Warning: Permanently added '[localhost]:16703' (ECDSA) to the list of known hosts. 2022/09/12 19:53:26 fuzzer started 2022/09/12 19:53:27 dialing manager at localhost:38027 syzkaller login: [ 45.485020] cgroup: Unknown subsys name 'net' [ 45.594197] cgroup: Unknown subsys name 'rlimit' 2022/09/12 19:53:41 syscalls: 2215 2022/09/12 19:53:41 code coverage: enabled 2022/09/12 19:53:41 comparison tracing: enabled 2022/09/12 19:53:41 extra coverage: enabled 2022/09/12 19:53:41 setuid sandbox: enabled 2022/09/12 19:53:41 namespace sandbox: enabled 2022/09/12 19:53:41 Android sandbox: enabled 2022/09/12 19:53:41 fault injection: enabled 2022/09/12 19:53:41 leak checking: enabled 2022/09/12 19:53:41 net packet injection: enabled 2022/09/12 19:53:41 net device setup: enabled 2022/09/12 19:53:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 19:53:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 19:53:41 USB emulation: enabled 2022/09/12 19:53:41 hci packet injection: enabled 2022/09/12 19:53:41 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 19:53:41 802.15.4 emulation: enabled 2022/09/12 19:53:41 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 19:53:41 fetching corpus: 50, signal 27799/31441 (executing program) 2022/09/12 19:53:41 fetching corpus: 100, signal 46679/51767 (executing program) 2022/09/12 19:53:41 fetching corpus: 150, signal 56488/63001 (executing program) 2022/09/12 19:53:42 fetching corpus: 200, signal 63316/71222 (executing program) 2022/09/12 19:53:42 fetching corpus: 250, signal 70079/79328 (executing program) 2022/09/12 19:53:42 fetching corpus: 300, signal 76509/87020 (executing program) 2022/09/12 19:53:42 fetching corpus: 350, signal 81115/92822 (executing program) 2022/09/12 19:53:42 fetching corpus: 400, signal 84868/97732 (executing program) 2022/09/12 19:53:42 fetching corpus: 450, signal 89878/103826 (executing program) 2022/09/12 19:53:42 fetching corpus: 500, signal 92387/107538 (executing program) 2022/09/12 19:53:42 fetching corpus: 550, signal 96844/113042 (executing program) 2022/09/12 19:53:43 fetching corpus: 600, signal 100404/117668 (executing program) 2022/09/12 19:53:43 fetching corpus: 650, signal 102939/121313 (executing program) 2022/09/12 19:53:43 fetching corpus: 700, signal 107144/126391 (executing program) 2022/09/12 19:53:43 fetching corpus: 750, signal 111435/131478 (executing program) 2022/09/12 19:53:43 fetching corpus: 800, signal 115308/136130 (executing program) 2022/09/12 19:53:43 fetching corpus: 850, signal 119289/140765 (executing program) 2022/09/12 19:53:43 fetching corpus: 900, signal 122808/145006 (executing program) 2022/09/12 19:53:44 fetching corpus: 950, signal 125849/148785 (executing program) 2022/09/12 19:53:44 fetching corpus: 1000, signal 128787/152443 (executing program) 2022/09/12 19:53:44 fetching corpus: 1050, signal 131461/155883 (executing program) 2022/09/12 19:53:44 fetching corpus: 1100, signal 133401/158643 (executing program) 2022/09/12 19:53:44 fetching corpus: 1150, signal 135718/161703 (executing program) 2022/09/12 19:53:44 fetching corpus: 1200, signal 138621/165248 (executing program) 2022/09/12 19:53:44 fetching corpus: 1250, signal 141550/168720 (executing program) 2022/09/12 19:53:45 fetching corpus: 1300, signal 144054/171793 (executing program) 2022/09/12 19:53:45 fetching corpus: 1350, signal 145178/173724 (executing program) 2022/09/12 19:53:45 fetching corpus: 1400, signal 148004/177007 (executing program) 2022/09/12 19:53:45 fetching corpus: 1450, signal 149518/179261 (executing program) 2022/09/12 19:53:45 fetching corpus: 1500, signal 152018/182209 (executing program) 2022/09/12 19:53:45 fetching corpus: 1550, signal 153611/184459 (executing program) 2022/09/12 19:53:46 fetching corpus: 1600, signal 155826/187186 (executing program) 2022/09/12 19:53:46 fetching corpus: 1650, signal 157504/189416 (executing program) 2022/09/12 19:53:46 fetching corpus: 1700, signal 159358/191749 (executing program) 2022/09/12 19:53:46 fetching corpus: 1750, signal 161319/194187 (executing program) 2022/09/12 19:53:46 fetching corpus: 1800, signal 162577/196026 (executing program) 2022/09/12 19:53:46 fetching corpus: 1850, signal 163892/197899 (executing program) 2022/09/12 19:53:46 fetching corpus: 1900, signal 165285/199828 (executing program) 2022/09/12 19:53:47 fetching corpus: 1950, signal 166581/201674 (executing program) 2022/09/12 19:53:47 fetching corpus: 2000, signal 168190/203759 (executing program) 2022/09/12 19:53:47 fetching corpus: 2050, signal 169541/205599 (executing program) 2022/09/12 19:53:47 fetching corpus: 2100, signal 170967/207495 (executing program) 2022/09/12 19:53:47 fetching corpus: 2150, signal 172166/209175 (executing program) 2022/09/12 19:53:47 fetching corpus: 2200, signal 173579/210996 (executing program) 2022/09/12 19:53:47 fetching corpus: 2250, signal 174903/212708 (executing program) 2022/09/12 19:53:47 fetching corpus: 2300, signal 176116/214403 (executing program) 2022/09/12 19:53:48 fetching corpus: 2350, signal 177162/215962 (executing program) 2022/09/12 19:53:48 fetching corpus: 2400, signal 178650/217764 (executing program) 2022/09/12 19:53:48 fetching corpus: 2450, signal 179828/219361 (executing program) 2022/09/12 19:53:48 fetching corpus: 2500, signal 181000/220912 (executing program) 2022/09/12 19:53:48 fetching corpus: 2550, signal 182011/222338 (executing program) 2022/09/12 19:53:48 fetching corpus: 2600, signal 184591/224875 (executing program) 2022/09/12 19:53:48 fetching corpus: 2650, signal 185640/226296 (executing program) 2022/09/12 19:53:49 fetching corpus: 2700, signal 186611/227681 (executing program) 2022/09/12 19:53:49 fetching corpus: 2750, signal 187564/229039 (executing program) 2022/09/12 19:53:49 fetching corpus: 2800, signal 189040/230697 (executing program) 2022/09/12 19:53:49 fetching corpus: 2850, signal 190261/232166 (executing program) 2022/09/12 19:53:49 fetching corpus: 2900, signal 191236/233440 (executing program) 2022/09/12 19:53:49 fetching corpus: 2950, signal 192469/234938 (executing program) 2022/09/12 19:53:49 fetching corpus: 3000, signal 193496/236224 (executing program) 2022/09/12 19:53:50 fetching corpus: 3050, signal 194510/237534 (executing program) 2022/09/12 19:53:50 fetching corpus: 3100, signal 195620/238882 (executing program) 2022/09/12 19:53:50 fetching corpus: 3150, signal 196296/239994 (executing program) 2022/09/12 19:53:50 fetching corpus: 3200, signal 197415/241335 (executing program) 2022/09/12 19:53:50 fetching corpus: 3250, signal 198356/242514 (executing program) 2022/09/12 19:53:50 fetching corpus: 3300, signal 199391/243806 (executing program) 2022/09/12 19:53:50 fetching corpus: 3350, signal 200280/244951 (executing program) 2022/09/12 19:53:50 fetching corpus: 3400, signal 201176/246065 (executing program) 2022/09/12 19:53:51 fetching corpus: 3450, signal 202899/247650 (executing program) 2022/09/12 19:53:51 fetching corpus: 3500, signal 203654/248694 (executing program) 2022/09/12 19:53:51 fetching corpus: 3550, signal 204631/249893 (executing program) 2022/09/12 19:53:51 fetching corpus: 3600, signal 206109/251230 (executing program) 2022/09/12 19:53:51 fetching corpus: 3650, signal 206817/252210 (executing program) 2022/09/12 19:53:52 fetching corpus: 3700, signal 207513/253221 (executing program) 2022/09/12 19:53:52 fetching corpus: 3750, signal 208464/254284 (executing program) 2022/09/12 19:53:52 fetching corpus: 3800, signal 209236/255269 (executing program) 2022/09/12 19:53:52 fetching corpus: 3850, signal 209932/256183 (executing program) 2022/09/12 19:53:52 fetching corpus: 3900, signal 211422/257520 (executing program) 2022/09/12 19:53:52 fetching corpus: 3950, signal 212259/258475 (executing program) 2022/09/12 19:53:52 fetching corpus: 4000, signal 212784/259299 (executing program) 2022/09/12 19:53:53 fetching corpus: 4050, signal 213780/260385 (executing program) 2022/09/12 19:53:53 fetching corpus: 4100, signal 214881/261444 (executing program) 2022/09/12 19:53:53 fetching corpus: 4150, signal 215406/262223 (executing program) 2022/09/12 19:53:53 fetching corpus: 4200, signal 216222/263114 (executing program) 2022/09/12 19:53:53 fetching corpus: 4250, signal 217097/264097 (executing program) 2022/09/12 19:53:53 fetching corpus: 4300, signal 218053/265008 (executing program) 2022/09/12 19:53:53 fetching corpus: 4350, signal 218544/265790 (executing program) 2022/09/12 19:53:54 fetching corpus: 4400, signal 219445/266707 (executing program) 2022/09/12 19:53:54 fetching corpus: 4450, signal 220206/267533 (executing program) 2022/09/12 19:53:54 fetching corpus: 4500, signal 221259/268514 (executing program) 2022/09/12 19:53:54 fetching corpus: 4550, signal 222491/269447 (executing program) 2022/09/12 19:53:54 fetching corpus: 4600, signal 223257/270276 (executing program) 2022/09/12 19:53:54 fetching corpus: 4650, signal 223786/270957 (executing program) 2022/09/12 19:53:54 fetching corpus: 4700, signal 224313/271658 (executing program) 2022/09/12 19:53:54 fetching corpus: 4750, signal 224745/272252 (executing program) 2022/09/12 19:53:55 fetching corpus: 4800, signal 225678/273057 (executing program) 2022/09/12 19:53:55 fetching corpus: 4850, signal 226221/273720 (executing program) 2022/09/12 19:53:55 fetching corpus: 4900, signal 226827/274398 (executing program) 2022/09/12 19:53:55 fetching corpus: 4950, signal 227459/275044 (executing program) 2022/09/12 19:53:55 fetching corpus: 5000, signal 228396/275786 (executing program) 2022/09/12 19:53:55 fetching corpus: 5050, signal 228970/276408 (executing program) 2022/09/12 19:53:55 fetching corpus: 5100, signal 230108/277222 (executing program) 2022/09/12 19:53:55 fetching corpus: 5150, signal 230863/277949 (executing program) 2022/09/12 19:53:56 fetching corpus: 5200, signal 231677/278742 (executing program) 2022/09/12 19:53:56 fetching corpus: 5250, signal 232567/279400 (executing program) 2022/09/12 19:53:56 fetching corpus: 5300, signal 233092/279983 (executing program) 2022/09/12 19:53:56 fetching corpus: 5350, signal 233674/280596 (executing program) 2022/09/12 19:53:56 fetching corpus: 5400, signal 234474/281191 (executing program) 2022/09/12 19:53:56 fetching corpus: 5450, signal 235300/281828 (executing program) 2022/09/12 19:53:56 fetching corpus: 5500, signal 235976/282431 (executing program) 2022/09/12 19:53:56 fetching corpus: 5550, signal 236969/283090 (executing program) 2022/09/12 19:53:57 fetching corpus: 5600, signal 237693/283649 (executing program) 2022/09/12 19:53:57 fetching corpus: 5650, signal 238019/284131 (executing program) 2022/09/12 19:53:57 fetching corpus: 5700, signal 238558/284657 (executing program) 2022/09/12 19:53:57 fetching corpus: 5750, signal 239113/285199 (executing program) 2022/09/12 19:53:57 fetching corpus: 5800, signal 239557/285659 (executing program) 2022/09/12 19:53:57 fetching corpus: 5850, signal 240220/286194 (executing program) 2022/09/12 19:53:57 fetching corpus: 5900, signal 241181/286797 (executing program) 2022/09/12 19:53:58 fetching corpus: 5950, signal 241972/287347 (executing program) 2022/09/12 19:53:58 fetching corpus: 6000, signal 242636/287827 (executing program) 2022/09/12 19:53:58 fetching corpus: 6050, signal 243103/288284 (executing program) 2022/09/12 19:53:58 fetching corpus: 6100, signal 243614/288757 (executing program) 2022/09/12 19:53:58 fetching corpus: 6150, signal 244022/289184 (executing program) 2022/09/12 19:53:58 fetching corpus: 6200, signal 244482/289616 (executing program) 2022/09/12 19:53:58 fetching corpus: 6250, signal 245208/290097 (executing program) 2022/09/12 19:53:58 fetching corpus: 6300, signal 245842/290539 (executing program) 2022/09/12 19:53:59 fetching corpus: 6350, signal 246383/290946 (executing program) 2022/09/12 19:53:59 fetching corpus: 6400, signal 246826/291330 (executing program) 2022/09/12 19:53:59 fetching corpus: 6450, signal 247344/291730 (executing program) 2022/09/12 19:53:59 fetching corpus: 6500, signal 247942/292132 (executing program) 2022/09/12 19:53:59 fetching corpus: 6550, signal 248452/292538 (executing program) 2022/09/12 19:53:59 fetching corpus: 6600, signal 248886/292971 (executing program) 2022/09/12 19:53:59 fetching corpus: 6650, signal 249491/293343 (executing program) 2022/09/12 19:53:59 fetching corpus: 6700, signal 250069/293771 (executing program) 2022/09/12 19:54:00 fetching corpus: 6750, signal 250515/294121 (executing program) 2022/09/12 19:54:00 fetching corpus: 6800, signal 251162/294534 (executing program) 2022/09/12 19:54:00 fetching corpus: 6850, signal 251960/294884 (executing program) 2022/09/12 19:54:00 fetching corpus: 6900, signal 252542/295217 (executing program) 2022/09/12 19:54:00 fetching corpus: 6950, signal 252966/295555 (executing program) 2022/09/12 19:54:00 fetching corpus: 7000, signal 253303/295876 (executing program) 2022/09/12 19:54:01 fetching corpus: 7050, signal 253871/296253 (executing program) 2022/09/12 19:54:01 fetching corpus: 7100, signal 254421/296566 (executing program) 2022/09/12 19:54:01 fetching corpus: 7150, signal 255026/296904 (executing program) 2022/09/12 19:54:01 fetching corpus: 7200, signal 255602/297225 (executing program) 2022/09/12 19:54:01 fetching corpus: 7250, signal 256042/297249 (executing program) 2022/09/12 19:54:01 fetching corpus: 7300, signal 256364/297254 (executing program) 2022/09/12 19:54:02 fetching corpus: 7350, signal 256716/297257 (executing program) 2022/09/12 19:54:02 fetching corpus: 7400, signal 257081/297280 (executing program) 2022/09/12 19:54:02 fetching corpus: 7450, signal 257680/297286 (executing program) 2022/09/12 19:54:02 fetching corpus: 7500, signal 258128/297303 (executing program) 2022/09/12 19:54:02 fetching corpus: 7550, signal 258487/297362 (executing program) 2022/09/12 19:54:02 fetching corpus: 7600, signal 259003/297374 (executing program) 2022/09/12 19:54:02 fetching corpus: 7650, signal 259385/297397 (executing program) 2022/09/12 19:54:02 fetching corpus: 7700, signal 259788/297411 (executing program) 2022/09/12 19:54:03 fetching corpus: 7750, signal 260291/297468 (executing program) 2022/09/12 19:54:03 fetching corpus: 7800, signal 260765/297491 (executing program) 2022/09/12 19:54:03 fetching corpus: 7850, signal 261064/297492 (executing program) 2022/09/12 19:54:03 fetching corpus: 7900, signal 261713/297509 (executing program) 2022/09/12 19:54:03 fetching corpus: 7950, signal 262325/297536 (executing program) 2022/09/12 19:54:03 fetching corpus: 8000, signal 262566/297536 (executing program) 2022/09/12 19:54:03 fetching corpus: 8050, signal 262851/297539 (executing program) 2022/09/12 19:54:03 fetching corpus: 8100, signal 263316/297539 (executing program) 2022/09/12 19:54:04 fetching corpus: 8150, signal 263714/297554 (executing program) 2022/09/12 19:54:04 fetching corpus: 8200, signal 264280/297556 (executing program) 2022/09/12 19:54:04 fetching corpus: 8250, signal 264657/297559 (executing program) 2022/09/12 19:54:04 fetching corpus: 8300, signal 264993/297562 (executing program) 2022/09/12 19:54:04 fetching corpus: 8350, signal 265404/297562 (executing program) 2022/09/12 19:54:04 fetching corpus: 8400, signal 266052/297581 (executing program) 2022/09/12 19:54:05 fetching corpus: 8450, signal 266432/297591 (executing program) 2022/09/12 19:54:05 fetching corpus: 8500, signal 266931/297617 (executing program) 2022/09/12 19:54:05 fetching corpus: 8550, signal 267628/297618 (executing program) 2022/09/12 19:54:05 fetching corpus: 8600, signal 268056/297626 (executing program) 2022/09/12 19:54:05 fetching corpus: 8650, signal 268434/297653 (executing program) 2022/09/12 19:54:05 fetching corpus: 8700, signal 268699/297662 (executing program) 2022/09/12 19:54:05 fetching corpus: 8750, signal 269381/297669 (executing program) 2022/09/12 19:54:06 fetching corpus: 8800, signal 270337/297682 (executing program) 2022/09/12 19:54:06 fetching corpus: 8850, signal 270631/297714 (executing program) 2022/09/12 19:54:06 fetching corpus: 8900, signal 270936/297745 (executing program) 2022/09/12 19:54:06 fetching corpus: 8950, signal 271427/297747 (executing program) 2022/09/12 19:54:06 fetching corpus: 9000, signal 271774/297753 (executing program) 2022/09/12 19:54:06 fetching corpus: 9050, signal 272156/297762 (executing program) 2022/09/12 19:54:06 fetching corpus: 9100, signal 272784/297762 (executing program) 2022/09/12 19:54:06 fetching corpus: 9150, signal 273057/297772 (executing program) 2022/09/12 19:54:07 fetching corpus: 9200, signal 273583/297868 (executing program) 2022/09/12 19:54:07 fetching corpus: 9250, signal 274066/297872 (executing program) 2022/09/12 19:54:07 fetching corpus: 9300, signal 274453/297877 (executing program) 2022/09/12 19:54:07 fetching corpus: 9350, signal 274932/297882 (executing program) 2022/09/12 19:54:07 fetching corpus: 9400, signal 275801/297893 (executing program) 2022/09/12 19:54:07 fetching corpus: 9450, signal 276095/297896 (executing program) 2022/09/12 19:54:07 fetching corpus: 9500, signal 276487/297910 (executing program) 2022/09/12 19:54:07 fetching corpus: 9550, signal 276914/297914 (executing program) 2022/09/12 19:54:08 fetching corpus: 9600, signal 277365/297926 (executing program) 2022/09/12 19:54:08 fetching corpus: 9650, signal 277656/297935 (executing program) 2022/09/12 19:54:08 fetching corpus: 9700, signal 278189/297939 (executing program) 2022/09/12 19:54:08 fetching corpus: 9750, signal 278607/297940 (executing program) 2022/09/12 19:54:08 fetching corpus: 9800, signal 279204/297942 (executing program) 2022/09/12 19:54:08 fetching corpus: 9850, signal 279536/297961 (executing program) 2022/09/12 19:54:09 fetching corpus: 9900, signal 279833/297980 (executing program) 2022/09/12 19:54:09 fetching corpus: 9950, signal 280217/297987 (executing program) 2022/09/12 19:54:09 fetching corpus: 10000, signal 280617/298003 (executing program) 2022/09/12 19:54:09 fetching corpus: 10050, signal 280921/298004 (executing program) 2022/09/12 19:54:09 fetching corpus: 10100, signal 281380/298018 (executing program) 2022/09/12 19:54:09 fetching corpus: 10150, signal 281736/298049 (executing program) 2022/09/12 19:54:09 fetching corpus: 10200, signal 282077/298056 (executing program) 2022/09/12 19:54:10 fetching corpus: 10250, signal 282655/298061 (executing program) 2022/09/12 19:54:10 fetching corpus: 10300, signal 283111/298061 (executing program) 2022/09/12 19:54:10 fetching corpus: 10350, signal 283402/298063 (executing program) 2022/09/12 19:54:10 fetching corpus: 10400, signal 283808/298071 (executing program) 2022/09/12 19:54:10 fetching corpus: 10450, signal 284257/298081 (executing program) 2022/09/12 19:54:10 fetching corpus: 10500, signal 284636/298092 (executing program) 2022/09/12 19:54:10 fetching corpus: 10550, signal 284970/298125 (executing program) 2022/09/12 19:54:11 fetching corpus: 10600, signal 285324/298132 (executing program) 2022/09/12 19:54:11 fetching corpus: 10650, signal 285764/298212 (executing program) 2022/09/12 19:54:11 fetching corpus: 10700, signal 286139/298214 (executing program) 2022/09/12 19:54:11 fetching corpus: 10750, signal 286575/298215 (executing program) 2022/09/12 19:54:11 fetching corpus: 10786, signal 286802/298221 (executing program) 2022/09/12 19:54:11 fetching corpus: 10786, signal 286802/298221 (executing program) 2022/09/12 19:54:14 starting 8 fuzzer processes 19:54:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000100)=""/198, &(0x7f0000000000)=0xc6) 19:54:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "b3d5d26900"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "95f4c578e92567740f427907923dca66d1ba1c"}) 19:54:14 executing program 1: get_thread_area(&(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}) set_thread_area(&(0x7f0000000040)={0x20, 0x20001000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) set_thread_area(&(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x5, 0x20000000, 0x1000, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0x648, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x0, 0x20001000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) set_thread_area(0x0) set_thread_area(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}) get_thread_area(0x0) get_thread_area(&(0x7f0000000300)={0x1, 0x0, 0x2000, 0x0, 0x2}) 19:54:14 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000001780)) 19:54:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 19:54:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x40102, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xf) 19:54:14 executing program 6: syz_io_uring_setup(0x5591, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x3a3d, &(0x7f0000000140), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_setup(0x3e5b, &(0x7f0000000100), &(0x7f0000d09000/0x1000)=nil, &(0x7f0000dc2000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x74a8, &(0x7f00000003c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000eb7000/0x2000)=nil, &(0x7f0000000440), &(0x7f00000000c0)) [ 92.804660] audit: type=1400 audit(1663012454.453:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:54:14 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0x0, 0x6, &(0x7f0000000080)="9f", 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={r3, @rand_addr, @multicast2}, 0xc) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 93.974342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.978194] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.979946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.995940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.998586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.000401] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.006570] Bluetooth: hci0: HCI_REQ-0x0c1a [ 94.107439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.124298] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.128484] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.132192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.137120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.139130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.141562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.143218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.144897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.146639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.150090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.151206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.157971] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.159308] Bluetooth: hci1: HCI_REQ-0x0c1a [ 94.160311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.160527] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.170548] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.172129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.172504] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.175489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.177512] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.178899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.182568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.186673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.188860] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.190225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.196054] Bluetooth: hci6: HCI_REQ-0x0c1a [ 94.197322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.197332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.211088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.212544] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.214850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.217076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.218402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.219487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.220572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.223014] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.228492] Bluetooth: hci2: HCI_REQ-0x0c1a [ 94.229554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.231138] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.236353] Bluetooth: hci7: HCI_REQ-0x0c1a [ 94.246246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.249377] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.265420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.265432] Bluetooth: hci3: HCI_REQ-0x0c1a [ 94.301060] Bluetooth: hci5: HCI_REQ-0x0c1a [ 94.303029] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.304979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.323207] Bluetooth: hci4: HCI_REQ-0x0c1a [ 96.063461] Bluetooth: hci0: command 0x0409 tx timeout [ 96.191232] Bluetooth: hci1: command 0x0409 tx timeout [ 96.254774] Bluetooth: hci2: command 0x0409 tx timeout [ 96.254792] Bluetooth: hci6: command 0x0409 tx timeout [ 96.319163] Bluetooth: hci5: command 0x0409 tx timeout [ 96.320051] Bluetooth: hci3: command 0x0409 tx timeout [ 96.321966] Bluetooth: hci7: command 0x0409 tx timeout [ 96.382740] Bluetooth: hci4: command 0x0409 tx timeout [ 98.110779] Bluetooth: hci0: command 0x041b tx timeout [ 98.238998] Bluetooth: hci1: command 0x041b tx timeout [ 98.302796] Bluetooth: hci2: command 0x041b tx timeout [ 98.303830] Bluetooth: hci6: command 0x041b tx timeout [ 98.367767] Bluetooth: hci7: command 0x041b tx timeout [ 98.368193] Bluetooth: hci3: command 0x041b tx timeout [ 98.368586] Bluetooth: hci5: command 0x041b tx timeout [ 98.431770] Bluetooth: hci4: command 0x041b tx timeout [ 100.158841] Bluetooth: hci0: command 0x040f tx timeout [ 100.286870] Bluetooth: hci1: command 0x040f tx timeout [ 100.350813] Bluetooth: hci6: command 0x040f tx timeout [ 100.353164] Bluetooth: hci2: command 0x040f tx timeout [ 100.414818] Bluetooth: hci5: command 0x040f tx timeout [ 100.415668] Bluetooth: hci3: command 0x040f tx timeout [ 100.419180] Bluetooth: hci7: command 0x040f tx timeout [ 100.478823] Bluetooth: hci4: command 0x040f tx timeout [ 102.206948] Bluetooth: hci0: command 0x0419 tx timeout [ 102.335799] Bluetooth: hci1: command 0x0419 tx timeout [ 102.399780] Bluetooth: hci2: command 0x0419 tx timeout [ 102.400206] Bluetooth: hci6: command 0x0419 tx timeout [ 102.463791] Bluetooth: hci7: command 0x0419 tx timeout [ 102.464355] Bluetooth: hci3: command 0x0419 tx timeout [ 102.464768] Bluetooth: hci5: command 0x0419 tx timeout [ 102.527837] Bluetooth: hci4: command 0x0419 tx timeout 19:55:12 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', ':\x00'}, 0x0, 0x0) 19:55:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000240)={0x0, 0x42}, 0x8) [ 150.840841] audit: type=1400 audit(1663012512.489:7): avc: denied { open } for pid=3848 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 150.842841] audit: type=1400 audit(1663012512.489:8): avc: denied { kernel } for pid=3848 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 19:55:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000240)={0x0, 0x42}, 0x8) 19:55:12 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000100)) 19:55:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000240)={0x0, 0x42}, 0x8) 19:55:12 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000100)) 19:55:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002, 0x0) write$rfkill(r0, &(0x7f0000000240)={0x0, 0x42}, 0x8) 19:55:12 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000100)) [ 152.051264] ------------[ cut here ]------------ [ 152.051305] [ 152.051310] ====================================================== [ 152.051316] WARNING: possible circular locking dependency detected [ 152.051324] 6.0.0-rc5-next-20220912 #1 Not tainted [ 152.051335] ------------------------------------------------------ [ 152.051341] syz-executor.0/3933 is trying to acquire lock: [ 152.051353] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 152.051414] [ 152.051414] but task is already holding lock: [ 152.051419] ffff888008a4ec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 152.051469] [ 152.051469] which lock already depends on the new lock. [ 152.051469] [ 152.051474] [ 152.051474] the existing dependency chain (in reverse order) is: [ 152.051480] [ 152.051480] -> #3 (&ctx->lock){....}-{2:2}: [ 152.051505] _raw_spin_lock+0x2a/0x40 [ 152.051534] __perf_event_task_sched_out+0x53b/0x18d0 [ 152.051557] __schedule+0xedd/0x2470 [ 152.051575] schedule+0xda/0x1b0 [ 152.051591] exit_to_user_mode_prepare+0x114/0x1a0 [ 152.051628] syscall_exit_to_user_mode+0x19/0x40 [ 152.051660] do_syscall_64+0x48/0x90 [ 152.051684] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.051721] [ 152.051721] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 152.051770] _raw_spin_lock_nested+0x30/0x40 [ 152.051797] raw_spin_rq_lock_nested+0x1e/0x30 [ 152.051820] task_fork_fair+0x63/0x4d0 [ 152.051851] sched_cgroup_fork+0x3d0/0x540 [ 152.051878] copy_process+0x3f9e/0x6df0 [ 152.051896] kernel_clone+0xe7/0x890 [ 152.051914] user_mode_thread+0xad/0xf0 [ 152.051933] rest_init+0x24/0x250 [ 152.051963] arch_call_rest_init+0xf/0x14 [ 152.051996] start_kernel+0x4c1/0x4e6 [ 152.052027] secondary_startup_64_no_verify+0xe0/0xeb [ 152.052053] [ 152.052053] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 152.052078] _raw_spin_lock_irqsave+0x39/0x60 [ 152.052105] try_to_wake_up+0xab/0x1920 [ 152.052130] up+0x75/0xb0 [ 152.052152] __up_console_sem+0x6e/0x80 [ 152.052181] console_unlock+0x46a/0x590 [ 152.052211] vt_ioctl+0x2822/0x2ca0 [ 152.052232] tty_ioctl+0x7c4/0x1700 [ 152.052252] __x64_sys_ioctl+0x19a/0x210 [ 152.052279] do_syscall_64+0x3b/0x90 [ 152.052303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.052334] [ 152.052334] -> #0 ((console_sem).lock){....}-{2:2}: [ 152.052360] __lock_acquire+0x2a02/0x5e70 [ 152.052391] lock_acquire+0x1a2/0x530 [ 152.052421] _raw_spin_lock_irqsave+0x39/0x60 [ 152.052448] down_trylock+0xe/0x70 [ 152.052471] __down_trylock_console_sem+0x3b/0xd0 [ 152.052502] vprintk_emit+0x16b/0x560 [ 152.052533] vprintk+0x84/0xa0 [ 152.052563] _printk+0xba/0xf1 [ 152.052595] report_bug.cold+0x72/0xab [ 152.052617] handle_bug+0x3c/0x70 [ 152.052640] exc_invalid_op+0x14/0x50 [ 152.052665] asm_exc_invalid_op+0x16/0x20 [ 152.052695] group_sched_out.part.0+0x2c7/0x460 [ 152.052714] ctx_sched_out+0x8f1/0xc10 [ 152.052732] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.052755] __schedule+0xedd/0x2470 [ 152.052772] schedule+0xda/0x1b0 [ 152.052789] futex_wait_queue+0xf5/0x1e0 [ 152.052809] futex_wait+0x28e/0x690 [ 152.052827] do_futex+0x2ff/0x380 [ 152.052844] __x64_sys_futex+0x1c6/0x4d0 [ 152.052862] do_syscall_64+0x3b/0x90 [ 152.052885] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.052917] [ 152.052917] other info that might help us debug this: [ 152.052917] [ 152.052921] Chain exists of: [ 152.052921] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 152.052921] [ 152.052949] Possible unsafe locking scenario: [ 152.052949] [ 152.052953] CPU0 CPU1 [ 152.052957] ---- ---- [ 152.052961] lock(&ctx->lock); [ 152.052971] lock(&rq->__lock); [ 152.052983] lock(&ctx->lock); [ 152.052994] lock((console_sem).lock); [ 152.053005] [ 152.053005] *** DEADLOCK *** [ 152.053005] [ 152.053008] 2 locks held by syz-executor.0/3933: [ 152.053021] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 152.053068] #1: ffff888008a4ec20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 152.053119] [ 152.053119] stack backtrace: [ 152.053124] CPU: 0 PID: 3933 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220912 #1 [ 152.053148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 152.053161] Call Trace: [ 152.053167] [ 152.053174] dump_stack_lvl+0x8b/0xb3 [ 152.053201] check_noncircular+0x263/0x2e0 [ 152.053232] ? format_decode+0x26c/0xb50 [ 152.053258] ? print_circular_bug+0x450/0x450 [ 152.053291] ? enable_ptr_key_workfn+0x20/0x20 [ 152.053318] ? format_decode+0x26c/0xb50 [ 152.053346] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 152.053380] __lock_acquire+0x2a02/0x5e70 [ 152.053421] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 152.053463] lock_acquire+0x1a2/0x530 [ 152.053495] ? down_trylock+0xe/0x70 [ 152.053523] ? rcu_read_unlock+0x40/0x40 [ 152.053559] ? lock_is_held_type+0xd7/0x130 [ 152.053593] ? vprintk+0x84/0xa0 [ 152.053627] _raw_spin_lock_irqsave+0x39/0x60 [ 152.053656] ? down_trylock+0xe/0x70 [ 152.053681] down_trylock+0xe/0x70 [ 152.053706] ? vprintk+0x84/0xa0 [ 152.053739] __down_trylock_console_sem+0x3b/0xd0 [ 152.053772] vprintk_emit+0x16b/0x560 [ 152.053808] vprintk+0x84/0xa0 [ 152.053841] _printk+0xba/0xf1 [ 152.053874] ? record_print_text.cold+0x16/0x16 [ 152.053915] ? report_bug.cold+0x66/0xab [ 152.053941] ? group_sched_out.part.0+0x2c7/0x460 [ 152.053962] report_bug.cold+0x72/0xab [ 152.053990] handle_bug+0x3c/0x70 [ 152.054015] exc_invalid_op+0x14/0x50 [ 152.054042] asm_exc_invalid_op+0x16/0x20 [ 152.054073] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 152.054097] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 152.054119] RSP: 0018:ffff888043ad78f8 EFLAGS: 00010006 [ 152.054136] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 152.054150] RDX: ffff8880421f5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 152.054164] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 152.054178] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888008a4ec00 [ 152.054192] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 152.054212] ? group_sched_out.part.0+0x2c7/0x460 [ 152.054237] ? group_sched_out.part.0+0x2c7/0x460 [ 152.054260] ctx_sched_out+0x8f1/0xc10 [ 152.054283] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.054312] ? lock_is_held_type+0xd7/0x130 [ 152.054346] ? __perf_cgroup_move+0x160/0x160 [ 152.054368] ? set_next_entity+0x304/0x550 [ 152.054405] ? lock_is_held_type+0xd7/0x130 [ 152.054439] __schedule+0xedd/0x2470 [ 152.054463] ? io_schedule_timeout+0x150/0x150 [ 152.054484] ? futex_wait_setup+0x166/0x230 [ 152.054510] schedule+0xda/0x1b0 [ 152.054530] futex_wait_queue+0xf5/0x1e0 [ 152.054552] futex_wait+0x28e/0x690 [ 152.054575] ? futex_wait_setup+0x230/0x230 [ 152.054599] ? wake_up_q+0x8b/0xf0 [ 152.054624] ? do_raw_spin_unlock+0x4f/0x220 [ 152.054661] ? futex_wake+0x158/0x490 [ 152.054690] ? fd_install+0x1f9/0x640 [ 152.054719] do_futex+0x2ff/0x380 [ 152.054740] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 152.054769] __x64_sys_futex+0x1c6/0x4d0 [ 152.054792] ? __x64_sys_futex_time32+0x480/0x480 [ 152.054815] ? syscall_enter_from_user_mode+0x1d/0x50 [ 152.054849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 152.054887] do_syscall_64+0x3b/0x90 [ 152.054912] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.054945] RIP: 0033:0x7fe0dba3bb19 [ 152.054960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.054981] RSP: 002b:00007fe0d8fb1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.055001] RAX: ffffffffffffffda RBX: 00007fe0dbb4ef68 RCX: 00007fe0dba3bb19 [ 152.055015] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe0dbb4ef68 [ 152.055029] RBP: 00007fe0dbb4ef60 R08: 0000000000000000 R09: 0000000000000000 [ 152.055042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe0dbb4ef6c [ 152.055056] R13: 00007fff3454bcef R14: 00007fe0d8fb1300 R15: 0000000000022000 [ 152.055079] [ 152.160567] WARNING: CPU: 0 PID: 3933 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 152.161800] Modules linked in: [ 152.162240] CPU: 0 PID: 3933 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220912 #1 [ 152.163306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 152.164809] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 152.165543] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 152.167902] RSP: 0018:ffff888043ad78f8 EFLAGS: 00010006 [ 152.168593] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 152.169518] RDX: ffff8880421f5040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 152.170442] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 152.171360] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888008a4ec00 [ 152.172296] R13: ffff88806ce3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 152.173222] FS: 00007fe0d8fb1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 152.174295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.175073] CR2: 00007ff70c4bb1f0 CR3: 0000000042f40000 CR4: 0000000000350ef0 [ 152.176086] Call Trace: [ 152.176441] [ 152.176762] ctx_sched_out+0x8f1/0xc10 [ 152.177306] __perf_event_task_sched_out+0x6d0/0x18d0 [ 152.178009] ? lock_is_held_type+0xd7/0x130 [ 152.178605] ? __perf_cgroup_move+0x160/0x160 [ 152.179217] ? set_next_entity+0x304/0x550 [ 152.179828] ? lock_is_held_type+0xd7/0x130 [ 152.180424] __schedule+0xedd/0x2470 [ 152.180938] ? io_schedule_timeout+0x150/0x150 [ 152.181557] ? futex_wait_setup+0x166/0x230 [ 152.182147] schedule+0xda/0x1b0 [ 152.182616] futex_wait_queue+0xf5/0x1e0 [ 152.183168] futex_wait+0x28e/0x690 [ 152.183668] ? futex_wait_setup+0x230/0x230 [ 152.184270] ? wake_up_q+0x8b/0xf0 [ 152.184765] ? do_raw_spin_unlock+0x4f/0x220 [ 152.185383] ? futex_wake+0x158/0x490 [ 152.185913] ? fd_install+0x1f9/0x640 [ 152.186448] do_futex+0x2ff/0x380 [ 152.186929] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 152.187715] __x64_sys_futex+0x1c6/0x4d0 [ 152.188293] ? __x64_sys_futex_time32+0x480/0x480 [ 152.188952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 152.189668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 152.190379] do_syscall_64+0x3b/0x90 [ 152.190900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 152.191605] RIP: 0033:0x7fe0dba3bb19 [ 152.192128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.194718] RSP: 002b:00007fe0d8fb1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.195816] RAX: ffffffffffffffda RBX: 00007fe0dbb4ef68 RCX: 00007fe0dba3bb19 [ 152.196844] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe0dbb4ef68 [ 152.197880] RBP: 00007fe0dbb4ef60 R08: 0000000000000000 R09: 0000000000000000 [ 152.198884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe0dbb4ef6c [ 152.199810] R13: 00007fff3454bcef R14: 00007fe0d8fb1300 R15: 0000000000022000 [ 152.200743] [ 152.201051] irq event stamp: 398 [ 152.201489] hardirqs last enabled at (397): [] syscall_enter_from_user_mode+0x1d/0x50 [ 152.202712] hardirqs last disabled at (398): [] __schedule+0x1225/0x2470 [ 152.203769] softirqs last enabled at (276): [] __irq_exit_rcu+0x11b/0x180 [ 152.204869] softirqs last disabled at (243): [] __irq_exit_rcu+0x11b/0x180 [ 152.205959] ---[ end trace 0000000000000000 ]--- [ 157.374840] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 161.662853] Bluetooth: hci7: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 19:55:13 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888043ad7348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe0d8fb1700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff70c4bb1f0 CR3=0000000042f40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fe0dbb227c0 00007fe0dbb227c8 YMM02=0000000000000000 0000000000000000 00007fe0dbb227e0 00007fe0dbb227c0 YMM03=0000000000000000 0000000000000000 00007fe0dbb227c8 00007fe0dbb227c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff88801db7d040 RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff888043acf960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556597400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe0dbb446dc CR3=0000000042f40000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fe0dbb227c0 00007fe0dbb227c8 YMM02=0000000000000000 0000000000000000 00007fe0dbb227e0 00007fe0dbb227c0 YMM03=0000000000000000 0000000000000000 00007fe0dbb227c8 00007fe0dbb227c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000