Warning: Permanently added '[localhost]:16546' (ECDSA) to the list of known hosts. 2022/09/21 13:08:00 fuzzer started 2022/09/21 13:08:01 dialing manager at localhost:40289 syzkaller login: [ 36.974191] cgroup: Unknown subsys name 'net' [ 37.059108] cgroup: Unknown subsys name 'rlimit' [ 43.338649] systemd-udevd (133) used greatest stack depth: 24776 bytes left 2022/09/21 13:08:15 syscalls: 2215 2022/09/21 13:08:15 code coverage: enabled 2022/09/21 13:08:15 comparison tracing: enabled 2022/09/21 13:08:15 extra coverage: enabled 2022/09/21 13:08:15 setuid sandbox: enabled 2022/09/21 13:08:15 namespace sandbox: enabled 2022/09/21 13:08:15 Android sandbox: enabled 2022/09/21 13:08:15 fault injection: enabled 2022/09/21 13:08:15 leak checking: enabled 2022/09/21 13:08:15 net packet injection: enabled 2022/09/21 13:08:15 net device setup: enabled 2022/09/21 13:08:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/21 13:08:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/21 13:08:15 USB emulation: enabled 2022/09/21 13:08:15 hci packet injection: enabled 2022/09/21 13:08:15 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220921) 2022/09/21 13:08:15 802.15.4 emulation: enabled 2022/09/21 13:08:15 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/21 13:08:15 fetching corpus: 50, signal 32357/35508 (executing program) 2022/09/21 13:08:15 fetching corpus: 100, signal 42755/47003 (executing program) 2022/09/21 13:08:15 fetching corpus: 150, signal 50339/55565 (executing program) 2022/09/21 13:08:15 fetching corpus: 200, signal 60340/66254 (executing program) 2022/09/21 13:08:16 fetching corpus: 250, signal 67448/73954 (executing program) 2022/09/21 13:08:16 fetching corpus: 300, signal 70714/78002 (executing program) 2022/09/21 13:08:16 fetching corpus: 350, signal 74631/82561 (executing program) 2022/09/21 13:08:16 fetching corpus: 400, signal 78821/87180 (executing program) 2022/09/21 13:08:16 fetching corpus: 450, signal 81061/90039 (executing program) 2022/09/21 13:08:16 fetching corpus: 500, signal 87285/96155 (executing program) 2022/09/21 13:08:16 fetching corpus: 550, signal 91867/100769 (executing program) 2022/09/21 13:08:17 fetching corpus: 600, signal 93519/102879 (executing program) 2022/09/21 13:08:17 fetching corpus: 650, signal 96441/105980 (executing program) 2022/09/21 13:08:17 fetching corpus: 700, signal 98553/108345 (executing program) 2022/09/21 13:08:17 fetching corpus: 750, signal 100788/110726 (executing program) 2022/09/21 13:08:17 fetching corpus: 800, signal 104492/114172 (executing program) 2022/09/21 13:08:17 fetching corpus: 850, signal 106877/116586 (executing program) 2022/09/21 13:08:17 fetching corpus: 900, signal 110145/119568 (executing program) 2022/09/21 13:08:18 fetching corpus: 950, signal 111605/121133 (executing program) 2022/09/21 13:08:18 fetching corpus: 1000, signal 113034/122621 (executing program) 2022/09/21 13:08:18 fetching corpus: 1050, signal 114600/124192 (executing program) 2022/09/21 13:08:18 fetching corpus: 1100, signal 116874/126324 (executing program) 2022/09/21 13:08:18 fetching corpus: 1150, signal 118037/127507 (executing program) 2022/09/21 13:08:18 fetching corpus: 1200, signal 119780/129058 (executing program) 2022/09/21 13:08:18 fetching corpus: 1250, signal 122254/130982 (executing program) 2022/09/21 13:08:18 fetching corpus: 1300, signal 124315/132638 (executing program) 2022/09/21 13:08:19 fetching corpus: 1350, signal 125973/134012 (executing program) 2022/09/21 13:08:19 fetching corpus: 1400, signal 127483/135175 (executing program) 2022/09/21 13:08:19 fetching corpus: 1450, signal 128983/136288 (executing program) 2022/09/21 13:08:19 fetching corpus: 1500, signal 130773/137525 (executing program) 2022/09/21 13:08:19 fetching corpus: 1550, signal 132084/138582 (executing program) 2022/09/21 13:08:19 fetching corpus: 1600, signal 133889/139700 (executing program) 2022/09/21 13:08:19 fetching corpus: 1650, signal 135682/140904 (executing program) 2022/09/21 13:08:20 fetching corpus: 1700, signal 137467/141977 (executing program) 2022/09/21 13:08:20 fetching corpus: 1750, signal 138573/142696 (executing program) 2022/09/21 13:08:20 fetching corpus: 1800, signal 139799/143543 (executing program) 2022/09/21 13:08:20 fetching corpus: 1850, signal 140547/143985 (executing program) 2022/09/21 13:08:20 fetching corpus: 1900, signal 141798/144659 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145161 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145220 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145268 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145310 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145363 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145418 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145467 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145523 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145578 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145632 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145695 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145759 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145814 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145872 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145923 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/145970 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146022 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146076 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146136 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146205 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146258 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146326 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146382 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146448 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146497 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146550 (executing program) 2022/09/21 13:08:20 fetching corpus: 1942, signal 142766/146597 (executing program) 2022/09/21 13:08:21 fetching corpus: 1942, signal 142766/146660 (executing program) 2022/09/21 13:08:21 fetching corpus: 1942, signal 142766/146720 (executing program) 2022/09/21 13:08:21 fetching corpus: 1942, signal 142766/146765 (executing program) 2022/09/21 13:08:21 fetching corpus: 1942, signal 142766/146765 (executing program) 2022/09/21 13:08:23 starting 8 fuzzer processes 13:08:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000f00)={&(0x7f0000000d80), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f40448deef58247f0d06dbf77181da95"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x3c}}, 0x0) 13:08:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 13:08:23 executing program 2: syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x8864, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x21, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg}}}}}, 0x0) 13:08:23 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) [ 58.515789] audit: type=1400 audit(1663765703.647:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:08:23 executing program 5: socket(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) 13:08:23 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/216) 13:08:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000001e40)) 13:08:23 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) [ 59.811040] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.812952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.815386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.818176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.820278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.821637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.827598] Bluetooth: hci0: HCI_REQ-0x0c1a [ 59.879684] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.881568] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.884690] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.932992] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 59.935413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 59.937397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 59.938935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.942050] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.943512] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 59.945016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.947225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 59.949376] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.950467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.958404] Bluetooth: hci3: HCI_REQ-0x0c1a [ 59.961171] Bluetooth: hci5: HCI_REQ-0x0c1a [ 59.965098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.970206] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.991128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 59.995433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.996841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.004988] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.006528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.009065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.010397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.011164] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.011498] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.030077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.045472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.047158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.056259] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.057560] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.059289] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.060631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.065456] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.081049] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.897798] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 61.899232] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 61.899256] Bluetooth: hci0: command 0x0409 tx timeout [ 61.962826] Bluetooth: hci3: command 0x0409 tx timeout [ 62.026513] Bluetooth: hci4: command 0x0409 tx timeout [ 62.026587] Bluetooth: hci5: command 0x0409 tx timeout [ 62.091377] Bluetooth: hci6: command 0x0409 tx timeout [ 62.154838] Bluetooth: hci7: command 0x0409 tx timeout [ 63.945809] Bluetooth: hci0: command 0x041b tx timeout [ 64.009931] Bluetooth: hci3: command 0x041b tx timeout [ 64.074145] Bluetooth: hci4: command 0x041b tx timeout [ 64.075495] Bluetooth: hci5: command 0x041b tx timeout [ 64.138841] Bluetooth: hci6: command 0x041b tx timeout [ 64.201999] Bluetooth: hci7: command 0x041b tx timeout [ 64.910953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.912590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.913515] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.917972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.921980] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.923411] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.927838] Bluetooth: hci1: HCI_REQ-0x0c1a [ 65.993825] Bluetooth: hci0: command 0x040f tx timeout [ 66.057789] Bluetooth: hci3: command 0x040f tx timeout [ 66.122801] Bluetooth: hci5: command 0x040f tx timeout [ 66.122821] Bluetooth: hci4: command 0x040f tx timeout [ 66.186803] Bluetooth: hci6: command 0x040f tx timeout [ 66.250801] Bluetooth: hci7: command 0x040f tx timeout [ 66.953823] Bluetooth: hci1: command 0x0409 tx timeout [ 67.018230] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 68.042809] Bluetooth: hci0: command 0x0419 tx timeout [ 68.105838] Bluetooth: hci3: command 0x0419 tx timeout [ 68.169798] Bluetooth: hci4: command 0x0419 tx timeout [ 68.170808] Bluetooth: hci5: command 0x0419 tx timeout [ 68.233817] Bluetooth: hci6: command 0x0419 tx timeout [ 68.297831] Bluetooth: hci7: command 0x0419 tx timeout [ 69.001820] Bluetooth: hci1: command 0x041b tx timeout [ 71.050827] Bluetooth: hci1: command 0x040f tx timeout [ 71.561857] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 73.097843] Bluetooth: hci1: command 0x0419 tx timeout [ 74.108502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.112402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.116226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.122911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.125154] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.126681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.131315] Bluetooth: hci2: HCI_REQ-0x0c1a [ 76.170920] Bluetooth: hci2: command 0x0409 tx timeout [ 78.218869] Bluetooth: hci2: command 0x041b tx timeout [ 80.266805] Bluetooth: hci2: command 0x040f tx timeout [ 82.314804] Bluetooth: hci2: command 0x0419 tx timeout [ 121.036205] audit: type=1400 audit(1663765766.168:7): avc: denied { open } for pid=3844 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.038009] audit: type=1400 audit(1663765766.168:8): avc: denied { kernel } for pid=3844 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.043833] ------------[ cut here ]------------ [ 121.043854] [ 121.043858] ====================================================== [ 121.043861] WARNING: possible circular locking dependency detected [ 121.043865] 6.0.0-rc6-next-20220921 #1 Not tainted [ 121.043872] ------------------------------------------------------ [ 121.043875] syz-executor.3/3845 is trying to acquire lock: [ 121.043881] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 121.043921] [ 121.043921] but task is already holding lock: [ 121.043923] ffff88800ef54020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.043953] [ 121.043953] which lock already depends on the new lock. [ 121.043953] [ 121.043956] [ 121.043956] the existing dependency chain (in reverse order) is: [ 121.043960] [ 121.043960] -> #3 (&ctx->lock){....}-{2:2}: [ 121.043974] _raw_spin_lock+0x2a/0x40 [ 121.043994] __perf_event_task_sched_out+0x53b/0x18d0 [ 121.044007] __schedule+0xedd/0x2470 [ 121.044021] schedule+0xda/0x1b0 [ 121.044034] futex_wait_queue+0xf5/0x1e0 [ 121.044047] futex_wait+0x28e/0x690 [ 121.044057] do_futex+0x2ff/0x380 [ 121.044066] __x64_sys_futex+0x1c6/0x4d0 [ 121.044077] do_syscall_64+0x3b/0x90 [ 121.044094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.044106] [ 121.044106] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 121.044120] _raw_spin_lock_nested+0x30/0x40 [ 121.044140] raw_spin_rq_lock_nested+0x1e/0x30 [ 121.044153] task_fork_fair+0x63/0x4d0 [ 121.044171] sched_cgroup_fork+0x3d0/0x540 [ 121.044186] copy_process+0x4183/0x6e20 [ 121.044197] kernel_clone+0xe7/0x890 [ 121.044207] user_mode_thread+0xad/0xf0 [ 121.044217] rest_init+0x24/0x250 [ 121.044228] arch_call_rest_init+0xf/0x14 [ 121.044245] start_kernel+0x4c1/0x4e6 [ 121.044260] secondary_startup_64_no_verify+0xe0/0xeb [ 121.044275] [ 121.044275] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 121.044289] _raw_spin_lock_irqsave+0x39/0x60 [ 121.044309] try_to_wake_up+0xab/0x1930 [ 121.044325] up+0x75/0xb0 [ 121.044340] __up_console_sem+0x6e/0x80 [ 121.044357] console_unlock+0x46a/0x590 [ 121.044374] vt_ioctl+0x2822/0x2ca0 [ 121.044388] tty_ioctl+0x7c4/0x1700 [ 121.044400] __x64_sys_ioctl+0x19a/0x210 [ 121.044417] do_syscall_64+0x3b/0x90 [ 121.044434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.044446] [ 121.044446] -> #0 ((console_sem).lock){....}-{2:2}: [ 121.044460] __lock_acquire+0x2a02/0x5e70 [ 121.044478] lock_acquire+0x1a2/0x530 [ 121.044496] _raw_spin_lock_irqsave+0x39/0x60 [ 121.044515] down_trylock+0xe/0x70 [ 121.044550] __down_trylock_console_sem+0x3b/0xd0 [ 121.044567] vprintk_emit+0x16b/0x560 [ 121.044585] vprintk+0x84/0xa0 [ 121.044603] _printk+0xba/0xf1 [ 121.044614] report_bug.cold+0x72/0xab [ 121.044631] handle_bug+0x3c/0x70 [ 121.044648] exc_invalid_op+0x14/0x50 [ 121.044665] asm_exc_invalid_op+0x16/0x20 [ 121.044676] group_sched_out.part.0+0x2c7/0x460 [ 121.044687] ctx_sched_out+0x8f1/0xc10 [ 121.044698] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.044711] __schedule+0xedd/0x2470 [ 121.044724] schedule+0xda/0x1b0 [ 121.044737] futex_wait_queue+0xf5/0x1e0 [ 121.044748] futex_wait+0x28e/0x690 [ 121.044758] do_futex+0x2ff/0x380 [ 121.044768] __x64_sys_futex+0x1c6/0x4d0 [ 121.044778] do_syscall_64+0x3b/0x90 [ 121.044795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.044807] [ 121.044807] other info that might help us debug this: [ 121.044807] [ 121.044809] Chain exists of: [ 121.044809] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 121.044809] [ 121.044825] Possible unsafe locking scenario: [ 121.044825] [ 121.044828] CPU0 CPU1 [ 121.044830] ---- ---- [ 121.044832] lock(&ctx->lock); [ 121.044838] lock(&rq->__lock); [ 121.044845] lock(&ctx->lock); [ 121.044851] lock((console_sem).lock); [ 121.044857] [ 121.044857] *** DEADLOCK *** [ 121.044857] [ 121.044859] 2 locks held by syz-executor.3/3845: [ 121.044866] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 121.044897] #1: ffff88800ef54020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 121.044926] [ 121.044926] stack backtrace: [ 121.044929] CPU: 0 PID: 3845 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 121.044942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.044950] Call Trace: [ 121.044954] [ 121.044958] dump_stack_lvl+0x8b/0xb3 [ 121.044977] check_noncircular+0x263/0x2e0 [ 121.044995] ? format_decode+0x26c/0xb50 [ 121.045013] ? print_circular_bug+0x450/0x450 [ 121.045031] ? enable_ptr_key_workfn+0x20/0x20 [ 121.045048] ? format_decode+0x26c/0xb50 [ 121.045066] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 121.045085] __lock_acquire+0x2a02/0x5e70 [ 121.045108] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.045132] lock_acquire+0x1a2/0x530 [ 121.045150] ? down_trylock+0xe/0x70 [ 121.045168] ? lock_release+0x750/0x750 [ 121.045190] ? vprintk+0x84/0xa0 [ 121.045210] _raw_spin_lock_irqsave+0x39/0x60 [ 121.045230] ? down_trylock+0xe/0x70 [ 121.045246] down_trylock+0xe/0x70 [ 121.045262] ? vprintk+0x84/0xa0 [ 121.045281] __down_trylock_console_sem+0x3b/0xd0 [ 121.045299] vprintk_emit+0x16b/0x560 [ 121.045320] vprintk+0x84/0xa0 [ 121.045339] _printk+0xba/0xf1 [ 121.045350] ? record_print_text.cold+0x16/0x16 [ 121.045366] ? report_bug.cold+0x66/0xab [ 121.045384] ? group_sched_out.part.0+0x2c7/0x460 [ 121.045396] report_bug.cold+0x72/0xab [ 121.045416] handle_bug+0x3c/0x70 [ 121.045434] exc_invalid_op+0x14/0x50 [ 121.045453] asm_exc_invalid_op+0x16/0x20 [ 121.045465] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.045479] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.045491] RSP: 0018:ffff88803d8f78f8 EFLAGS: 00010006 [ 121.045500] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.045508] RDX: ffff88801f1f9ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 121.045516] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.045524] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800ef54000 [ 121.045532] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 121.045543] ? group_sched_out.part.0+0x2c7/0x460 [ 121.045557] ? group_sched_out.part.0+0x2c7/0x460 [ 121.045570] ctx_sched_out+0x8f1/0xc10 [ 121.045584] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.045600] ? lock_is_held_type+0xd7/0x130 [ 121.045613] ? __perf_cgroup_move+0x160/0x160 [ 121.045626] ? set_next_entity+0x304/0x550 [ 121.045648] ? lock_is_held_type+0xd7/0x130 [ 121.045661] __schedule+0xedd/0x2470 [ 121.045678] ? io_schedule_timeout+0x150/0x150 [ 121.045693] ? futex_wait_setup+0x166/0x230 [ 121.045708] schedule+0xda/0x1b0 [ 121.045723] futex_wait_queue+0xf5/0x1e0 [ 121.045736] futex_wait+0x28e/0x690 [ 121.045749] ? futex_wait_setup+0x230/0x230 [ 121.045762] ? wake_up_q+0x8b/0xf0 [ 121.045776] ? do_raw_spin_unlock+0x4f/0x220 [ 121.045797] ? futex_wake+0x158/0x490 [ 121.045814] ? fd_install+0x1f9/0x640 [ 121.045832] do_futex+0x2ff/0x380 [ 121.045843] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 121.045860] __x64_sys_futex+0x1c6/0x4d0 [ 121.045873] ? __x64_sys_futex_time32+0x480/0x480 [ 121.045885] ? lock_is_held_type+0xd7/0x130 [ 121.045898] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.045920] do_syscall_64+0x3b/0x90 [ 121.045938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.045951] RIP: 0033:0x7f0fd1624b19 [ 121.045960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.045971] RSP: 002b:00007f0fceb9a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.045982] RAX: ffffffffffffffda RBX: 00007f0fd1737f68 RCX: 00007f0fd1624b19 [ 121.045991] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0fd1737f68 [ 121.045998] RBP: 00007f0fd1737f60 R08: 0000000000000000 R09: 0000000000000000 [ 121.046006] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fd1737f6c [ 121.046013] R13: 00007fff75119d3f R14: 00007f0fceb9a300 R15: 0000000000022000 [ 121.046027] [ 121.105703] WARNING: CPU: 0 PID: 3845 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 121.106398] Modules linked in: [ 121.106644] CPU: 0 PID: 3845 Comm: syz-executor.3 Not tainted 6.0.0-rc6-next-20220921 #1 [ 121.107231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 121.108053] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 121.108455] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 2b 12 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 121.109816] RSP: 0018:ffff88803d8f78f8 EFLAGS: 00010006 [ 121.110216] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 121.110736] RDX: ffff88801f1f9ac0 RSI: ffffffff815663a7 RDI: 0000000000000005 [ 121.111260] RBP: ffff8880086685c8 R08: 0000000000000005 R09: 0000000000000001 [ 121.111782] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800ef54000 [ 121.112312] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 121.112850] FS: 00007f0fceb9a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 121.113446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.113885] CR2: 0000555556fd46e8 CR3: 000000000dcd4000 CR4: 0000000000350ef0 [ 121.114414] Call Trace: [ 121.114613] [ 121.114786] ctx_sched_out+0x8f1/0xc10 [ 121.115079] __perf_event_task_sched_out+0x6d0/0x18d0 [ 121.115473] ? lock_is_held_type+0xd7/0x130 [ 121.115799] ? __perf_cgroup_move+0x160/0x160 [ 121.116142] ? set_next_entity+0x304/0x550 [ 121.116461] ? lock_is_held_type+0xd7/0x130 [ 121.116791] __schedule+0xedd/0x2470 [ 121.117079] ? io_schedule_timeout+0x150/0x150 [ 121.117427] ? futex_wait_setup+0x166/0x230 [ 121.117757] schedule+0xda/0x1b0 [ 121.118021] futex_wait_queue+0xf5/0x1e0 [ 121.118330] futex_wait+0x28e/0x690 [ 121.118608] ? futex_wait_setup+0x230/0x230 [ 121.118934] ? wake_up_q+0x8b/0xf0 [ 121.119205] ? do_raw_spin_unlock+0x4f/0x220 [ 121.119546] ? futex_wake+0x158/0x490 [ 121.119845] ? fd_install+0x1f9/0x640 [ 121.120140] do_futex+0x2ff/0x380 [ 121.120407] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 121.120846] __x64_sys_futex+0x1c6/0x4d0 [ 121.121149] ? __x64_sys_futex_time32+0x480/0x480 [ 121.121514] ? lock_is_held_type+0xd7/0x130 [ 121.121838] ? rcu_read_lock_sched_held+0x3e/0x80 [ 121.122209] do_syscall_64+0x3b/0x90 [ 121.122498] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.122890] RIP: 0033:0x7f0fd1624b19 [ 121.123171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 121.124505] RSP: 002b:00007f0fceb9a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 121.125073] RAX: ffffffffffffffda RBX: 00007f0fd1737f68 RCX: 00007f0fd1624b19 [ 121.125590] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0fd1737f68 [ 121.126102] RBP: 00007f0fd1737f60 R08: 0000000000000000 R09: 0000000000000000 [ 121.126634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fd1737f6c [ 121.127164] R13: 00007fff75119d3f R14: 00007f0fceb9a300 R15: 0000000000022000 [ 121.127699] [ 121.127879] irq event stamp: 1042 [ 121.128146] hardirqs last enabled at (1041): [] syscall_enter_from_user_mode+0x1d/0x50 [ 121.128854] hardirqs last disabled at (1042): [] __schedule+0x1225/0x2470 [ 121.129478] softirqs last enabled at (754): [] __irq_exit_rcu+0x11b/0x180 [ 121.130118] softirqs last disabled at (303): [] __irq_exit_rcu+0x11b/0x180 [ 121.130749] ---[ end trace 0000000000000000 ]--- [ 121.165216] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.166608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.167678] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.170854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.172058] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 121.172727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.175220] Bluetooth: hci6: HCI_REQ-0x0c1a [ 123.209793] Bluetooth: hci6: command 0x0409 tx timeout [ 125.257793] Bluetooth: hci6: command 0x041b tx timeout [ 127.305793] Bluetooth: hci6: command 0x040f tx timeout [ 129.354810] Bluetooth: hci6: command 0x0419 tx timeout VM DIAGNOSIS: 13:09:26 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1c91 RDI=ffffffff87645ba0 RBP=ffffffff87645b60 RSP=ffff88803d8f7348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87645b60 R14=0000000000000010 R15=ffffffff822b1c80 RIP=ffffffff822b1ce9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0fceb9a700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556fd46e8 CR3=000000000dcd4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f0fd170b7c0 00007f0fd170b7c8 YMM02=0000000000000000 0000000000000000 00007f0fd170b7e0 00007f0fd170b7c0 YMM03=0000000000000000 0000000000000000 00007f0fd170b7c8 00007f0fd170b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3eee0 RCX=0000000000000000 RDX=ffff88801f1fd040 RSI=ffffffff813bce37 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88803d907948 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9c7ddd R13=0000000000000001 R14=ffff88806ce3eee8 R15=dffffc0000000000 RIP=ffffffff813bce39 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555f2b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fd173255c CR3=000000000dcd4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f0fd170b7c0 00007f0fd170b7c8 YMM02=0000000000000000 0000000000000000 00007f0fd170b7e0 00007f0fd170b7c0 YMM03=0000000000000000 0000000000000000 00007f0fd170b7c8 00007f0fd170b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000