1400 audit(1663243891.460:8): avc: denied { kernel } for pid=3920 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 127.422612] ------------[ cut here ]------------
[ 127.422635]
[ 127.422639] ======================================================
[ 127.422643] WARNING: possible circular locking dependency detected
[ 127.422647] 6.0.0-rc5-next-20220915 #1 Not tainted
[ 127.422654] ------------------------------------------------------
[ 127.422657] syz-executor.6/3924 is trying to acquire lock:
[ 127.422663] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 127.422702]
[ 127.422702] but task is already holding lock:
[ 127.422705] ffff88800ef22c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 127.422733]
[ 127.422733] which lock already depends on the new lock.
[ 127.422733]
[ 127.422736]
[ 127.422736] the existing dependency chain (in reverse order) is:
[ 127.422740]
[ 127.422740] -> #3 (&ctx->lock){....}-{2:2}:
[ 127.422754] _raw_spin_lock+0x2a/0x40
[ 127.422771] __perf_event_task_sched_out+0x53b/0x18d0
[ 127.422784] __schedule+0xedd/0x2470
[ 127.422794] schedule+0xda/0x1b0
[ 127.422804] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.422824] syscall_exit_to_user_mode+0x19/0x40
[ 127.422842] do_syscall_64+0x48/0x90
[ 127.422856] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.422874]
[ 127.422874] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 127.422888] _raw_spin_lock_nested+0x30/0x40
[ 127.422903] raw_spin_rq_lock_nested+0x1e/0x30
[ 127.422916] task_fork_fair+0x63/0x4d0
[ 127.422933] sched_cgroup_fork+0x3d0/0x540
[ 127.422965] copy_process+0x4183/0x6e20
[ 127.422976] kernel_clone+0xe7/0x890
[ 127.422985] user_mode_thread+0xad/0xf0
[ 127.422996] rest_init+0x24/0x250
[ 127.423011] arch_call_rest_init+0xf/0x14
[ 127.423027] start_kernel+0x4c1/0x4e6
[ 127.423037] secondary_startup_64_no_verify+0xe0/0xeb
[ 127.423052]
[ 127.423052] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 127.423065] _raw_spin_lock_irqsave+0x39/0x60
[ 127.423080] try_to_wake_up+0xab/0x1920
[ 127.423093] up+0x75/0xb0
[ 127.423104] __up_console_sem+0x6e/0x80
[ 127.423120] console_unlock+0x46a/0x590
[ 127.423136] do_con_write+0xc05/0x1d50
[ 127.423148] con_write+0x21/0x40
[ 127.423158] n_tty_write+0x4d4/0xfe0
[ 127.423171] file_tty_write.constprop.0+0x49c/0x8f0
[ 127.423183] vfs_write+0x9c3/0xd90
[ 127.423201] ksys_write+0x127/0x250
[ 127.423218] do_syscall_64+0x3b/0x90
[ 127.423231] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.423248]
[ 127.423248] -> #0 ((console_sem).lock){....}-{2:2}:
[ 127.423262] __lock_acquire+0x2a02/0x5e70
[ 127.423278] lock_acquire+0x1a2/0x530
[ 127.423293] _raw_spin_lock_irqsave+0x39/0x60
[ 127.423308] down_trylock+0xe/0x70
[ 127.423320] __down_trylock_console_sem+0x3b/0xd0
[ 127.423336] vprintk_emit+0x16b/0x560
[ 127.423352] vprintk+0x84/0xa0
[ 127.423367] _printk+0xba/0xf1
[ 127.423385] report_bug.cold+0x72/0xab
[ 127.423398] handle_bug+0x3c/0x70
[ 127.423410] exc_invalid_op+0x14/0x50
[ 127.423424] asm_exc_invalid_op+0x16/0x20
[ 127.423440] group_sched_out.part.0+0x2c7/0x460
[ 127.423450] ctx_sched_out+0x8f1/0xc10
[ 127.423460] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.423472] __schedule+0xedd/0x2470
[ 127.423482] schedule+0xda/0x1b0
[ 127.423491] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.423510] syscall_exit_to_user_mode+0x19/0x40
[ 127.423526] do_syscall_64+0x48/0x90
[ 127.423539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.423556]
[ 127.423556] other info that might help us debug this:
[ 127.423556]
[ 127.423559] Chain exists of:
[ 127.423559] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 127.423559]
[ 127.423574] Possible unsafe locking scenario:
[ 127.423574]
[ 127.423576] CPU0 CPU1
[ 127.423579] ---- ----
[ 127.423581] lock(&ctx->lock);
[ 127.423587] lock(&rq->__lock);
[ 127.423593] lock(&ctx->lock);
[ 127.423599] lock((console_sem).lock);
[ 127.423605]
[ 127.423605] *** DEADLOCK ***
[ 127.423605]
[ 127.423607] 2 locks held by syz-executor.6/3924:
[ 127.423614] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 127.423640] #1: ffff88800ef22c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 127.423667]
[ 127.423667] stack backtrace:
[ 127.423670] CPU: 0 PID: 3924 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220915 #1
[ 127.423683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 127.423691] Call Trace:
[ 127.423695]
[ 127.423699] dump_stack_lvl+0x8b/0xb3
[ 127.423715] check_noncircular+0x263/0x2e0
[ 127.423731] ? format_decode+0x26c/0xb50
[ 127.423747] ? print_circular_bug+0x450/0x450
[ 127.423764] ? enable_ptr_key_workfn+0x20/0x20
[ 127.423779] ? format_decode+0x26c/0xb50
[ 127.423796] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 127.423814] __lock_acquire+0x2a02/0x5e70
[ 127.423836] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 127.423854] ? __mutex_add_waiter+0x120/0x120
[ 127.423874] lock_acquire+0x1a2/0x530
[ 127.423890] ? down_trylock+0xe/0x70
[ 127.423905] ? rcu_read_unlock+0x40/0x40
[ 127.423927] ? vprintk+0x84/0xa0
[ 127.423945] _raw_spin_lock_irqsave+0x39/0x60
[ 127.423960] ? down_trylock+0xe/0x70
[ 127.423974] down_trylock+0xe/0x70
[ 127.423987] ? vprintk+0x84/0xa0
[ 127.424003] __down_trylock_console_sem+0x3b/0xd0
[ 127.424021] vprintk_emit+0x16b/0x560
[ 127.424040] vprintk+0x84/0xa0
[ 127.424057] _printk+0xba/0xf1
[ 127.424075] ? record_print_text.cold+0x16/0x16
[ 127.424098] ? report_bug.cold+0x66/0xab
[ 127.424113] ? group_sched_out.part.0+0x2c7/0x460
[ 127.424124] report_bug.cold+0x72/0xab
[ 127.424140] handle_bug+0x3c/0x70
[ 127.424154] exc_invalid_op+0x14/0x50
[ 127.424168] asm_exc_invalid_op+0x16/0x20
[ 127.424185] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 127.424198] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 127.424210] RSP: 0018:ffff88803fac7c48 EFLAGS: 00010006
[ 127.424219] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 127.424226] RDX: ffff88801f1c0000 RSI: ffffffff81566027 RDI: 0000000000000005
[ 127.424234] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[ 127.424242] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800ef22c00
[ 127.424249] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002
[ 127.424262] ? group_sched_out.part.0+0x2c7/0x460
[ 127.424275] ? group_sched_out.part.0+0x2c7/0x460
[ 127.424288] ctx_sched_out+0x8f1/0xc10
[ 127.424302] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.424318] ? lock_is_held_type+0xd7/0x130
[ 127.424337] ? __perf_cgroup_move+0x160/0x160
[ 127.424348] ? set_next_entity+0x304/0x550
[ 127.424366] ? update_curr+0x267/0x740
[ 127.424384] ? lock_is_held_type+0xd7/0x130
[ 127.424403] __schedule+0xedd/0x2470
[ 127.424418] ? io_schedule_timeout+0x150/0x150
[ 127.424431] ? __x64_sys_futex_time32+0x480/0x480
[ 127.424446] schedule+0xda/0x1b0
[ 127.424458] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.424478] syscall_exit_to_user_mode+0x19/0x40
[ 127.424496] do_syscall_64+0x48/0x90
[ 127.424510] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.424528] RIP: 0033:0x7fcc2f674b19
[ 127.424536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 127.424547] RSP: 002b:00007fcc2cbea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 127.424558] RAX: 0000000000000001 RBX: 00007fcc2f787f68 RCX: 00007fcc2f674b19
[ 127.424565] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc2f787f6c
[ 127.424573] RBP: 00007fcc2f787f60 R08: 000000000000000e R09: 0000000000000000
[ 127.424580] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcc2f787f6c
[ 127.424587] R13: 00007ffed530639f R14: 00007fcc2cbea300 R15: 0000000000022000
[ 127.424602]
[ 127.482013] WARNING: CPU: 0 PID: 3924 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 127.482707] Modules linked in:
[ 127.482965] CPU: 0 PID: 3924 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220915 #1
[ 127.483575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 127.484423] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 127.484841] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 127.486199] RSP: 0018:ffff88803fac7c48 EFLAGS: 00010006
[ 127.486600] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 127.487153] RDX: ffff88801f1c0000 RSI: ffffffff81566027 RDI: 0000000000000005
[ 127.487675] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[ 127.488196] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800ef22c00
[ 127.488714] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002
[ 127.489241] FS: 00007fcc2cbea700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 127.489829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 127.490261] CR2: 00007f4c5bc762d0 CR3: 000000001f0d4000 CR4: 0000000000350ef0
[ 127.490786] Call Trace:
[ 127.490985]
[ 127.491156] ctx_sched_out+0x8f1/0xc10
[ 127.491449] __perf_event_task_sched_out+0x6d0/0x18d0
[ 127.491837] ? lock_is_held_type+0xd7/0x130
[ 127.492165] ? __perf_cgroup_move+0x160/0x160
[ 127.492508] ? set_next_entity+0x304/0x550
[ 127.492829] ? update_curr+0x267/0x740
[ 127.493133] ? lock_is_held_type+0xd7/0x130
[ 127.493463] __schedule+0xedd/0x2470
[ 127.493748] ? io_schedule_timeout+0x150/0x150
[ 127.494095] ? __x64_sys_futex_time32+0x480/0x480
[ 127.494471] schedule+0xda/0x1b0
[ 127.494742] exit_to_user_mode_prepare+0x114/0x1a0
[ 127.495153] syscall_exit_to_user_mode+0x19/0x40
[ 127.495522] do_syscall_64+0x48/0x90
[ 127.495817] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 127.496220] RIP: 0033:0x7fcc2f674b19
[ 127.496507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 127.497875] RSP: 002b:00007fcc2cbea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 127.498458] RAX: 0000000000000001 RBX: 00007fcc2f787f68 RCX: 00007fcc2f674b19
[ 127.499005] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc2f787f6c
[ 127.499547] RBP: 00007fcc2f787f60 R08: 000000000000000e R09: 0000000000000000
[ 127.500092] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcc2f787f6c
[ 127.500629] R13: 00007ffed530639f R14: 00007fcc2cbea300 R15: 0000000000022000
[ 127.501180]
[ 127.501362] irq event stamp: 1026
[ 127.501622] hardirqs last enabled at (1025): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 127.502333] hardirqs last disabled at (1026): [] __schedule+0x1225/0x2470
[ 127.502979] softirqs last enabled at (806): [] __irq_exit_rcu+0x11b/0x180
[ 127.503627] softirqs last disabled at (733): [] __irq_exit_rcu+0x11b/0x180
[ 127.504281] ---[ end trace 0000000000000000 ]---
[ 132.816134] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 137.040225] Bluetooth: hci2: Opcode 0x c03 failed: -110
VM DIAGNOSIS:
12:11:31 Registers:
info registers vcpu 0
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803fac7698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001
R12=0000000000000030 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0
RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fcc2cbea700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4c5bc762d0 CR3=000000001f0d4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007fcc2f75b7c0 00007fcc2f75b7c8
YMM02=0000000000000000 0000000000000000 00007fcc2f75b7e0 00007fcc2f75b7c0
YMM03=0000000000000000 0000000000000000 00007fcc2f75b7c8 00007fcc2f75b7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84264287 RDX=ffffed100d9c6f99
RSI=0000000000000004 RDI=ffff88806ce37cc0 RBP=ffff88806ce37cc0 RSP=ffff888008697be0
R8 =0000000000000000 R9 =ffff88806ce37cc3 R10=ffffed100d9c6f98 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9c6f98 R14=0000000000000001 R15=1ffff110010d2f7d
RIP=ffffffff84264304 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f227d81e1f0 CR3=000000001b788000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c
YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000