Warning: Permanently added '[localhost]:50265' (ECDSA) to the list of known hosts. 2022/09/16 10:51:36 fuzzer started 2022/09/16 10:51:36 dialing manager at localhost:36051 syzkaller login: [ 36.883961] cgroup: Unknown subsys name 'net' [ 37.011005] cgroup: Unknown subsys name 'rlimit' 2022/09/16 10:51:51 syscalls: 2215 2022/09/16 10:51:51 code coverage: enabled 2022/09/16 10:51:51 comparison tracing: enabled 2022/09/16 10:51:51 extra coverage: enabled 2022/09/16 10:51:51 setuid sandbox: enabled 2022/09/16 10:51:51 namespace sandbox: enabled 2022/09/16 10:51:51 Android sandbox: enabled 2022/09/16 10:51:51 fault injection: enabled 2022/09/16 10:51:51 leak checking: enabled 2022/09/16 10:51:51 net packet injection: enabled 2022/09/16 10:51:51 net device setup: enabled 2022/09/16 10:51:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/16 10:51:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/16 10:51:51 USB emulation: enabled 2022/09/16 10:51:51 hci packet injection: enabled 2022/09/16 10:51:51 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/16 10:51:51 802.15.4 emulation: enabled 2022/09/16 10:51:51 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/31807 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/32132 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/32465 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/32812 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/33140 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/33485 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/33807 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/34132 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/34434 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/34815 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/35155 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/35487 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/35820 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/36132 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/36459 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/36757 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/37094 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/37301 (executing program) 2022/09/16 10:51:51 fetching corpus: 29, signal 31149/37301 (executing program) 2022/09/16 10:51:53 starting 8 fuzzer processes 10:51:53 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f0000000340)=[@free_buffer, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@fda, @ptr={0x70742a85, 0x0, 0x0}, @fda}, 0x0}}], 0x0, 0x0, &(0x7f0000000400)}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd) 10:51:53 executing program 1: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000580)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 10:51:53 executing program 2: clone3(&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000003080)=[0x0, 0x0], 0x2}, 0x58) 10:51:53 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x7, 0x5, 0x1d, 0x8, "c0db93bd579ffb40c1bacb7e014c09d87ba46ee7244b8aeff152b7546057009ee8a3e9c6ea8442f941a49f46b74e4ec66bedcd89b10012d9af7c6c6eaf856af9", "469896bf6bf35adea3cc7c65c940d8a749d6c0b0c149163dcce16f14e5e7fa41", [0xfffffffffffff72f, 0x1]}) mbind(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, &(0x7f0000000000)=0xd, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x6, 0x7f, 0x400}, {0x982b, 0x3, 0x4, 0x4}, {0x9, 0x7f, 0x7b, 0x1}, {0x2, 0x3, 0x1, 0x401}, {0x8, 0x3, 0xd1, 0x6}]}) [ 53.896121] audit: type=1400 audit(1663325513.626:6): avc: denied { execmem } for pid=284 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:51:53 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x2b, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:51:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x83, 0x2}, 0xe) 10:51:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, &(0x7f0000000180)=0x80, r0, &(0x7f00000001c0), 0x400, 0x0) 10:51:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x2c}}, 0x0) [ 55.127730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.130726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.132327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.135561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.138076] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.139808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.146381] Bluetooth: hci0: HCI_REQ-0x0c1a [ 55.203619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.205039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.206430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.207818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.209946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.211543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.213399] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.214519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.218303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.219456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.221364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.222504] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.223902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.224936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.239312] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.248342] Bluetooth: hci3: HCI_REQ-0x0c1a [ 55.267539] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.269601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.271118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.275890] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.277872] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.279515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.284421] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.317884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.320250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.331791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.334916] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.340724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.340815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.345529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.347383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.349580] Bluetooth: hci1: HCI_REQ-0x0c1a [ 55.360072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.365820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.368923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.376539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.376608] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.388723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.393568] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.395533] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.401687] Bluetooth: hci2: HCI_REQ-0x0c1a [ 55.403975] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 55.411512] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 55.412378] Bluetooth: hci4: HCI_REQ-0x0c1a [ 55.415521] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 55.430963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 55.441358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 55.443626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 55.448239] Bluetooth: hci7: HCI_REQ-0x0c1a [ 57.217711] Bluetooth: hci0: command 0x0409 tx timeout [ 57.280396] Bluetooth: hci5: command 0x0409 tx timeout [ 57.281413] Bluetooth: hci3: command 0x0409 tx timeout [ 57.345322] Bluetooth: hci6: command 0x0409 tx timeout [ 57.410437] Bluetooth: hci1: command 0x0409 tx timeout [ 57.472947] Bluetooth: hci7: command 0x0409 tx timeout [ 57.473818] Bluetooth: hci4: command 0x0409 tx timeout [ 57.474373] Bluetooth: hci2: command 0x0409 tx timeout [ 59.264374] Bluetooth: hci0: command 0x041b tx timeout [ 59.328399] Bluetooth: hci3: command 0x041b tx timeout [ 59.330002] Bluetooth: hci5: command 0x041b tx timeout [ 59.392356] Bluetooth: hci6: command 0x041b tx timeout [ 59.456351] Bluetooth: hci1: command 0x041b tx timeout [ 59.520392] Bluetooth: hci2: command 0x041b tx timeout [ 59.520878] Bluetooth: hci4: command 0x041b tx timeout [ 59.522052] Bluetooth: hci7: command 0x041b tx timeout [ 61.312308] Bluetooth: hci0: command 0x040f tx timeout [ 61.376473] Bluetooth: hci5: command 0x040f tx timeout [ 61.376968] Bluetooth: hci3: command 0x040f tx timeout [ 61.440370] Bluetooth: hci6: command 0x040f tx timeout [ 61.504357] Bluetooth: hci1: command 0x040f tx timeout [ 61.568457] Bluetooth: hci7: command 0x040f tx timeout [ 61.568977] Bluetooth: hci4: command 0x040f tx timeout [ 61.569793] Bluetooth: hci2: command 0x040f tx timeout [ 63.360317] Bluetooth: hci0: command 0x0419 tx timeout [ 63.424332] Bluetooth: hci3: command 0x0419 tx timeout [ 63.424786] Bluetooth: hci5: command 0x0419 tx timeout [ 63.488304] Bluetooth: hci6: command 0x0419 tx timeout [ 63.552350] Bluetooth: hci1: command 0x0419 tx timeout [ 63.616341] Bluetooth: hci2: command 0x0419 tx timeout [ 63.616959] Bluetooth: hci4: command 0x0419 tx timeout [ 63.618201] Bluetooth: hci7: command 0x0419 tx timeout 10:52:51 executing program 2: clone3(&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000003080)=[0x0, 0x0], 0x2}, 0x58) 10:52:52 executing program 2: clone3(&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000003080)=[0x0, 0x0], 0x2}, 0x58) 10:52:52 executing program 2: clone3(&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000003080)=[0x0, 0x0], 0x2}, 0x58) 10:52:52 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, "a51683ee"}, &(0x7f0000000240)=0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x4000}, 0x8000) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) [ 112.992492] audit: type=1400 audit(1663325572.722:7): avc: denied { open } for pid=3819 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.993872] audit: type=1400 audit(1663325572.723:8): avc: denied { kernel } for pid=3819 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 113.015208] ------------[ cut here ]------------ [ 113.015233] [ 113.015237] ====================================================== [ 113.015241] WARNING: possible circular locking dependency detected [ 113.015245] 6.0.0-rc5-next-20220916 #1 Not tainted [ 113.015255] ------------------------------------------------------ [ 113.015258] syz-executor.2/3820 is trying to acquire lock: [ 113.015265] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 113.015308] [ 113.015308] but task is already holding lock: [ 113.015310] ffff888009a0f020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.015339] [ 113.015339] which lock already depends on the new lock. [ 113.015339] [ 113.015342] [ 113.015342] the existing dependency chain (in reverse order) is: [ 113.015345] [ 113.015345] -> #3 (&ctx->lock){....}-{2:2}: [ 113.015359] _raw_spin_lock+0x2a/0x40 [ 113.015377] __perf_event_task_sched_out+0x53b/0x18d0 [ 113.015389] __schedule+0xedd/0x2470 [ 113.015400] schedule+0xda/0x1b0 [ 113.015409] futex_wait_queue+0xf5/0x1e0 [ 113.015421] futex_wait+0x28e/0x690 [ 113.015431] do_futex+0x2ff/0x380 [ 113.015440] __x64_sys_futex+0x1c6/0x4d0 [ 113.015450] do_syscall_64+0x3b/0x90 [ 113.015473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.015491] [ 113.015491] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 113.015505] _raw_spin_lock_nested+0x30/0x40 [ 113.015521] raw_spin_rq_lock_nested+0x1e/0x30 [ 113.015534] task_fork_fair+0x63/0x4d0 [ 113.015551] sched_cgroup_fork+0x3d0/0x540 [ 113.015566] copy_process+0x4183/0x6e20 [ 113.015577] kernel_clone+0xe7/0x890 [ 113.015586] user_mode_thread+0xad/0xf0 [ 113.015596] rest_init+0x24/0x250 [ 113.015614] arch_call_rest_init+0xf/0x14 [ 113.015627] start_kernel+0x4c1/0x4e6 [ 113.015637] secondary_startup_64_no_verify+0xe0/0xeb [ 113.015652] [ 113.015652] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 113.015665] _raw_spin_lock_irqsave+0x39/0x60 [ 113.015681] try_to_wake_up+0xab/0x1920 [ 113.015694] up+0x75/0xb0 [ 113.015706] __up_console_sem+0x6e/0x80 [ 113.015723] console_unlock+0x46a/0x590 [ 113.015739] vt_ioctl+0x2822/0x2ca0 [ 113.015753] tty_ioctl+0x7c4/0x1700 [ 113.015765] __x64_sys_ioctl+0x19a/0x210 [ 113.015781] do_syscall_64+0x3b/0x90 [ 113.015795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.015812] [ 113.015812] -> #0 ((console_sem).lock){....}-{2:2}: [ 113.015826] __lock_acquire+0x2a02/0x5e70 [ 113.015843] lock_acquire+0x1a2/0x530 [ 113.015859] _raw_spin_lock_irqsave+0x39/0x60 [ 113.015874] down_trylock+0xe/0x70 [ 113.015887] __down_trylock_console_sem+0x3b/0xd0 [ 113.015903] vprintk_emit+0x16b/0x560 [ 113.015920] vprintk+0x84/0xa0 [ 113.015937] _printk+0xba/0xf1 [ 113.015955] report_bug.cold+0x72/0xab [ 113.015969] handle_bug+0x3c/0x70 [ 113.015982] exc_invalid_op+0x14/0x50 [ 113.015996] asm_exc_invalid_op+0x16/0x20 [ 113.016013] group_sched_out.part.0+0x2c7/0x460 [ 113.016024] ctx_sched_out+0x8f1/0xc10 [ 113.016033] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.016045] __schedule+0xedd/0x2470 [ 113.016055] schedule+0xda/0x1b0 [ 113.016065] futex_wait_queue+0xf5/0x1e0 [ 113.016076] futex_wait+0x28e/0x690 [ 113.016085] do_futex+0x2ff/0x380 [ 113.016094] __x64_sys_futex+0x1c6/0x4d0 [ 113.016104] do_syscall_64+0x3b/0x90 [ 113.016117] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.016135] [ 113.016135] other info that might help us debug this: [ 113.016135] [ 113.016137] Chain exists of: [ 113.016137] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 113.016137] [ 113.016152] Possible unsafe locking scenario: [ 113.016152] [ 113.016155] CPU0 CPU1 [ 113.016157] ---- ---- [ 113.016160] lock(&ctx->lock); [ 113.016165] lock(&rq->__lock); [ 113.016172] lock(&ctx->lock); [ 113.016178] lock((console_sem).lock); [ 113.016183] [ 113.016183] *** DEADLOCK *** [ 113.016183] [ 113.016185] 2 locks held by syz-executor.2/3820: [ 113.016192] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 113.016218] #1: ffff888009a0f020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 113.016246] [ 113.016246] stack backtrace: [ 113.016248] CPU: 0 PID: 3820 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 113.016261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 113.016269] Call Trace: [ 113.016273] [ 113.016278] dump_stack_lvl+0x8b/0xb3 [ 113.016293] check_noncircular+0x263/0x2e0 [ 113.016310] ? format_decode+0x26c/0xb50 [ 113.016326] ? print_circular_bug+0x450/0x450 [ 113.016344] ? enable_ptr_key_workfn+0x20/0x20 [ 113.016359] ? format_decode+0x26c/0xb50 [ 113.016375] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 113.016393] __lock_acquire+0x2a02/0x5e70 [ 113.016415] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 113.016438] lock_acquire+0x1a2/0x530 [ 113.016456] ? down_trylock+0xe/0x70 [ 113.016470] ? rcu_read_unlock+0x40/0x40 [ 113.016492] ? vprintk+0x84/0xa0 [ 113.016510] _raw_spin_lock_irqsave+0x39/0x60 [ 113.016526] ? down_trylock+0xe/0x70 [ 113.016540] down_trylock+0xe/0x70 [ 113.016554] ? vprintk+0x84/0xa0 [ 113.016571] __down_trylock_console_sem+0x3b/0xd0 [ 113.016589] vprintk_emit+0x16b/0x560 [ 113.016608] vprintk+0x84/0xa0 [ 113.016626] _printk+0xba/0xf1 [ 113.016645] ? record_print_text.cold+0x16/0x16 [ 113.016668] ? report_bug.cold+0x66/0xab [ 113.016683] ? group_sched_out.part.0+0x2c7/0x460 [ 113.016694] report_bug.cold+0x72/0xab [ 113.016710] handle_bug+0x3c/0x70 [ 113.016724] exc_invalid_op+0x14/0x50 [ 113.016739] asm_exc_invalid_op+0x16/0x20 [ 113.016757] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.016771] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.016783] RSP: 0018:ffff88803cd8f8f8 EFLAGS: 00010006 [ 113.016792] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.016799] RDX: ffff88801d2c5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 113.016807] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 113.016815] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888009a0f000 [ 113.016823] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 113.016834] ? group_sched_out.part.0+0x2c7/0x460 [ 113.016847] ? group_sched_out.part.0+0x2c7/0x460 [ 113.016860] ctx_sched_out+0x8f1/0xc10 [ 113.016872] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.016888] ? lock_is_held_type+0xd7/0x130 [ 113.016907] ? __perf_cgroup_move+0x160/0x160 [ 113.016919] ? set_next_entity+0x304/0x550 [ 113.016939] ? lock_is_held_type+0xd7/0x130 [ 113.016959] __schedule+0xedd/0x2470 [ 113.016973] ? io_schedule_timeout+0x150/0x150 [ 113.016984] ? futex_wait_setup+0x166/0x230 [ 113.016999] schedule+0xda/0x1b0 [ 113.017010] futex_wait_queue+0xf5/0x1e0 [ 113.017022] futex_wait+0x28e/0x690 [ 113.017035] ? futex_wait_setup+0x230/0x230 [ 113.017048] ? wake_up_q+0x8b/0xf0 [ 113.017061] ? do_raw_spin_unlock+0x4f/0x220 [ 113.017081] ? futex_wake+0x158/0x490 [ 113.017097] ? fd_install+0x1f9/0x640 [ 113.017114] do_futex+0x2ff/0x380 [ 113.017125] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 113.017141] __x64_sys_futex+0x1c6/0x4d0 [ 113.017153] ? __x64_sys_futex_time32+0x480/0x480 [ 113.017166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.017185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.017206] do_syscall_64+0x3b/0x90 [ 113.017221] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.017239] RIP: 0033:0x7f50ff496b19 [ 113.017248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.017259] RSP: 002b:00007f50fca0c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.017270] RAX: ffffffffffffffda RBX: 00007f50ff5a9f68 RCX: 00007f50ff496b19 [ 113.017278] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50ff5a9f68 [ 113.017285] RBP: 00007f50ff5a9f60 R08: 0000000000000000 R09: 0000000000000000 [ 113.017292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50ff5a9f6c [ 113.017299] R13: 00007ffe917ea37f R14: 00007f50fca0c300 R15: 0000000000022000 [ 113.017312] [ 113.149336] WARNING: CPU: 0 PID: 3820 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 113.150675] Modules linked in: [ 113.151150] CPU: 0 PID: 3820 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 113.152324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 113.153948] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 113.154741] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 113.157376] RSP: 0018:ffff88803cd8f8f8 EFLAGS: 00010006 [ 113.158148] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 113.159177] RDX: ffff88801d2c5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 113.160213] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 113.161244] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888009a0f000 [ 113.162270] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 113.163309] FS: 00007f50fca0c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 113.164484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.165331] CR2: 00007f0cc20b5028 CR3: 0000000017e5e000 CR4: 0000000000350ef0 [ 113.166372] Call Trace: [ 113.166757] [ 113.167100] ctx_sched_out+0x8f1/0xc10 [ 113.167699] __perf_event_task_sched_out+0x6d0/0x18d0 [ 113.168461] ? lock_is_held_type+0xd7/0x130 [ 113.169110] ? __perf_cgroup_move+0x160/0x160 [ 113.169773] ? set_next_entity+0x304/0x550 [ 113.170415] ? lock_is_held_type+0xd7/0x130 [ 113.171049] __schedule+0xedd/0x2470 [ 113.171613] ? io_schedule_timeout+0x150/0x150 [ 113.172278] ? futex_wait_setup+0x166/0x230 [ 113.172897] schedule+0xda/0x1b0 [ 113.173401] futex_wait_queue+0xf5/0x1e0 [ 113.173989] futex_wait+0x28e/0x690 [ 113.174516] ? futex_wait_setup+0x230/0x230 [ 113.175140] ? wake_up_q+0x8b/0xf0 [ 113.175681] ? do_raw_spin_unlock+0x4f/0x220 [ 113.176340] ? futex_wake+0x158/0x490 [ 113.176912] ? fd_install+0x1f9/0x640 [ 113.177486] do_futex+0x2ff/0x380 [ 113.178005] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 113.178857] __x64_sys_futex+0x1c6/0x4d0 [ 113.179466] ? __x64_sys_futex_time32+0x480/0x480 [ 113.180176] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.180946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.181721] do_syscall_64+0x3b/0x90 [ 113.182287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.183062] RIP: 0033:0x7f50ff496b19 [ 113.183631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.186246] RSP: 002b:00007f50fca0c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 113.187343] RAX: ffffffffffffffda RBX: 00007f50ff5a9f68 RCX: 00007f50ff496b19 [ 113.188383] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50ff5a9f68 [ 113.189409] RBP: 00007f50ff5a9f60 R08: 0000000000000000 R09: 0000000000000000 [ 113.190441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f50ff5a9f6c [ 113.191482] R13: 00007ffe917ea37f R14: 00007f50fca0c300 R15: 0000000000022000 [ 113.192529] [ 113.192876] irq event stamp: 706 [ 113.193368] hardirqs last enabled at (705): [] syscall_enter_from_user_mode+0x1d/0x50 [ 113.194745] hardirqs last disabled at (706): [] __schedule+0x1225/0x2470 [ 113.195908] softirqs last enabled at (0): [] copy_process+0x1e15/0x6e20 [ 113.197067] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 113.197955] ---[ end trace 0000000000000000 ]--- 10:52:52 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, "a51683ee"}, &(0x7f0000000240)=0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x4000}, 0x8000) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 10:52:53 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, "a51683ee"}, &(0x7f0000000240)=0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x4000}, 0x8000) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 10:52:53 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, "a51683ee"}, &(0x7f0000000240)=0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x4000}, 0x8000) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 10:52:53 executing program 2: rt_sigpending(&(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000001e0069ff130000e1"], 0x1c}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, "a51683ee"}, &(0x7f0000000240)=0x28) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x48100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="b00000002c00000326bd7000ffdbdf25714555585551785107a9f87861bad56ec11ec2d014e825bcaf2754e11fb268bf6e009d8e0fc2288768d169721dc4524f132d8ea4ac7c20ed86eba60f1420e1fc3a53deff09ac519c9792242f10cab10d8686779e2513671c9c9172ee9b08e999376a88330cde7f8789151095c99ab4dde3eed3516d812700a8fe1222507cf5450e2308000300ac1414aa14004000fc0100000000000000000000000000010000"], 0xb0}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x4000}, 0x8000) signalfd4(r0, &(0x7f00000001c0)={[0x5]}, 0x8, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) [ 116.429587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.430691] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.432290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.438485] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.440086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.440985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.445394] Bluetooth: hci2: HCI_REQ-0x0c1a [ 118.336309] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 118.465470] Bluetooth: hci2: command 0x0409 tx timeout [ 118.529281] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 118.593482] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 118.656285] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 118.656308] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 120.518557] Bluetooth: hci2: command 0x041b tx timeout [ 120.533618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.535867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.538189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.540644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.542362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.543586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.547442] Bluetooth: hci1: HCI_REQ-0x0c1a [ 120.785244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.790682] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.791946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.794994] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.797602] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 120.799248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.802700] Bluetooth: hci5: HCI_REQ-0x0c1a [ 122.560334] Bluetooth: hci2: command 0x040f tx timeout [ 122.560336] Bluetooth: hci1: command 0x0409 tx timeout [ 122.688302] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 122.816290] Bluetooth: hci5: command 0x0409 tx timeout [ 122.880322] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 122.880839] Bluetooth: hci6: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 10:52:53 Registers: info registers vcpu 0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88803cd8f348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240 RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f50fca0c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0cc20b5028 CR3=0000000017e5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f50ff57d7c0 00007f50ff57d7c8 YMM02=0000000000000000 0000000000000000 00007f50ff57d7e0 00007f50ff57d7c0 YMM03=0000000000000000 0000000000000000 00007f50ff57d7c8 00007f50ff57d7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff8116da0a RCX=0000000000000000 RDX=1ffff1100799feeb RSI=ffff88803ccfff08 RDI=ffffffff8116da0a RBP=ffffffff8116da0a RSP=ffff88803ccff6b8 R8 =ffffffff85e449c4 R9 =ffffffff85e449c8 R10=ffffed100799feed R11=ffff88803ccff740 R12=ffff88803ccff7c8 R13=0000000000000000 R14=ffff88800c86b580 R15=ffff888008478280 RIP=ffffffff811d6133 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd4741f26f4 CR3=0000000018bb4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000