Warning: Permanently added '[localhost]:28591' (ECDSA) to the list of known hosts.
2022/09/12 16:31:42 fuzzer started
2022/09/12 16:31:42 dialing manager at localhost:38027
syzkaller login: [ 44.595410] cgroup: Unknown subsys name 'net'
[ 44.691261] cgroup: Unknown subsys name 'rlimit'
2022/09/12 16:31:57 syscalls: 2215
2022/09/12 16:31:57 code coverage: enabled
2022/09/12 16:31:57 comparison tracing: enabled
2022/09/12 16:31:57 extra coverage: enabled
2022/09/12 16:31:57 setuid sandbox: enabled
2022/09/12 16:31:57 namespace sandbox: enabled
2022/09/12 16:31:57 Android sandbox: enabled
2022/09/12 16:31:57 fault injection: enabled
2022/09/12 16:31:57 leak checking: enabled
2022/09/12 16:31:57 net packet injection: enabled
2022/09/12 16:31:57 net device setup: enabled
2022/09/12 16:31:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 16:31:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 16:31:57 USB emulation: enabled
2022/09/12 16:31:57 hci packet injection: enabled
2022/09/12 16:31:57 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912 )
2022/09/12 16:31:57 802.15.4 emulation: enabled
2022/09/12 16:31:57 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 16:31:57 fetching corpus: 50, signal 28026/31535 (executing program)
2022/09/12 16:31:57 fetching corpus: 100, signal 45432/50259 (executing program)
2022/09/12 16:31:57 fetching corpus: 150, signal 56337/62432 (executing program)
2022/09/12 16:31:57 fetching corpus: 200, signal 60718/68183 (executing program)
2022/09/12 16:31:57 fetching corpus: 250, signal 66242/74956 (executing program)
2022/09/12 16:31:57 fetching corpus: 300, signal 70096/79992 (executing program)
2022/09/12 16:31:57 fetching corpus: 350, signal 77812/88593 (executing program)
2022/09/12 16:31:58 fetching corpus: 400, signal 81534/93440 (executing program)
2022/09/12 16:31:58 fetching corpus: 450, signal 86441/99239 (executing program)
2022/09/12 16:31:58 fetching corpus: 500, signal 90485/104199 (executing program)
2022/09/12 16:31:58 fetching corpus: 550, signal 94635/109245 (executing program)
2022/09/12 16:31:58 fetching corpus: 600, signal 98620/114069 (executing program)
2022/09/12 16:31:58 fetching corpus: 650, signal 101477/117774 (executing program)
2022/09/12 16:31:58 fetching corpus: 700, signal 105010/122059 (executing program)
2022/09/12 16:31:59 fetching corpus: 750, signal 107652/125465 (executing program)
2022/09/12 16:31:59 fetching corpus: 800, signal 109649/128258 (executing program)
2022/09/12 16:31:59 fetching corpus: 850, signal 112250/131583 (executing program)
2022/09/12 16:31:59 fetching corpus: 900, signal 114822/134821 (executing program)
2022/09/12 16:31:59 fetching corpus: 950, signal 117865/138372 (executing program)
2022/09/12 16:31:59 fetching corpus: 1000, signal 119944/141079 (executing program)
2022/09/12 16:31:59 fetching corpus: 1050, signal 123106/144701 (executing program)
2022/09/12 16:31:59 fetching corpus: 1100, signal 124426/146838 (executing program)
2022/09/12 16:32:00 fetching corpus: 1150, signal 126803/149690 (executing program)
2022/09/12 16:32:00 fetching corpus: 1200, signal 128686/152152 (executing program)
2022/09/12 16:32:00 fetching corpus: 1250, signal 130842/154839 (executing program)
2022/09/12 16:32:00 fetching corpus: 1300, signal 132955/157421 (executing program)
2022/09/12 16:32:01 fetching corpus: 1350, signal 134950/159877 (executing program)
2022/09/12 16:32:01 fetching corpus: 1400, signal 137007/162341 (executing program)
2022/09/12 16:32:01 fetching corpus: 1450, signal 138796/164568 (executing program)
2022/09/12 16:32:01 fetching corpus: 1500, signal 140994/167075 (executing program)
2022/09/12 16:32:01 fetching corpus: 1550, signal 142336/168886 (executing program)
2022/09/12 16:32:02 fetching corpus: 1600, signal 143708/170801 (executing program)
2022/09/12 16:32:02 fetching corpus: 1650, signal 145075/172596 (executing program)
2022/09/12 16:32:02 fetching corpus: 1700, signal 146535/174518 (executing program)
2022/09/12 16:32:02 fetching corpus: 1750, signal 148730/176878 (executing program)
2022/09/12 16:32:02 fetching corpus: 1800, signal 149839/178441 (executing program)
2022/09/12 16:32:02 fetching corpus: 1850, signal 151220/180185 (executing program)
2022/09/12 16:32:02 fetching corpus: 1900, signal 152503/181824 (executing program)
2022/09/12 16:32:03 fetching corpus: 1950, signal 153331/183131 (executing program)
2022/09/12 16:32:03 fetching corpus: 2000, signal 154666/184789 (executing program)
2022/09/12 16:32:03 fetching corpus: 2050, signal 156759/186876 (executing program)
2022/09/12 16:32:03 fetching corpus: 2100, signal 158947/189008 (executing program)
2022/09/12 16:32:03 fetching corpus: 2150, signal 159947/190354 (executing program)
2022/09/12 16:32:03 fetching corpus: 2200, signal 161607/192075 (executing program)
2022/09/12 16:32:03 fetching corpus: 2250, signal 162536/193368 (executing program)
2022/09/12 16:32:04 fetching corpus: 2300, signal 164031/194918 (executing program)
2022/09/12 16:32:04 fetching corpus: 2350, signal 165341/196366 (executing program)
2022/09/12 16:32:04 fetching corpus: 2400, signal 166604/197747 (executing program)
2022/09/12 16:32:04 fetching corpus: 2450, signal 167816/199115 (executing program)
2022/09/12 16:32:04 fetching corpus: 2500, signal 169367/200611 (executing program)
2022/09/12 16:32:04 fetching corpus: 2550, signal 171324/202356 (executing program)
2022/09/12 16:32:04 fetching corpus: 2600, signal 172324/203504 (executing program)
2022/09/12 16:32:05 fetching corpus: 2650, signal 173703/204895 (executing program)
2022/09/12 16:32:05 fetching corpus: 2700, signal 174746/206016 (executing program)
2022/09/12 16:32:05 fetching corpus: 2750, signal 175514/206995 (executing program)
2022/09/12 16:32:05 fetching corpus: 2800, signal 176715/208232 (executing program)
2022/09/12 16:32:05 fetching corpus: 2850, signal 177914/209404 (executing program)
2022/09/12 16:32:05 fetching corpus: 2900, signal 178788/210362 (executing program)
2022/09/12 16:32:05 fetching corpus: 2950, signal 179798/211381 (executing program)
2022/09/12 16:32:06 fetching corpus: 3000, signal 180722/212350 (executing program)
2022/09/12 16:32:06 fetching corpus: 3050, signal 181723/213346 (executing program)
2022/09/12 16:32:06 fetching corpus: 3100, signal 182464/214221 (executing program)
2022/09/12 16:32:06 fetching corpus: 3150, signal 182941/214952 (executing program)
2022/09/12 16:32:06 fetching corpus: 3200, signal 183974/215967 (executing program)
2022/09/12 16:32:06 fetching corpus: 3250, signal 184596/216732 (executing program)
2022/09/12 16:32:06 fetching corpus: 3300, signal 186022/217872 (executing program)
2022/09/12 16:32:07 fetching corpus: 3350, signal 187164/218845 (executing program)
2022/09/12 16:32:07 fetching corpus: 3400, signal 187930/219663 (executing program)
2022/09/12 16:32:07 fetching corpus: 3450, signal 188816/220498 (executing program)
2022/09/12 16:32:07 fetching corpus: 3500, signal 189558/221302 (executing program)
2022/09/12 16:32:07 fetching corpus: 3550, signal 191536/222573 (executing program)
2022/09/12 16:32:07 fetching corpus: 3600, signal 192296/223292 (executing program)
2022/09/12 16:32:07 fetching corpus: 3650, signal 192985/224017 (executing program)
2022/09/12 16:32:08 fetching corpus: 3700, signal 193894/224766 (executing program)
2022/09/12 16:32:08 fetching corpus: 3750, signal 194943/225592 (executing program)
2022/09/12 16:32:08 fetching corpus: 3800, signal 195697/226276 (executing program)
2022/09/12 16:32:08 fetching corpus: 3850, signal 196649/227030 (executing program)
2022/09/12 16:32:08 fetching corpus: 3900, signal 197504/227736 (executing program)
2022/09/12 16:32:08 fetching corpus: 3950, signal 198236/228395 (executing program)
2022/09/12 16:32:08 fetching corpus: 4000, signal 199026/229070 (executing program)
2022/09/12 16:32:08 fetching corpus: 4050, signal 200076/229804 (executing program)
2022/09/12 16:32:08 fetching corpus: 4100, signal 200883/230391 (executing program)
2022/09/12 16:32:09 fetching corpus: 4150, signal 201883/231066 (executing program)
2022/09/12 16:32:09 fetching corpus: 4200, signal 202474/231607 (executing program)
2022/09/12 16:32:09 fetching corpus: 4250, signal 203412/232212 (executing program)
2022/09/12 16:32:09 fetching corpus: 4300, signal 204383/232844 (executing program)
2022/09/12 16:32:09 fetching corpus: 4350, signal 204968/233359 (executing program)
2022/09/12 16:32:09 fetching corpus: 4400, signal 205492/233846 (executing program)
2022/09/12 16:32:09 fetching corpus: 4450, signal 205837/234278 (executing program)
2022/09/12 16:32:10 fetching corpus: 4500, signal 206474/234779 (executing program)
2022/09/12 16:32:10 fetching corpus: 4550, signal 207390/235300 (executing program)
2022/09/12 16:32:10 fetching corpus: 4600, signal 207985/235746 (executing program)
2022/09/12 16:32:10 fetching corpus: 4650, signal 208461/236153 (executing program)
2022/09/12 16:32:11 fetching corpus: 4700, signal 209426/236651 (executing program)
2022/09/12 16:32:11 fetching corpus: 4750, signal 210769/237232 (executing program)
2022/09/12 16:32:11 fetching corpus: 4800, signal 211798/237734 (executing program)
2022/09/12 16:32:11 fetching corpus: 4850, signal 212212/238036 (executing program)
2022/09/12 16:32:11 fetching corpus: 4900, signal 212935/238419 (executing program)
2022/09/12 16:32:11 fetching corpus: 4950, signal 213321/238746 (executing program)
2022/09/12 16:32:11 fetching corpus: 5000, signal 213943/239091 (executing program)
2022/09/12 16:32:12 fetching corpus: 5050, signal 214493/239391 (executing program)
2022/09/12 16:32:12 fetching corpus: 5100, signal 215045/239727 (executing program)
2022/09/12 16:32:12 fetching corpus: 5150, signal 215488/240038 (executing program)
2022/09/12 16:32:12 fetching corpus: 5200, signal 216315/240339 (executing program)
2022/09/12 16:32:12 fetching corpus: 5250, signal 217460/240676 (executing program)
2022/09/12 16:32:12 fetching corpus: 5300, signal 218150/240942 (executing program)
2022/09/12 16:32:13 fetching corpus: 5350, signal 218916/241213 (executing program)
2022/09/12 16:32:13 fetching corpus: 5400, signal 219353/241472 (executing program)
2022/09/12 16:32:13 fetching corpus: 5450, signal 220020/241849 (executing program)
2022/09/12 16:32:13 fetching corpus: 5500, signal 220593/242085 (executing program)
2022/09/12 16:32:13 fetching corpus: 5550, signal 221101/242312 (executing program)
2022/09/12 16:32:13 fetching corpus: 5600, signal 221482/242527 (executing program)
2022/09/12 16:32:13 fetching corpus: 5650, signal 222128/242824 (executing program)
2022/09/12 16:32:13 fetching corpus: 5700, signal 222863/243051 (executing program)
2022/09/12 16:32:14 fetching corpus: 5750, signal 223355/243332 (executing program)
2022/09/12 16:32:14 fetching corpus: 5800, signal 223831/243508 (executing program)
2022/09/12 16:32:14 fetching corpus: 5850, signal 224536/243750 (executing program)
2022/09/12 16:32:14 fetching corpus: 5900, signal 225376/243963 (executing program)
2022/09/12 16:32:14 fetching corpus: 5950, signal 226065/243981 (executing program)
2022/09/12 16:32:14 fetching corpus: 6000, signal 226530/243982 (executing program)
2022/09/12 16:32:14 fetching corpus: 6050, signal 226900/243991 (executing program)
2022/09/12 16:32:15 fetching corpus: 6100, signal 227534/243996 (executing program)
2022/09/12 16:32:15 fetching corpus: 6150, signal 228265/244033 (executing program)
2022/09/12 16:32:15 fetching corpus: 6200, signal 228739/244046 (executing program)
2022/09/12 16:32:15 fetching corpus: 6250, signal 229259/244055 (executing program)
2022/09/12 16:32:15 fetching corpus: 6300, signal 229823/244055 (executing program)
2022/09/12 16:32:15 fetching corpus: 6350, signal 230200/244087 (executing program)
2022/09/12 16:32:15 fetching corpus: 6400, signal 230618/244111 (executing program)
2022/09/12 16:32:15 fetching corpus: 6450, signal 230981/244123 (executing program)
2022/09/12 16:32:16 fetching corpus: 6500, signal 231508/244139 (executing program)
2022/09/12 16:32:16 fetching corpus: 6550, signal 231932/244139 (executing program)
2022/09/12 16:32:16 fetching corpus: 6600, signal 232498/244159 (executing program)
2022/09/12 16:32:16 fetching corpus: 6650, signal 232841/244202 (executing program)
2022/09/12 16:32:16 fetching corpus: 6700, signal 233193/244250 (executing program)
2022/09/12 16:32:16 fetching corpus: 6750, signal 233630/244315 (executing program)
2022/09/12 16:32:17 fetching corpus: 6800, signal 234095/244325 (executing program)
2022/09/12 16:32:17 fetching corpus: 6825, signal 234519/244334 (executing program)
2022/09/12 16:32:17 fetching corpus: 6825, signal 234519/244334 (executing program)
2022/09/12 16:32:19 starting 8 fuzzer processes
16:32:19 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
16:32:19 executing program 3:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@remote, @link_local, @void, {@arp={0x4305, @generic={0x30f, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote, "4815e7a6"}}}}, 0x0)
16:32:19 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000140), 0x4)
16:32:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
close_range(r0, 0xffffffffffffffff, 0x0)
16:32:19 executing program 4:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)={[{@journal_path={'journal_path', 0x2c}}]})
[ 81.155960] audit: type=1400 audit(1663000339.585:6): avc: denied { execmem } for pid=287 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:32:19 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/121, 0x79}, {&(0x7f0000000080)=""/121, 0x79}], 0x2, 0x0, 0x0)
fdatasync(r3)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x200200, 0x4)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r4 = socket$inet6(0xa, 0x1, 0x0)
fchown(r4, 0x0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000240), 0x4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480))
open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x81900)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x15182, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0801022d9c02000022020000400000006e020000510000000000000000000000d722124423720590ac8548566a6de9af7118d129433ac1f1f81ac98c6ceb2ba8ab7d8edd2428e93393049c780d87a8e8a326fe475fcdc5adfe2db5f018e4cfba50b06b0eab18d2884eb0094ae4c7f77c32acf6c8c97714692a124ce74e05deda9d575f74b43892c5"], 0x88)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
16:32:19 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@report={0x4c, 0x15, 0x107, 0x0, 0x0, {0x0, {@in6=@mcast2, @in6=@local}}}, 0x4c}}, 0x0)
16:32:19 executing program 7:
shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/51)
[ 82.419633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 82.421437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.422589] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 82.423490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.424707] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 82.425562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.429463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.430166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 82.431756] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.432607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 82.433765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.434549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 82.438832] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 82.446406] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 82.542174] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 82.545093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 82.547948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 82.551881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 82.554884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 82.556253] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 82.568433] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 82.605132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 82.608143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 82.611094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 82.616243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 82.619740] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 82.624738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 82.625739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 82.627120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 82.627995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 82.631639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 82.632661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 82.634240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 82.635360] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 82.636628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 82.638696] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 82.643849] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 82.646860] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 82.688399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 82.707045] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 82.716191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 82.737352] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 84.495027] Bluetooth: hci0: command 0x0409 tx timeout
[ 84.495831] Bluetooth: hci1: command 0x0409 tx timeout
[ 84.558708] Bluetooth: hci4: Opcode 0x c03 failed: -110
[ 84.559923] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 84.622435] Bluetooth: hci2: command 0x0409 tx timeout
[ 84.686399] Bluetooth: hci7: command 0x0409 tx timeout
[ 84.686529] Bluetooth: hci5: command 0x0409 tx timeout
[ 84.750362] Bluetooth: hci6: command 0x0409 tx timeout
[ 86.542393] Bluetooth: hci1: command 0x041b tx timeout
[ 86.544043] Bluetooth: hci0: command 0x041b tx timeout
[ 86.671380] Bluetooth: hci2: command 0x041b tx timeout
[ 86.734381] Bluetooth: hci5: command 0x041b tx timeout
[ 86.735055] Bluetooth: hci7: command 0x041b tx timeout
[ 86.798747] Bluetooth: hci6: command 0x041b tx timeout
[ 88.590380] Bluetooth: hci0: command 0x040f tx timeout
[ 88.590946] Bluetooth: hci1: command 0x040f tx timeout
[ 88.718536] Bluetooth: hci2: command 0x040f tx timeout
[ 88.782390] Bluetooth: hci7: command 0x040f tx timeout
[ 88.782956] Bluetooth: hci5: command 0x040f tx timeout
[ 88.846614] Bluetooth: hci6: command 0x040f tx timeout
[ 89.998462] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 90.382386] Bluetooth: hci4: Opcode 0x c03 failed: -110
[ 90.639388] Bluetooth: hci1: command 0x0419 tx timeout
[ 90.641082] Bluetooth: hci0: command 0x0419 tx timeout
[ 90.766353] Bluetooth: hci2: command 0x0419 tx timeout
[ 90.830384] Bluetooth: hci5: command 0x0419 tx timeout
[ 90.830954] Bluetooth: hci7: command 0x0419 tx timeout
[ 90.894362] Bluetooth: hci6: command 0x0419 tx timeout
[ 93.398236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 93.399787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 93.401033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 93.403806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 93.405487] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 93.406739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 93.412404] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 95.054393] Bluetooth: hci3: Opcode 0x c03 failed: -110
[ 95.438457] Bluetooth: hci4: command 0x0409 tx timeout
[ 97.486537] Bluetooth: hci4: command 0x041b tx timeout
[ 98.045354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 98.048566] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 98.051176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 98.054699] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 98.056054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 98.058384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 98.082378] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 99.534397] Bluetooth: hci4: command 0x040f tx timeout
[ 100.174404] Bluetooth: hci3: command 0x0409 tx timeout
[ 101.582435] Bluetooth: hci4: command 0x0419 tx timeout
[ 102.222384] Bluetooth: hci3: command 0x041b tx timeout
[ 104.270478] Bluetooth: hci3: command 0x040f tx timeout
[ 106.318374] Bluetooth: hci3: command 0x0419 tx timeout
[ 144.663808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 144.665529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 144.667496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 144.672503] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 144.673863] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 144.675604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 144.683807] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 146.510374] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 146.574377] Bluetooth: hci2: Opcode 0x c03 failed: -110
[ 146.576122] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 146.702364] Bluetooth: hci5: command 0x0409 tx timeout
[ 146.766364] Bluetooth: hci6: Opcode 0x c03 failed: -110
[ 146.766803] Bluetooth: hci7: Opcode 0x c03 failed: -110
16:33:25 executing program 3:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@remote, @link_local, @void, {@arp={0x4305, @generic={0x30f, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote, "4815e7a6"}}}}, 0x0)
16:33:25 executing program 3:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@remote, @link_local, @void, {@arp={0x4305, @generic={0x30f, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote, "4815e7a6"}}}}, 0x0)
16:33:25 executing program 3:
syz_emit_ethernet(0x26, &(0x7f0000000000)={@remote, @link_local, @void, {@arp={0x4305, @generic={0x30f, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote, "4815e7a6"}}}}, 0x0)
16:33:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb)
pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040), 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'})
[ 147.604249] audit: type=1400 audit(1663000406.033:7): avc: denied { open } for pid=3836 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 147.605872] audit: type=1400 audit(1663000406.033:8): avc: denied { kernel } for pid=3836 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 147.620116] ------------[ cut here ]------------
[ 147.620138]
[ 147.620141] ======================================================
[ 147.620145] WARNING: possible circular locking dependency detected
[ 147.620149] 6.0.0-rc5-next-20220912 #1 Not tainted
[ 147.620156] ------------------------------------------------------
[ 147.620159] syz-executor.3/3837 is trying to acquire lock:
[ 147.620165] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 147.620204]
[ 147.620204] but task is already holding lock:
[ 147.620207] ffff88800fc74420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 147.620235]
[ 147.620235] which lock already depends on the new lock.
[ 147.620235]
[ 147.620239]
[ 147.620239] the existing dependency chain (in reverse order) is:
[ 147.620242]
[ 147.620242] -> #3 (&ctx->lock){....}-{2:2}:
[ 147.620256] _raw_spin_lock+0x2a/0x40
[ 147.620273] __perf_event_task_sched_out+0x53b/0x18d0
[ 147.620285] __schedule+0xedd/0x2470
[ 147.620295] schedule+0xda/0x1b0
[ 147.620304] exit_to_user_mode_prepare+0x114/0x1a0
[ 147.620325] syscall_exit_to_user_mode+0x19/0x40
[ 147.620343] do_syscall_64+0x48/0x90
[ 147.620357] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 147.620374]
[ 147.620374] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 147.620388] _raw_spin_lock_nested+0x30/0x40
[ 147.620403] raw_spin_rq_lock_nested+0x1e/0x30
[ 147.620416] task_fork_fair+0x63/0x4d0
[ 147.620434] sched_cgroup_fork+0x3d0/0x540
[ 147.620448] copy_process+0x3f9e/0x6df0
[ 147.620458] kernel_clone+0xe7/0x890
[ 147.620468] user_mode_thread+0xad/0xf0
[ 147.620478] rest_init+0x24/0x250
[ 147.620494] arch_call_rest_init+0xf/0x14
[ 147.620514] start_kernel+0x4c1/0x4e6
[ 147.620531] secondary_startup_64_no_verify+0xe0/0xeb
[ 147.620546]
[ 147.620546] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 147.620559] _raw_spin_lock_irqsave+0x39/0x60
[ 147.620574] try_to_wake_up+0xab/0x1920
[ 147.620587] up+0x75/0xb0
[ 147.620599] __up_console_sem+0x6e/0x80
[ 147.620615] console_unlock+0x46a/0x590
[ 147.620631] do_con_write+0xc05/0x1d50
[ 147.620643] con_write+0x21/0x40
[ 147.620652] n_tty_write+0x4d4/0xfe0
[ 147.620665] file_tty_write.constprop.0+0x49c/0x8f0
[ 147.620677] vfs_write+0x9c3/0xd90
[ 147.620696] ksys_write+0x127/0x250
[ 147.620713] do_syscall_64+0x3b/0x90
[ 147.620726] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 147.620742]
[ 147.620742] -> #0 ((console_sem).lock){....}-{2:2}:
[ 147.620756] __lock_acquire+0x2a02/0x5e70
[ 147.620773] lock_acquire+0x1a2/0x530
[ 147.620789] _raw_spin_lock_irqsave+0x39/0x60
[ 147.620804] down_trylock+0xe/0x70
[ 147.620816] __down_trylock_console_sem+0x3b/0xd0
[ 147.620833] vprintk_emit+0x16b/0x560
[ 147.620849] vprintk+0x84/0xa0
[ 147.620866] _printk+0xba/0xf1
[ 147.620884] report_bug.cold+0x72/0xab
[ 147.620896] handle_bug+0x3c/0x70
[ 147.620908] exc_invalid_op+0x14/0x50
[ 147.620921] asm_exc_invalid_op+0x16/0x20
[ 147.620937] group_sched_out.part.0+0x2c7/0x460
[ 147.620948] ctx_sched_out+0x8f1/0xc10
[ 147.620958] __perf_event_task_sched_out+0x6d0/0x18d0
[ 147.620970] __schedule+0xedd/0x2470
[ 147.620979] schedule+0xda/0x1b0
[ 147.620988] exit_to_user_mode_prepare+0x114/0x1a0
[ 147.621007] syscall_exit_to_user_mode+0x19/0x40
[ 147.621042] do_syscall_64+0x48/0x90
[ 147.621055] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 147.621071]
[ 147.621071] other info that might help us debug this:
[ 147.621071]
[ 147.621073] Chain exists of:
[ 147.621073] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 147.621073]
[ 147.621089] Possible unsafe locking scenario:
[ 147.621089]
[ 147.621091] CPU0 CPU1
[ 147.621093] ---- ----
[ 147.621096] lock(&ctx->lock);
[ 147.621101] lock(&rq->__lock);
[ 147.621108] lock(&ctx->lock);
[ 147.621114] lock((console_sem).lock);
[ 147.621120]
[ 147.621120] *** DEADLOCK ***
[ 147.621120]
[ 147.621122] 2 locks held by syz-executor.3/3837:
[ 147.621129] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 147.621154] #1: ffff88800fc74420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 147.621181]
[ 147.621181] stack backtrace:
[ 147.621184] CPU: 0 PID: 3837 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1
[ 147.621197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 147.621205] Call Trace:
[ 147.621208]
[ 147.621213] dump_stack_lvl+0x8b/0xb3
[ 147.621227] check_noncircular+0x263/0x2e0
[ 147.621243] ? format_decode+0x26c/0xb50
[ 147.621258] ? print_circular_bug+0x450/0x450
[ 147.621274] ? enable_ptr_key_workfn+0x20/0x20
[ 147.621289] ? format_decode+0x26c/0xb50
[ 147.621302] ? memcpy+0x39/0x60
[ 147.621321] ? vsnprintf+0x4ba/0x1600
[ 147.621337] __lock_acquire+0x2a02/0x5e70
[ 147.621358] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 147.621381] lock_acquire+0x1a2/0x530
[ 147.621397] ? down_trylock+0xe/0x70
[ 147.621411] ? rcu_read_unlock+0x40/0x40
[ 147.621431] ? vprintk+0x84/0xa0
[ 147.621449] _raw_spin_lock_irqsave+0x39/0x60
[ 147.621464] ? down_trylock+0xe/0x70
[ 147.621477] down_trylock+0xe/0x70
[ 147.621490] ? vprintk+0x84/0xa0
[ 147.621507] __down_trylock_console_sem+0x3b/0xd0
[ 147.621524] vprintk_emit+0x16b/0x560
[ 147.621542] vprintk+0x84/0xa0
[ 147.621559] _printk+0xba/0xf1
[ 147.621579] ? record_print_text.cold+0x16/0x16
[ 147.621602] ? report_bug.cold+0x66/0xab
[ 147.621616] ? group_sched_out.part.0+0x2c7/0x460
[ 147.621627] report_bug.cold+0x72/0xab
[ 147.621641] handle_bug+0x3c/0x70
[ 147.621654] exc_invalid_op+0x14/0x50
[ 147.621668] asm_exc_invalid_op+0x16/0x20
[ 147.621685] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 147.621698] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 147.621710] RSP: 0018:ffff88803babfc48 EFLAGS: 00010006
[ 147.621719] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 147.621727] RDX: ffff88803ccad040 RSI: ffffffff81566027 RDI: 0000000000000005
[ 147.621735] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 147.621742] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800fc74400
[ 147.621750] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 147.621761] ? group_sched_out.part.0+0x2c7/0x460
[ 147.621774] ? group_sched_out.part.0+0x2c7/0x460
[ 147.621787] ctx_sched_out+0x8f1/0xc10
[ 147.621800] __perf_event_task_sched_out+0x6d0/0x18d0
[ 147.621815] ? lock_is_held_type+0xd7/0x130
[ 147.621833] ? __perf_cgroup_move+0x160/0x160
[ 147.621845] ? set_next_entity+0x304/0x550
[ 147.621862] ? update_curr+0x267/0x740
[ 147.621880] ? lock_is_held_type+0xd7/0x130
[ 147.621897] __schedule+0xedd/0x2470
[ 147.621910] ? io_schedule_timeout+0x150/0x150
[ 147.621922] ? rcu_read_lock_sched_held+0x3e/0x80
[ 147.621943] schedule+0xda/0x1b0
[ 147.621953] exit_to_user_mode_prepare+0x114/0x1a0
[ 147.621973] syscall_exit_to_user_mode+0x19/0x40
[ 147.621990] do_syscall_64+0x48/0x90
[ 147.622004] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 147.622021] RIP: 0033:0x7f152c0adb19
[ 147.622029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 147.622040] RSP: 002b:00007f1529623218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 147.622051] RAX: 0000000000000001 RBX: 00007f152c1c0f68 RCX: 00007f152c0adb19
[ 147.622059] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f152c1c0f6c
[ 147.622066] RBP: 00007f152c1c0f60 R08: 000000000000000e R09: 0000000000000000
[ 147.622073] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f152c1c0f6c
[ 147.622081] R13: 00007fff4ba39e7f R14: 00007f1529623300 R15: 0000000000022000
[ 147.622094]
[ 147.678960] WARNING: CPU: 0 PID: 3837 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 147.679664] Modules linked in:
[ 147.679916] CPU: 0 PID: 3837 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1
[ 147.680529] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 147.681376] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 147.681791] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 147.683164] RSP: 0018:ffff88803babfc48 EFLAGS: 00010006
[ 147.683565] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 147.684111] RDX: ffff88803ccad040 RSI: ffffffff81566027 RDI: 0000000000000005
[ 147.684647] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 147.685185] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800fc74400
[ 147.685739] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 147.686279] FS: 00007f1529623700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 147.686886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 147.687324] CR2: 00007f2af335c7d0 CR3: 000000000d2d6000 CR4: 0000000000350ef0
[ 147.687861] Call Trace:
[ 147.688060]
[ 147.688242] ctx_sched_out+0x8f1/0xc10
[ 147.688546] __perf_event_task_sched_out+0x6d0/0x18d0
[ 147.688949] ? lock_is_held_type+0xd7/0x130
[ 147.689298] ? __perf_cgroup_move+0x160/0x160
[ 147.689643] ? set_next_entity+0x304/0x550
[ 147.689977] ? update_curr+0x267/0x740
[ 147.690278] ? lock_is_held_type+0xd7/0x130
[ 147.690611] __schedule+0xedd/0x2470
[ 147.690893] ? io_schedule_timeout+0x150/0x150
[ 147.691239] ? rcu_read_lock_sched_held+0x3e/0x80
[ 147.691625] schedule+0xda/0x1b0
[ 147.691889] exit_to_user_mode_prepare+0x114/0x1a0
[ 147.692272] syscall_exit_to_user_mode+0x19/0x40
[ 147.692648] do_syscall_64+0x48/0x90
[ 147.692940] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 147.693348] RIP: 0033:0x7f152c0adb19
[ 147.693637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 147.694992] RSP: 002b:00007f1529623218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 147.695567] RAX: 0000000000000001 RBX: 00007f152c1c0f68 RCX: 00007f152c0adb19
[ 147.696108] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f152c1c0f6c
[ 147.696651] RBP: 00007f152c1c0f60 R08: 000000000000000e R09: 0000000000000000
[ 147.697191] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f152c1c0f6c
[ 147.697727] R13: 00007fff4ba39e7f R14: 00007f1529623300 R15: 0000000000022000
[ 147.698275]
[ 147.698461] irq event stamp: 882
[ 147.698717] hardirqs last enabled at (881): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 147.699433] hardirqs last disabled at (882): [] __schedule+0x1225/0x2470
[ 147.700044] softirqs last enabled at (800): [] __irq_exit_rcu+0x11b/0x180
[ 147.700693] softirqs last disabled at (467): [] __irq_exit_rcu+0x11b/0x180
[ 147.701352] ---[ end trace 0000000000000000 ]---
16:33:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb)
pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040), 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'})
16:33:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb)
pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040), 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'})
16:33:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb)
pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040), 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'})
16:33:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x2}, 0x12354}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x220000, 0x0)
openat(r2, &(0x7f00000003c0)='./file1\x00', 0x402, 0x1bb)
pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
pipe2(&(0x7f0000000040), 0x4800)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file1\x00'})
[ 148.750318] Bluetooth: hci5: command 0x041b tx timeout
[ 149.409821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 149.411238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 149.412882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 149.414837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 149.416603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 149.418078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 149.421460] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 150.798346] Bluetooth: hci5: command 0x040f tx timeout
[ 151.182327] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 151.438310] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 151.438457] Bluetooth: hci2: command 0x0409 tx timeout
[ 151.502372] Bluetooth: hci7: Opcode 0x c03 failed: -110
[ 151.503090] Bluetooth: hci6: Opcode 0x c03 failed: -110
[ 152.846323] Bluetooth: hci5: command 0x0419 tx timeout
[ 153.488443] Bluetooth: hci2: command 0x041b tx timeout
[ 155.534357] Bluetooth: hci2: command 0x040f tx timeout
[ 155.534830] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 155.726440] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 155.854345] Bluetooth: hci6: Opcode 0x c03 failed: -110
[ 155.855322] Bluetooth: hci7: Opcode 0x c03 failed: -110
[ 157.582429] Bluetooth: hci2: command 0x0419 tx timeout
VM DIAGNOSIS:
16:33:26 Registers:
info registers vcpu 0
RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803babf698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000005b R11=0000000000000001
R12=000000000000005b R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f1529623700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2af335c7d0 CR3=000000000d2d6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f152c1947c0 00007f152c1947c8
YMM02=0000000000000000 0000000000000000 00007f152c1947e0 00007f152c1947c0
YMM03=0000000000000000 0000000000000000 00007f152c1947c8 00007f152c1947c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000000e RBX=0000000000000001 RCX=0000000000000dc0 RDX=0000000000000000
RSI=000000000000000e RDI=ffff88800f537770 RBP=0000000000000000 RSP=ffff88800f5376a0
R8 =0000000000000001 R9 =ffffffff85b01f17 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=0000000000000dc0 R15=ffff88800f537700
RIP=ffffffff840a8395 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f81c98dc028 CR3=0000000033ae6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e
YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000