syzkaller login: [ 43.067128] sshd (244) used greatest stack depth: 24248 bytes left
Warning: Permanently added '[localhost]:42366' (ECDSA) to the list of known hosts.
2022/09/12 15:45:45 fuzzer started
2022/09/12 15:45:46 dialing manager at localhost:38027
[ 45.192555] cgroup: Unknown subsys name 'net'
[ 45.307491] cgroup: Unknown subsys name 'rlimit'
2022/09/12 15:45:59 syscalls: 2215
2022/09/12 15:45:59 code coverage: enabled
2022/09/12 15:45:59 comparison tracing: enabled
2022/09/12 15:45:59 extra coverage: enabled
2022/09/12 15:45:59 setuid sandbox: enabled
2022/09/12 15:45:59 namespace sandbox: enabled
2022/09/12 15:45:59 Android sandbox: enabled
2022/09/12 15:45:59 fault injection: enabled
2022/09/12 15:45:59 leak checking: enabled
2022/09/12 15:45:59 net packet injection: enabled
2022/09/12 15:45:59 net device setup: enabled
2022/09/12 15:45:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 15:45:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 15:45:59 USB emulation: enabled
2022/09/12 15:45:59 hci packet injection: enabled
2022/09/12 15:45:59 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912 )
2022/09/12 15:45:59 802.15.4 emulation: enabled
2022/09/12 15:45:59 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 15:45:59 fetching corpus: 50, signal 33652/37041 (executing program)
2022/09/12 15:45:59 fetching corpus: 100, signal 49694/54377 (executing program)
2022/09/12 15:45:59 fetching corpus: 150, signal 58081/64019 (executing program)
2022/09/12 15:45:59 fetching corpus: 200, signal 67453/74499 (executing program)
2022/09/12 15:45:59 fetching corpus: 250, signal 73496/81632 (executing program)
2022/09/12 15:46:00 fetching corpus: 300, signal 79635/88772 (executing program)
2022/09/12 15:46:00 fetching corpus: 350, signal 83788/93976 (executing program)
2022/09/12 15:46:00 fetching corpus: 400, signal 86959/98190 (executing program)
2022/09/12 15:46:00 fetching corpus: 450, signal 91076/103198 (executing program)
2022/09/12 15:46:00 fetching corpus: 500, signal 95075/108012 (executing program)
2022/09/12 15:46:00 fetching corpus: 550, signal 97985/111807 (executing program)
2022/09/12 15:46:01 fetching corpus: 600, signal 100251/114987 (executing program)
2022/09/12 15:46:01 fetching corpus: 650, signal 103514/118994 (executing program)
2022/09/12 15:46:01 fetching corpus: 700, signal 107311/123419 (executing program)
2022/09/12 15:46:01 fetching corpus: 750, signal 110374/127127 (executing program)
2022/09/12 15:46:01 fetching corpus: 800, signal 113356/130663 (executing program)
2022/09/12 15:46:01 fetching corpus: 850, signal 115649/133637 (executing program)
2022/09/12 15:46:01 fetching corpus: 900, signal 118021/136622 (executing program)
2022/09/12 15:46:01 fetching corpus: 950, signal 119884/139143 (executing program)
2022/09/12 15:46:02 fetching corpus: 1000, signal 122585/142353 (executing program)
2022/09/12 15:46:02 fetching corpus: 1050, signal 124341/144685 (executing program)
2022/09/12 15:46:02 fetching corpus: 1100, signal 126128/147013 (executing program)
2022/09/12 15:46:02 fetching corpus: 1150, signal 128291/149664 (executing program)
2022/09/12 15:46:02 fetching corpus: 1200, signal 131413/152999 (executing program)
2022/09/12 15:46:02 fetching corpus: 1250, signal 133293/155363 (executing program)
2022/09/12 15:46:02 fetching corpus: 1300, signal 135493/157904 (executing program)
2022/09/12 15:46:03 fetching corpus: 1350, signal 137376/160190 (executing program)
2022/09/12 15:46:03 fetching corpus: 1400, signal 139022/162214 (executing program)
2022/09/12 15:46:03 fetching corpus: 1450, signal 141048/164486 (executing program)
2022/09/12 15:46:03 fetching corpus: 1500, signal 142443/166285 (executing program)
2022/09/12 15:46:03 fetching corpus: 1550, signal 143717/167989 (executing program)
2022/09/12 15:46:03 fetching corpus: 1600, signal 145400/169970 (executing program)
2022/09/12 15:46:03 fetching corpus: 1650, signal 146925/171781 (executing program)
2022/09/12 15:46:03 fetching corpus: 1700, signal 147884/173156 (executing program)
2022/09/12 15:46:04 fetching corpus: 1750, signal 150039/175429 (executing program)
2022/09/12 15:46:04 fetching corpus: 1800, signal 151570/177167 (executing program)
2022/09/12 15:46:04 fetching corpus: 1850, signal 152649/178590 (executing program)
2022/09/12 15:46:04 fetching corpus: 1900, signal 154129/180213 (executing program)
2022/09/12 15:46:04 fetching corpus: 1950, signal 155706/181946 (executing program)
2022/09/12 15:46:04 fetching corpus: 2000, signal 157065/183435 (executing program)
2022/09/12 15:46:04 fetching corpus: 2050, signal 158266/184777 (executing program)
2022/09/12 15:46:05 fetching corpus: 2100, signal 159260/186053 (executing program)
2022/09/12 15:46:05 fetching corpus: 2150, signal 160781/187628 (executing program)
2022/09/12 15:46:05 fetching corpus: 2200, signal 161636/188787 (executing program)
2022/09/12 15:46:05 fetching corpus: 2250, signal 163199/190333 (executing program)
2022/09/12 15:46:05 fetching corpus: 2300, signal 163980/191399 (executing program)
2022/09/12 15:46:05 fetching corpus: 2350, signal 164941/192716 (executing program)
2022/09/12 15:46:05 fetching corpus: 2400, signal 166638/194296 (executing program)
2022/09/12 15:46:06 fetching corpus: 2450, signal 167897/195616 (executing program)
2022/09/12 15:46:06 fetching corpus: 2500, signal 169420/196996 (executing program)
2022/09/12 15:46:06 fetching corpus: 2550, signal 170307/198021 (executing program)
2022/09/12 15:46:06 fetching corpus: 2600, signal 171031/198945 (executing program)
2022/09/12 15:46:06 fetching corpus: 2650, signal 172107/200024 (executing program)
2022/09/12 15:46:06 fetching corpus: 2700, signal 172911/200942 (executing program)
2022/09/12 15:46:06 fetching corpus: 2750, signal 173949/201990 (executing program)
2022/09/12 15:46:07 fetching corpus: 2800, signal 175534/203286 (executing program)
2022/09/12 15:46:07 fetching corpus: 2850, signal 176580/204358 (executing program)
2022/09/12 15:46:07 fetching corpus: 2900, signal 177365/205210 (executing program)
2022/09/12 15:46:07 fetching corpus: 2950, signal 178352/206150 (executing program)
2022/09/12 15:46:07 fetching corpus: 3000, signal 179506/207139 (executing program)
2022/09/12 15:46:07 fetching corpus: 3050, signal 180632/208089 (executing program)
2022/09/12 15:46:07 fetching corpus: 3100, signal 181813/209111 (executing program)
2022/09/12 15:46:08 fetching corpus: 3150, signal 183313/210222 (executing program)
2022/09/12 15:46:08 fetching corpus: 3200, signal 184317/211089 (executing program)
2022/09/12 15:46:08 fetching corpus: 3250, signal 185302/211969 (executing program)
2022/09/12 15:46:08 fetching corpus: 3300, signal 186670/212942 (executing program)
2022/09/12 15:46:08 fetching corpus: 3350, signal 187604/213730 (executing program)
2022/09/12 15:46:08 fetching corpus: 3400, signal 188129/214296 (executing program)
2022/09/12 15:46:08 fetching corpus: 3450, signal 189085/215167 (executing program)
2022/09/12 15:46:09 fetching corpus: 3500, signal 189971/215901 (executing program)
2022/09/12 15:46:09 fetching corpus: 3550, signal 190784/216589 (executing program)
2022/09/12 15:46:09 fetching corpus: 3600, signal 191363/217194 (executing program)
2022/09/12 15:46:09 fetching corpus: 3650, signal 192254/217932 (executing program)
2022/09/12 15:46:09 fetching corpus: 3700, signal 193203/218636 (executing program)
2022/09/12 15:46:09 fetching corpus: 3750, signal 193736/219157 (executing program)
2022/09/12 15:46:09 fetching corpus: 3800, signal 194181/219700 (executing program)
2022/09/12 15:46:10 fetching corpus: 3850, signal 194866/220303 (executing program)
2022/09/12 15:46:10 fetching corpus: 3900, signal 195626/220902 (executing program)
2022/09/12 15:46:10 fetching corpus: 3950, signal 196502/221522 (executing program)
2022/09/12 15:46:10 fetching corpus: 4000, signal 197215/222034 (executing program)
2022/09/12 15:46:10 fetching corpus: 4050, signal 197902/222520 (executing program)
2022/09/12 15:46:10 fetching corpus: 4100, signal 198951/223072 (executing program)
2022/09/12 15:46:10 fetching corpus: 4150, signal 199688/223568 (executing program)
2022/09/12 15:46:10 fetching corpus: 4200, signal 200741/224265 (executing program)
2022/09/12 15:46:11 fetching corpus: 4250, signal 201344/224735 (executing program)
2022/09/12 15:46:11 fetching corpus: 4300, signal 202138/225318 (executing program)
2022/09/12 15:46:11 fetching corpus: 4350, signal 202778/225713 (executing program)
2022/09/12 15:46:11 fetching corpus: 4400, signal 203475/226153 (executing program)
2022/09/12 15:46:11 fetching corpus: 4450, signal 204354/226628 (executing program)
2022/09/12 15:46:11 fetching corpus: 4500, signal 205174/227038 (executing program)
2022/09/12 15:46:11 fetching corpus: 4550, signal 205653/227382 (executing program)
2022/09/12 15:46:12 fetching corpus: 4600, signal 206605/227808 (executing program)
2022/09/12 15:46:12 fetching corpus: 4650, signal 207527/228213 (executing program)
2022/09/12 15:46:12 fetching corpus: 4700, signal 208082/228564 (executing program)
2022/09/12 15:46:12 fetching corpus: 4750, signal 208723/228964 (executing program)
2022/09/12 15:46:12 fetching corpus: 4800, signal 209452/229289 (executing program)
2022/09/12 15:46:12 fetching corpus: 4850, signal 210294/229584 (executing program)
2022/09/12 15:46:13 fetching corpus: 4900, signal 210969/229894 (executing program)
2022/09/12 15:46:13 fetching corpus: 4950, signal 211569/230163 (executing program)
2022/09/12 15:46:13 fetching corpus: 5000, signal 212159/230392 (executing program)
2022/09/12 15:46:13 fetching corpus: 5050, signal 212966/230702 (executing program)
2022/09/12 15:46:13 fetching corpus: 5100, signal 213672/230968 (executing program)
2022/09/12 15:46:13 fetching corpus: 5150, signal 214296/231227 (executing program)
2022/09/12 15:46:14 fetching corpus: 5200, signal 214792/231430 (executing program)
2022/09/12 15:46:14 fetching corpus: 5250, signal 215189/231625 (executing program)
2022/09/12 15:46:14 fetching corpus: 5300, signal 215873/231837 (executing program)
2022/09/12 15:46:14 fetching corpus: 5350, signal 216517/232041 (executing program)
2022/09/12 15:46:14 fetching corpus: 5400, signal 217370/232235 (executing program)
2022/09/12 15:46:14 fetching corpus: 5450, signal 217944/232397 (executing program)
2022/09/12 15:46:14 fetching corpus: 5500, signal 218592/232547 (executing program)
2022/09/12 15:46:15 fetching corpus: 5550, signal 219047/232695 (executing program)
2022/09/12 15:46:15 fetching corpus: 5600, signal 219864/232845 (executing program)
2022/09/12 15:46:15 fetching corpus: 5650, signal 220396/232860 (executing program)
2022/09/12 15:46:15 fetching corpus: 5700, signal 220999/232872 (executing program)
2022/09/12 15:46:15 fetching corpus: 5750, signal 221795/232905 (executing program)
2022/09/12 15:46:15 fetching corpus: 5800, signal 222665/232912 (executing program)
2022/09/12 15:46:15 fetching corpus: 5850, signal 222941/232925 (executing program)
2022/09/12 15:46:16 fetching corpus: 5900, signal 223476/232949 (executing program)
2022/09/12 15:46:16 fetching corpus: 5950, signal 223875/232960 (executing program)
2022/09/12 15:46:16 fetching corpus: 6000, signal 224444/233076 (executing program)
2022/09/12 15:46:16 fetching corpus: 6013, signal 224540/233076 (executing program)
2022/09/12 15:46:16 fetching corpus: 6013, signal 224540/233076 (executing program)
2022/09/12 15:46:19 starting 8 fuzzer processes
15:46:19 executing program 0:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)={0x2040, 0x0, 0x1}, 0x18)
15:46:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x89e74, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r1, 0x0, 0x22000000)
15:46:19 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005680))
15:46:19 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xf4}}, './file0\x00'})
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
15:46:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xac77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syncfs(0xffffffffffffffff)
r0 = gettid()
migrate_pages(r0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001)
sched_getattr(r0, &(0x7f0000000fc0)={0x38}, 0x38, 0x0)
process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/80, 0x50}], 0x6, &(0x7f0000000780)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, 0x0)
[ 78.135529] audit: type=1400 audit(1662997579.298:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
15:46:19 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r0, 0x5452, &(0x7f0000000040)={'syz_tun\x00', 0x0})
15:46:19 executing program 6:
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)
15:46:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)
[ 79.552751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 79.571364] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 79.572906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 79.574615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.582114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 79.583344] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 79.585553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 79.587483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 79.588823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 79.589876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 79.591220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.592404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 79.593699] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 79.596309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 79.598234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 79.599942] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 79.601059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 79.602097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 79.603210] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.604898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 79.606238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 79.608035] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 79.609389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 79.613972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 79.617915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 79.619475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.622031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 79.622537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 79.624562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 79.626316] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 79.626371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 79.629537] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 79.632876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 79.634273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 79.634313] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 79.636914] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 79.638835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 79.704985] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 79.706278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 79.707589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 79.708983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 79.710127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 79.714840] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 79.714944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 79.717335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.727767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 79.733351] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 79.733363] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 79.740806] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 79.744109] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 79.748120] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 79.753084] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 79.783612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 79.785481] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 79.786786] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 79.793553] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 81.781531] Bluetooth: hci6: command 0x0409 tx timeout
[ 81.781738] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.782707] Bluetooth: hci4: command 0x0409 tx timeout
[ 81.783807] Bluetooth: hci3: command 0x0409 tx timeout
[ 81.785080] Bluetooth: hci1: command 0x0409 tx timeout
[ 81.785177] Bluetooth: hci2: command 0x0409 tx timeout
[ 81.844732] Bluetooth: hci7: command 0x0409 tx timeout
[ 81.845757] Bluetooth: hci5: command 0x0409 tx timeout
[ 83.828711] Bluetooth: hci2: command 0x041b tx timeout
[ 83.829409] Bluetooth: hci4: command 0x041b tx timeout
[ 83.829756] Bluetooth: hci1: command 0x041b tx timeout
[ 83.830445] Bluetooth: hci3: command 0x041b tx timeout
[ 83.831058] Bluetooth: hci0: command 0x041b tx timeout
[ 83.831502] Bluetooth: hci6: command 0x041b tx timeout
[ 83.892723] Bluetooth: hci5: command 0x041b tx timeout
[ 83.893369] Bluetooth: hci7: command 0x041b tx timeout
[ 85.876787] Bluetooth: hci6: command 0x040f tx timeout
[ 85.879370] Bluetooth: hci0: command 0x040f tx timeout
[ 85.880397] Bluetooth: hci3: command 0x040f tx timeout
[ 85.883037] Bluetooth: hci1: command 0x040f tx timeout
[ 85.883895] Bluetooth: hci4: command 0x040f tx timeout
[ 85.885999] Bluetooth: hci2: command 0x040f tx timeout
[ 85.941020] Bluetooth: hci7: command 0x040f tx timeout
[ 85.941849] Bluetooth: hci5: command 0x040f tx timeout
[ 87.924735] Bluetooth: hci2: command 0x0419 tx timeout
[ 87.925263] Bluetooth: hci4: command 0x0419 tx timeout
[ 87.926409] Bluetooth: hci1: command 0x0419 tx timeout
[ 87.927209] Bluetooth: hci3: command 0x0419 tx timeout
[ 87.927784] Bluetooth: hci0: command 0x0419 tx timeout
[ 87.930317] Bluetooth: hci6: command 0x0419 tx timeout
[ 87.988734] Bluetooth: hci5: command 0x0419 tx timeout
[ 87.989608] Bluetooth: hci7: command 0x0419 tx timeout
[ 137.121459] audit: type=1400 audit(1662997638.284:7): avc: denied { open } for pid=3869 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 137.123041] audit: type=1400 audit(1662997638.284:8): avc: denied { kernel } for pid=3869 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 137.145147] ------------[ cut here ]------------
[ 137.145166]
[ 137.145169] ======================================================
[ 137.145172] WARNING: possible circular locking dependency detected
[ 137.145176] 6.0.0-rc5-next-20220912 #1 Not tainted
[ 137.145182] ------------------------------------------------------
[ 137.145185] syz-executor.4/3871 is trying to acquire lock:
[ 137.145191] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 137.145228]
[ 137.145228] but task is already holding lock:
[ 137.145230] ffff8880189ed020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 137.145257]
[ 137.145257] which lock already depends on the new lock.
[ 137.145257]
[ 137.145260]
[ 137.145260] the existing dependency chain (in reverse order) is:
[ 137.145263]
[ 137.145263] -> #3 (&ctx->lock){....}-{2:2}:
[ 137.145277] _raw_spin_lock+0x2a/0x40
[ 137.145293] __perf_event_task_sched_out+0x53b/0x18d0
[ 137.145306] __schedule+0xedd/0x2470
[ 137.145315] schedule+0xda/0x1b0
[ 137.145324] exit_to_user_mode_prepare+0x114/0x1a0
[ 137.145344] syscall_exit_to_user_mode+0x19/0x40
[ 137.145362] do_syscall_64+0x48/0x90
[ 137.145375] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 137.145392]
[ 137.145392] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 137.145406] _raw_spin_lock_nested+0x30/0x40
[ 137.145420] raw_spin_rq_lock_nested+0x1e/0x30
[ 137.145433] task_fork_fair+0x63/0x4d0
[ 137.145450] sched_cgroup_fork+0x3d0/0x540
[ 137.145464] copy_process+0x3f9e/0x6df0
[ 137.145474] kernel_clone+0xe7/0x890
[ 137.145483] user_mode_thread+0xad/0xf0
[ 137.145494] rest_init+0x24/0x250
[ 137.145510] arch_call_rest_init+0xf/0x14
[ 137.145529] start_kernel+0x4c1/0x4e6
[ 137.145545] secondary_startup_64_no_verify+0xe0/0xeb
[ 137.145559]
[ 137.145559] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 137.145573] _raw_spin_lock_irqsave+0x39/0x60
[ 137.145588] try_to_wake_up+0xab/0x1920
[ 137.145601] up+0x75/0xb0
[ 137.145612] __up_console_sem+0x6e/0x80
[ 137.145647] console_unlock+0x46a/0x590
[ 137.145663] do_con_write+0xc05/0x1d50
[ 137.145674] con_write+0x21/0x40
[ 137.145683] n_tty_write+0x4d4/0xfe0
[ 137.145696] file_tty_write.constprop.0+0x49c/0x8f0
[ 137.145708] vfs_write+0x9c3/0xd90
[ 137.145726] ksys_write+0x127/0x250
[ 137.145743] do_syscall_64+0x3b/0x90
[ 137.145755] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 137.145772]
[ 137.145772] -> #0 ((console_sem).lock){....}-{2:2}:
[ 137.145786] __lock_acquire+0x2a02/0x5e70
[ 137.145803] lock_acquire+0x1a2/0x530
[ 137.145819] _raw_spin_lock_irqsave+0x39/0x60
[ 137.145834] down_trylock+0xe/0x70
[ 137.145846] __down_trylock_console_sem+0x3b/0xd0
[ 137.145863] vprintk_emit+0x16b/0x560
[ 137.145879] vprintk+0x84/0xa0
[ 137.145896] _printk+0xba/0xf1
[ 137.145913] report_bug.cold+0x72/0xab
[ 137.145925] handle_bug+0x3c/0x70
[ 137.145938] exc_invalid_op+0x14/0x50
[ 137.145951] asm_exc_invalid_op+0x16/0x20
[ 137.145967] group_sched_out.part.0+0x2c7/0x460
[ 137.145977] ctx_sched_out+0x8f1/0xc10
[ 137.145986] __perf_event_task_sched_out+0x6d0/0x18d0
[ 137.145999] __schedule+0xedd/0x2470
[ 137.146008] schedule+0xda/0x1b0
[ 137.146017] exit_to_user_mode_prepare+0x114/0x1a0
[ 137.146036] syscall_exit_to_user_mode+0x19/0x40
[ 137.146053] do_syscall_64+0x48/0x90
[ 137.146066] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 137.146082]
[ 137.146082] other info that might help us debug this:
[ 137.146082]
[ 137.146085] Chain exists of:
[ 137.146085] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 137.146085]
[ 137.146100] Possible unsafe locking scenario:
[ 137.146100]
[ 137.146102] CPU0 CPU1
[ 137.146104] ---- ----
[ 137.146106] lock(&ctx->lock);
[ 137.146112] lock(&rq->__lock);
[ 137.146118] lock(&ctx->lock);
[ 137.146124] lock((console_sem).lock);
[ 137.146130]
[ 137.146130] *** DEADLOCK ***
[ 137.146130]
[ 137.146132] 2 locks held by syz-executor.4/3871:
[ 137.146138] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 137.146163] #1: ffff8880189ed020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 137.146191]
[ 137.146191] stack backtrace:
[ 137.146193] CPU: 1 PID: 3871 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1
[ 137.146206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 137.146214] Call Trace:
[ 137.146217]
[ 137.146221] dump_stack_lvl+0x8b/0xb3
[ 137.146235] check_noncircular+0x263/0x2e0
[ 137.146252] ? format_decode+0x26c/0xb50
[ 137.146267] ? print_circular_bug+0x450/0x450
[ 137.146284] ? enable_ptr_key_workfn+0x20/0x20
[ 137.146299] ? format_decode+0x26c/0xb50
[ 137.146314] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 137.146332] __lock_acquire+0x2a02/0x5e70
[ 137.146354] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 137.146377] lock_acquire+0x1a2/0x530
[ 137.146394] ? down_trylock+0xe/0x70
[ 137.146409] ? rcu_read_unlock+0x40/0x40
[ 137.146430] ? vprintk+0x84/0xa0
[ 137.146449] _raw_spin_lock_irqsave+0x39/0x60
[ 137.146464] ? down_trylock+0xe/0x70
[ 137.146478] down_trylock+0xe/0x70
[ 137.146491] ? vprintk+0x84/0xa0
[ 137.146509] __down_trylock_console_sem+0x3b/0xd0
[ 137.146526] vprintk_emit+0x16b/0x560
[ 137.146546] vprintk+0x84/0xa0
[ 137.146564] _printk+0xba/0xf1
[ 137.146581] ? record_print_text.cold+0x16/0x16
[ 137.146603] ? report_bug.cold+0x66/0xab
[ 137.146617] ? group_sched_out.part.0+0x2c7/0x460
[ 137.146629] report_bug.cold+0x72/0xab
[ 137.146644] handle_bug+0x3c/0x70
[ 137.146657] exc_invalid_op+0x14/0x50
[ 137.146671] asm_exc_invalid_op+0x16/0x20
[ 137.146688] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 137.146701] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 137.146713] RSP: 0018:ffff888018217c48 EFLAGS: 00010006
[ 137.146722] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 137.146730] RDX: ffff888017523580 RSI: ffffffff81566027 RDI: 0000000000000005
[ 137.146738] RBP: ffff888040278000 R08: 0000000000000005 R09: 0000000000000001
[ 137.146745] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880189ed000
[ 137.146752] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 137.146763] ? group_sched_out.part.0+0x2c7/0x460
[ 137.146777] ? group_sched_out.part.0+0x2c7/0x460
[ 137.146789] ctx_sched_out+0x8f1/0xc10
[ 137.146802] __perf_event_task_sched_out+0x6d0/0x18d0
[ 137.146817] ? lock_is_held_type+0xd7/0x130
[ 137.146836] ? __perf_cgroup_move+0x160/0x160
[ 137.146847] ? set_next_entity+0x304/0x550
[ 137.146865] ? update_curr+0x267/0x740
[ 137.146884] ? lock_is_held_type+0xd7/0x130
[ 137.146903] __schedule+0xedd/0x2470
[ 137.146916] ? io_schedule_timeout+0x150/0x150
[ 137.146928] ? rcu_read_lock_sched_held+0x3e/0x80
[ 137.146948] schedule+0xda/0x1b0
[ 137.146959] exit_to_user_mode_prepare+0x114/0x1a0
[ 137.146980] syscall_exit_to_user_mode+0x19/0x40
[ 137.146998] do_syscall_64+0x48/0x90
[ 137.147012] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 137.147029] RIP: 0033:0x7f3290946b19
[ 137.147038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 137.147049] RSP: 002b:00007f328debc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 137.147060] RAX: 0000000000000001 RBX: 00007f3290a59f68 RCX: 00007f3290946b19
[ 137.147067] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3290a59f6c
[ 137.147075] RBP: 00007f3290a59f60 R08: 000000000000000e R09: 0000000000000000
[ 137.147082] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3290a59f6c
[ 137.147089] R13: 00007ffdc7c4febf R14: 00007f328debc300 R15: 0000000000022000
[ 137.147102]
[ 137.203311] WARNING: CPU: 1 PID: 3871 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 137.203976] Modules linked in:
[ 137.204222] CPU: 1 PID: 3871 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1
[ 137.204818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 137.205661] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 137.206074] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 137.207403] RSP: 0018:ffff888018217c48 EFLAGS: 00010006
[ 137.207794] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 137.208333] RDX: ffff888017523580 RSI: ffffffff81566027 RDI: 0000000000000005
[ 137.208863] RBP: ffff888040278000 R08: 0000000000000005 R09: 0000000000000001
[ 137.209394] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff8880189ed000
[ 137.209934] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 137.210467] FS: 00007f328debc700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 137.211070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 137.211502] CR2: 00005580909fc4c8 CR3: 000000004061e000 CR4: 0000000000350ee0
[ 137.212040] Call Trace:
[ 137.212240]
[ 137.212420] ctx_sched_out+0x8f1/0xc10
[ 137.212716] __perf_event_task_sched_out+0x6d0/0x18d0
[ 137.213110] ? lock_is_held_type+0xd7/0x130
[ 137.213444] ? __perf_cgroup_move+0x160/0x160
[ 137.213798] ? set_next_entity+0x304/0x550
[ 137.214130] ? update_curr+0x267/0x740
[ 137.214444] ? lock_is_held_type+0xd7/0x130
[ 137.214775] __schedule+0xedd/0x2470
[ 137.215065] ? io_schedule_timeout+0x150/0x150
[ 137.215410] ? rcu_read_lock_sched_held+0x3e/0x80
[ 137.215785] schedule+0xda/0x1b0
[ 137.216046] exit_to_user_mode_prepare+0x114/0x1a0
[ 137.216428] syscall_exit_to_user_mode+0x19/0x40
[ 137.216796] do_syscall_64+0x48/0x90
[ 137.217083] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 137.217477] RIP: 0033:0x7f3290946b19
[ 137.217766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 137.219109] RSP: 002b:00007f328debc218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 137.219678] RAX: 0000000000000001 RBX: 00007f3290a59f68 RCX: 00007f3290946b19
[ 137.220216] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3290a59f6c
[ 137.220756] RBP: 00007f3290a59f60 R08: 000000000000000e R09: 0000000000000000
[ 137.221300] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3290a59f6c
[ 137.221841] R13: 00007ffdc7c4febf R14: 00007f328debc300 R15: 0000000000022000
[ 137.222385]
[ 137.222566] irq event stamp: 918
[ 137.222823] hardirqs last enabled at (917): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 137.223539] hardirqs last disabled at (918): [] __schedule+0x1225/0x2470
[ 137.224169] softirqs last enabled at (740): [] __irq_exit_rcu+0x11b/0x180
[ 137.224821] softirqs last disabled at (467): [] __irq_exit_rcu+0x11b/0x180
[ 137.225479] ---[ end trace 0000000000000000 ]---
15:47:18 executing program 2:
prctl$PR_SET_DUMPABLE(0x34, 0x2)
15:47:18 executing program 2:
prctl$PR_SET_DUMPABLE(0x34, 0x2)
15:47:18 executing program 2:
prctl$PR_SET_DUMPABLE(0x34, 0x2)
15:47:18 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)
15:47:18 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)
15:47:18 executing program 2:
prctl$PR_SET_DUMPABLE(0x34, 0x2)
15:47:18 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xf4}}, './file0\x00'})
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat2(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
15:47:18 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)
[ 142.516733] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 146.740742] Bluetooth: hci3: Opcode 0x c03 failed: -110
VM DIAGNOSIS:
15:47:18 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffff88801ea7fb48 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000001 RBP=ffff88801ea7f530 RSP=ffff88801ea7f458
R8 =ffffffff85e40d26 R9 =ffffffff85e40d2a R10=ffffed1003d4fea8 R11=000000000003603d
R12=ffff88801ea7f519 R13=ffff88801ea7f538 R14=ffff88801ea7f4d8 R15=ffffffff85e40d2b
RIP=ffffffff8111b7f6 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555557281400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff9eff98f0 CR3=000000000eaac000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888018217698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001
R12=0000000000000031 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f328debc700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00005580909fc4c8 CR3=000000004061e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f3290a2d7c0 00007f3290a2d7c8
YMM02=0000000000000000 0000000000000000 00007f3290a2d7e0 00007f3290a2d7c0
YMM03=0000000000000000 0000000000000000 00007f3290a2d7c8 00007f3290a2d7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000