Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:16930' (ECDSA) to the list of known hosts. 2022/09/15 13:33:19 fuzzer started 2022/09/15 13:33:19 dialing manager at localhost:36559 syzkaller login: [ 36.744303] cgroup: Unknown subsys name 'net' [ 36.830286] cgroup: Unknown subsys name 'rlimit' 2022/09/15 13:33:33 syscalls: 2215 2022/09/15 13:33:33 code coverage: enabled 2022/09/15 13:33:33 comparison tracing: enabled 2022/09/15 13:33:33 extra coverage: enabled 2022/09/15 13:33:33 setuid sandbox: enabled 2022/09/15 13:33:33 namespace sandbox: enabled 2022/09/15 13:33:33 Android sandbox: enabled 2022/09/15 13:33:33 fault injection: enabled 2022/09/15 13:33:33 leak checking: enabled 2022/09/15 13:33:33 net packet injection: enabled 2022/09/15 13:33:33 net device setup: enabled 2022/09/15 13:33:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 13:33:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 13:33:33 USB emulation: enabled 2022/09/15 13:33:33 hci packet injection: enabled 2022/09/15 13:33:33 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 13:33:33 802.15.4 emulation: enabled 2022/09/15 13:33:33 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 13:33:33 fetching corpus: 50, signal 33511/36954 (executing program) 2022/09/15 13:33:34 fetching corpus: 100, signal 46691/51514 (executing program) 2022/09/15 13:33:34 fetching corpus: 150, signal 57473/63539 (executing program) 2022/09/15 13:33:34 fetching corpus: 200, signal 64901/72173 (executing program) 2022/09/15 13:33:34 fetching corpus: 250, signal 72510/80846 (executing program) 2022/09/15 13:33:34 fetching corpus: 300, signal 76695/86181 (executing program) 2022/09/15 13:33:34 fetching corpus: 350, signal 81409/91887 (executing program) 2022/09/15 13:33:34 fetching corpus: 400, signal 85102/96616 (executing program) 2022/09/15 13:33:35 fetching corpus: 450, signal 88710/101185 (executing program) 2022/09/15 13:33:35 fetching corpus: 500, signal 93713/106950 (executing program) 2022/09/15 13:33:35 fetching corpus: 550, signal 97762/111905 (executing program) 2022/09/15 13:33:35 fetching corpus: 600, signal 101800/116711 (executing program) 2022/09/15 13:33:35 fetching corpus: 650, signal 105271/120963 (executing program) 2022/09/15 13:33:35 fetching corpus: 700, signal 107422/123991 (executing program) 2022/09/15 13:33:35 fetching corpus: 750, signal 110137/127462 (executing program) 2022/09/15 13:33:36 fetching corpus: 800, signal 112113/130223 (executing program) 2022/09/15 13:33:36 fetching corpus: 850, signal 113743/132623 (executing program) 2022/09/15 13:33:36 fetching corpus: 900, signal 116015/135588 (executing program) 2022/09/15 13:33:36 fetching corpus: 950, signal 119198/139275 (executing program) 2022/09/15 13:33:36 fetching corpus: 1000, signal 121486/142153 (executing program) 2022/09/15 13:33:36 fetching corpus: 1050, signal 123511/144772 (executing program) 2022/09/15 13:33:36 fetching corpus: 1100, signal 125894/147666 (executing program) 2022/09/15 13:33:37 fetching corpus: 1150, signal 128072/150355 (executing program) 2022/09/15 13:33:37 fetching corpus: 1200, signal 129670/152523 (executing program) 2022/09/15 13:33:37 fetching corpus: 1250, signal 131203/154604 (executing program) 2022/09/15 13:33:37 fetching corpus: 1300, signal 133527/157322 (executing program) 2022/09/15 13:33:37 fetching corpus: 1350, signal 136190/160189 (executing program) 2022/09/15 13:33:37 fetching corpus: 1400, signal 138205/162534 (executing program) 2022/09/15 13:33:37 fetching corpus: 1450, signal 140131/164855 (executing program) 2022/09/15 13:33:38 fetching corpus: 1500, signal 142030/167067 (executing program) 2022/09/15 13:33:38 fetching corpus: 1550, signal 142973/168551 (executing program) 2022/09/15 13:33:38 fetching corpus: 1600, signal 144292/170262 (executing program) 2022/09/15 13:33:38 fetching corpus: 1650, signal 146047/172284 (executing program) 2022/09/15 13:33:38 fetching corpus: 1700, signal 147366/173964 (executing program) 2022/09/15 13:33:38 fetching corpus: 1750, signal 148745/175690 (executing program) 2022/09/15 13:33:38 fetching corpus: 1800, signal 150133/177429 (executing program) 2022/09/15 13:33:38 fetching corpus: 1850, signal 151127/178858 (executing program) 2022/09/15 13:33:39 fetching corpus: 1900, signal 154141/181570 (executing program) 2022/09/15 13:33:39 fetching corpus: 1950, signal 155644/183292 (executing program) 2022/09/15 13:33:39 fetching corpus: 2000, signal 156798/184717 (executing program) 2022/09/15 13:33:39 fetching corpus: 2050, signal 157885/186075 (executing program) 2022/09/15 13:33:39 fetching corpus: 2100, signal 159423/187727 (executing program) 2022/09/15 13:33:39 fetching corpus: 2150, signal 160496/189041 (executing program) 2022/09/15 13:33:39 fetching corpus: 2200, signal 161883/190549 (executing program) 2022/09/15 13:33:40 fetching corpus: 2250, signal 163078/191915 (executing program) 2022/09/15 13:33:40 fetching corpus: 2300, signal 164976/193728 (executing program) 2022/09/15 13:33:40 fetching corpus: 2350, signal 166986/195539 (executing program) 2022/09/15 13:33:40 fetching corpus: 2400, signal 168020/196717 (executing program) 2022/09/15 13:33:40 fetching corpus: 2450, signal 169069/197981 (executing program) 2022/09/15 13:33:40 fetching corpus: 2500, signal 170757/199499 (executing program) 2022/09/15 13:33:40 fetching corpus: 2550, signal 171532/200519 (executing program) 2022/09/15 13:33:41 fetching corpus: 2600, signal 172838/201791 (executing program) 2022/09/15 13:33:41 fetching corpus: 2650, signal 173965/202973 (executing program) 2022/09/15 13:33:41 fetching corpus: 2700, signal 174995/204028 (executing program) 2022/09/15 13:33:41 fetching corpus: 2750, signal 176262/205232 (executing program) 2022/09/15 13:33:41 fetching corpus: 2800, signal 177466/206367 (executing program) 2022/09/15 13:33:41 fetching corpus: 2850, signal 178415/207350 (executing program) 2022/09/15 13:33:41 fetching corpus: 2900, signal 179708/208512 (executing program) 2022/09/15 13:33:42 fetching corpus: 2950, signal 180717/209445 (executing program) 2022/09/15 13:33:42 fetching corpus: 3000, signal 181776/210452 (executing program) 2022/09/15 13:33:42 fetching corpus: 3050, signal 182600/211321 (executing program) 2022/09/15 13:33:42 fetching corpus: 3100, signal 184056/212484 (executing program) 2022/09/15 13:33:42 fetching corpus: 3150, signal 185728/213699 (executing program) 2022/09/15 13:33:42 fetching corpus: 3200, signal 186633/214531 (executing program) 2022/09/15 13:33:43 fetching corpus: 3250, signal 187483/215342 (executing program) 2022/09/15 13:33:43 fetching corpus: 3300, signal 188659/216273 (executing program) 2022/09/15 13:33:43 fetching corpus: 3350, signal 189276/216954 (executing program) 2022/09/15 13:33:43 fetching corpus: 3400, signal 190065/217705 (executing program) 2022/09/15 13:33:43 fetching corpus: 3450, signal 191379/218710 (executing program) 2022/09/15 13:33:43 fetching corpus: 3500, signal 192426/219527 (executing program) 2022/09/15 13:33:43 fetching corpus: 3550, signal 193223/220227 (executing program) 2022/09/15 13:33:43 fetching corpus: 3600, signal 194349/221031 (executing program) 2022/09/15 13:33:44 fetching corpus: 3650, signal 194938/221644 (executing program) 2022/09/15 13:33:44 fetching corpus: 3700, signal 195770/222335 (executing program) 2022/09/15 13:33:44 fetching corpus: 3750, signal 196557/222977 (executing program) 2022/09/15 13:33:44 fetching corpus: 3800, signal 197425/223618 (executing program) 2022/09/15 13:33:44 fetching corpus: 3850, signal 198234/224189 (executing program) 2022/09/15 13:33:44 fetching corpus: 3900, signal 199180/224788 (executing program) 2022/09/15 13:33:44 fetching corpus: 3950, signal 199831/225374 (executing program) 2022/09/15 13:33:45 fetching corpus: 4000, signal 200231/225791 (executing program) 2022/09/15 13:33:45 fetching corpus: 4050, signal 201077/226493 (executing program) 2022/09/15 13:33:45 fetching corpus: 4100, signal 201750/226996 (executing program) 2022/09/15 13:33:45 fetching corpus: 4150, signal 202414/227472 (executing program) 2022/09/15 13:33:45 fetching corpus: 4200, signal 203382/228114 (executing program) 2022/09/15 13:33:45 fetching corpus: 4250, signal 204000/228585 (executing program) 2022/09/15 13:33:45 fetching corpus: 4300, signal 204664/229051 (executing program) 2022/09/15 13:33:46 fetching corpus: 4350, signal 205735/229593 (executing program) 2022/09/15 13:33:46 fetching corpus: 4400, signal 206452/230124 (executing program) 2022/09/15 13:33:46 fetching corpus: 4450, signal 207543/230701 (executing program) 2022/09/15 13:33:46 fetching corpus: 4500, signal 208209/231131 (executing program) 2022/09/15 13:33:46 fetching corpus: 4550, signal 208929/231616 (executing program) 2022/09/15 13:33:46 fetching corpus: 4600, signal 209486/232011 (executing program) 2022/09/15 13:33:47 fetching corpus: 4650, signal 210320/232411 (executing program) 2022/09/15 13:33:47 fetching corpus: 4700, signal 211153/232828 (executing program) 2022/09/15 13:33:47 fetching corpus: 4750, signal 211993/233274 (executing program) 2022/09/15 13:33:47 fetching corpus: 4800, signal 212697/233620 (executing program) 2022/09/15 13:33:47 fetching corpus: 4850, signal 213452/233971 (executing program) 2022/09/15 13:33:47 fetching corpus: 4900, signal 214030/234279 (executing program) 2022/09/15 13:33:48 fetching corpus: 4950, signal 214779/234568 (executing program) 2022/09/15 13:33:48 fetching corpus: 5000, signal 215539/234925 (executing program) 2022/09/15 13:33:48 fetching corpus: 5050, signal 216406/235278 (executing program) 2022/09/15 13:33:48 fetching corpus: 5100, signal 216993/235534 (executing program) 2022/09/15 13:33:48 fetching corpus: 5150, signal 217451/235789 (executing program) 2022/09/15 13:33:48 fetching corpus: 5200, signal 217952/236020 (executing program) 2022/09/15 13:33:48 fetching corpus: 5250, signal 219231/236309 (executing program) 2022/09/15 13:33:48 fetching corpus: 5300, signal 219772/236499 (executing program) 2022/09/15 13:33:49 fetching corpus: 5350, signal 220679/236723 (executing program) 2022/09/15 13:33:49 fetching corpus: 5400, signal 221294/236926 (executing program) 2022/09/15 13:33:49 fetching corpus: 5450, signal 222685/237344 (executing program) 2022/09/15 13:33:49 fetching corpus: 5500, signal 223139/237504 (executing program) 2022/09/15 13:33:49 fetching corpus: 5550, signal 223647/237661 (executing program) 2022/09/15 13:33:49 fetching corpus: 5600, signal 224166/237861 (executing program) 2022/09/15 13:33:49 fetching corpus: 5650, signal 225083/237997 (executing program) 2022/09/15 13:33:49 fetching corpus: 5700, signal 225906/238079 (executing program) 2022/09/15 13:33:50 fetching corpus: 5750, signal 226604/238080 (executing program) 2022/09/15 13:33:50 fetching corpus: 5800, signal 227084/238089 (executing program) 2022/09/15 13:33:50 fetching corpus: 5850, signal 227847/238212 (executing program) 2022/09/15 13:33:50 fetching corpus: 5900, signal 228594/238227 (executing program) 2022/09/15 13:33:50 fetching corpus: 5950, signal 229072/238310 (executing program) 2022/09/15 13:33:50 fetching corpus: 6000, signal 229549/238353 (executing program) 2022/09/15 13:33:50 fetching corpus: 6050, signal 230547/238423 (executing program) 2022/09/15 13:33:50 fetching corpus: 6100, signal 231029/238438 (executing program) 2022/09/15 13:33:51 fetching corpus: 6131, signal 231307/238451 (executing program) 2022/09/15 13:33:51 fetching corpus: 6131, signal 231307/238451 (executing program) 2022/09/15 13:33:53 starting 8 fuzzer processes 13:33:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read(r0, &(0x7f0000004c80)=""/102392, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000000), 0xc31) 13:33:53 executing program 1: mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x9, 0x70, 0x0) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000040)=0x5, 0x7, 0x0) 13:33:53 executing program 2: prctl$PR_SET_DUMPABLE(0x4, 0x0) [ 70.617286] audit: type=1400 audit(1663248833.483:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:33:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 13:33:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x10}}) 13:33:53 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 13:33:53 executing program 6: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:33:53 executing program 7: io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x100000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "950b8bbc34bf9b44a5f783e82416e13437591aaea9e99d56d9fa2b62c996fb937ef8e5bb361a4eb72e3b338b3d456d93c2993fc14a84c9df4fca9a60ad24fe51c5a3fc272feb82e0053d62793dcbb53a9aac338c90f5cdae9589decd38f50a09d93770fe9fffa2570bae21a6c16607cb009087b6f6850ff959c7cde98a4e32896d4e19a961e665ed3624ef5c69dc0964b4e762a597e962c8f0c77006ae2c2e61c9d589d8075d51ad024b5e6af6d9ad992d0bf7c9b663e91485d32a9e7ee3febf65c5d7f7d8cf1d6ee7a1d12df1d9a056d2c44371e7d7376e0baa911ce2fb91f811506149e1b2bcf3dc0e9c94a294388d4636547a098e57bad5c0bf1ee2d21aabc22fc193ed1e85886abdeb6944ead2082984e3b7724633f58c76185a0e7814cf6745bb5ca89b88abdf102a0bcf9fb0c1b2eed6553ee3a0eab3b9bcebf70187adf95f5a2564a6d081679f6988f7e0fffda8c75027eec9fd9177d245704a2f1348f6aa2141357964efb85de30e3be48ba72b34f46a53c393aacb648b728316adf6edc89a128dac296e8022e3457cda709d3f4ee82e744910890ba79420b32572d19d21d965bb5f7be6713d2aff1c6a47589d00d173a4f7f75c191247fb6eea511c85f1f2ca3389aeec86fa05b79a53eadd44f6928fd6492e18d1de7614e68ab21dfd71508786e535de92de39236ea42fbaa81ae85784b5c24c89f6bee084493fc227b3c9f620efa3b7c13b48c1bd1bc20f5972f2a94a68b6717e2f0524741ee7d55a39eee078436f0af9a982a0953bd1cd57849007d08bfbf1dfe814c8448539baa1c5b8ced883da94c7b946cb9e205c83941172aa1bc8e710fe6efec7ef16639408348485e6890ea289fabb6a872c634aa21059ca2bd3cf3deae4bfada536780a9f11ef2a84a17bc2e5ffefc8b7f1aa708f2d89e496578b78381a82916a7a2b36413b76171af62915c76d20d2ec695f0d7dd0ae6a5a890e1070500a62f4267321900efe7073474e030a3ab8086275b552ac0ca8e94f438307b354e39005cddc582c5da0f3753b37643cc13bdff1efef66055f16e871e8ad26a502e5e7509d05f98f32f3f0b5d563c498e860b5b931e36ccd1e7d7f5a0904288aecd9c6a5bbda28d43169cb7967d69d124f5cf6fd1574ba9a9eabd5b8b0b27bb48ac5659c2734e21eb8cd71ba8c7fd8ff7b7cb65d7d127ff0f53fc25d2f3eb05586d7299eb8cb1eb255a460c9a05151ceead842b1c21e8c19ebecf6cb1a7f9a19a254c9e39bfbcb905d6d0265b37fae4d15ef8e4c56f82bf976662e0d258c2e7ba2ebe6ca3e9ea3d0ea52ee8b67d8f318a2a27a716977d4fe916264e11788a1e80dde6a0100b156b89f11e4e3bf78c66d535e46477fcd9f568578523406f21a6796ac3c1e0f6ba31a471f359579b103299799606a766a1ca7148c153d85c5420bd1e1ee0564c08c88dec5d248eccf1f63cf01015197f6a3fa61a598e8ad327cd6dfe3cf9f0b4e685dc0e9b10908f68b2290a3741a90991e1f67c04015a780a87c89644280b032722ceb2531bbed8e4459edad3409cbe1ddfd071052277cd908cebe5c00009c3f3a33b9ec60b200e700eb9d48954461c82591a5ffeec87f12d081d30e4c61999879c607cc653a3b2478439b42ea05b469534f20653d8d61a55e9761dd331386109af0b2453eb2e8ba54e7c16e890727c133b442956db67278d661166a9290d4fe8008821649eeefba119ba3776597654a546611693db7b3fc63aa2d01047dbf8a6db146b0fcf3afc8d819575f642dc87ffbd0a42bb68c20f1ea1dac2804db95adab571d2ca60c679a8db02ba3cd5765713e5c3748205b56fd3f6f6e32f628c5b986b1f9d218df36b03db78ee74544555dfa7506a939f48c10a9df0620a841f7e9c67cbf5b367c4c0bbd69b76956326f1737d143d49619691433473fd5fed20fc5710ff0f7c6288a4071f02f741532e3080d59b039466ab62972ecc563ee511e8a9d56fa7179569f1d2420ddc90c62d654331771dd8515ecb6d9030901de113996870c1d921fca0d39a5da13183ab12506008f3074a26ef1990fdabfea0d42d346748959a35e0e07c447c03a591c54ae61186cf579e2636e89d3b3f06c5a019330dbb2d313cff036624a789abb4d5a76ea83e31774be2280de447a053e29a2cb6c4fe62292b61e6513098cc0269a6d526aab3dba820ebe9408839a8f96a5cd09bb29dd6e1b2bdfd31d6b93ceb47976f6650f0c294b061fd25118d364cb0654b0f87741953c3fb2a590394179678b1fab1390db08d599bc418f168f4aa56ebbf3fc9f1597151c83e989770349402695c8b2bfd2b488e0735a071650d4fe1420804c66ce4261424f60424c0390397e7eea3ca904173b8620d74799ae84204abc9548801f3ca29973a33110c6b13d0aaaf316948e1d6fb99ca3150864361418d7f05f39ba7b9026a356f185ad23542e6f0af8d71989486bde21d7451acf86bab6ed27271f395ab31e88e6cd6ff6da710e6ae680fc1711a1319694f9ac56cdcfd46a10db35295627a7dcd4c605e98e455164ff21927b904929973b7520f752b76e6cd3732e540371fd78a5a42611f42d0b185d213a47abd2dfdc37c79894d3323900631655bc263fb5e8aa6b6f32c9f8ced4acc81c6d4bc95fa48faee5697d4221cc576bae07afe10057cf40423318fcd32c3158d65eb770728028f8e5354069ec4f4f63b9a4cd68172397bfa5371a43697e7bc26d777c55ce5f0a225324397a7567b0b969604db7d32c95b05017db53bad3cc1ac3f3d3bc0287d7794f9baf0f1a7064258586e39743dc150637d84c47fce0feb9e9f3c1fbddcdc9de4a1011a54cf9a74fd28b029f0bfb45f723e4dbe9910a203e98fdbe6fa0d562ead671d5ecaba5f2f29d8e37dcae6b3b6e0cc4917ef4da6b9f0baacbc51840ebaf85f0f7d11897d8887a35d99f50eedefcb07913a665d0843f68a73767df874c5995936bf5c03bf40ff54e179c094127af6254e22da82484472eca7a48bf932c2470ad5c6bc43b2392ebae24692e73ae1c6e0c03eb958b78952531156d7509da69cfd9d8e5068e560fc7f28a974490ecbbc79aafb65f525e5b8d04aaed3b683c6b23703d6ff361f5bd57a9b62ffa5e994b9bbaaf582688f78bc13ef909f9634324fbf6859646b673e2b1d80f56a58bffdac390c245d8cc3036da0e6656f24af365da36ec6cc74847ccfb4a36115c1f19cc6e848f909089a2ac660d1223765295f37c442f987ed98b3f7b3b963213d2e6289b147c80dfc239800f0d48d37fc4739fa521dd686f5413261a9cd06f1c09c598d3d91e66db106ef212c3a1b8c02834f9cc3634ca938df7a478c25b55f0c654bc4f70057a60a7bbf02706f048329d3ad3052f23b698b8ffb97085f121249359320efff2add0c35db60e7cf74e0169e9cf13c0c3725768fea6e928a213e61bae007bc307e4fe63b0905772c469747b5884509acce8b7c368b417b44460d6e5d3ab9dec690c43a029122ba37216d48a0d7eb519fcd0257df3a693711ffa60c8a3855713f359c3780f4a40694982d7ce84e40f03faaf942730e9daa8777d7a8909999df47955ea430bb443789f047066426df0a7fe04f741420b0db3c5e54f0b03e60b5897e96c4bf34f324ef899b9ea4b36c44b2496f043e7be07f3a58bb094caab78f168d9486d0dfd1adc97ae3ce5e710a9e47e6b5f8360417d1462acb4062057dda820c5d4b4cc90a13732fc2b52b12b2d255cb01f529a597e5ee29eb36e0c479896ae189103580a633c4a09621043df2205d00b45a84cd8ebe81c483cdf66994827672942dba7674e2090829a33744394e7b9c81ff273a5df6e0eceaa9b2abad932c8740d3b0b977e91fc03f4020a4459fa582d48673215c14f0da08a82a67b8bb804915c9d1218d7a9de94033a32725f30f9f9e81987d63cca018d12c3894b7fbeb95901f382bdee8595b2e6b7f42d0ada636db6e000625dfaa79a6309b2dd279fff258cefcc044a06bdbe489230ffdd90efdda0df2da52742a59e24b8c50ec68790fc62207ac2cd6d4997d6a4faa5e2645e30228f39094750eef3ce56b1569438750ff50130c64e8f37d8ff49fa9d9c0d409e9f60f347cb386946ce117b4c40a9a53c7359d3a966c7326263270eb16876ff1e6da42a73a634ac661327a916b8416bac1bb49a5e9b8da0dc7170d833d07df1fab73a7f202aaa768049efefc4b399611a6fdbe29aaccfb6416be56f30e9fce9602d0cf57c1c70b321974e3518434ca828f1a51d4191b99e0e0a7451ba3b4f2b5cf95b44fc417abcc5b0b13bae366614f75c98aade49013475086a48d9e64ba7701d6aa7997132e56b97b962921a73e7a70de0f32c06d0117b24708867f7247024a28096607669001e87ec188812d0eab256b0296e0f70c47c6ca89dd511c1362523930a546a44ebc421e03e979a5bba49732d437d82e7555e5a10c4a1fd933c6c50380d3d7a147586e4033005f533f7ade992af2696c4d122311a473f97644095805a18da9d0b52e2f72dd386a3d14f478c7ba144503ee2e94bfb3853fb37adca2f7bf51872fd3a54e392c8b6dbf142c6ae83ca21575ca6a1d3fa1b1de90f4a816d093561f88f6e6aaf782d08c798147a64851759b8667a1531da2d571e1457edd13d7d0929ae02daed710e9ae1a2796e38a1c2921dd2fd57f825f4cf95f02e34e9cf3e894d57cfde113224210caec0b4ab2901262b6e36d96ea1febc8c73a12f0e40f6b47b13709cfecbec1420fcb5cdc2b5986d0a54fe0459ba5f77b90bc9d2cbdd86663910fed740f6f41d94cb1b3818a550f8da00f6d17b150e4872fec8712a7490a1782a82b9680ceeeb41fdb8c95c1d3d574437d3bd1915020d96e411978c1738d7683b62f5dbf6280dc72860a2b6fa1de548e6a22987f1d3b5eb010172d7c684e9943e32b140fc51cd8c7046a2cc604244a7aad63a9edd2f64c31c8fe127a2cb965ac0a374b24e475bc78f4cbdda40b39b282af1d192bd2a967fc6b7811f8ef8be8d65cd8d3ddbf1e69989c073a16c9c1896ca8a734bc6a4df17d39d30a8b8c1ec3d93534747e8e9a769f60a9e10cc69ea5903993bc481630e1df50eedc1a1a51d96de8fcd27a3ba4108349c92d52b81886d19217b10508527634c58af2806b2dae8c71aaeb6946896decd03266a75bccf676d86064188d0da683b3b38a3c03fc22bbf6c8d8bdea829bc5aa5d5521da096718aa6a629f174e510b1215b49f27db3c145555baa329d15de80976748b68648482cb8cf9e79cc3acefe4d8436c04e882934abc30ac5886d10a54b759f1b4407d1ea9d8cc1049e4f60c9dc96dbda9dbc581d31bb3dcfe32598bac97974d6c8625a2be3d48ef98edfbf0725cc18f21b50a67b0de8ff6544cd67ce0d43fcc1d248"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8001) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r2, r1, 0x0, 0xfffffdef) [ 72.039830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.041289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.045091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.046112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.048870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.050501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.054061] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.056159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.056269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.058820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.059588] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.061334] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.074157] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.092921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.099864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.101806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.112434] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.116154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.124310] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.125947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.131688] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.158184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.160421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.162516] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.164379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.165717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.169061] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.172244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.175886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.178256] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.179932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.181817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.184769] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.186583] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.187874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.190355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.197296] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.198227] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.221982] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.223825] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.225456] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.231157] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.114668] Bluetooth: hci0: command 0x0409 tx timeout [ 74.115448] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 74.116431] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 74.178103] Bluetooth: hci4: command 0x0409 tx timeout [ 74.178764] Bluetooth: hci1: command 0x0409 tx timeout [ 74.242090] Bluetooth: hci7: command 0x0409 tx timeout [ 74.242742] Bluetooth: hci6: command 0x0409 tx timeout [ 74.243375] Bluetooth: hci5: command 0x0409 tx timeout [ 76.163351] Bluetooth: hci0: command 0x041b tx timeout [ 76.226417] Bluetooth: hci1: command 0x041b tx timeout [ 76.228089] Bluetooth: hci4: command 0x041b tx timeout [ 76.290147] Bluetooth: hci5: command 0x041b tx timeout [ 76.292574] Bluetooth: hci6: command 0x041b tx timeout [ 76.293743] Bluetooth: hci7: command 0x041b tx timeout [ 77.511822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.512905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.513932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.515986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.517580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.518399] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.522199] Bluetooth: hci2: HCI_REQ-0x0c1a [ 77.760253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.778884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.789253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.808597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.813593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.820259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.835231] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.210095] Bluetooth: hci0: command 0x040f tx timeout [ 78.274112] Bluetooth: hci4: command 0x040f tx timeout [ 78.274582] Bluetooth: hci1: command 0x040f tx timeout [ 78.338168] Bluetooth: hci7: command 0x040f tx timeout [ 78.338605] Bluetooth: hci6: command 0x040f tx timeout [ 78.338993] Bluetooth: hci5: command 0x040f tx timeout [ 79.619114] Bluetooth: hci2: command 0x0409 tx timeout [ 79.874088] Bluetooth: hci3: command 0x0409 tx timeout [ 80.259089] Bluetooth: hci0: command 0x0419 tx timeout [ 80.323061] Bluetooth: hci1: command 0x0419 tx timeout [ 80.323548] Bluetooth: hci4: command 0x0419 tx timeout [ 80.387118] Bluetooth: hci5: command 0x0419 tx timeout [ 80.387588] Bluetooth: hci6: command 0x0419 tx timeout [ 80.388372] Bluetooth: hci7: command 0x0419 tx timeout [ 81.667126] Bluetooth: hci2: command 0x041b tx timeout [ 81.923076] Bluetooth: hci3: command 0x041b tx timeout [ 83.715059] Bluetooth: hci2: command 0x040f tx timeout [ 83.971062] Bluetooth: hci3: command 0x040f tx timeout [ 85.763068] Bluetooth: hci2: command 0x0419 tx timeout [ 86.019885] Bluetooth: hci3: command 0x0419 tx timeout 13:34:52 executing program 6: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:34:52 executing program 6: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:34:52 executing program 3: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:34:52 executing program 6: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:34:53 executing program 3: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) 13:34:53 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/203}, 0xd3, 0xffffffff00000000, 0x0) 13:34:53 executing program 6: pipe2(&(0x7f0000000200), 0x0) 13:34:53 executing program 3: ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) clone3(&(0x7f0000001900)={0x101010000, 0x0, 0x0, &(0x7f0000001740), {}, &(0x7f0000001780)=""/166, 0xa6, &(0x7f0000001840)=""/68, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) accept(0xffffffffffffffff, &(0x7f0000002d40)=@can, &(0x7f0000002dc0)=0x80) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002ec0)) [ 133.637772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 133.639623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 133.640725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 133.642536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 133.643570] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 133.644557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 133.647810] Bluetooth: hci1: HCI_REQ-0x0c1a [ 134.569099] loop7: detected capacity change from 0 to 40 [ 134.589477] audit: type=1400 audit(1663248897.456:7): avc: denied { open } for pid=3953 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.591270] audit: type=1400 audit(1663248897.456:8): avc: denied { kernel } for pid=3953 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.598651] ------------[ cut here ]------------ [ 134.598675] [ 134.598679] ====================================================== [ 134.598682] WARNING: possible circular locking dependency detected [ 134.598687] 6.0.0-rc5-next-20220915 #1 Not tainted [ 134.598693] ------------------------------------------------------ [ 134.598697] syz-executor.7/3954 is trying to acquire lock: [ 134.598703] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.598741] [ 134.598741] but task is already holding lock: [ 134.598744] ffff88800f185420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.598772] [ 134.598772] which lock already depends on the new lock. [ 134.598772] [ 134.598775] [ 134.598775] the existing dependency chain (in reverse order) is: [ 134.598778] [ 134.598778] -> #3 (&ctx->lock){....}-{2:2}: [ 134.598792] _raw_spin_lock+0x2a/0x40 [ 134.598810] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.598822] __schedule+0xedd/0x2470 [ 134.598833] schedule+0xda/0x1b0 [ 134.598843] futex_wait_queue+0xf5/0x1e0 [ 134.598855] futex_wait+0x28e/0x690 [ 134.598864] do_futex+0x2ff/0x380 [ 134.598874] __x64_sys_futex+0x1c6/0x4d0 [ 134.598883] do_syscall_64+0x3b/0x90 [ 134.598898] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.598916] [ 134.598916] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.598930] _raw_spin_lock_nested+0x30/0x40 [ 134.598946] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.598959] task_fork_fair+0x63/0x4d0 [ 134.598976] sched_cgroup_fork+0x3d0/0x540 [ 134.598993] copy_process+0x4183/0x6e20 [ 134.599006] kernel_clone+0xe7/0x890 [ 134.599015] user_mode_thread+0xad/0xf0 [ 134.599026] rest_init+0x24/0x250 [ 134.599043] arch_call_rest_init+0xf/0x14 [ 134.599056] start_kernel+0x4c1/0x4e6 [ 134.599066] secondary_startup_64_no_verify+0xe0/0xeb [ 134.599081] [ 134.599081] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.599094] _raw_spin_lock_irqsave+0x39/0x60 [ 134.599110] try_to_wake_up+0xab/0x1920 [ 134.599123] up+0x75/0xb0 [ 134.599135] __up_console_sem+0x6e/0x80 [ 134.599152] console_unlock+0x46a/0x590 [ 134.599168] vt_ioctl+0x2822/0x2ca0 [ 134.599181] tty_ioctl+0x7c4/0x1700 [ 134.599192] __x64_sys_ioctl+0x19a/0x210 [ 134.599208] do_syscall_64+0x3b/0x90 [ 134.599221] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.599239] [ 134.599239] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.599253] __lock_acquire+0x2a02/0x5e70 [ 134.599270] lock_acquire+0x1a2/0x530 [ 134.599286] _raw_spin_lock_irqsave+0x39/0x60 [ 134.599301] down_trylock+0xe/0x70 [ 134.599314] __down_trylock_console_sem+0x3b/0xd0 [ 134.599330] vprintk_emit+0x16b/0x560 [ 134.599347] vprintk+0x84/0xa0 [ 134.599363] _printk+0xba/0xf1 [ 134.599382] report_bug.cold+0x72/0xab [ 134.599395] handle_bug+0x3c/0x70 [ 134.599408] exc_invalid_op+0x14/0x50 [ 134.599422] asm_exc_invalid_op+0x16/0x20 [ 134.599439] group_sched_out.part.0+0x2c7/0x460 [ 134.599450] ctx_sched_out+0x8f1/0xc10 [ 134.599459] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.599471] __schedule+0xedd/0x2470 [ 134.599481] schedule+0xda/0x1b0 [ 134.599491] futex_wait_queue+0xf5/0x1e0 [ 134.599501] futex_wait+0x28e/0x690 [ 134.599511] do_futex+0x2ff/0x380 [ 134.599520] __x64_sys_futex+0x1c6/0x4d0 [ 134.599529] do_syscall_64+0x3b/0x90 [ 134.599543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.599561] [ 134.599561] other info that might help us debug this: [ 134.599561] [ 134.599564] Chain exists of: [ 134.599564] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.599564] [ 134.599579] Possible unsafe locking scenario: [ 134.599579] [ 134.599581] CPU0 CPU1 [ 134.599583] ---- ---- [ 134.599586] lock(&ctx->lock); [ 134.599591] lock(&rq->__lock); [ 134.599598] lock(&ctx->lock); [ 134.599604] lock((console_sem).lock); [ 134.599610] [ 134.599610] *** DEADLOCK *** [ 134.599610] [ 134.599611] 2 locks held by syz-executor.7/3954: [ 134.599618] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.599644] #1: ffff88800f185420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.599671] [ 134.599671] stack backtrace: [ 134.599674] CPU: 0 PID: 3954 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 134.599687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.599695] Call Trace: [ 134.599699] [ 134.599703] dump_stack_lvl+0x8b/0xb3 [ 134.599719] check_noncircular+0x263/0x2e0 [ 134.599736] ? format_decode+0x26c/0xb50 [ 134.599752] ? print_circular_bug+0x450/0x450 [ 134.599769] ? enable_ptr_key_workfn+0x20/0x20 [ 134.599784] ? format_decode+0x26c/0xb50 [ 134.599800] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.599818] __lock_acquire+0x2a02/0x5e70 [ 134.599840] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.599863] lock_acquire+0x1a2/0x530 [ 134.599880] ? down_trylock+0xe/0x70 [ 134.599895] ? rcu_read_unlock+0x40/0x40 [ 134.599916] ? vprintk+0x84/0xa0 [ 134.599934] _raw_spin_lock_irqsave+0x39/0x60 [ 134.599950] ? down_trylock+0xe/0x70 [ 134.599964] down_trylock+0xe/0x70 [ 134.599977] ? vprintk+0x84/0xa0 [ 134.599995] __down_trylock_console_sem+0x3b/0xd0 [ 134.600012] vprintk_emit+0x16b/0x560 [ 134.600032] vprintk+0x84/0xa0 [ 134.600050] _printk+0xba/0xf1 [ 134.600068] ? record_print_text.cold+0x16/0x16 [ 134.600091] ? report_bug.cold+0x66/0xab [ 134.600106] ? group_sched_out.part.0+0x2c7/0x460 [ 134.600117] report_bug.cold+0x72/0xab [ 134.600133] handle_bug+0x3c/0x70 [ 134.600147] exc_invalid_op+0x14/0x50 [ 134.600162] asm_exc_invalid_op+0x16/0x20 [ 134.600180] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.600194] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.600205] RSP: 0018:ffff888031e3f8f8 EFLAGS: 00010006 [ 134.600214] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.600222] RDX: ffff888022675040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.600230] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.600237] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f185400 [ 134.600245] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 134.600256] ? group_sched_out.part.0+0x2c7/0x460 [ 134.600269] ? group_sched_out.part.0+0x2c7/0x460 [ 134.600282] ctx_sched_out+0x8f1/0xc10 [ 134.600294] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.600310] ? lock_is_held_type+0xd7/0x130 [ 134.600329] ? __perf_cgroup_move+0x160/0x160 [ 134.600341] ? set_next_entity+0x304/0x550 [ 134.600361] ? lock_is_held_type+0xd7/0x130 [ 134.600380] __schedule+0xedd/0x2470 [ 134.600394] ? io_schedule_timeout+0x150/0x150 [ 134.600406] ? futex_wait_setup+0x166/0x230 [ 134.600420] schedule+0xda/0x1b0 [ 134.600432] futex_wait_queue+0xf5/0x1e0 [ 134.600444] futex_wait+0x28e/0x690 [ 134.600456] ? futex_wait_setup+0x230/0x230 [ 134.600469] ? wake_up_q+0x8b/0xf0 [ 134.600482] ? do_raw_spin_unlock+0x4f/0x220 [ 134.600502] ? futex_wake+0x158/0x490 [ 134.600518] ? fd_install+0x1f9/0x640 [ 134.600535] do_futex+0x2ff/0x380 [ 134.600545] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 134.600561] __x64_sys_futex+0x1c6/0x4d0 [ 134.600573] ? __x64_sys_futex_time32+0x480/0x480 [ 134.600584] ? trace_rcu_dyntick+0x1a7/0x250 [ 134.600605] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.600624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.600645] do_syscall_64+0x3b/0x90 [ 134.600660] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.600678] RIP: 0033:0x7fe2b6169b19 [ 134.600687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.600697] RSP: 002b:00007fe2b36df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.600708] RAX: ffffffffffffffda RBX: 00007fe2b627cf68 RCX: 00007fe2b6169b19 [ 134.600716] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2b627cf68 [ 134.600723] RBP: 00007fe2b627cf60 R08: 0000000000000000 R09: 0000000000000000 [ 134.600731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2b627cf6c [ 134.600738] R13: 00007ffe65c5b61f R14: 00007fe2b36df300 R15: 0000000000022000 [ 134.600751] [ 134.660706] WARNING: CPU: 0 PID: 3954 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.661401] Modules linked in: [ 134.661648] CPU: 0 PID: 3954 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220915 #1 [ 134.662246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.663075] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.663473] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.664818] RSP: 0018:ffff888031e3f8f8 EFLAGS: 00010006 [ 134.665214] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.665747] RDX: ffff888022675040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.666284] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 134.666819] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800f185400 [ 134.667344] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 134.667881] FS: 00007fe2b36df700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 134.668477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.668910] CR2: 00007f676c032008 CR3: 000000000d89a000 CR4: 0000000000350ef0 [ 134.669449] Call Trace: [ 134.669642] [ 134.669822] ctx_sched_out+0x8f1/0xc10 [ 134.670114] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.670510] ? lock_is_held_type+0xd7/0x130 [ 134.670848] ? __perf_cgroup_move+0x160/0x160 [ 134.671186] ? set_next_entity+0x304/0x550 [ 134.671514] ? lock_is_held_type+0xd7/0x130 [ 134.671846] __schedule+0xedd/0x2470 [ 134.672129] ? io_schedule_timeout+0x150/0x150 [ 134.672470] ? futex_wait_setup+0x166/0x230 [ 134.672790] schedule+0xda/0x1b0 [ 134.673062] futex_wait_queue+0xf5/0x1e0 [ 134.673365] futex_wait+0x28e/0x690 [ 134.673639] ? futex_wait_setup+0x230/0x230 [ 134.673958] ? wake_up_q+0x8b/0xf0 [ 134.674231] ? do_raw_spin_unlock+0x4f/0x220 [ 134.674570] ? futex_wake+0x158/0x490 [ 134.674856] ? fd_install+0x1f9/0x640 [ 134.675149] do_futex+0x2ff/0x380 [ 134.675408] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 134.675841] __x64_sys_futex+0x1c6/0x4d0 [ 134.676151] ? __x64_sys_futex_time32+0x480/0x480 [ 134.676506] ? trace_rcu_dyntick+0x1a7/0x250 [ 134.676846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.677243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 134.677634] do_syscall_64+0x3b/0x90 [ 134.677914] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.678303] RIP: 0033:0x7fe2b6169b19 [ 134.678579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.679920] RSP: 002b:00007fe2b36df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.680475] RAX: ffffffffffffffda RBX: 00007fe2b627cf68 RCX: 00007fe2b6169b19 [ 134.681016] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2b627cf68 [ 134.681537] RBP: 00007fe2b627cf60 R08: 0000000000000000 R09: 0000000000000000 [ 134.682074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2b627cf6c [ 134.682611] R13: 00007ffe65c5b61f R14: 00007fe2b36df300 R15: 0000000000022000 [ 134.683159] [ 134.683340] irq event stamp: 3086 [ 134.683602] hardirqs last enabled at (3085): [] syscall_enter_from_user_mode+0x1d/0x50 [ 134.684315] hardirqs last disabled at (3086): [] __schedule+0x1225/0x2470 [ 134.684942] softirqs last enabled at (2962): [] __irq_exit_rcu+0x11b/0x180 [ 134.685601] softirqs last disabled at (2953): [] __irq_exit_rcu+0x11b/0x180 [ 134.686245] ---[ end trace 0000000000000000 ]--- [ 135.682076] Bluetooth: hci1: command 0x0409 tx timeout [ 135.875043] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 137.730057] Bluetooth: hci1: command 0x041b tx timeout [ 139.778042] Bluetooth: hci1: command 0x040f tx timeout [ 140.098169] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 141.826224] Bluetooth: hci1: command 0x0419 tx timeout [ 144.322047] Bluetooth: hci5: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 13:34:57 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888031e3f348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe2b36df700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f676c032008 CR3=000000000d89a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84264287 RDX=ffffed100d9c6f99 RSI=0000000000000004 RDI=ffff88806ce37cc0 RBP=ffff88806ce37cc0 RSP=ffff888009037898 R8 =0000000000000000 R9 =ffff88806ce37cc3 R10=ffffed100d9c6f98 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c6f98 R14=0000000000000001 R15=1ffff11001206f14 RIP=ffffffff84264304 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2b5c446f4 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff2b5c53470 00007ff2b5c52f20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000