Warning: Permanently added '[localhost]:6278' (ECDSA) to the list of known hosts.
2022/09/12 18:19:44 fuzzer started
2022/09/12 18:19:45 dialing manager at localhost:38027
syzkaller login: [ 36.393269] cgroup: Unknown subsys name 'net'
[ 36.498832] cgroup: Unknown subsys name 'rlimit'
2022/09/12 18:19:58 syscalls: 2215
2022/09/12 18:19:58 code coverage: enabled
2022/09/12 18:19:58 comparison tracing: enabled
2022/09/12 18:19:58 extra coverage: enabled
2022/09/12 18:19:58 setuid sandbox: enabled
2022/09/12 18:19:58 namespace sandbox: enabled
2022/09/12 18:19:58 Android sandbox: enabled
2022/09/12 18:19:58 fault injection: enabled
2022/09/12 18:19:58 leak checking: enabled
2022/09/12 18:19:58 net packet injection: enabled
2022/09/12 18:19:58 net device setup: enabled
2022/09/12 18:19:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 18:19:58 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 18:19:58 USB emulation: enabled
2022/09/12 18:19:58 hci packet injection: enabled
2022/09/12 18:19:58 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912 )
2022/09/12 18:19:58 802.15.4 emulation: enabled
2022/09/12 18:19:58 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 18:19:58 fetching corpus: 47, signal 24447/28081 (executing program)
2022/09/12 18:19:58 fetching corpus: 97, signal 44220/49209 (executing program)
2022/09/12 18:19:58 fetching corpus: 147, signal 50729/57211 (executing program)
2022/09/12 18:19:58 fetching corpus: 197, signal 57378/65237 (executing program)
2022/09/12 18:19:58 fetching corpus: 247, signal 67434/76400 (executing program)
2022/09/12 18:19:58 fetching corpus: 297, signal 75243/85340 (executing program)
2022/09/12 18:19:59 fetching corpus: 347, signal 81842/92984 (executing program)
2022/09/12 18:19:59 fetching corpus: 397, signal 85688/97959 (executing program)
2022/09/12 18:19:59 fetching corpus: 447, signal 91820/105058 (executing program)
2022/09/12 18:19:59 fetching corpus: 497, signal 96155/110344 (executing program)
2022/09/12 18:19:59 fetching corpus: 547, signal 99071/114292 (executing program)
2022/09/12 18:19:59 fetching corpus: 597, signal 101826/118060 (executing program)
2022/09/12 18:19:59 fetching corpus: 647, signal 105579/122663 (executing program)
2022/09/12 18:20:00 fetching corpus: 697, signal 107481/125627 (executing program)
2022/09/12 18:20:00 fetching corpus: 747, signal 110983/129912 (executing program)
2022/09/12 18:20:00 fetching corpus: 797, signal 112851/132755 (executing program)
2022/09/12 18:20:00 fetching corpus: 847, signal 116518/137115 (executing program)
2022/09/12 18:20:00 fetching corpus: 897, signal 119607/140895 (executing program)
2022/09/12 18:20:00 fetching corpus: 946, signal 122268/144313 (executing program)
2022/09/12 18:20:00 fetching corpus: 996, signal 124590/147348 (executing program)
2022/09/12 18:20:00 fetching corpus: 1046, signal 127153/150603 (executing program)
2022/09/12 18:20:01 fetching corpus: 1095, signal 129362/153548 (executing program)
2022/09/12 18:20:01 fetching corpus: 1145, signal 131477/156350 (executing program)
2022/09/12 18:20:01 fetching corpus: 1195, signal 133373/158919 (executing program)
2022/09/12 18:20:01 fetching corpus: 1245, signal 135430/161633 (executing program)
2022/09/12 18:20:01 fetching corpus: 1295, signal 137296/164167 (executing program)
2022/09/12 18:20:01 fetching corpus: 1345, signal 140500/167683 (executing program)
2022/09/12 18:20:01 fetching corpus: 1395, signal 142058/169839 (executing program)
2022/09/12 18:20:02 fetching corpus: 1445, signal 143725/172113 (executing program)
2022/09/12 18:20:02 fetching corpus: 1495, signal 145558/174437 (executing program)
2022/09/12 18:20:02 fetching corpus: 1545, signal 146795/176303 (executing program)
2022/09/12 18:20:02 fetching corpus: 1595, signal 147722/177905 (executing program)
2022/09/12 18:20:02 fetching corpus: 1645, signal 149180/179920 (executing program)
2022/09/12 18:20:02 fetching corpus: 1695, signal 151023/182191 (executing program)
2022/09/12 18:20:02 fetching corpus: 1745, signal 153160/184627 (executing program)
2022/09/12 18:20:03 fetching corpus: 1795, signal 154848/186772 (executing program)
2022/09/12 18:20:03 fetching corpus: 1845, signal 156895/189124 (executing program)
2022/09/12 18:20:03 fetching corpus: 1895, signal 158389/191029 (executing program)
2022/09/12 18:20:03 fetching corpus: 1945, signal 159458/192629 (executing program)
2022/09/12 18:20:03 fetching corpus: 1995, signal 160921/194474 (executing program)
2022/09/12 18:20:03 fetching corpus: 2045, signal 162784/196594 (executing program)
2022/09/12 18:20:03 fetching corpus: 2095, signal 164432/198509 (executing program)
2022/09/12 18:20:04 fetching corpus: 2145, signal 165948/200399 (executing program)
2022/09/12 18:20:04 fetching corpus: 2195, signal 167035/201922 (executing program)
2022/09/12 18:20:04 fetching corpus: 2245, signal 167814/203214 (executing program)
2022/09/12 18:20:04 fetching corpus: 2295, signal 169453/205075 (executing program)
2022/09/12 18:20:04 fetching corpus: 2345, signal 170260/206344 (executing program)
2022/09/12 18:20:04 fetching corpus: 2395, signal 171735/208072 (executing program)
2022/09/12 18:20:05 fetching corpus: 2445, signal 172987/209633 (executing program)
2022/09/12 18:20:05 fetching corpus: 2495, signal 174810/211518 (executing program)
2022/09/12 18:20:05 fetching corpus: 2545, signal 176006/213010 (executing program)
2022/09/12 18:20:05 fetching corpus: 2595, signal 177385/214561 (executing program)
2022/09/12 18:20:05 fetching corpus: 2645, signal 178509/215966 (executing program)
2022/09/12 18:20:05 fetching corpus: 2695, signal 179655/217413 (executing program)
2022/09/12 18:20:05 fetching corpus: 2745, signal 180750/218793 (executing program)
2022/09/12 18:20:06 fetching corpus: 2795, signal 181786/220022 (executing program)
2022/09/12 18:20:06 fetching corpus: 2845, signal 182693/221202 (executing program)
2022/09/12 18:20:06 fetching corpus: 2895, signal 184321/222758 (executing program)
2022/09/12 18:20:06 fetching corpus: 2945, signal 185581/224126 (executing program)
2022/09/12 18:20:06 fetching corpus: 2995, signal 186352/225172 (executing program)
2022/09/12 18:20:06 fetching corpus: 3045, signal 188251/226821 (executing program)
2022/09/12 18:20:07 fetching corpus: 3095, signal 189708/228238 (executing program)
2022/09/12 18:20:07 fetching corpus: 3145, signal 190725/229424 (executing program)
2022/09/12 18:20:07 fetching corpus: 3195, signal 192272/230887 (executing program)
2022/09/12 18:20:07 fetching corpus: 3245, signal 193220/231987 (executing program)
2022/09/12 18:20:07 fetching corpus: 3295, signal 193955/232960 (executing program)
2022/09/12 18:20:07 fetching corpus: 3345, signal 194996/234093 (executing program)
2022/09/12 18:20:07 fetching corpus: 3395, signal 196276/235334 (executing program)
2022/09/12 18:20:08 fetching corpus: 3445, signal 197491/236493 (executing program)
2022/09/12 18:20:08 fetching corpus: 3495, signal 198312/237457 (executing program)
2022/09/12 18:20:08 fetching corpus: 3545, signal 198945/238315 (executing program)
2022/09/12 18:20:08 fetching corpus: 3595, signal 199721/239244 (executing program)
2022/09/12 18:20:08 fetching corpus: 3645, signal 200259/240035 (executing program)
2022/09/12 18:20:08 fetching corpus: 3695, signal 201165/240996 (executing program)
2022/09/12 18:20:08 fetching corpus: 3745, signal 202189/241968 (executing program)
2022/09/12 18:20:09 fetching corpus: 3795, signal 202956/242789 (executing program)
2022/09/12 18:20:09 fetching corpus: 3845, signal 203675/243610 (executing program)
2022/09/12 18:20:09 fetching corpus: 3895, signal 204689/244519 (executing program)
2022/09/12 18:20:09 fetching corpus: 3945, signal 205475/245411 (executing program)
2022/09/12 18:20:09 fetching corpus: 3995, signal 206194/246227 (executing program)
2022/09/12 18:20:09 fetching corpus: 4045, signal 206818/246964 (executing program)
2022/09/12 18:20:09 fetching corpus: 4095, signal 207720/247830 (executing program)
2022/09/12 18:20:09 fetching corpus: 4145, signal 208615/248657 (executing program)
2022/09/12 18:20:10 fetching corpus: 4195, signal 210056/249710 (executing program)
2022/09/12 18:20:10 fetching corpus: 4245, signal 210872/250466 (executing program)
2022/09/12 18:20:10 fetching corpus: 4295, signal 211763/251236 (executing program)
2022/09/12 18:20:10 fetching corpus: 4345, signal 212706/252020 (executing program)
2022/09/12 18:20:10 fetching corpus: 4395, signal 213493/252782 (executing program)
2022/09/12 18:20:10 fetching corpus: 4445, signal 214115/253414 (executing program)
2022/09/12 18:20:11 fetching corpus: 4495, signal 214763/254057 (executing program)
2022/09/12 18:20:11 fetching corpus: 4544, signal 215415/254716 (executing program)
2022/09/12 18:20:11 fetching corpus: 4594, signal 216143/255358 (executing program)
2022/09/12 18:20:11 fetching corpus: 4644, signal 216813/256032 (executing program)
2022/09/12 18:20:11 fetching corpus: 4694, signal 217473/256637 (executing program)
2022/09/12 18:20:11 fetching corpus: 4744, signal 218018/257226 (executing program)
2022/09/12 18:20:11 fetching corpus: 4794, signal 219146/257988 (executing program)
2022/09/12 18:20:11 fetching corpus: 4844, signal 219694/258584 (executing program)
2022/09/12 18:20:12 fetching corpus: 4893, signal 220869/259321 (executing program)
2022/09/12 18:20:12 fetching corpus: 4943, signal 221920/259979 (executing program)
2022/09/12 18:20:12 fetching corpus: 4993, signal 222756/260632 (executing program)
2022/09/12 18:20:12 fetching corpus: 5043, signal 223154/261123 (executing program)
2022/09/12 18:20:12 fetching corpus: 5093, signal 223802/261673 (executing program)
2022/09/12 18:20:12 fetching corpus: 5143, signal 224670/262286 (executing program)
2022/09/12 18:20:12 fetching corpus: 5193, signal 225274/262809 (executing program)
2022/09/12 18:20:13 fetching corpus: 5243, signal 226041/263399 (executing program)
2022/09/12 18:20:13 fetching corpus: 5293, signal 226856/263970 (executing program)
2022/09/12 18:20:13 fetching corpus: 5343, signal 227734/264491 (executing program)
2022/09/12 18:20:13 fetching corpus: 5393, signal 228192/264901 (executing program)
2022/09/12 18:20:13 fetching corpus: 5443, signal 229550/265607 (executing program)
2022/09/12 18:20:13 fetching corpus: 5493, signal 230007/266016 (executing program)
2022/09/12 18:20:13 fetching corpus: 5543, signal 230656/266456 (executing program)
2022/09/12 18:20:13 fetching corpus: 5593, signal 231393/266905 (executing program)
2022/09/12 18:20:13 fetching corpus: 5643, signal 232050/267331 (executing program)
2022/09/12 18:20:14 fetching corpus: 5693, signal 232607/267725 (executing program)
2022/09/12 18:20:14 fetching corpus: 5743, signal 233062/268123 (executing program)
2022/09/12 18:20:14 fetching corpus: 5793, signal 233745/268496 (executing program)
2022/09/12 18:20:14 fetching corpus: 5843, signal 234238/268829 (executing program)
2022/09/12 18:20:14 fetching corpus: 5893, signal 234707/269173 (executing program)
2022/09/12 18:20:14 fetching corpus: 5943, signal 235243/269500 (executing program)
2022/09/12 18:20:14 fetching corpus: 5993, signal 235725/269858 (executing program)
2022/09/12 18:20:15 fetching corpus: 6043, signal 236293/270197 (executing program)
2022/09/12 18:20:15 fetching corpus: 6093, signal 236840/270548 (executing program)
2022/09/12 18:20:15 fetching corpus: 6143, signal 237486/270970 (executing program)
2022/09/12 18:20:15 fetching corpus: 6192, signal 238057/271289 (executing program)
2022/09/12 18:20:15 fetching corpus: 6242, signal 238375/271615 (executing program)
2022/09/12 18:20:15 fetching corpus: 6292, signal 238884/271886 (executing program)
2022/09/12 18:20:15 fetching corpus: 6342, signal 239298/272184 (executing program)
2022/09/12 18:20:16 fetching corpus: 6392, signal 239844/272468 (executing program)
2022/09/12 18:20:16 fetching corpus: 6442, signal 240339/272744 (executing program)
2022/09/12 18:20:16 fetching corpus: 6492, signal 240763/273021 (executing program)
2022/09/12 18:20:16 fetching corpus: 6542, signal 241116/273284 (executing program)
2022/09/12 18:20:16 fetching corpus: 6592, signal 241581/273543 (executing program)
2022/09/12 18:20:16 fetching corpus: 6642, signal 242006/273698 (executing program)
2022/09/12 18:20:16 fetching corpus: 6692, signal 242781/273701 (executing program)
2022/09/12 18:20:16 fetching corpus: 6742, signal 243369/273704 (executing program)
2022/09/12 18:20:17 fetching corpus: 6792, signal 243910/273704 (executing program)
2022/09/12 18:20:17 fetching corpus: 6842, signal 244706/273725 (executing program)
2022/09/12 18:20:17 fetching corpus: 6892, signal 245327/273742 (executing program)
2022/09/12 18:20:17 fetching corpus: 6942, signal 245883/273753 (executing program)
2022/09/12 18:20:17 fetching corpus: 6992, signal 246246/273797 (executing program)
2022/09/12 18:20:17 fetching corpus: 7042, signal 246822/273895 (executing program)
2022/09/12 18:20:18 fetching corpus: 7092, signal 247290/273925 (executing program)
2022/09/12 18:20:18 fetching corpus: 7142, signal 247893/273929 (executing program)
2022/09/12 18:20:18 fetching corpus: 7192, signal 248239/273958 (executing program)
2022/09/12 18:20:18 fetching corpus: 7242, signal 248931/273981 (executing program)
2022/09/12 18:20:18 fetching corpus: 7292, signal 249330/274026 (executing program)
2022/09/12 18:20:18 fetching corpus: 7342, signal 249685/274046 (executing program)
2022/09/12 18:20:18 fetching corpus: 7392, signal 250124/274067 (executing program)
2022/09/12 18:20:18 fetching corpus: 7442, signal 250593/274112 (executing program)
2022/09/12 18:20:19 fetching corpus: 7492, signal 250999/274120 (executing program)
2022/09/12 18:20:19 fetching corpus: 7542, signal 251538/274125 (executing program)
2022/09/12 18:20:19 fetching corpus: 7592, signal 251910/274137 (executing program)
2022/09/12 18:20:19 fetching corpus: 7642, signal 252346/274143 (executing program)
2022/09/12 18:20:19 fetching corpus: 7692, signal 252855/274190 (executing program)
2022/09/12 18:20:19 fetching corpus: 7742, signal 253323/274208 (executing program)
2022/09/12 18:20:19 fetching corpus: 7792, signal 253926/274234 (executing program)
2022/09/12 18:20:20 fetching corpus: 7842, signal 254494/274267 (executing program)
2022/09/12 18:20:20 fetching corpus: 7892, signal 255042/274270 (executing program)
2022/09/12 18:20:20 fetching corpus: 7942, signal 255381/274270 (executing program)
2022/09/12 18:20:20 fetching corpus: 7992, signal 255718/274291 (executing program)
2022/09/12 18:20:20 fetching corpus: 8042, signal 256110/274296 (executing program)
2022/09/12 18:20:20 fetching corpus: 8092, signal 256352/274308 (executing program)
2022/09/12 18:20:20 fetching corpus: 8142, signal 256813/274339 (executing program)
2022/09/12 18:20:20 fetching corpus: 8192, signal 257222/274350 (executing program)
2022/09/12 18:20:21 fetching corpus: 8242, signal 257869/274365 (executing program)
2022/09/12 18:20:21 fetching corpus: 8292, signal 258454/274365 (executing program)
2022/09/12 18:20:21 fetching corpus: 8342, signal 258938/274390 (executing program)
2022/09/12 18:20:21 fetching corpus: 8392, signal 259343/274398 (executing program)
2022/09/12 18:20:21 fetching corpus: 8442, signal 259684/274441 (executing program)
2022/09/12 18:20:21 fetching corpus: 8492, signal 260144/274441 (executing program)
2022/09/12 18:20:21 fetching corpus: 8542, signal 260565/274477 (executing program)
2022/09/12 18:20:22 fetching corpus: 8590, signal 261009/274505 (executing program)
2022/09/12 18:20:22 fetching corpus: 8639, signal 261344/274509 (executing program)
2022/09/12 18:20:22 fetching corpus: 8689, signal 261733/274525 (executing program)
2022/09/12 18:20:22 fetching corpus: 8739, signal 262026/274531 (executing program)
2022/09/12 18:20:22 fetching corpus: 8789, signal 262525/274531 (executing program)
2022/09/12 18:20:22 fetching corpus: 8839, signal 262803/274560 (executing program)
2022/09/12 18:20:22 fetching corpus: 8889, signal 263036/274574 (executing program)
2022/09/12 18:20:22 fetching corpus: 8939, signal 263405/274579 (executing program)
2022/09/12 18:20:23 fetching corpus: 8989, signal 263833/274585 (executing program)
2022/09/12 18:20:23 fetching corpus: 8992, signal 263870/274585 (executing program)
2022/09/12 18:20:23 fetching corpus: 8992, signal 263870/274585 (executing program)
2022/09/12 18:20:24 starting 8 fuzzer processes
18:20:24 executing program 0:
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000040)={0x66a7, {0x26, 0x9, 0x800000000000, 0x10000, 0x9}})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6})
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x100000)
18:20:24 executing program 1:
sched_setparam(0x0, &(0x7f0000000180))
18:20:24 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf", 0xe4}], 0x1)
18:20:24 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001a00019c00ba664b3c27b57780"], 0x28}}, 0x0)
18:20:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
[ 76.178934] audit: type=1400 audit(1663006825.014:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:20:25 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00')
read$hiddev(r0, &(0x7f0000000240)=""/157, 0x9d)
18:20:25 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0)
18:20:25 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1010c2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0)
[ 77.403764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.405818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.408606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.412444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.414514] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.416098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 77.421052] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 77.523170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 77.527365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 77.528972] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 77.532606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 77.536429] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 77.539160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 77.544272] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 77.608870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 77.610410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 77.612500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 77.614057] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 77.614984] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 77.615611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 77.618296] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 77.619691] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 77.621668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 77.623183] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 77.626109] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 77.628365] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 77.629721] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 77.631397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 77.632692] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 77.634561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 77.639351] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 77.642303] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 77.672497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 77.676456] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 77.677539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 77.678712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 77.678737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 77.689997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 77.693497] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 77.694794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 77.706112] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 77.706437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 77.714045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 77.727924] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 77.736653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 77.738271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 77.740431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 77.741909] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 77.743062] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 77.750459] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 77.751949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 77.753450] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 77.754679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 77.758860] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 77.770880] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 77.772322] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 79.486787] Bluetooth: hci0: command 0x0409 tx timeout
[ 79.613684] Bluetooth: hci1: command 0x0409 tx timeout
[ 79.678250] Bluetooth: hci6: command 0x0409 tx timeout
[ 79.678699] Bluetooth: hci7: command 0x0409 tx timeout
[ 79.741268] Bluetooth: hci3: command 0x0409 tx timeout
[ 79.805243] Bluetooth: hci2: command 0x0409 tx timeout
[ 79.805419] Bluetooth: hci4: command 0x0409 tx timeout
[ 79.805690] Bluetooth: hci5: command 0x0409 tx timeout
[ 81.533376] Bluetooth: hci0: command 0x041b tx timeout
[ 81.661338] Bluetooth: hci1: command 0x041b tx timeout
[ 81.725309] Bluetooth: hci7: command 0x041b tx timeout
[ 81.726116] Bluetooth: hci6: command 0x041b tx timeout
[ 81.789305] Bluetooth: hci3: command 0x041b tx timeout
[ 81.853374] Bluetooth: hci5: command 0x041b tx timeout
[ 81.854273] Bluetooth: hci4: command 0x041b tx timeout
[ 81.855069] Bluetooth: hci2: command 0x041b tx timeout
[ 83.581232] Bluetooth: hci0: command 0x040f tx timeout
[ 83.709247] Bluetooth: hci1: command 0x040f tx timeout
[ 83.773239] Bluetooth: hci6: command 0x040f tx timeout
[ 83.773733] Bluetooth: hci7: command 0x040f tx timeout
[ 83.837278] Bluetooth: hci3: command 0x040f tx timeout
[ 83.901303] Bluetooth: hci2: command 0x040f tx timeout
[ 83.901795] Bluetooth: hci4: command 0x040f tx timeout
[ 83.902617] Bluetooth: hci5: command 0x040f tx timeout
[ 85.629292] Bluetooth: hci0: command 0x0419 tx timeout
[ 85.757266] Bluetooth: hci1: command 0x0419 tx timeout
[ 85.821301] Bluetooth: hci7: command 0x0419 tx timeout
[ 85.821836] Bluetooth: hci6: command 0x0419 tx timeout
[ 85.885286] Bluetooth: hci3: command 0x0419 tx timeout
[ 85.949307] Bluetooth: hci5: command 0x0419 tx timeout
[ 85.949974] Bluetooth: hci4: command 0x0419 tx timeout
[ 85.950817] Bluetooth: hci2: command 0x0419 tx timeout
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
18:21:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
[ 134.741540] audit: type=1400 audit(1663006883.576:7): avc: denied { open } for pid=3822 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 134.744061] audit: type=1400 audit(1663006883.576:8): avc: denied { kernel } for pid=3822 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 134.755114] ------------[ cut here ]------------
[ 134.755138]
[ 134.755142] ======================================================
[ 134.755146] WARNING: possible circular locking dependency detected
[ 134.755150] 6.0.0-rc5-next-20220912 #1 Not tainted
[ 134.755157] ------------------------------------------------------
[ 134.755160] syz-executor.1/3824 is trying to acquire lock:
[ 134.755167] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 134.755209]
[ 134.755209] but task is already holding lock:
[ 134.755212] ffff8880175b0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 134.755240]
[ 134.755240] which lock already depends on the new lock.
[ 134.755240]
[ 134.755244]
[ 134.755244] the existing dependency chain (in reverse order) is:
[ 134.755247]
[ 134.755247] -> #3 (&ctx->lock){....}-{2:2}:
[ 134.755261] _raw_spin_lock+0x2a/0x40
[ 134.755278] __perf_event_task_sched_out+0x53b/0x18d0
[ 134.755291] __schedule+0xedd/0x2470
[ 134.755301] schedule+0xda/0x1b0
[ 134.755310] futex_wait_queue+0xf5/0x1e0
[ 134.755322] futex_wait+0x28e/0x690
[ 134.755332] do_futex+0x2ff/0x380
[ 134.755341] __x64_sys_futex+0x1c6/0x4d0
[ 134.755351] do_syscall_64+0x3b/0x90
[ 134.755367] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 134.755385]
[ 134.755385] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 134.755399] _raw_spin_lock_nested+0x30/0x40
[ 134.755413] raw_spin_rq_lock_nested+0x1e/0x30
[ 134.755427] task_fork_fair+0x63/0x4d0
[ 134.755445] sched_cgroup_fork+0x3d0/0x540
[ 134.755459] copy_process+0x3f9e/0x6df0
[ 134.755469] kernel_clone+0xe7/0x890
[ 134.755479] user_mode_thread+0xad/0xf0
[ 134.755489] rest_init+0x24/0x250
[ 134.755506] arch_call_rest_init+0xf/0x14
[ 134.755525] start_kernel+0x4c1/0x4e6
[ 134.755542] secondary_startup_64_no_verify+0xe0/0xeb
[ 134.755557]
[ 134.755557] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 134.755571] _raw_spin_lock_irqsave+0x39/0x60
[ 134.755586] try_to_wake_up+0xab/0x1920
[ 134.755599] up+0x75/0xb0
[ 134.755610] __up_console_sem+0x6e/0x80
[ 134.755627] console_unlock+0x46a/0x590
[ 134.755643] vt_ioctl+0x2822/0x2ca0
[ 134.755656] tty_ioctl+0x7c4/0x1700
[ 134.755668] __x64_sys_ioctl+0x19a/0x210
[ 134.755683] do_syscall_64+0x3b/0x90
[ 134.755696] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 134.755713]
[ 134.755713] -> #0 ((console_sem).lock){....}-{2:2}:
[ 134.755726] __lock_acquire+0x2a02/0x5e70
[ 134.755743] lock_acquire+0x1a2/0x530
[ 134.755759] _raw_spin_lock_irqsave+0x39/0x60
[ 134.755774] down_trylock+0xe/0x70
[ 134.755786] __down_trylock_console_sem+0x3b/0xd0
[ 134.755803] vprintk_emit+0x16b/0x560
[ 134.755820] vprintk+0x84/0xa0
[ 134.755836] _printk+0xba/0xf1
[ 134.755854] report_bug.cold+0x72/0xab
[ 134.755866] handle_bug+0x3c/0x70
[ 134.755879] exc_invalid_op+0x14/0x50
[ 134.755892] asm_exc_invalid_op+0x16/0x20
[ 134.755908] group_sched_out.part.0+0x2c7/0x460
[ 134.755919] ctx_sched_out+0x8f1/0xc10
[ 134.755928] __perf_event_task_sched_out+0x6d0/0x18d0
[ 134.755941] __schedule+0xedd/0x2470
[ 134.755950] schedule+0xda/0x1b0
[ 134.755959] futex_wait_queue+0xf5/0x1e0
[ 134.755977] futex_wait+0x28e/0x690
[ 134.755987] do_futex+0x2ff/0x380
[ 134.755996] __x64_sys_futex+0x1c6/0x4d0
[ 134.756006] do_syscall_64+0x3b/0x90
[ 134.756018] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 134.756035]
[ 134.756035] other info that might help us debug this:
[ 134.756035]
[ 134.756038] Chain exists of:
[ 134.756038] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 134.756038]
[ 134.756053] Possible unsafe locking scenario:
[ 134.756053]
[ 134.756055] CPU0 CPU1
[ 134.756057] ---- ----
[ 134.756060] lock(&ctx->lock);
[ 134.756065] lock(&rq->__lock);
[ 134.756072] lock(&ctx->lock);
[ 134.756078] lock((console_sem).lock);
[ 134.756084]
[ 134.756084] *** DEADLOCK ***
[ 134.756084]
[ 134.756086] 2 locks held by syz-executor.1/3824:
[ 134.756093] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 134.756118] #1: ffff8880175b0420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 134.756146]
[ 134.756146] stack backtrace:
[ 134.756149] CPU: 0 PID: 3824 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1
[ 134.756162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 134.756170] Call Trace:
[ 134.756173]
[ 134.756178] dump_stack_lvl+0x8b/0xb3
[ 134.756193] check_noncircular+0x263/0x2e0
[ 134.756210] ? format_decode+0x26c/0xb50
[ 134.756225] ? print_circular_bug+0x450/0x450
[ 134.756243] ? enable_ptr_key_workfn+0x20/0x20
[ 134.756257] ? perf_trace_lock+0x308/0x560
[ 134.756271] ? format_decode+0x26c/0xb50
[ 134.756287] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 134.756306] __lock_acquire+0x2a02/0x5e70
[ 134.756329] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 134.756354] lock_acquire+0x1a2/0x530
[ 134.756371] ? down_trylock+0xe/0x70
[ 134.756386] ? rcu_read_unlock+0x40/0x40
[ 134.756409] ? vprintk+0x84/0xa0
[ 134.756428] _raw_spin_lock_irqsave+0x39/0x60
[ 134.756443] ? down_trylock+0xe/0x70
[ 134.756457] down_trylock+0xe/0x70
[ 134.756471] ? vprintk+0x84/0xa0
[ 134.756488] __down_trylock_console_sem+0x3b/0xd0
[ 134.756506] vprintk_emit+0x16b/0x560
[ 134.756526] vprintk+0x84/0xa0
[ 134.756545] _printk+0xba/0xf1
[ 134.756563] ? record_print_text.cold+0x16/0x16
[ 134.756586] ? report_bug.cold+0x66/0xab
[ 134.756600] ? group_sched_out.part.0+0x2c7/0x460
[ 134.756612] report_bug.cold+0x72/0xab
[ 134.756627] handle_bug+0x3c/0x70
[ 134.756641] exc_invalid_op+0x14/0x50
[ 134.756655] asm_exc_invalid_op+0x16/0x20
[ 134.756673] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 134.756687] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 134.756698] RSP: 0018:ffff8880432e78f8 EFLAGS: 00010006
[ 134.756708] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 134.756715] RDX: ffff8880189c0000 RSI: ffffffff81566027 RDI: 0000000000000005
[ 134.756724] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 134.756731] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880175b0400
[ 134.756739] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 134.756751] ? group_sched_out.part.0+0x2c7/0x460
[ 134.756765] ? group_sched_out.part.0+0x2c7/0x460
[ 134.756778] ctx_sched_out+0x8f1/0xc10
[ 134.756792] __perf_event_task_sched_out+0x6d0/0x18d0
[ 134.756808] ? lock_is_held_type+0xd7/0x130
[ 134.756827] ? __perf_cgroup_move+0x160/0x160
[ 134.756839] ? set_next_entity+0x304/0x550
[ 134.756860] ? lock_is_held_type+0xd7/0x130
[ 134.756879] __schedule+0xedd/0x2470
[ 134.756893] ? io_schedule_timeout+0x150/0x150
[ 134.756904] ? futex_wait_setup+0x166/0x230
[ 134.756920] schedule+0xda/0x1b0
[ 134.756931] futex_wait_queue+0xf5/0x1e0
[ 134.756943] futex_wait+0x28e/0x690
[ 134.756956] ? futex_wait_setup+0x230/0x230
[ 134.756970] ? wake_up_q+0x8b/0xf0
[ 134.756983] ? do_raw_spin_unlock+0x4f/0x220
[ 134.757004] ? futex_wake+0x158/0x490
[ 134.757022] ? fd_install+0x1f9/0x640
[ 134.757039] do_futex+0x2ff/0x380
[ 134.757050] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[ 134.757067] __x64_sys_futex+0x1c6/0x4d0
[ 134.757081] ? __x64_sys_futex_time32+0x480/0x480
[ 134.757094] ? syscall_enter_from_user_mode+0x1d/0x50
[ 134.757112] ? syscall_enter_from_user_mode+0x1d/0x50
[ 134.757133] do_syscall_64+0x3b/0x90
[ 134.757147] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 134.757165] RIP: 0033:0x7f99756b4b19
[ 134.757174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 134.757184] RSP: 002b:00007f9972c2a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 134.757195] RAX: ffffffffffffffda RBX: 00007f99757c7f68 RCX: 00007f99756b4b19
[ 134.757203] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99757c7f68
[ 134.757211] RBP: 00007f99757c7f60 R08: 0000000000000000 R09: 0000000000000000
[ 134.757218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99757c7f6c
[ 134.757225] R13: 00007ffd63af30df R14: 00007f9972c2a300 R15: 0000000000022000
[ 134.757240]
[ 134.817618] WARNING: CPU: 0 PID: 3824 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 134.818300] Modules linked in:
[ 134.818541] CPU: 0 PID: 3824 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1
[ 134.819147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 134.819989] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 134.820396] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 134.821750] RSP: 0018:ffff8880432e78f8 EFLAGS: 00010006
[ 134.822155] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 134.822691] RDX: ffff8880189c0000 RSI: ffffffff81566027 RDI: 0000000000000005
[ 134.823239] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 134.823780] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880175b0400
[ 134.824326] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002
[ 134.824865] FS: 00007f9972c2a700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 134.825474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 134.825916] CR2: 00007f340ed24fe8 CR3: 000000001ddce000 CR4: 0000000000350ef0
[ 134.826457] Call Trace:
[ 134.826657]
[ 134.826830] ctx_sched_out+0x8f1/0xc10
[ 134.827128] __perf_event_task_sched_out+0x6d0/0x18d0
[ 134.827524] ? lock_is_held_type+0xd7/0x130
[ 134.827852] ? __perf_cgroup_move+0x160/0x160
[ 134.828221] ? set_next_entity+0x304/0x550
[ 134.828553] ? lock_is_held_type+0xd7/0x130
[ 134.828887] __schedule+0xedd/0x2470
[ 134.829172] ? io_schedule_timeout+0x150/0x150
[ 134.829519] ? futex_wait_setup+0x166/0x230
[ 134.829855] schedule+0xda/0x1b0
[ 134.830111] futex_wait_queue+0xf5/0x1e0
[ 134.830429] futex_wait+0x28e/0x690
[ 134.830708] ? futex_wait_setup+0x230/0x230
[ 134.831038] ? wake_up_q+0x8b/0xf0
[ 134.831317] ? do_raw_spin_unlock+0x4f/0x220
[ 134.831661] ? futex_wake+0x158/0x490
[ 134.831974] ? fd_install+0x1f9/0x640
[ 134.832274] do_futex+0x2ff/0x380
[ 134.832547] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[ 134.832983] __x64_sys_futex+0x1c6/0x4d0
[ 134.833294] ? __x64_sys_futex_time32+0x480/0x480
[ 134.833659] ? syscall_enter_from_user_mode+0x1d/0x50
[ 134.834062] ? syscall_enter_from_user_mode+0x1d/0x50
[ 134.834468] do_syscall_64+0x3b/0x90
[ 134.834753] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 134.835153] RIP: 0033:0x7f99756b4b19
[ 134.835435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 134.836801] RSP: 002b:00007f9972c2a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 134.837373] RAX: ffffffffffffffda RBX: 00007f99757c7f68 RCX: 00007f99756b4b19
[ 134.837903] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99757c7f68
[ 134.838442] RBP: 00007f99757c7f60 R08: 0000000000000000 R09: 0000000000000000
[ 134.838976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99757c7f6c
[ 134.839513] R13: 00007ffd63af30df R14: 00007f9972c2a300 R15: 0000000000022000
[ 134.840066]
[ 134.840252] irq event stamp: 728
[ 134.840506] hardirqs last enabled at (727): [] syscall_enter_from_user_mode+0x1d/0x50
[ 134.841222] hardirqs last disabled at (728): [] __schedule+0x1225/0x2470
[ 134.841840] softirqs last enabled at (606): [] __irq_exit_rcu+0x11b/0x180
[ 134.842493] softirqs last disabled at (599): [] __irq_exit_rcu+0x11b/0x180
[ 134.843141] ---[ end trace 0000000000000000 ]---
18:21:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
18:21:23 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
syz_open_procfs(0xffffffffffffffff, 0x0)
rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
[ 135.045813] audit: type=1326 audit(1663006883.881:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3843 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34117afb19 code=0x0
[ 135.797812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 135.872729] audit: type=1326 audit(1663006884.708:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3843 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34117afb19 code=0x0
[ 136.316422] syz-executor.0 (295) used greatest stack depth: 24776 bytes left
[ 138.776722] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 138.777860] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 138.780055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 138.782258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 138.784104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 138.785172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 138.788666] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 138.911537] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 138.912901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 138.915677] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 138.918673] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 138.921287] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 138.929591] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 138.935240] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 140.734213] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 140.798233] Bluetooth: hci6: command 0x0409 tx timeout
[ 140.990251] Bluetooth: hci7: command 0x0409 tx timeout
[ 142.845248] Bluetooth: hci6: command 0x041b tx timeout
[ 143.037253] Bluetooth: hci7: command 0x041b tx timeout
[ 143.043123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 143.044619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 143.046059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 143.047996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 143.050284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 143.051504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 143.054636] Bluetooth: hci1: HCI_REQ-0x0c1a
VM DIAGNOSIS:
18:21:23 Registers:
info registers vcpu 0
RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880432e7348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001
R12=0000000000000032 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f9972c2a700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f340ed24fe8 CR3=000000001ddce000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f997579b7c0 00007f997579b7c8
YMM02=0000000000000000 0000000000000000 00007f997579b7e0 00007f997579b7c0
YMM03=0000000000000000 0000000000000000 00007f997579b7c8 00007f997579b7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff8880189c5040
RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804310f960
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff813bccdb RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555557426400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f99757bd6dc CR3=000000001ddce000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f997579b7c0 00007f997579b7c8
YMM02=0000000000000000 0000000000000000 00007f997579b7e0 00007f997579b7c0
YMM03=0000000000000000 0000000000000000 00007f997579b7c8 00007f997579b7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000