syzkaller login: [ 42.746893] sshd (243) used greatest stack depth: 24744 bytes left Warning: Permanently added '[localhost]:48183' (ECDSA) to the list of known hosts. 2022/09/14 13:58:10 fuzzer started 2022/09/14 13:58:10 dialing manager at localhost:33849 [ 44.497793] cgroup: Unknown subsys name 'net' [ 44.620508] cgroup: Unknown subsys name 'rlimit' 2022/09/14 13:58:24 syscalls: 2215 2022/09/14 13:58:24 code coverage: enabled 2022/09/14 13:58:24 comparison tracing: enabled 2022/09/14 13:58:24 extra coverage: enabled 2022/09/14 13:58:24 setuid sandbox: enabled 2022/09/14 13:58:24 namespace sandbox: enabled 2022/09/14 13:58:24 Android sandbox: enabled 2022/09/14 13:58:24 fault injection: enabled 2022/09/14 13:58:24 leak checking: enabled 2022/09/14 13:58:24 net packet injection: enabled 2022/09/14 13:58:24 net device setup: enabled 2022/09/14 13:58:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 13:58:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 13:58:24 USB emulation: enabled 2022/09/14 13:58:24 hci packet injection: enabled 2022/09/14 13:58:24 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 13:58:24 802.15.4 emulation: enabled 2022/09/14 13:58:24 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 13:58:24 fetching corpus: 50, signal 31211/34738 (executing program) 2022/09/14 13:58:24 fetching corpus: 100, signal 45049/50027 (executing program) 2022/09/14 13:58:24 fetching corpus: 150, signal 58691/64931 (executing program) 2022/09/14 13:58:25 fetching corpus: 200, signal 66946/74415 (executing program) 2022/09/14 13:58:25 fetching corpus: 250, signal 75221/83810 (executing program) 2022/09/14 13:58:25 fetching corpus: 300, signal 79992/89749 (executing program) 2022/09/14 13:58:25 fetching corpus: 350, signal 83484/94430 (executing program) 2022/09/14 13:58:25 fetching corpus: 400, signal 87953/100017 (executing program) 2022/09/14 13:58:25 fetching corpus: 450, signal 90604/103789 (executing program) 2022/09/14 13:58:25 fetching corpus: 500, signal 94948/109063 (executing program) 2022/09/14 13:58:26 fetching corpus: 550, signal 99489/114488 (executing program) 2022/09/14 13:58:26 fetching corpus: 600, signal 103610/119391 (executing program) 2022/09/14 13:58:26 fetching corpus: 650, signal 107231/123793 (executing program) 2022/09/14 13:58:26 fetching corpus: 700, signal 110405/127726 (executing program) 2022/09/14 13:58:26 fetching corpus: 750, signal 113084/131213 (executing program) 2022/09/14 13:58:26 fetching corpus: 800, signal 114743/133785 (executing program) 2022/09/14 13:58:26 fetching corpus: 850, signal 116391/136268 (executing program) 2022/09/14 13:58:26 fetching corpus: 900, signal 119415/139882 (executing program) 2022/09/14 13:58:27 fetching corpus: 950, signal 121393/142596 (executing program) 2022/09/14 13:58:27 fetching corpus: 1000, signal 124650/146373 (executing program) 2022/09/14 13:58:27 fetching corpus: 1050, signal 127660/149860 (executing program) 2022/09/14 13:58:27 fetching corpus: 1100, signal 129327/152227 (executing program) 2022/09/14 13:58:27 fetching corpus: 1150, signal 131281/154780 (executing program) 2022/09/14 13:58:27 fetching corpus: 1200, signal 134086/158030 (executing program) 2022/09/14 13:58:27 fetching corpus: 1250, signal 135736/160302 (executing program) 2022/09/14 13:58:28 fetching corpus: 1300, signal 138566/163505 (executing program) 2022/09/14 13:58:28 fetching corpus: 1350, signal 140414/165826 (executing program) 2022/09/14 13:58:28 fetching corpus: 1400, signal 142773/168489 (executing program) 2022/09/14 13:58:28 fetching corpus: 1450, signal 146143/171869 (executing program) 2022/09/14 13:58:28 fetching corpus: 1500, signal 147966/174117 (executing program) 2022/09/14 13:58:28 fetching corpus: 1550, signal 149285/175897 (executing program) 2022/09/14 13:58:29 fetching corpus: 1600, signal 150324/177506 (executing program) 2022/09/14 13:58:29 fetching corpus: 1650, signal 152224/179940 (executing program) 2022/09/14 13:58:29 fetching corpus: 1700, signal 153278/181501 (executing program) 2022/09/14 13:58:29 fetching corpus: 1750, signal 155132/183611 (executing program) 2022/09/14 13:58:29 fetching corpus: 1800, signal 156938/185647 (executing program) 2022/09/14 13:58:29 fetching corpus: 1850, signal 158735/187670 (executing program) 2022/09/14 13:58:29 fetching corpus: 1900, signal 160975/189966 (executing program) 2022/09/14 13:58:30 fetching corpus: 1950, signal 162196/191547 (executing program) 2022/09/14 13:58:30 fetching corpus: 2000, signal 163563/193173 (executing program) 2022/09/14 13:58:30 fetching corpus: 2050, signal 164726/194660 (executing program) 2022/09/14 13:58:30 fetching corpus: 2100, signal 165796/196077 (executing program) 2022/09/14 13:58:30 fetching corpus: 2150, signal 167613/197986 (executing program) 2022/09/14 13:58:30 fetching corpus: 2200, signal 169022/199580 (executing program) 2022/09/14 13:58:30 fetching corpus: 2250, signal 170719/201283 (executing program) 2022/09/14 13:58:31 fetching corpus: 2300, signal 172739/203192 (executing program) 2022/09/14 13:58:31 fetching corpus: 2349, signal 174179/204704 (executing program) 2022/09/14 13:58:31 fetching corpus: 2399, signal 175705/206240 (executing program) 2022/09/14 13:58:31 fetching corpus: 2449, signal 177249/207828 (executing program) 2022/09/14 13:58:31 fetching corpus: 2499, signal 178245/209106 (executing program) 2022/09/14 13:58:31 fetching corpus: 2549, signal 179444/210399 (executing program) 2022/09/14 13:58:32 fetching corpus: 2599, signal 180784/211781 (executing program) 2022/09/14 13:58:32 fetching corpus: 2649, signal 181503/212751 (executing program) 2022/09/14 13:58:32 fetching corpus: 2699, signal 183149/214219 (executing program) 2022/09/14 13:58:32 fetching corpus: 2749, signal 183935/215197 (executing program) 2022/09/14 13:58:32 fetching corpus: 2799, signal 184664/216168 (executing program) 2022/09/14 13:58:32 fetching corpus: 2849, signal 186337/217762 (executing program) 2022/09/14 13:58:32 fetching corpus: 2899, signal 187477/218983 (executing program) 2022/09/14 13:58:33 fetching corpus: 2949, signal 188934/220273 (executing program) 2022/09/14 13:58:33 fetching corpus: 2999, signal 190208/221519 (executing program) 2022/09/14 13:58:33 fetching corpus: 3049, signal 191402/222602 (executing program) 2022/09/14 13:58:33 fetching corpus: 3099, signal 192409/223590 (executing program) 2022/09/14 13:58:33 fetching corpus: 3149, signal 193614/224679 (executing program) 2022/09/14 13:58:34 fetching corpus: 3199, signal 195554/226084 (executing program) 2022/09/14 13:58:34 fetching corpus: 3249, signal 196463/226966 (executing program) 2022/09/14 13:58:34 fetching corpus: 3299, signal 197460/227940 (executing program) 2022/09/14 13:58:34 fetching corpus: 3349, signal 198671/229027 (executing program) 2022/09/14 13:58:34 fetching corpus: 3399, signal 199659/229954 (executing program) 2022/09/14 13:58:34 fetching corpus: 3449, signal 200406/230717 (executing program) 2022/09/14 13:58:34 fetching corpus: 3499, signal 201608/231670 (executing program) 2022/09/14 13:58:35 fetching corpus: 3549, signal 202395/232353 (executing program) 2022/09/14 13:58:35 fetching corpus: 3599, signal 203535/233169 (executing program) 2022/09/14 13:58:35 fetching corpus: 3649, signal 204065/233811 (executing program) 2022/09/14 13:58:35 fetching corpus: 3699, signal 204737/234487 (executing program) 2022/09/14 13:58:35 fetching corpus: 3749, signal 205306/235059 (executing program) 2022/09/14 13:58:35 fetching corpus: 3799, signal 206010/235686 (executing program) 2022/09/14 13:58:35 fetching corpus: 3849, signal 206981/236550 (executing program) 2022/09/14 13:58:36 fetching corpus: 3899, signal 207813/237213 (executing program) 2022/09/14 13:58:36 fetching corpus: 3949, signal 208701/237884 (executing program) 2022/09/14 13:58:36 fetching corpus: 3999, signal 209344/238470 (executing program) 2022/09/14 13:58:36 fetching corpus: 4049, signal 210244/239147 (executing program) 2022/09/14 13:58:36 fetching corpus: 4099, signal 210878/239748 (executing program) 2022/09/14 13:58:36 fetching corpus: 4149, signal 211374/240280 (executing program) 2022/09/14 13:58:36 fetching corpus: 4199, signal 211887/240843 (executing program) 2022/09/14 13:58:36 fetching corpus: 4249, signal 212991/241525 (executing program) 2022/09/14 13:58:37 fetching corpus: 4299, signal 214034/242194 (executing program) 2022/09/14 13:58:37 fetching corpus: 4349, signal 214613/242726 (executing program) 2022/09/14 13:58:37 fetching corpus: 4399, signal 215395/243312 (executing program) 2022/09/14 13:58:37 fetching corpus: 4448, signal 216156/243841 (executing program) 2022/09/14 13:58:37 fetching corpus: 4498, signal 217401/244480 (executing program) 2022/09/14 13:58:37 fetching corpus: 4548, signal 218378/244968 (executing program) 2022/09/14 13:58:37 fetching corpus: 4598, signal 218915/245324 (executing program) 2022/09/14 13:58:38 fetching corpus: 4648, signal 219899/245892 (executing program) 2022/09/14 13:58:38 fetching corpus: 4698, signal 220376/246299 (executing program) 2022/09/14 13:58:38 fetching corpus: 4748, signal 221189/246778 (executing program) 2022/09/14 13:58:38 fetching corpus: 4798, signal 221756/247148 (executing program) 2022/09/14 13:58:38 fetching corpus: 4848, signal 222322/247530 (executing program) 2022/09/14 13:58:38 fetching corpus: 4898, signal 222841/247846 (executing program) 2022/09/14 13:58:38 fetching corpus: 4948, signal 223788/248306 (executing program) 2022/09/14 13:58:38 fetching corpus: 4998, signal 224787/248745 (executing program) 2022/09/14 13:58:39 fetching corpus: 5048, signal 225421/249139 (executing program) 2022/09/14 13:58:39 fetching corpus: 5098, signal 226041/249495 (executing program) 2022/09/14 13:58:39 fetching corpus: 5148, signal 226581/249821 (executing program) 2022/09/14 13:58:39 fetching corpus: 5198, signal 227133/250123 (executing program) 2022/09/14 13:58:39 fetching corpus: 5248, signal 227928/250467 (executing program) 2022/09/14 13:58:39 fetching corpus: 5298, signal 228779/250766 (executing program) 2022/09/14 13:58:39 fetching corpus: 5348, signal 229474/251050 (executing program) 2022/09/14 13:58:39 fetching corpus: 5398, signal 230042/251300 (executing program) 2022/09/14 13:58:40 fetching corpus: 5448, signal 230886/251589 (executing program) 2022/09/14 13:58:40 fetching corpus: 5498, signal 231527/251873 (executing program) 2022/09/14 13:58:40 fetching corpus: 5548, signal 231979/252098 (executing program) 2022/09/14 13:58:40 fetching corpus: 5598, signal 232663/252327 (executing program) 2022/09/14 13:58:40 fetching corpus: 5648, signal 233469/252527 (executing program) 2022/09/14 13:58:40 fetching corpus: 5698, signal 234317/252697 (executing program) 2022/09/14 13:58:41 fetching corpus: 5748, signal 234609/252837 (executing program) 2022/09/14 13:58:41 fetching corpus: 5798, signal 235110/253061 (executing program) 2022/09/14 13:58:41 fetching corpus: 5848, signal 235632/253203 (executing program) 2022/09/14 13:58:41 fetching corpus: 5898, signal 236735/253250 (executing program) 2022/09/14 13:58:41 fetching corpus: 5948, signal 237899/253302 (executing program) 2022/09/14 13:58:41 fetching corpus: 5996, signal 238160/253323 (executing program) 2022/09/14 13:58:41 fetching corpus: 6046, signal 238833/253350 (executing program) 2022/09/14 13:58:42 fetching corpus: 6096, signal 239304/253362 (executing program) 2022/09/14 13:58:42 fetching corpus: 6146, signal 239762/253382 (executing program) 2022/09/14 13:58:42 fetching corpus: 6195, signal 240069/253406 (executing program) 2022/09/14 13:58:42 fetching corpus: 6244, signal 240505/253418 (executing program) 2022/09/14 13:58:42 fetching corpus: 6294, signal 241253/253441 (executing program) 2022/09/14 13:58:42 fetching corpus: 6344, signal 241921/253465 (executing program) 2022/09/14 13:58:42 fetching corpus: 6393, signal 242388/253489 (executing program) 2022/09/14 13:58:42 fetching corpus: 6443, signal 242783/253497 (executing program) 2022/09/14 13:58:43 fetching corpus: 6493, signal 243237/253500 (executing program) 2022/09/14 13:58:43 fetching corpus: 6543, signal 243966/253521 (executing program) 2022/09/14 13:58:43 fetching corpus: 6593, signal 244482/253572 (executing program) 2022/09/14 13:58:43 fetching corpus: 6643, signal 244883/253581 (executing program) 2022/09/14 13:58:43 fetching corpus: 6670, signal 245062/253584 (executing program) 2022/09/14 13:58:43 fetching corpus: 6670, signal 245062/253584 (executing program) 2022/09/14 13:58:46 starting 8 fuzzer processes 13:58:46 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 13:58:46 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000840)=""/84, 0x54}], 0x2) 13:58:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)=' !') 13:58:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 13:58:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 13:58:46 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) connect$bt_sco(r0, &(0x7f0000000140), 0x8) 13:58:46 executing program 6: syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x702a, &(0x7f00000003c0), &(0x7f0000f84000/0x3000)=nil, &(0x7f00009de000/0x1000)=nil, &(0x7f0000000440), 0x0) syz_io_uring_setup(0x56ad, &(0x7f0000000140), &(0x7f0000b6a000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x27c, &(0x7f0000000200), &(0x7f0000b6a000/0x4000)=nil, &(0x7f0000b6a000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1dea, &(0x7f0000000280), &(0x7f0000f83000/0x3000)=nil, &(0x7f00009dd000/0x2000)=nil, &(0x7f0000000380), 0x0) syz_io_uring_setup(0x56ad, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) 13:58:46 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCNOTTY(r0, 0x5422) [ 80.121606] audit: type=1400 audit(1663163926.473:6): avc: denied { execmem } for pid=289 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 81.453233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.454444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.455886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.457303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.458989] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.460568] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.468455] Bluetooth: hci2: HCI_REQ-0x0c1a [ 81.471655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.481612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.483183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.486914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.488544] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.490171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.491513] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.493209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.494400] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.495706] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.496811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.501118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.503338] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.503476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.506798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.508312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.509777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.512797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.515912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.516989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.518911] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.519537] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.521216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.522447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.523997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.524018] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.525684] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.527663] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.528999] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.530697] Bluetooth: hci3: HCI_REQ-0x0c1a [ 81.532663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.535424] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.542354] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.542875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.543585] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.548627] Bluetooth: hci1: HCI_REQ-0x0c1a [ 81.568981] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.570715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.571328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.572138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.576073] Bluetooth: hci0: HCI_REQ-0x0c1a [ 81.576713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.586068] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.586723] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.590488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.593612] Bluetooth: hci4: HCI_REQ-0x0c1a [ 81.597589] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.598314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.602267] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.518067] Bluetooth: hci2: command 0x0409 tx timeout [ 83.581508] Bluetooth: hci0: command 0x0409 tx timeout [ 83.581923] Bluetooth: hci1: command 0x0409 tx timeout [ 83.582339] Bluetooth: hci7: command 0x0409 tx timeout [ 83.582777] Bluetooth: hci5: command 0x0409 tx timeout [ 83.583182] Bluetooth: hci3: command 0x0409 tx timeout [ 83.645433] Bluetooth: hci4: command 0x0409 tx timeout [ 83.646530] Bluetooth: hci6: command 0x0409 tx timeout [ 85.565783] Bluetooth: hci2: command 0x041b tx timeout [ 85.629697] Bluetooth: hci3: command 0x041b tx timeout [ 85.630626] Bluetooth: hci5: command 0x041b tx timeout [ 85.631840] Bluetooth: hci7: command 0x041b tx timeout [ 85.633138] Bluetooth: hci1: command 0x041b tx timeout [ 85.634599] Bluetooth: hci0: command 0x041b tx timeout [ 85.693466] Bluetooth: hci6: command 0x041b tx timeout [ 85.694589] Bluetooth: hci4: command 0x041b tx timeout [ 87.614289] Bluetooth: hci2: command 0x040f tx timeout [ 87.677623] Bluetooth: hci0: command 0x040f tx timeout [ 87.678967] Bluetooth: hci1: command 0x040f tx timeout [ 87.679526] Bluetooth: hci7: command 0x040f tx timeout [ 87.680050] Bluetooth: hci5: command 0x040f tx timeout [ 87.680882] Bluetooth: hci3: command 0x040f tx timeout [ 87.741552] Bluetooth: hci4: command 0x040f tx timeout [ 87.743015] Bluetooth: hci6: command 0x040f tx timeout [ 89.662651] Bluetooth: hci2: command 0x0419 tx timeout [ 89.726449] Bluetooth: hci3: command 0x0419 tx timeout [ 89.726944] Bluetooth: hci5: command 0x0419 tx timeout [ 89.727845] Bluetooth: hci7: command 0x0419 tx timeout [ 89.728267] Bluetooth: hci1: command 0x0419 tx timeout [ 89.729709] Bluetooth: hci0: command 0x0419 tx timeout [ 89.790424] Bluetooth: hci6: command 0x0419 tx timeout [ 89.790930] Bluetooth: hci4: command 0x0419 tx timeout 13:59:39 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000840)=""/84, 0x54}], 0x2) 13:59:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000840)=""/84, 0x54}], 0x2) 13:59:40 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000840)=""/84, 0x54}], 0x2) 13:59:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x3}) [ 134.292854] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 13:59:40 executing program 2: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f00000014c0)=[{&(0x7f0000000340)="dc3d", 0x2, 0xffff}], 0x0, &(0x7f0000001540)={[{@nojoliet}]}) [ 134.506770] loop2: detected capacity change from 0 to 255 [ 134.568749] isofs_fill_super: bread failed, dev=loop2, iso_blknum=64, block=128 [ 134.604674] loop2: detected capacity change from 0 to 255 [ 134.665182] isofs_fill_super: bread failed, dev=loop2, iso_blknum=64, block=128 13:59:41 executing program 2: syz_emit_ethernet(0x83, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x4d, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x7, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9bea02efe622794d08af4ec66265a61ddc0795c6a341682b3b09e290ee1998c1809310a3d56a216276a5452eff9e0723b62ac0b4407217fdab0c0a6d7962721516"}}}}}}}, 0x0) 13:59:41 executing program 2: syz_emit_ethernet(0x83, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x4d, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x7, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9bea02efe622794d08af4ec66265a61ddc0795c6a341682b3b09e290ee1998c1809310a3d56a216276a5452eff9e0723b62ac0b4407217fdab0c0a6d7962721516"}}}}}}}, 0x0) 13:59:41 executing program 2: syz_emit_ethernet(0x83, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x4d, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x7, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9bea02efe622794d08af4ec66265a61ddc0795c6a341682b3b09e290ee1998c1809310a3d56a216276a5452eff9e0723b62ac0b4407217fdab0c0a6d7962721516"}}}}}}}, 0x0) [ 138.072127] audit: type=1400 audit(1663163984.424:7): avc: denied { open } for pid=3772 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.073537] audit: type=1400 audit(1663163984.424:8): avc: denied { kernel } for pid=3772 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 138.092154] ------------[ cut here ]------------ [ 138.092698] WARNING: CPU: 0 PID: 3770 at kernel/events/core.c:2233 event_filter_match+0x422/0x660 [ 138.093328] Modules linked in: [ 138.093575] CPU: 0 PID: 3770 Comm: modprobe Not tainted 6.0.0-rc5-next-20220914 #1 [ 138.094117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.094947] RIP: 0010:event_filter_match+0x422/0x660 [ 138.095463] Code: 00 00 00 e9 7c fc ff ff e8 4b 15 f1 ff 65 8b 2d c0 73 ad 7e 31 ff 89 ee e8 eb 11 f1 ff 85 ed 0f 84 ef 00 00 00 e8 2e 15 f1 ff <0f> 0b eb 9f e8 25 80 23 00 e9 17 fc ff ff e8 1b 15 f1 ff 48 8d 7b [ 138.097455] RSP: 0000:ffff88806ce09c70 EFLAGS: 00010046 [ 138.097862] RAX: 0000000080010002 RBX: ffff888008be85c8 RCX: 0000000000000000 [ 138.098396] RDX: ffff88801dad8000 RSI: ffffffff81550212 RDI: 0000000000000005 [ 138.098944] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 138.099480] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008be87e8 [ 138.100017] R13: 0000000000000000 R14: ffff888008be8670 R15: ffff888008be87e8 [ 138.100545] FS: 00007f5511cf1540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.101146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.101573] CR2: 00007f5511ea5478 CR3: 000000000fa32000 CR4: 0000000000350ef0 [ 138.102088] Call Trace: [ 138.102284] [ 138.102461] merge_sched_in+0x107/0x1110 [ 138.102791] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 138.103245] ? merge_sched_in+0x1110/0x1110 [ 138.103560] ? lock_is_held_type+0xd7/0x130 [ 138.103898] ctx_sched_in+0x2e6/0x770 [ 138.104190] ? lock_acquire+0x1b2/0x530 [ 138.104503] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 138.104956] ? lock_is_held_type+0xd7/0x130 [ 138.105294] perf_event_sched_in+0x75/0x80 [ 138.105611] ctx_resched+0x1ce/0x390 [ 138.105906] __perf_install_in_context+0x285/0x9c0 [ 138.106274] ? ctx_resched+0x390/0x390 [ 138.106575] remote_function+0x125/0x1b0 [ 138.106909] __flush_smp_call_function_queue+0x1df/0x5a0 [ 138.107317] ? perf_duration_warn+0x40/0x40 [ 138.107653] __sysvec_call_function_single+0x92/0x3a0 [ 138.108039] sysvec_call_function_single+0x89/0xc0 [ 138.108405] [ 138.108572] [ 138.108741] asm_sysvec_call_function_single+0x16/0x20 [ 138.109133] RIP: 0010:folio_memcg_lock+0x138/0x4a0 [ 138.109509] Code: 7d c8 e8 8b 9a af ff 48 8b 7d c8 58 48 c7 c6 71 a4 7a 81 e8 ea 92 af ff 4d 85 ff 74 06 e8 f0 4a d2 ff fb 4c 8d bb 40 09 00 00 04 00 00 00 4c 89 ff e8 5b e1 fd ff 4c 89 f8 48 c1 e8 03 42 0f [ 138.110819] RSP: 0000:ffff88801b92fae8 EFLAGS: 00000202 [ 138.111213] RAX: 000000000000319d RBX: ffff88800851c000 RCX: ffffffff812999ff [ 138.111742] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.112256] RBP: ffff88801b92fb30 R08: 0000000000000001 R09: ffffffff86ccb7d7 [ 138.112751] R10: fffffbfff0d996fa R11: 0000000000000001 R12: dffffc0000000000 [ 138.113275] R13: fffff9400036f398 R14: 1ffffd400036f39f R15: ffff88800851c940 [ 138.113807] ? mark_lock.part.0+0xef/0x2f70 [ 138.114136] ? folio_memcg_lock+0x130/0x4a0 [ 138.114459] page_add_file_rmap+0x31/0x280 [ 138.114787] do_set_pte+0x322/0x580 [ 138.115080] filemap_map_pages+0x747/0x10b0 [ 138.115424] ? filemap_range_has_writeback+0x620/0x620 [ 138.115804] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.116197] ? filemap_range_has_writeback+0x620/0x620 [ 138.116592] __handle_mm_fault+0x223b/0x35e0 [ 138.116930] ? lock_is_held_type+0xd7/0x130 [ 138.117250] ? __pmd_alloc+0x690/0x690 [ 138.117549] ? handle_mm_fault+0x6fd/0xa20 [ 138.117870] handle_mm_fault+0x2e6/0xa20 [ 138.118183] do_user_addr_fault+0x536/0x1300 [ 138.118531] exc_page_fault+0x98/0x1a0 [ 138.118839] asm_exc_page_fault+0x22/0x30 [ 138.119160] RIP: 0033:0x7f551220bbd7 [ 138.119433] Code: f2 fb ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 55 49 89 d5 41 54 49 89 fc 55 53 48 81 ec 98 00 00 00 <0f> b6 17 48 89 74 24 10 48 89 4c 24 20 4c 89 44 24 08 44 89 4c 24 [ 138.120744] RSP: 002b:00007fff1fdfbd40 EFLAGS: 00010202 [ 138.121128] RAX: 00007f551222b5c0 RBX: 00007f5511f58c28 RCX: 00007f551222dac8 [ 138.121640] RDX: 00007fff1fdfbe28 RSI: 00007f551222d730 RDI: 00007f5511ea5478 [ 138.122167] RBP: 00007fff1fdfbf80 R08: 00007fff1fdfbe50 R09: 0000000000000000 [ 138.122673] R10: 00007f5511dd4a20 R11: 00007f55121fba20 R12: 00007f5511ea5478 [ 138.123185] R13: 00007fff1fdfbe28 R14: 00007f5511ee89d8 R15: 00007f55121fb510 [ 138.123734] [ 138.123917] irq event stamp: 12702 [ 138.124184] hardirqs last enabled at (12701): [] folio_memcg_lock+0x130/0x4a0 [ 138.124858] hardirqs last disabled at (12702): [] sysvec_call_function_single+0xb/0xc0 [ 138.125554] softirqs last enabled at (11372): [] __irq_exit_rcu+0x11b/0x180 [ 138.126191] softirqs last disabled at (11367): [] __irq_exit_rcu+0x11b/0x180 [ 138.126847] ---[ end trace 0000000000000000 ]--- [ 138.127222] ------------[ cut here ]------------ [ 138.127556] WARNING: CPU: 0 PID: 3770 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110 [ 138.128188] Modules linked in: [ 138.128433] CPU: 0 PID: 3770 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220914 #1 [ 138.129080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.129888] RIP: 0010:merge_sched_in+0xadb/0x1110 [ 138.130248] Code: ff ff e8 78 16 ef ff 65 8b 05 ed 74 ab 7e 31 ff 89 c6 89 04 24 e8 15 13 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 55 16 ef ff <0f> 0b e9 c4 fb ff ff e8 49 16 ef ff 4c 89 e8 48 05 18 01 00 00 e9 [ 138.131567] RSP: 0000:ffff88806ce09cb0 EFLAGS: 00010046 [ 138.131962] RAX: 0000000080010002 RBX: ffff88806ce3d100 RCX: 0000000000000000 [ 138.132487] RDX: ffff88801dad8000 RSI: ffffffff815700eb RDI: 0000000000000005 [ 138.133002] RBP: ffff888008be85c8 R08: 0000000000000005 R09: 0000000000000001 [ 138.133507] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88806ce3d100 [ 138.134032] R13: ffff88806ce00000 R14: ffff888008be8670 R15: ffff888008be87e8 [ 138.134549] FS: 00007f5511cf1540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.135131] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.135561] CR2: 00007f5511ea5478 CR3: 000000000fa32000 CR4: 0000000000350ef0 [ 138.136090] Call Trace: [ 138.136287] [ 138.136459] visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0 [ 138.136889] ? merge_sched_in+0x1110/0x1110 [ 138.137214] ? lock_is_held_type+0xd7/0x130 [ 138.137558] ctx_sched_in+0x2e6/0x770 [ 138.137849] ? lock_acquire+0x1b2/0x530 [ 138.138142] ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0 [ 138.138573] ? lock_is_held_type+0xd7/0x130 [ 138.138927] perf_event_sched_in+0x75/0x80 [ 138.139246] ctx_resched+0x1ce/0x390 [ 138.139540] __perf_install_in_context+0x285/0x9c0 [ 138.139912] ? ctx_resched+0x390/0x390 [ 138.140212] remote_function+0x125/0x1b0 [ 138.140514] __flush_smp_call_function_queue+0x1df/0x5a0 [ 138.140908] ? perf_duration_warn+0x40/0x40 [ 138.141243] __sysvec_call_function_single+0x92/0x3a0 [ 138.141639] sysvec_call_function_single+0x89/0xc0 [ 138.142014] [ 138.142190] [ 138.142367] asm_sysvec_call_function_single+0x16/0x20 [ 138.142775] RIP: 0010:folio_memcg_lock+0x138/0x4a0 [ 138.143149] Code: 7d c8 e8 8b 9a af ff 48 8b 7d c8 58 48 c7 c6 71 a4 7a 81 e8 ea 92 af ff 4d 85 ff 74 06 e8 f0 4a d2 ff fb 4c 8d bb 40 09 00 00 04 00 00 00 4c 89 ff e8 5b e1 fd ff 4c 89 f8 48 c1 e8 03 42 0f [ 138.144476] RSP: 0000:ffff88801b92fae8 EFLAGS: 00000202 [ 138.144874] RAX: 000000000000319d RBX: ffff88800851c000 RCX: ffffffff812999ff [ 138.145410] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.145942] RBP: ffff88801b92fb30 R08: 0000000000000001 R09: ffffffff86ccb7d7 [ 138.146469] R10: fffffbfff0d996fa R11: 0000000000000001 R12: dffffc0000000000 [ 138.147002] R13: fffff9400036f398 R14: 1ffffd400036f39f R15: ffff88800851c940 [ 138.147537] ? mark_lock.part.0+0xef/0x2f70 [ 138.147873] ? folio_memcg_lock+0x130/0x4a0 [ 138.148210] page_add_file_rmap+0x31/0x280 [ 138.148525] do_set_pte+0x322/0x580 [ 138.148804] filemap_map_pages+0x747/0x10b0 [ 138.149143] ? filemap_range_has_writeback+0x620/0x620 [ 138.149557] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.149955] ? filemap_range_has_writeback+0x620/0x620 [ 138.150328] __handle_mm_fault+0x223b/0x35e0 [ 138.150650] ? lock_is_held_type+0xd7/0x130 [ 138.151008] ? __pmd_alloc+0x690/0x690 [ 138.151322] ? handle_mm_fault+0x6fd/0xa20 [ 138.151652] handle_mm_fault+0x2e6/0xa20 [ 138.151960] do_user_addr_fault+0x536/0x1300 [ 138.152290] exc_page_fault+0x98/0x1a0 [ 138.152585] asm_exc_page_fault+0x22/0x30 [ 138.152902] RIP: 0033:0x7f551220bbd7 [ 138.153182] Code: f2 fb ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 56 41 55 49 89 d5 41 54 49 89 fc 55 53 48 81 ec 98 00 00 00 <0f> b6 17 48 89 74 24 10 48 89 4c 24 20 4c 89 44 24 08 44 89 4c 24 [ 138.154489] RSP: 002b:00007fff1fdfbd40 EFLAGS: 00010202 [ 138.154888] RAX: 00007f551222b5c0 RBX: 00007f5511f58c28 RCX: 00007f551222dac8 [ 138.155398] RDX: 00007fff1fdfbe28 RSI: 00007f551222d730 RDI: 00007f5511ea5478 [ 138.155919] RBP: 00007fff1fdfbf80 R08: 00007fff1fdfbe50 R09: 0000000000000000 [ 138.156417] R10: 00007f5511dd4a20 R11: 00007f55121fba20 R12: 00007f5511ea5478 [ 138.156942] R13: 00007fff1fdfbe28 R14: 00007f5511ee89d8 R15: 00007f55121fb510 [ 138.157496] [ 138.157678] irq event stamp: 12702 [ 138.157943] hardirqs last enabled at (12701): [] folio_memcg_lock+0x130/0x4a0 [ 138.158597] hardirqs last disabled at (12702): [] sysvec_call_function_single+0xb/0xc0 [ 138.159314] softirqs last enabled at (11372): [] __irq_exit_rcu+0x11b/0x180 [ 138.159953] softirqs last disabled at (11367): [] __irq_exit_rcu+0x11b/0x180 [ 138.160592] ---[ end trace 0000000000000000 ]--- [ 138.294750] ------------[ cut here ]------------ [ 138.295540] WARNING: CPU: 0 PID: 3776 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 138.296720] Modules linked in: [ 138.297156] CPU: 0 PID: 3776 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220914 #1 [ 138.298317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.299770] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 138.300461] Code: 85 d5 f8 ff ff e8 22 57 ee ff 65 44 8b 25 96 b5 aa 7e 31 ff 44 89 e6 e8 c0 53 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 02 57 ee ff <0f> 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 [ 138.302833] RSP: 0000:ffff88806ce097f8 EFLAGS: 00010046 [ 138.303565] RAX: 0000000000000000 RBX: ffff888008be85c8 RCX: 0000000000000100 [ 138.304524] RDX: ffff888017555040 RSI: ffffffff8157c03e RDI: 0000000000000005 [ 138.305482] RBP: ffff888008be85c8 R08: 0000000000000005 R09: 0000000000000001 [ 138.306440] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 138.307409] R13: ffff888008be8658 R14: ffff88806ce3d100 R15: ffff888008be85c8 [ 138.308373] FS: 00007ff547904540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.309456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.310243] CR2: 000055bfa3c2c2b0 CR3: 000000000ea68000 CR4: 0000000000350ef0 [ 138.311240] Call Trace: [ 138.311604] [ 138.311928] ? perf_event_idx_default+0x10/0x10 [ 138.312589] ? event_sched_out+0x71c/0xcd0 [ 138.313181] __perf_remove_from_context+0x71e/0xb20 [ 138.313875] event_function+0x297/0x3d0 [ 138.314443] ? perf_output_read+0xf80/0xf80 [ 138.315050] remote_function+0x125/0x1b0 [ 138.315617] __flush_smp_call_function_queue+0x1df/0x5a0 [ 138.316337] ? perf_duration_warn+0x40/0x40 [ 138.316926] __sysvec_call_function_single+0x92/0x3a0 [ 138.317629] sysvec_call_function_single+0x3b/0xc0 [ 138.318298] asm_sysvec_call_function_single+0x16/0x20 [ 138.319026] RIP: 0010:unwind_get_return_address+0x63/0xa0 [ 138.319774] Code: ff df 48 8d 6b 58 48 89 ea 48 c1 ea 03 80 3c 02 00 75 36 48 8b 7b 58 e8 4b b1 0b 00 85 c0 74 cf 48 b8 00 00 00 00 00 fc ff df <48> 89 ea 48 c1 ea 03 80 3c 02 00 75 1c 48 8b 43 58 5b 5d e9 25 8a [ 138.322155] RSP: 0000:ffff88806ce09a58 EFLAGS: 00000202 [ 138.322893] RAX: dffffc0000000000 RBX: ffff88806ce09a70 RCX: 0000000000000000 [ 138.323849] RDX: 1ffff1100d9c1359 RSI: ffff88801a6a7e40 RDI: ffffffff8169f486 [ 138.324807] RBP: ffff88806ce09ac8 R08: ffffffff85ec8cda R09: ffffffff85ec8cde [ 138.325757] R10: ffff88806ce09ff8 R11: ffff88806ce09ab0 R12: ffff88806ce09b38 [ 138.326716] R13: 0000000000000000 R14: ffff888017555040 R15: ffff888007c4f780 [ 138.327687] ? handle_mm_fault+0x2e6/0xa20 [ 138.328272] ? unwind_get_return_address+0x55/0xa0 [ 138.328957] ? write_profile+0x3e0/0x3e0 [ 138.329524] arch_stack_walk+0x99/0xf0 [ 138.330101] ? handle_mm_fault+0x2e6/0xa20 [ 138.330687] ? rcu_core+0x7e2/0x2080 [ 138.331233] stack_trace_save+0x8c/0xc0 [ 138.331793] ? filter_irq_stacks+0x90/0x90 [ 138.332393] ? rcu_core+0x7e2/0x2080 [ 138.332926] kasan_save_stack+0x1e/0x40 [ 138.333476] ? kasan_save_stack+0x1e/0x40 [ 138.334063] ? kasan_set_track+0x21/0x30 [ 138.334626] ? kasan_save_free_info+0x2a/0x50 [ 138.335266] ? __kasan_slab_free+0x106/0x190 [ 138.335878] ? kmem_cache_free+0xf7/0x610 [ 138.336439] ? rcu_core+0x7e2/0x2080 [ 138.336957] ? __do_softirq+0x1c8/0x8d0 [ 138.337501] ? __irq_exit_rcu+0x11b/0x180 [ 138.338074] ? irq_exit_rcu+0x5/0x20 [ 138.338596] ? sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.339304] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.340046] ? folio_memcg_lock+0x138/0x4a0 [ 138.340646] ? page_add_file_rmap+0x31/0x280 [ 138.341268] ? do_set_pte+0x322/0x580 [ 138.341810] ? filemap_map_pages+0x747/0x10b0 [ 138.342425] ? __handle_mm_fault+0x223b/0x35e0 [ 138.343075] ? mark_lock.part.0+0xef/0x2f70 [ 138.343679] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.344403] ? lock_chain_count+0x20/0x20 [ 138.344977] ? lock_chain_count+0x20/0x20 [ 138.345578] ? lock_acquire+0x1b2/0x530 [ 138.346138] ? rcu_read_unlock+0x40/0x40 [ 138.346727] kasan_set_track+0x21/0x30 [ 138.347266] kasan_save_free_info+0x2a/0x50 [ 138.347869] __kasan_slab_free+0x106/0x190 [ 138.348460] ? rcu_core+0x7e2/0x2080 [ 138.348980] kmem_cache_free+0xf7/0x610 [ 138.349545] rcu_core+0x7e2/0x2080 [ 138.350062] ? rcu_report_dead+0x540/0x540 [ 138.350657] ? lock_is_held_type+0xd7/0x130 [ 138.351293] __do_softirq+0x1c8/0x8d0 [ 138.351844] __irq_exit_rcu+0x11b/0x180 [ 138.352405] irq_exit_rcu+0x5/0x20 [ 138.352913] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.353592] [ 138.353913] [ 138.354232] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.354963] RIP: 0010:folio_memcg_lock+0x138/0x4a0 [ 138.355635] Code: 7d c8 e8 8b 9a af ff 48 8b 7d c8 58 48 c7 c6 71 a4 7a 81 e8 ea 92 af ff 4d 85 ff 74 06 e8 f0 4a d2 ff fb 4c 8d bb 40 09 00 00 04 00 00 00 4c 89 ff e8 5b e1 fd ff 4c 89 f8 48 c1 e8 03 42 0f [ 138.358028] RSP: 0000:ffff88801a6a7ae8 EFLAGS: 00000202 [ 138.358755] RAX: 0000000000004529 RBX: ffff888009a10000 RCX: ffffffff812999ff [ 138.359703] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.360644] RBP: ffff88801a6a7b30 R08: 0000000000000001 R09: ffffffff86ccb7d7 [ 138.361585] R10: fffffbfff0d996fa R11: 0000000000000001 R12: dffffc0000000000 [ 138.362535] R13: fffff940000b8e38 R14: 1ffffd40000b8e3f R15: ffff888009a10940 [ 138.363506] ? mark_lock.part.0+0xef/0x2f70 [ 138.364114] ? folio_memcg_lock+0x130/0x4a0 [ 138.364733] page_add_file_rmap+0x31/0x280 [ 138.365329] do_set_pte+0x322/0x580 [ 138.365861] filemap_map_pages+0x747/0x10b0 [ 138.366474] ? filemap_range_has_writeback+0x620/0x620 [ 138.367210] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.367936] ? filemap_range_has_writeback+0x620/0x620 [ 138.368648] __handle_mm_fault+0x223b/0x35e0 [ 138.369261] ? lock_is_held_type+0xd7/0x130 [ 138.369859] ? __pmd_alloc+0x690/0x690 [ 138.370421] ? handle_mm_fault+0x6fd/0xa20 [ 138.371025] handle_mm_fault+0x2e6/0xa20 [ 138.371592] do_user_addr_fault+0x536/0x1300 [ 138.372229] exc_page_fault+0x98/0x1a0 [ 138.372785] asm_exc_page_fault+0x22/0x30 [ 138.373372] RIP: 0033:0x55bfa3c2c2b0 [ 138.373900] Code: Unable to access opcode bytes at RIP 0x55bfa3c2c286. [ 138.374771] RSP: 002b:00007ffccd5301e8 EFLAGS: 00010206 [ 138.375509] RAX: 0000000000000034 RBX: 000055bfa492b348 RCX: 000055bfa492b348 [ 138.376469] RDX: 000055bfa492b370 RSI: 00007ffccd530200 RDI: 000055bfa492b310 [ 138.377439] RBP: 000055bfa492b310 R08: 00000000ffffffff R09: 00007ffccd530080 [ 138.378397] R10: 000055bfa3c38219 R11: 0000000000000000 R12: 0000000000000000 [ 138.379357] R13: 000055bfa3c41880 R14: 0000000000000000 R15: 00007ffccd530200 [ 138.380347] [ 138.380675] irq event stamp: 17817 [ 138.381155] hardirqs last enabled at (17816): [] kasan_quarantine_put+0x8b/0x1f0 [ 138.382356] hardirqs last disabled at (17817): [] sysvec_call_function_single+0xb/0xc0 [ 138.383637] softirqs last enabled at (17270): [] __irq_exit_rcu+0x11b/0x180 [ 138.384798] softirqs last disabled at (17707): [] __irq_exit_rcu+0x11b/0x180 [ 138.385962] ---[ end trace 0000000000000000 ]--- [ 138.386655] ------------[ cut here ]------------ [ 138.387298] WARNING: CPU: 0 PID: 3776 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 138.388484] Modules linked in: [ 138.388936] CPU: 0 PID: 3776 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220914 #1 [ 138.390135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.391641] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 138.392332] Code: ff 0f 0b e9 a9 f8 ff ff e8 f6 56 ee ff 65 8b 1d 6b b5 aa 7e 31 ff 89 de e8 96 53 ee ff 85 db 0f 84 86 04 00 00 e8 d9 56 ee ff <0f> 0b e9 0e fa ff ff e8 cd 56 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 138.394721] RSP: 0000:ffff88806ce097f8 EFLAGS: 00010046 [ 138.395446] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 [ 138.396396] RDX: ffff888017555040 RSI: ffffffff8157c067 RDI: 0000000000000005 [ 138.397345] RBP: ffff888008be85c8 R08: 0000000000000005 R09: 0000000000000001 [ 138.398294] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff888008be85c8 [ 138.399252] R13: ffff888008be85c8 R14: ffff88806ce3d100 R15: ffff888008be85c8 [ 138.400208] FS: 00007ff547904540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.401284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.402072] CR2: 000055bfa3c2c286 CR3: 000000000ea68000 CR4: 0000000000350ef0 [ 138.403037] Call Trace: [ 138.403393] [ 138.403699] ? perf_event_idx_default+0x10/0x10 [ 138.404350] ? event_sched_out+0x71c/0xcd0 [ 138.404940] __perf_remove_from_context+0x71e/0xb20 [ 138.405637] event_function+0x297/0x3d0 [ 138.406194] ? perf_output_read+0xf80/0xf80 [ 138.406808] remote_function+0x125/0x1b0 [ 138.407381] __flush_smp_call_function_queue+0x1df/0x5a0 [ 138.408124] ? perf_duration_warn+0x40/0x40 [ 138.408730] __sysvec_call_function_single+0x92/0x3a0 [ 138.409443] sysvec_call_function_single+0x3b/0xc0 [ 138.410124] asm_sysvec_call_function_single+0x16/0x20 [ 138.410866] RIP: 0010:unwind_get_return_address+0x63/0xa0 [ 138.411617] Code: ff df 48 8d 6b 58 48 89 ea 48 c1 ea 03 80 3c 02 00 75 36 48 8b 7b 58 e8 4b b1 0b 00 85 c0 74 cf 48 b8 00 00 00 00 00 fc ff df <48> 89 ea 48 c1 ea 03 80 3c 02 00 75 1c 48 8b 43 58 5b 5d e9 25 8a [ 138.413990] RSP: 0000:ffff88806ce09a58 EFLAGS: 00000202 [ 138.414691] RAX: dffffc0000000000 RBX: ffff88806ce09a70 RCX: 0000000000000000 [ 138.415629] RDX: 1ffff1100d9c1359 RSI: ffff88801a6a7e40 RDI: ffffffff8169f486 [ 138.416553] RBP: ffff88806ce09ac8 R08: ffffffff85ec8cda R09: ffffffff85ec8cde [ 138.417482] R10: ffff88806ce09ff8 R11: ffff88806ce09ab0 R12: ffff88806ce09b38 [ 138.418416] R13: 0000000000000000 R14: ffff888017555040 R15: ffff888007c4f780 [ 138.419374] ? handle_mm_fault+0x2e6/0xa20 [ 138.419948] ? unwind_get_return_address+0x55/0xa0 [ 138.420606] ? write_profile+0x3e0/0x3e0 [ 138.421164] arch_stack_walk+0x99/0xf0 [ 138.421723] ? handle_mm_fault+0x2e6/0xa20 [ 138.422308] ? rcu_core+0x7e2/0x2080 [ 138.422855] stack_trace_save+0x8c/0xc0 [ 138.423413] ? filter_irq_stacks+0x90/0x90 [ 138.424014] ? rcu_core+0x7e2/0x2080 [ 138.424543] kasan_save_stack+0x1e/0x40 [ 138.425095] ? kasan_save_stack+0x1e/0x40 [ 138.425672] ? kasan_set_track+0x21/0x30 [ 138.426241] ? kasan_save_free_info+0x2a/0x50 [ 138.426877] ? __kasan_slab_free+0x106/0x190 [ 138.427491] ? kmem_cache_free+0xf7/0x610 [ 138.428064] ? rcu_core+0x7e2/0x2080 [ 138.428589] ? __do_softirq+0x1c8/0x8d0 [ 138.429133] ? __irq_exit_rcu+0x11b/0x180 [ 138.429710] ? irq_exit_rcu+0x5/0x20 [ 138.430236] ? sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.430952] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.431693] ? folio_memcg_lock+0x138/0x4a0 [ 138.432290] ? page_add_file_rmap+0x31/0x280 [ 138.432908] ? do_set_pte+0x322/0x580 [ 138.433459] ? filemap_map_pages+0x747/0x10b0 [ 138.434075] ? __handle_mm_fault+0x223b/0x35e0 [ 138.434718] ? mark_lock.part.0+0xef/0x2f70 [ 138.435329] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.436053] ? lock_chain_count+0x20/0x20 [ 138.436633] ? lock_chain_count+0x20/0x20 [ 138.437237] ? lock_acquire+0x1b2/0x530 [ 138.437802] ? rcu_read_unlock+0x40/0x40 [ 138.438375] kasan_set_track+0x21/0x30 [ 138.438929] kasan_save_free_info+0x2a/0x50 [ 138.439534] __kasan_slab_free+0x106/0x190 [ 138.440123] ? rcu_core+0x7e2/0x2080 [ 138.440642] kmem_cache_free+0xf7/0x610 [ 138.441198] rcu_core+0x7e2/0x2080 [ 138.441710] ? rcu_report_dead+0x540/0x540 [ 138.442296] ? lock_is_held_type+0xd7/0x130 [ 138.442924] __do_softirq+0x1c8/0x8d0 [ 138.443466] __irq_exit_rcu+0x11b/0x180 [ 138.444027] irq_exit_rcu+0x5/0x20 [ 138.444528] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.445213] [ 138.445526] [ 138.445843] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.446553] RIP: 0010:folio_memcg_lock+0x138/0x4a0 [ 138.447240] Code: 7d c8 e8 8b 9a af ff 48 8b 7d c8 58 48 c7 c6 71 a4 7a 81 e8 ea 92 af ff 4d 85 ff 74 06 e8 f0 4a d2 ff fb 4c 8d bb 40 09 00 00 04 00 00 00 4c 89 ff e8 5b e1 fd ff 4c 89 f8 48 c1 e8 03 42 0f [ 138.449572] RSP: 0000:ffff88801a6a7ae8 EFLAGS: 00000202 [ 138.450286] RAX: 0000000000004529 RBX: ffff888009a10000 RCX: ffffffff812999ff [ 138.451231] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.452157] RBP: ffff88801a6a7b30 R08: 0000000000000001 R09: ffffffff86ccb7d7 [ 138.453095] R10: fffffbfff0d996fa R11: 0000000000000001 R12: dffffc0000000000 [ 138.454024] R13: fffff940000b8e38 R14: 1ffffd40000b8e3f R15: ffff888009a10940 [ 138.454979] ? mark_lock.part.0+0xef/0x2f70 [ 138.455594] ? folio_memcg_lock+0x130/0x4a0 [ 138.456211] page_add_file_rmap+0x31/0x280 [ 138.456811] do_set_pte+0x322/0x580 [ 138.457343] filemap_map_pages+0x747/0x10b0 [ 138.457956] ? filemap_range_has_writeback+0x620/0x620 [ 138.458682] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.459442] ? filemap_range_has_writeback+0x620/0x620 [ 138.460152] __handle_mm_fault+0x223b/0x35e0 [ 138.460767] ? lock_is_held_type+0xd7/0x130 [ 138.461360] ? __pmd_alloc+0x690/0x690 [ 138.461920] ? handle_mm_fault+0x6fd/0xa20 [ 138.462507] handle_mm_fault+0x2e6/0xa20 [ 138.463069] do_user_addr_fault+0x536/0x1300 [ 138.463707] exc_page_fault+0x98/0x1a0 [ 138.464249] asm_exc_page_fault+0x22/0x30 [ 138.464815] RIP: 0033:0x55bfa3c2c2b0 [ 138.465333] Code: Unable to access opcode bytes at RIP 0x55bfa3c2c286. [ 138.466199] RSP: 002b:00007ffccd5301e8 EFLAGS: 00010206 [ 138.466930] RAX: 0000000000000034 RBX: 000055bfa492b348 RCX: 000055bfa492b348 [ 138.467892] RDX: 000055bfa492b370 RSI: 00007ffccd530200 RDI: 000055bfa492b310 [ 138.468852] RBP: 000055bfa492b310 R08: 00000000ffffffff R09: 00007ffccd530080 [ 138.469803] R10: 000055bfa3c38219 R11: 0000000000000000 R12: 0000000000000000 [ 138.470769] R13: 000055bfa3c41880 R14: 0000000000000000 R15: 00007ffccd530200 [ 138.471748] [ 138.472075] irq event stamp: 17817 [ 138.472564] hardirqs last enabled at (17816): [] kasan_quarantine_put+0x8b/0x1f0 [ 138.473775] hardirqs last disabled at (17817): [] sysvec_call_function_single+0xb/0xc0 [ 138.475029] softirqs last enabled at (17270): [] __irq_exit_rcu+0x11b/0x180 [ 138.476163] softirqs last disabled at (17707): [] __irq_exit_rcu+0x11b/0x180 [ 138.477300] ---[ end trace 0000000000000000 ]--- [ 138.477977] ------------[ cut here ]------------ [ 138.478590] WARNING: CPU: 0 PID: 3776 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 138.479879] Modules linked in: [ 138.480314] CPU: 0 PID: 3776 Comm: modprobe Tainted: G W 6.0.0-rc5-next-20220914 #1 [ 138.481512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.483030] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 138.483845] Code: 5e 41 5f e9 5d c5 f0 ff e8 58 c5 f0 ff 65 8b 1d cd 23 ad 7e 31 ff 89 de e8 f8 c1 f0 ff 85 db 0f 84 d3 02 00 00 e8 3b c5 f0 ff <0f> 0b eb 97 e8 32 c5 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 138.486190] RSP: 0000:ffff88806ce097f0 EFLAGS: 00010046 [ 138.486901] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000100 [ 138.487842] RDX: ffff888017555040 RSI: ffffffff81555205 RDI: 0000000000000005 [ 138.488772] RBP: ffff888008be85c8 R08: 0000000000000005 R09: 0000000000000001 [ 138.489699] R10: 0000000000000000 R11: ffffffff865ac01b R12: 0000000000000000 [ 138.490622] R13: ffff888008be8670 R14: 0000000000000001 R15: 0000000000000001 [ 138.491578] FS: 00007ff547904540(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.492627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.493410] CR2: 000055bfa3c2c286 CR3: 000000000ea68000 CR4: 0000000000350ef0 [ 138.494362] Call Trace: [ 138.494723] [ 138.495031] ? lock_is_held_type+0xd7/0x130 [ 138.495636] ? perf_event_update_time+0x285/0x380 [ 138.496306] list_del_event+0x524/0x860 [ 138.496864] __perf_remove_from_context+0xd2/0xb20 [ 138.497552] event_function+0x297/0x3d0 [ 138.498112] ? perf_output_read+0xf80/0xf80 [ 138.498722] remote_function+0x125/0x1b0 [ 138.499286] __flush_smp_call_function_queue+0x1df/0x5a0 [ 138.500023] ? perf_duration_warn+0x40/0x40 [ 138.500627] __sysvec_call_function_single+0x92/0x3a0 [ 138.501336] sysvec_call_function_single+0x3b/0xc0 [ 138.502027] asm_sysvec_call_function_single+0x16/0x20 [ 138.502759] RIP: 0010:unwind_get_return_address+0x63/0xa0 [ 138.503508] Code: ff df 48 8d 6b 58 48 89 ea 48 c1 ea 03 80 3c 02 00 75 36 48 8b 7b 58 e8 4b b1 0b 00 85 c0 74 cf 48 b8 00 00 00 00 00 fc ff df <48> 89 ea 48 c1 ea 03 80 3c 02 00 75 1c 48 8b 43 58 5b 5d e9 25 8a [ 138.505919] RSP: 0000:ffff88806ce09a58 EFLAGS: 00000202 [ 138.506640] RAX: dffffc0000000000 RBX: ffff88806ce09a70 RCX: 0000000000000000 [ 138.507610] RDX: 1ffff1100d9c1359 RSI: ffff88801a6a7e40 RDI: ffffffff8169f486 [ 138.508569] RBP: ffff88806ce09ac8 R08: ffffffff85ec8cda R09: ffffffff85ec8cde [ 138.509501] R10: ffff88806ce09ff8 R11: ffff88806ce09ab0 R12: ffff88806ce09b38 [ 138.510448] R13: 0000000000000000 R14: ffff888017555040 R15: ffff888007c4f780 [ 138.511438] ? handle_mm_fault+0x2e6/0xa20 [ 138.512021] ? unwind_get_return_address+0x55/0xa0 [ 138.512691] ? write_profile+0x3e0/0x3e0 [ 138.513255] arch_stack_walk+0x99/0xf0 [ 138.513821] ? handle_mm_fault+0x2e6/0xa20 [ 138.514406] ? rcu_core+0x7e2/0x2080 [ 138.514934] stack_trace_save+0x8c/0xc0 [ 138.515490] ? filter_irq_stacks+0x90/0x90 [ 138.516103] ? rcu_core+0x7e2/0x2080 [ 138.516626] kasan_save_stack+0x1e/0x40 [ 138.517178] ? kasan_save_stack+0x1e/0x40 [ 138.517753] ? kasan_set_track+0x21/0x30 [ 138.518317] ? kasan_save_free_info+0x2a/0x50 [ 138.518962] ? __kasan_slab_free+0x106/0x190 [ 138.519572] ? kmem_cache_free+0xf7/0x610 [ 138.520143] ? rcu_core+0x7e2/0x2080 [ 138.520659] ? __do_softirq+0x1c8/0x8d0 [ 138.521203] ? __irq_exit_rcu+0x11b/0x180 [ 138.521771] ? irq_exit_rcu+0x5/0x20 [ 138.522303] ? sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.523011] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.523738] ? folio_memcg_lock+0x138/0x4a0 [ 138.524340] ? page_add_file_rmap+0x31/0x280 [ 138.524954] ? do_set_pte+0x322/0x580 [ 138.525479] ? filemap_map_pages+0x747/0x10b0 [ 138.526093] ? __handle_mm_fault+0x223b/0x35e0 [ 138.526745] ? mark_lock.part.0+0xef/0x2f70 [ 138.527358] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.528065] ? lock_chain_count+0x20/0x20 [ 138.528639] ? lock_chain_count+0x20/0x20 [ 138.529248] ? lock_acquire+0x1b2/0x530 [ 138.529809] ? rcu_read_unlock+0x40/0x40 [ 138.530384] kasan_set_track+0x21/0x30 [ 138.530930] kasan_save_free_info+0x2a/0x50 [ 138.531534] __kasan_slab_free+0x106/0x190 [ 138.532126] ? rcu_core+0x7e2/0x2080 [ 138.532641] kmem_cache_free+0xf7/0x610 [ 138.533188] rcu_core+0x7e2/0x2080 [ 138.533707] ? rcu_report_dead+0x540/0x540 [ 138.534303] ? lock_is_held_type+0xd7/0x130 [ 138.534916] __do_softirq+0x1c8/0x8d0 [ 138.535457] __irq_exit_rcu+0x11b/0x180 [ 138.536013] irq_exit_rcu+0x5/0x20 [ 138.536516] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 138.537200] [ 138.537520] [ 138.537842] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 138.538565] RIP: 0010:folio_memcg_lock+0x138/0x4a0 [ 138.539250] Code: 7d c8 e8 8b 9a af ff 48 8b 7d c8 58 48 c7 c6 71 a4 7a 81 e8 ea 92 af ff 4d 85 ff 74 06 e8 f0 4a d2 ff fb 4c 8d bb 40 09 00 00 04 00 00 00 4c 89 ff e8 5b e1 fd ff 4c 89 f8 48 c1 e8 03 42 0f [ 138.541642] RSP: 0000:ffff88801a6a7ae8 EFLAGS: 00000202 [ 138.542346] RAX: 0000000000004529 RBX: ffff888009a10000 RCX: ffffffff812999ff [ 138.543307] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.544236] RBP: ffff88801a6a7b30 R08: 0000000000000001 R09: ffffffff86ccb7d7 [ 138.545192] R10: fffffbfff0d996fa R11: 0000000000000001 R12: dffffc0000000000 [ 138.546128] R13: fffff940000b8e38 R14: 1ffffd40000b8e3f R15: ffff888009a10940 [ 138.547105] ? mark_lock.part.0+0xef/0x2f70 [ 138.547712] ? folio_memcg_lock+0x130/0x4a0 [ 138.548326] page_add_file_rmap+0x31/0x280 [ 138.548919] do_set_pte+0x322/0x580 [ 138.549449] filemap_map_pages+0x747/0x10b0 [ 138.550054] ? filemap_range_has_writeback+0x620/0x620 [ 138.550786] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 138.551512] ? filemap_range_has_writeback+0x620/0x620 [ 138.552222] __handle_mm_fault+0x223b/0x35e0 [ 138.552833] ? lock_is_held_type+0xd7/0x130 [ 138.553450] ? __pmd_alloc+0x690/0x690 [ 138.553998] ? handle_mm_fault+0x6fd/0xa20 [ 138.554592] handle_mm_fault+0x2e6/0xa20 [ 138.555170] do_user_addr_fault+0x536/0x1300 [ 138.555796] exc_page_fault+0x98/0x1a0 [ 138.556344] asm_exc_page_fault+0x22/0x30 [ 138.556920] RIP: 0033:0x55bfa3c2c2b0 [ 138.557441] Code: Unable to access opcode bytes at RIP 0x55bfa3c2c286. [ 138.558307] RSP: 002b:00007ffccd5301e8 EFLAGS: 00010206 [ 138.559038] RAX: 0000000000000034 RBX: 000055bfa492b348 RCX: 000055bfa492b348 [ 138.559992] RDX: 000055bfa492b370 RSI: 00007ffccd530200 RDI: 000055bfa492b310 [ 138.560946] RBP: 000055bfa492b310 R08: 00000000ffffffff R09: 00007ffccd530080 [ 138.561901] R10: 000055bfa3c38219 R11: 0000000000000000 R12: 0000000000000000 [ 138.562876] R13: 000055bfa3c41880 R14: 0000000000000000 R15: 00007ffccd530200 [ 138.563864] [ 138.564191] irq event stamp: 17817 [ 138.564666] hardirqs last enabled at (17816): [] kasan_quarantine_put+0x8b/0x1f0 [ 138.565855] hardirqs last disabled at (17817): [] sysvec_call_function_single+0xb/0xc0 [ 138.567122] softirqs last enabled at (17270): [] __irq_exit_rcu+0x11b/0x180 [ 138.568269] softirqs last disabled at (17707): [] __irq_exit_rcu+0x11b/0x180 [ 138.569424] ---[ end trace 0000000000000000 ]--- [ 138.772287] audit: type=1400 audit(1663163985.123:9): avc: denied { write } for pid=3772 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 143.004177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.005930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.007321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.010549] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.012322] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.013962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.020076] Bluetooth: hci0: HCI_REQ-0x0c1a [ 143.109677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.115851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.118678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.123647] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.124683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.126881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.129961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.131632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.132980] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.134585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.135579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.137158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.140790] Bluetooth: hci1: HCI_REQ-0x0c1a [ 143.168034] Bluetooth: hci4: HCI_REQ-0x0c1a [ 143.197115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 143.204181] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 143.207939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 143.214799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.217700] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 143.219923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.230339] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.230727] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 143.241617] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 143.243246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.247882] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 143.258485] Bluetooth: hci6: HCI_REQ-0x0c1a [ 143.259325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 143.302296] Bluetooth: hci7: HCI_REQ-0x0c1a [ 145.085504] Bluetooth: hci0: command 0x0409 tx timeout [ 145.149458] Bluetooth: hci1: command 0x0409 tx timeout [ 145.214522] Bluetooth: hci4: command 0x0409 tx timeout [ 145.277585] Bluetooth: hci6: command 0x0409 tx timeout [ 145.341461] Bluetooth: hci7: command 0x0409 tx timeout [ 147.133470] Bluetooth: hci0: command 0x041b tx timeout [ 147.197460] Bluetooth: hci1: command 0x041b tx timeout [ 147.261417] Bluetooth: hci4: command 0x041b tx timeout [ 147.325445] Bluetooth: hci6: command 0x041b tx timeout [ 147.389506] Bluetooth: hci7: command 0x041b tx timeout VM DIAGNOSIS: 13:59:44 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88806ce09598 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5511cf1540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5511ea5478 CR3=000000000fa32000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 4700352e322e325f 4342494c4700362e YMM02=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffff000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000006d69747465 YMM04=0000000000000000 0000000000000000 006d6f7266766365 7200796164666f65 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11003aa7f84 RCX=0000000000000001 RDX=ffff888040063580 RSI=ffffffff813bc113 RDI=0000000000000005 RBP=ffff88801d53fcc8 RSP=ffff88801d53fbf8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff8146174d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7b03034700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7b05bce000 CR3=0000000040a04000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f7b05ba57c0 00007f7b05ba57c8 YMM02=0000000000000000 0000000000000000 00007f7b05ba57e0 00007f7b05ba57c0 YMM03=0000000000000000 0000000000000000 00007f7b05ba57c8 00007f7b05ba57c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000