Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:3035' (ECDSA) to the list of known hosts. 2022/09/15 13:18:22 fuzzer started 2022/09/15 13:18:23 dialing manager at localhost:36559 syzkaller login: [ 35.902362] cgroup: Unknown subsys name 'net' [ 36.022381] cgroup: Unknown subsys name 'rlimit' 2022/09/15 13:18:37 syscalls: 2215 2022/09/15 13:18:37 code coverage: enabled 2022/09/15 13:18:37 comparison tracing: enabled 2022/09/15 13:18:37 extra coverage: enabled 2022/09/15 13:18:37 setuid sandbox: enabled 2022/09/15 13:18:37 namespace sandbox: enabled 2022/09/15 13:18:37 Android sandbox: enabled 2022/09/15 13:18:37 fault injection: enabled 2022/09/15 13:18:37 leak checking: enabled 2022/09/15 13:18:37 net packet injection: enabled 2022/09/15 13:18:37 net device setup: enabled 2022/09/15 13:18:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 13:18:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 13:18:37 USB emulation: enabled 2022/09/15 13:18:37 hci packet injection: enabled 2022/09/15 13:18:37 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 13:18:37 802.15.4 emulation: enabled 2022/09/15 13:18:37 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 13:18:37 fetching corpus: 50, signal 23264/26882 (executing program) 2022/09/15 13:18:37 fetching corpus: 100, signal 37798/42826 (executing program) 2022/09/15 13:18:37 fetching corpus: 150, signal 47571/53878 (executing program) 2022/09/15 13:18:37 fetching corpus: 200, signal 54527/62099 (executing program) 2022/09/15 13:18:38 fetching corpus: 250, signal 60897/69707 (executing program) 2022/09/15 13:18:38 fetching corpus: 300, signal 71524/81125 (executing program) 2022/09/15 13:18:38 fetching corpus: 350, signal 75468/86213 (executing program) 2022/09/15 13:18:38 fetching corpus: 400, signal 80603/92309 (executing program) 2022/09/15 13:18:38 fetching corpus: 450, signal 84484/97203 (executing program) 2022/09/15 13:18:38 fetching corpus: 500, signal 91523/104842 (executing program) 2022/09/15 13:18:39 fetching corpus: 550, signal 95480/109527 (executing program) 2022/09/15 13:18:39 fetching corpus: 600, signal 98526/113414 (executing program) 2022/09/15 13:18:39 fetching corpus: 650, signal 101790/117402 (executing program) 2022/09/15 13:18:39 fetching corpus: 700, signal 104486/120816 (executing program) 2022/09/15 13:18:39 fetching corpus: 750, signal 107677/124672 (executing program) 2022/09/15 13:18:39 fetching corpus: 800, signal 110155/127859 (executing program) 2022/09/15 13:18:39 fetching corpus: 850, signal 112998/131359 (executing program) 2022/09/15 13:18:40 fetching corpus: 900, signal 116737/135489 (executing program) 2022/09/15 13:18:40 fetching corpus: 950, signal 118778/138116 (executing program) 2022/09/15 13:18:40 fetching corpus: 1000, signal 120715/140618 (executing program) 2022/09/15 13:18:40 fetching corpus: 1050, signal 123150/143563 (executing program) 2022/09/15 13:18:40 fetching corpus: 1100, signal 124991/145961 (executing program) 2022/09/15 13:18:40 fetching corpus: 1150, signal 127454/148890 (executing program) 2022/09/15 13:18:40 fetching corpus: 1200, signal 129522/151403 (executing program) 2022/09/15 13:18:41 fetching corpus: 1250, signal 131989/154173 (executing program) 2022/09/15 13:18:41 fetching corpus: 1300, signal 133774/156400 (executing program) 2022/09/15 13:18:41 fetching corpus: 1350, signal 136196/159045 (executing program) 2022/09/15 13:18:41 fetching corpus: 1400, signal 137853/161148 (executing program) 2022/09/15 13:18:41 fetching corpus: 1450, signal 139559/163208 (executing program) 2022/09/15 13:18:41 fetching corpus: 1500, signal 141452/165425 (executing program) 2022/09/15 13:18:41 fetching corpus: 1550, signal 142254/166784 (executing program) 2022/09/15 13:18:42 fetching corpus: 1600, signal 144380/169065 (executing program) 2022/09/15 13:18:42 fetching corpus: 1650, signal 145972/170936 (executing program) 2022/09/15 13:18:42 fetching corpus: 1700, signal 147297/172599 (executing program) 2022/09/15 13:18:42 fetching corpus: 1750, signal 148517/174127 (executing program) 2022/09/15 13:18:42 fetching corpus: 1800, signal 150037/175845 (executing program) 2022/09/15 13:18:42 fetching corpus: 1850, signal 150980/177207 (executing program) 2022/09/15 13:18:42 fetching corpus: 1900, signal 152030/178641 (executing program) 2022/09/15 13:18:43 fetching corpus: 1950, signal 154307/180887 (executing program) 2022/09/15 13:18:43 fetching corpus: 2000, signal 155530/182318 (executing program) 2022/09/15 13:18:43 fetching corpus: 2050, signal 156403/183557 (executing program) 2022/09/15 13:18:43 fetching corpus: 2100, signal 157423/184833 (executing program) 2022/09/15 13:18:43 fetching corpus: 2150, signal 159394/186752 (executing program) 2022/09/15 13:18:43 fetching corpus: 2200, signal 160697/188137 (executing program) 2022/09/15 13:18:43 fetching corpus: 2250, signal 161800/189404 (executing program) 2022/09/15 13:18:43 fetching corpus: 2300, signal 162558/190441 (executing program) 2022/09/15 13:18:44 fetching corpus: 2350, signal 164242/192016 (executing program) 2022/09/15 13:18:44 fetching corpus: 2400, signal 166275/193780 (executing program) 2022/09/15 13:18:44 fetching corpus: 2450, signal 167491/195037 (executing program) 2022/09/15 13:18:44 fetching corpus: 2500, signal 168077/195917 (executing program) 2022/09/15 13:18:44 fetching corpus: 2550, signal 169046/196999 (executing program) 2022/09/15 13:18:44 fetching corpus: 2600, signal 170042/198140 (executing program) 2022/09/15 13:18:44 fetching corpus: 2650, signal 170839/199069 (executing program) 2022/09/15 13:18:45 fetching corpus: 2700, signal 171755/200051 (executing program) 2022/09/15 13:18:45 fetching corpus: 2750, signal 173113/201235 (executing program) 2022/09/15 13:18:45 fetching corpus: 2800, signal 173672/202031 (executing program) 2022/09/15 13:18:45 fetching corpus: 2850, signal 174849/203178 (executing program) 2022/09/15 13:18:45 fetching corpus: 2900, signal 175724/204152 (executing program) 2022/09/15 13:18:45 fetching corpus: 2950, signal 177047/205235 (executing program) 2022/09/15 13:18:45 fetching corpus: 3000, signal 178436/206306 (executing program) 2022/09/15 13:18:46 fetching corpus: 3050, signal 179454/207210 (executing program) 2022/09/15 13:18:46 fetching corpus: 3100, signal 180236/207997 (executing program) 2022/09/15 13:18:46 fetching corpus: 3150, signal 181461/208963 (executing program) 2022/09/15 13:18:46 fetching corpus: 3200, signal 182562/209874 (executing program) 2022/09/15 13:18:46 fetching corpus: 3250, signal 184055/210933 (executing program) 2022/09/15 13:18:46 fetching corpus: 3300, signal 184808/211630 (executing program) 2022/09/15 13:18:46 fetching corpus: 3350, signal 185398/212229 (executing program) 2022/09/15 13:18:46 fetching corpus: 3400, signal 186001/212812 (executing program) 2022/09/15 13:18:46 fetching corpus: 3450, signal 187263/213651 (executing program) 2022/09/15 13:18:46 fetching corpus: 3500, signal 188184/214344 (executing program) 2022/09/15 13:18:47 fetching corpus: 3550, signal 189296/215217 (executing program) 2022/09/15 13:18:47 fetching corpus: 3600, signal 189989/215870 (executing program) 2022/09/15 13:18:47 fetching corpus: 3650, signal 190527/216418 (executing program) 2022/09/15 13:18:47 fetching corpus: 3700, signal 191135/216951 (executing program) 2022/09/15 13:18:47 fetching corpus: 3750, signal 192295/217671 (executing program) 2022/09/15 13:18:47 fetching corpus: 3800, signal 193570/218401 (executing program) 2022/09/15 13:18:47 fetching corpus: 3850, signal 194232/218931 (executing program) 2022/09/15 13:18:48 fetching corpus: 3900, signal 194908/219473 (executing program) 2022/09/15 13:18:48 fetching corpus: 3950, signal 195697/220003 (executing program) 2022/09/15 13:18:48 fetching corpus: 4000, signal 196464/220513 (executing program) 2022/09/15 13:18:48 fetching corpus: 4050, signal 197391/221045 (executing program) 2022/09/15 13:18:48 fetching corpus: 4100, signal 197820/221455 (executing program) 2022/09/15 13:18:48 fetching corpus: 4150, signal 199118/222047 (executing program) 2022/09/15 13:18:48 fetching corpus: 4200, signal 199674/222552 (executing program) 2022/09/15 13:18:49 fetching corpus: 4250, signal 200503/223018 (executing program) 2022/09/15 13:18:49 fetching corpus: 4300, signal 200954/223371 (executing program) 2022/09/15 13:18:49 fetching corpus: 4350, signal 201547/223781 (executing program) 2022/09/15 13:18:49 fetching corpus: 4400, signal 202474/224444 (executing program) 2022/09/15 13:18:49 fetching corpus: 4450, signal 203643/224926 (executing program) 2022/09/15 13:18:49 fetching corpus: 4500, signal 204356/225385 (executing program) 2022/09/15 13:18:49 fetching corpus: 4550, signal 205481/225893 (executing program) 2022/09/15 13:18:50 fetching corpus: 4600, signal 206669/226308 (executing program) 2022/09/15 13:18:50 fetching corpus: 4650, signal 207107/226592 (executing program) 2022/09/15 13:18:50 fetching corpus: 4700, signal 207779/226904 (executing program) 2022/09/15 13:18:50 fetching corpus: 4750, signal 208554/227284 (executing program) 2022/09/15 13:18:50 fetching corpus: 4800, signal 209231/227577 (executing program) 2022/09/15 13:18:50 fetching corpus: 4850, signal 209991/227885 (executing program) 2022/09/15 13:18:50 fetching corpus: 4900, signal 210765/228165 (executing program) 2022/09/15 13:18:51 fetching corpus: 4950, signal 211798/228555 (executing program) 2022/09/15 13:18:51 fetching corpus: 5000, signal 212492/228904 (executing program) 2022/09/15 13:18:51 fetching corpus: 5050, signal 213487/229159 (executing program) 2022/09/15 13:18:51 fetching corpus: 5100, signal 214099/229373 (executing program) 2022/09/15 13:18:51 fetching corpus: 5150, signal 215029/229604 (executing program) 2022/09/15 13:18:51 fetching corpus: 5200, signal 215745/229793 (executing program) 2022/09/15 13:18:51 fetching corpus: 5250, signal 216949/230067 (executing program) 2022/09/15 13:18:52 fetching corpus: 5300, signal 217742/230288 (executing program) 2022/09/15 13:18:52 fetching corpus: 5350, signal 218309/230443 (executing program) 2022/09/15 13:18:52 fetching corpus: 5400, signal 218791/230575 (executing program) 2022/09/15 13:18:52 fetching corpus: 5450, signal 219446/230699 (executing program) 2022/09/15 13:18:52 fetching corpus: 5500, signal 220367/230872 (executing program) 2022/09/15 13:18:52 fetching corpus: 5550, signal 220977/230920 (executing program) 2022/09/15 13:18:53 fetching corpus: 5600, signal 221531/230929 (executing program) 2022/09/15 13:18:53 fetching corpus: 5650, signal 221959/230960 (executing program) 2022/09/15 13:18:53 fetching corpus: 5700, signal 222636/230960 (executing program) 2022/09/15 13:18:53 fetching corpus: 5750, signal 223216/231140 (executing program) 2022/09/15 13:18:53 fetching corpus: 5800, signal 224198/231275 (executing program) 2022/09/15 13:18:53 fetching corpus: 5818, signal 224476/231346 (executing program) 2022/09/15 13:18:53 fetching corpus: 5818, signal 224476/231346 (executing program) 2022/09/15 13:18:55 starting 8 fuzzer processes 13:18:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x9, 0x4) 13:18:55 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00') 13:18:55 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 13:18:55 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000006e00)='ns/time_for_children\x00') 13:18:55 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200481, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x4) 13:18:55 executing program 5: inotify_init1(0x180800) 13:18:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$pid(0x3, 0x0) [ 68.635690] audit: type=1400 audit(1663247935.990:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:18:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) gettid() [ 70.017210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.019659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.027535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.029299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.030620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.032522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.069846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.071505] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.074250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.076409] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 70.078147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 70.080201] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 70.082610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.084253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.085797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.087255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.088190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.089404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.090350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 70.090485] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 70.091388] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 70.094431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.096291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 70.097704] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.098885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.099268] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 70.100025] Bluetooth: hci1: HCI_REQ-0x0c1a [ 70.104353] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 70.108005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.112217] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.114725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.120274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 70.121486] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.122640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.124552] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 70.126274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.128069] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 70.129744] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 70.131320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.132397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 70.133628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.134175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.139105] Bluetooth: hci4: HCI_REQ-0x0c1a [ 70.140303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.141785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 70.148294] Bluetooth: hci2: HCI_REQ-0x0c1a [ 70.148833] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.149330] Bluetooth: hci6: HCI_REQ-0x0c1a [ 70.164359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 70.167519] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 70.174174] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.175694] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.177270] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 70.183346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.197358] Bluetooth: hci7: HCI_REQ-0x0c1a [ 70.209401] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.145453] Bluetooth: hci1: command 0x0409 tx timeout [ 72.209087] Bluetooth: hci4: command 0x0409 tx timeout [ 72.209397] Bluetooth: hci5: command 0x0409 tx timeout [ 72.209536] Bluetooth: hci3: command 0x0409 tx timeout [ 72.210437] Bluetooth: hci2: command 0x0409 tx timeout [ 72.211601] Bluetooth: hci6: command 0x0409 tx timeout [ 72.273178] Bluetooth: hci0: command 0x0409 tx timeout [ 72.274404] Bluetooth: hci7: command 0x0409 tx timeout [ 74.193136] Bluetooth: hci1: command 0x041b tx timeout [ 74.257205] Bluetooth: hci6: command 0x041b tx timeout [ 74.258091] Bluetooth: hci2: command 0x041b tx timeout [ 74.258870] Bluetooth: hci3: command 0x041b tx timeout [ 74.259731] Bluetooth: hci5: command 0x041b tx timeout [ 74.260548] Bluetooth: hci4: command 0x041b tx timeout [ 74.321102] Bluetooth: hci7: command 0x041b tx timeout [ 74.322376] Bluetooth: hci0: command 0x041b tx timeout [ 76.241089] Bluetooth: hci1: command 0x040f tx timeout [ 76.305207] Bluetooth: hci4: command 0x040f tx timeout [ 76.306896] Bluetooth: hci5: command 0x040f tx timeout [ 76.307761] Bluetooth: hci3: command 0x040f tx timeout [ 76.309285] Bluetooth: hci2: command 0x040f tx timeout [ 76.310151] Bluetooth: hci6: command 0x040f tx timeout [ 76.369085] Bluetooth: hci0: command 0x040f tx timeout [ 76.370516] Bluetooth: hci7: command 0x040f tx timeout [ 78.289178] Bluetooth: hci1: command 0x0419 tx timeout [ 78.353126] Bluetooth: hci6: command 0x0419 tx timeout [ 78.353889] Bluetooth: hci2: command 0x0419 tx timeout [ 78.354855] Bluetooth: hci3: command 0x0419 tx timeout [ 78.356127] Bluetooth: hci5: command 0x0419 tx timeout [ 78.356834] Bluetooth: hci4: command 0x0419 tx timeout [ 78.418152] Bluetooth: hci7: command 0x0419 tx timeout [ 78.418945] Bluetooth: hci0: command 0x0419 tx timeout 13:19:53 executing program 5: inotify_init1(0x180800) 13:19:53 executing program 5: inotify_init1(0x180800) 13:19:54 executing program 5: inotify_init1(0x180800) 13:19:54 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r0, 0x10000000) 13:19:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000000)) getresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x54, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x1a}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x9, 0x0) [ 126.971732] audit: type=1400 audit(1663247994.326:7): avc: denied { open } for pid=3837 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.973301] audit: type=1400 audit(1663247994.326:8): avc: denied { kernel } for pid=3837 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.993898] ------------[ cut here ]------------ [ 126.993923] [ 126.993927] ====================================================== [ 126.993931] WARNING: possible circular locking dependency detected [ 126.993936] 6.0.0-rc5-next-20220915 #1 Not tainted [ 126.993942] ------------------------------------------------------ [ 126.993945] syz-executor.5/3840 is trying to acquire lock: [ 126.993952] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.993992] [ 126.993992] but task is already holding lock: [ 126.993995] ffff88800f1aa420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.994024] [ 126.994024] which lock already depends on the new lock. [ 126.994024] [ 126.994027] [ 126.994027] the existing dependency chain (in reverse order) is: [ 126.994031] [ 126.994031] -> #3 (&ctx->lock){....}-{2:2}: [ 126.994045] _raw_spin_lock+0x2a/0x40 [ 126.994063] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.994075] __schedule+0xedd/0x2470 [ 126.994086] schedule+0xda/0x1b0 [ 126.994096] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.994116] syscall_exit_to_user_mode+0x19/0x40 [ 126.994134] do_syscall_64+0x48/0x90 [ 126.994148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.994165] [ 126.994165] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.994179] _raw_spin_lock_nested+0x30/0x40 [ 126.994193] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.994207] task_fork_fair+0x63/0x4d0 [ 126.994224] sched_cgroup_fork+0x3d0/0x540 [ 126.994237] copy_process+0x4183/0x6e20 [ 126.994248] kernel_clone+0xe7/0x890 [ 126.994258] user_mode_thread+0xad/0xf0 [ 126.994268] rest_init+0x24/0x250 [ 126.994284] arch_call_rest_init+0xf/0x14 [ 126.994296] start_kernel+0x4c1/0x4e6 [ 126.994306] secondary_startup_64_no_verify+0xe0/0xeb [ 126.994321] [ 126.994321] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.994334] _raw_spin_lock_irqsave+0x39/0x60 [ 126.994349] try_to_wake_up+0xab/0x1920 [ 126.994362] up+0x75/0xb0 [ 126.994373] __up_console_sem+0x6e/0x80 [ 126.994389] console_unlock+0x46a/0x590 [ 126.994405] vt_ioctl+0x2822/0x2ca0 [ 126.994418] tty_ioctl+0x7c4/0x1700 [ 126.994429] __x64_sys_ioctl+0x19a/0x210 [ 126.994445] do_syscall_64+0x3b/0x90 [ 126.994458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.994475] [ 126.994475] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.994488] __lock_acquire+0x2a02/0x5e70 [ 126.994504] lock_acquire+0x1a2/0x530 [ 126.994519] _raw_spin_lock_irqsave+0x39/0x60 [ 126.994534] down_trylock+0xe/0x70 [ 126.994546] __down_trylock_console_sem+0x3b/0xd0 [ 126.994562] vprintk_emit+0x16b/0x560 [ 126.994578] vprintk+0x84/0xa0 [ 126.994594] _printk+0xba/0xf1 [ 126.994612] report_bug.cold+0x72/0xab [ 126.994624] handle_bug+0x3c/0x70 [ 126.994637] exc_invalid_op+0x14/0x50 [ 126.994650] asm_exc_invalid_op+0x16/0x20 [ 126.994666] group_sched_out.part.0+0x2c7/0x460 [ 126.994677] ctx_sched_out+0x8f1/0xc10 [ 126.994687] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.994699] __schedule+0xedd/0x2470 [ 126.994709] schedule+0xda/0x1b0 [ 126.994719] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.994737] syscall_exit_to_user_mode+0x19/0x40 [ 126.994754] do_syscall_64+0x48/0x90 [ 126.994767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.994784] [ 126.994784] other info that might help us debug this: [ 126.994784] [ 126.994787] Chain exists of: [ 126.994787] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.994787] [ 126.994801] Possible unsafe locking scenario: [ 126.994801] [ 126.994804] CPU0 CPU1 [ 126.994806] ---- ---- [ 126.994809] lock(&ctx->lock); [ 126.994814] lock(&rq->__lock); [ 126.994821] lock(&ctx->lock); [ 126.994827] lock((console_sem).lock); [ 126.994833] [ 126.994833] *** DEADLOCK *** [ 126.994833] [ 126.994835] 2 locks held by syz-executor.5/3840: [ 126.994841] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.994867] #1: ffff88800f1aa420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.994894] [ 126.994894] stack backtrace: [ 126.994897] CPU: 0 PID: 3840 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220915 #1 [ 126.994910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.994918] Call Trace: [ 126.994922] [ 126.994927] dump_stack_lvl+0x8b/0xb3 [ 126.994942] check_noncircular+0x263/0x2e0 [ 126.994958] ? format_decode+0x26c/0xb50 [ 126.994974] ? print_circular_bug+0x450/0x450 [ 126.994991] ? enable_ptr_key_workfn+0x20/0x20 [ 126.995006] ? perf_trace_lock+0x308/0x560 [ 126.995020] ? format_decode+0x26c/0xb50 [ 126.995036] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.995054] __lock_acquire+0x2a02/0x5e70 [ 126.995077] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.995101] lock_acquire+0x1a2/0x530 [ 126.995118] ? down_trylock+0xe/0x70 [ 126.995132] ? rcu_read_unlock+0x40/0x40 [ 126.995154] ? vprintk+0x84/0xa0 [ 126.995172] _raw_spin_lock_irqsave+0x39/0x60 [ 126.995188] ? down_trylock+0xe/0x70 [ 126.995201] down_trylock+0xe/0x70 [ 126.995215] ? vprintk+0x84/0xa0 [ 126.995231] __down_trylock_console_sem+0x3b/0xd0 [ 126.995248] vprintk_emit+0x16b/0x560 [ 126.995268] vprintk+0x84/0xa0 [ 126.995285] _printk+0xba/0xf1 [ 126.995303] ? record_print_text.cold+0x16/0x16 [ 126.995326] ? report_bug.cold+0x66/0xab [ 126.995341] ? group_sched_out.part.0+0x2c7/0x460 [ 126.995352] report_bug.cold+0x72/0xab [ 126.995368] handle_bug+0x3c/0x70 [ 126.995382] exc_invalid_op+0x14/0x50 [ 126.995397] asm_exc_invalid_op+0x16/0x20 [ 126.995414] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.995427] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.995439] RSP: 0018:ffff8880410bfc48 EFLAGS: 00010006 [ 126.995448] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.995455] RDX: ffff88801f245040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 126.995463] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 126.995471] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f1aa400 [ 126.995478] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 126.995491] ? group_sched_out.part.0+0x2c7/0x460 [ 126.995504] ? group_sched_out.part.0+0x2c7/0x460 [ 126.995518] ctx_sched_out+0x8f1/0xc10 [ 126.995531] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.995547] ? lock_is_held_type+0xd7/0x130 [ 126.995566] ? __perf_cgroup_move+0x160/0x160 [ 126.995578] ? set_next_entity+0x304/0x550 [ 126.995595] ? update_curr+0x267/0x740 [ 126.995614] ? lock_is_held_type+0xd7/0x130 [ 126.995633] __schedule+0xedd/0x2470 [ 126.995648] ? io_schedule_timeout+0x150/0x150 [ 126.995661] ? __x64_sys_futex_time32+0x480/0x480 [ 126.995676] schedule+0xda/0x1b0 [ 126.995688] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.995708] syscall_exit_to_user_mode+0x19/0x40 [ 126.995726] do_syscall_64+0x48/0x90 [ 126.995741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.995758] RIP: 0033:0x7f907e508b19 [ 126.995767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.995778] RSP: 002b:00007f907ba7e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.995789] RAX: 0000000000000001 RBX: 00007f907e61bf68 RCX: 00007f907e508b19 [ 126.995796] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f907e61bf6c [ 126.995803] RBP: 00007f907e61bf60 R08: 000000000000000e R09: 0000000000000000 [ 126.995811] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f907e61bf6c [ 126.995818] R13: 00007ffff891bd2f R14: 00007f907ba7e300 R15: 0000000000022000 [ 126.995833] [ 127.051232] WARNING: CPU: 0 PID: 3840 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.051904] Modules linked in: [ 127.052140] CPU: 0 PID: 3840 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220915 #1 [ 127.052723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.053531] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.053950] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.055266] RSP: 0018:ffff8880410bfc48 EFLAGS: 00010006 [ 127.055654] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.056179] RDX: ffff88801f245040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 127.056701] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 127.057223] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f1aa400 [ 127.057747] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 127.058263] FS: 00007f907ba7e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 127.058851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.059269] CR2: 00007f56054784a0 CR3: 000000001b6da000 CR4: 0000000000350ef0 [ 127.059787] Call Trace: [ 127.059978] [ 127.060149] ctx_sched_out+0x8f1/0xc10 [ 127.060436] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.060814] ? lock_is_held_type+0xd7/0x130 [ 127.061137] ? __perf_cgroup_move+0x160/0x160 [ 127.061470] ? set_next_entity+0x304/0x550 [ 127.061798] ? update_curr+0x267/0x740 [ 127.062095] ? lock_is_held_type+0xd7/0x130 [ 127.062423] __schedule+0xedd/0x2470 [ 127.062703] ? io_schedule_timeout+0x150/0x150 [ 127.063043] ? __x64_sys_futex_time32+0x480/0x480 [ 127.063399] schedule+0xda/0x1b0 [ 127.063654] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.064023] syscall_exit_to_user_mode+0x19/0x40 [ 127.064379] do_syscall_64+0x48/0x90 [ 127.064660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.065042] RIP: 0033:0x7f907e508b19 [ 127.065319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.066621] RSP: 002b:00007f907ba7e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.067174] RAX: 0000000000000001 RBX: 00007f907e61bf68 RCX: 00007f907e508b19 [ 127.067689] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f907e61bf6c [ 127.068203] RBP: 00007f907e61bf60 R08: 000000000000000e R09: 0000000000000000 [ 127.068712] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f907e61bf6c [ 127.069232] R13: 00007ffff891bd2f R14: 00007f907ba7e300 R15: 0000000000022000 [ 127.069764] [ 127.069942] irq event stamp: 2456 [ 127.070191] hardirqs last enabled at (2455): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 127.070887] hardirqs last disabled at (2456): [] __schedule+0x1225/0x2470 [ 127.071496] softirqs last enabled at (1768): [] __irq_exit_rcu+0x11b/0x180 [ 127.072118] softirqs last disabled at (1703): [] __irq_exit_rcu+0x11b/0x180 [ 127.072735] ---[ end trace 0000000000000000 ]--- 13:19:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 13:19:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 13:19:54 executing program 2: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) [ 127.290142] autofs4:pid:3840:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) [ 127.322774] autofs4:pid:3840:validate_dev_ioctl: path string terminator missing for cmd(0xc0189376) [ 128.306994] hrtimer: interrupt took 18414 ns [ 133.073140] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 133.074288] Bluetooth: hci0: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 13:19:54 Registers: info registers vcpu 0 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff8880410bf698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f907ba7e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f56054784a0 CR3=000000001b6da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f907e5ef7c0 00007f907e5ef7c8 YMM02=0000000000000000 0000000000000000 00007f907e5ef7e0 00007f907e5ef7c0 YMM03=0000000000000000 0000000000000000 00007f907e5ef7c8 00007f907e5ef7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801d9dfae8 RCX=ffffffff840f591e RDX=ffff888017f39ac0 RSI=0000000000000002 RDI=0000000000000002 RBP=0000000000000002 RSP=ffff88801d9df970 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888018aa940e R13=ffff88801d9dfb00 R14=ffff88801d9dfb21 R15=0000000000000300 RIP=ffffffff81461414 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f87d542d260 CR3=0000000008a50000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000