Warning: Permanently added '[localhost]:10234' (ECDSA) to the list of known hosts. 2022/10/01 02:13:29 fuzzer started 2022/10/01 02:13:29 dialing manager at localhost:35095 syzkaller login: [ 36.477408] cgroup: Unknown subsys name 'net' [ 36.567617] cgroup: Unknown subsys name 'rlimit' 2022/10/01 02:13:44 syscalls: 2215 2022/10/01 02:13:44 code coverage: enabled 2022/10/01 02:13:44 comparison tracing: enabled 2022/10/01 02:13:44 extra coverage: enabled 2022/10/01 02:13:44 setuid sandbox: enabled 2022/10/01 02:13:44 namespace sandbox: enabled 2022/10/01 02:13:44 Android sandbox: enabled 2022/10/01 02:13:44 fault injection: enabled 2022/10/01 02:13:44 leak checking: enabled 2022/10/01 02:13:44 net packet injection: enabled 2022/10/01 02:13:44 net device setup: enabled 2022/10/01 02:13:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 02:13:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 02:13:44 USB emulation: enabled 2022/10/01 02:13:44 hci packet injection: enabled 2022/10/01 02:13:44 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 02:13:44 802.15.4 emulation: enabled 2022/10/01 02:13:44 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/01 02:13:45 fetching corpus: 19, signal 11580/15134 (executing program) 2022/10/01 02:13:45 fetching corpus: 43, signal 25832/30249 (executing program) 2022/10/01 02:13:45 fetching corpus: 81, signal 31030/36412 (executing program) 2022/10/01 02:13:45 fetching corpus: 131, signal 37660/43817 (executing program) 2022/10/01 02:13:45 fetching corpus: 181, signal 47230/53447 (executing program) 2022/10/01 02:13:45 fetching corpus: 231, signal 54247/60441 (executing program) 2022/10/01 02:13:45 fetching corpus: 281, signal 59639/65948 (executing program) 2022/10/01 02:13:45 fetching corpus: 331, signal 63571/69956 (executing program) 2022/10/01 02:13:46 fetching corpus: 381, signal 67070/73424 (executing program) 2022/10/01 02:13:46 fetching corpus: 431, signal 69900/76370 (executing program) 2022/10/01 02:13:46 fetching corpus: 481, signal 73310/79527 (executing program) 2022/10/01 02:13:46 fetching corpus: 531, signal 75736/81832 (executing program) 2022/10/01 02:13:46 fetching corpus: 581, signal 77537/83647 (executing program) 2022/10/01 02:13:46 fetching corpus: 631, signal 79893/85729 (executing program) 2022/10/01 02:13:46 fetching corpus: 681, signal 83894/88744 (executing program) 2022/10/01 02:13:47 fetching corpus: 731, signal 86499/90759 (executing program) 2022/10/01 02:13:47 fetching corpus: 781, signal 88236/92158 (executing program) 2022/10/01 02:13:47 fetching corpus: 831, signal 89316/93043 (executing program) 2022/10/01 02:13:47 fetching corpus: 881, signal 93291/95618 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97135 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97192 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97248 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97324 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97388 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97454 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97520 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97582 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97655 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97719 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97782 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97860 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97918 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/97989 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98050 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98109 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98161 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98224 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98282 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98351 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98412 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98479 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98540 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98607 (executing program) 2022/10/01 02:13:47 fetching corpus: 915, signal 95847/98655 (executing program) 2022/10/01 02:13:48 fetching corpus: 915, signal 95847/98710 (executing program) 2022/10/01 02:13:48 fetching corpus: 915, signal 95847/98758 (executing program) 2022/10/01 02:13:48 fetching corpus: 915, signal 95847/98821 (executing program) 2022/10/01 02:13:48 fetching corpus: 915, signal 95847/98822 (executing program) 2022/10/01 02:13:48 fetching corpus: 915, signal 95847/98822 (executing program) 2022/10/01 02:13:50 starting 8 fuzzer processes 02:13:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x3, 0x0, 0x0, 0x8000}]}) 02:13:50 executing program 1: get_robust_list(0xffffffffffffffff, 0x0, 0x0) [ 57.205352] audit: type=1400 audit(1664590430.362:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:13:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x23, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x0) 02:13:50 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 02:13:50 executing program 4: syz_emit_ethernet(0x48, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x12, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) 02:13:50 executing program 5: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mremap(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 02:13:50 executing program 6: r0 = syz_io_uring_setup(0x28a3, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r0) syz_io_uring_setup(0x56ad, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) 02:13:50 executing program 7: syz_read_part_table(0x0, 0x1, &(0x7f0000001200)=[{&(0x7f0000000000)='r', 0x1, 0xd8af}]) epoll_create(0x0) unlinkat(0xffffffffffffffff, &(0x7f00000044c0)='./file0/file1\x00', 0x0) [ 58.545393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.547684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.551270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.556660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.560147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.562677] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.569032] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.591022] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.594454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.597600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.601711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.604946] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.606328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.613954] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.632351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.634035] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.635733] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.673343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.677067] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.679400] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.688910] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.714187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.716595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.718815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.722073] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.725009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.726140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.728476] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.729892] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.731882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.734566] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.736878] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.738344] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.740637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.753099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.754842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.755481] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.757422] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.758085] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.766550] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.768553] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.770285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.772249] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.773721] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.775364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.775975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.780825] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.781952] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.784206] Bluetooth: hci7: HCI_REQ-0x0c1a [ 58.787399] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.789208] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.797164] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.818039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.823285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.825114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.830930] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.624426] Bluetooth: hci2: command 0x0409 tx timeout [ 60.625273] Bluetooth: hci0: command 0x0409 tx timeout [ 60.752135] Bluetooth: hci3: command 0x0409 tx timeout [ 60.752687] Bluetooth: hci1: command 0x0409 tx timeout [ 60.815903] Bluetooth: hci5: command 0x0409 tx timeout [ 60.816577] Bluetooth: hci4: command 0x0409 tx timeout [ 60.879852] Bluetooth: hci6: command 0x0409 tx timeout [ 60.880509] Bluetooth: hci7: command 0x0409 tx timeout [ 62.671931] Bluetooth: hci0: command 0x041b tx timeout [ 62.672884] Bluetooth: hci2: command 0x041b tx timeout [ 62.800066] Bluetooth: hci1: command 0x041b tx timeout [ 62.800990] Bluetooth: hci3: command 0x041b tx timeout [ 62.863947] Bluetooth: hci4: command 0x041b tx timeout [ 62.864821] Bluetooth: hci5: command 0x041b tx timeout [ 62.928630] Bluetooth: hci7: command 0x041b tx timeout [ 62.929547] Bluetooth: hci6: command 0x041b tx timeout [ 64.720520] Bluetooth: hci2: command 0x040f tx timeout [ 64.720972] Bluetooth: hci0: command 0x040f tx timeout [ 64.848004] Bluetooth: hci3: command 0x040f tx timeout [ 64.848478] Bluetooth: hci1: command 0x040f tx timeout [ 64.911882] Bluetooth: hci5: command 0x040f tx timeout [ 64.912330] Bluetooth: hci4: command 0x040f tx timeout [ 64.975902] Bluetooth: hci6: command 0x040f tx timeout [ 64.976352] Bluetooth: hci7: command 0x040f tx timeout [ 66.767817] Bluetooth: hci0: command 0x0419 tx timeout [ 66.768280] Bluetooth: hci2: command 0x0419 tx timeout [ 66.895898] Bluetooth: hci1: command 0x0419 tx timeout [ 66.896540] Bluetooth: hci3: command 0x0419 tx timeout [ 66.959821] Bluetooth: hci4: command 0x0419 tx timeout [ 66.960260] Bluetooth: hci5: command 0x0419 tx timeout [ 67.024919] Bluetooth: hci7: command 0x0419 tx timeout [ 67.025386] Bluetooth: hci6: command 0x0419 tx timeout [ 120.930115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.935674] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.938809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.944977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.952973] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.954885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.961069] Bluetooth: hci0: HCI_REQ-0x0c1a [ 121.014077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.016975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.022698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.025887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.027673] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.028882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.049856] Bluetooth: hci4: HCI_REQ-0x0c1a [ 121.076628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.078218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.079348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.081279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.082483] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 121.083520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.087873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.088994] Bluetooth: hci3: HCI_REQ-0x0c1a [ 121.089337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.090718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.096144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.097564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.098535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.104914] Bluetooth: hci1: HCI_REQ-0x0c1a [ 121.112155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.114033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.115209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.116367] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.117632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.118952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.119823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.122098] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 121.123007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.123884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.125190] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 121.128526] Bluetooth: hci6: HCI_REQ-0x0c1a [ 121.130068] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.136156] Bluetooth: hci5: HCI_REQ-0x0c1a [ 121.204645] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 121.209806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 121.213064] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.303696] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 121.324815] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 121.348223] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 121.364868] Bluetooth: hci7: HCI_REQ-0x0c1a [ 123.023918] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 123.025019] Bluetooth: hci0: command 0x0409 tx timeout [ 123.087924] Bluetooth: hci4: command 0x0409 tx timeout [ 123.151886] Bluetooth: hci3: command 0x0409 tx timeout [ 123.154347] Bluetooth: hci5: command 0x0409 tx timeout [ 123.155082] Bluetooth: hci6: command 0x0409 tx timeout [ 123.155691] Bluetooth: hci1: command 0x0409 tx timeout [ 123.407991] Bluetooth: hci7: command 0x0409 tx timeout [ 125.072907] Bluetooth: hci0: command 0x041b tx timeout [ 125.135837] Bluetooth: hci4: command 0x041b tx timeout [ 125.200894] Bluetooth: hci1: command 0x041b tx timeout [ 125.201465] Bluetooth: hci6: command 0x041b tx timeout [ 125.202039] Bluetooth: hci5: command 0x041b tx timeout [ 125.202529] Bluetooth: hci3: command 0x041b tx timeout [ 125.455855] Bluetooth: hci7: command 0x041b tx timeout [ 127.120876] Bluetooth: hci0: command 0x040f tx timeout [ 127.183903] Bluetooth: hci4: command 0x040f tx timeout [ 127.247849] Bluetooth: hci3: command 0x040f tx timeout [ 127.247953] Bluetooth: hci5: command 0x040f tx timeout [ 127.248410] Bluetooth: hci6: command 0x040f tx timeout [ 127.248949] Bluetooth: hci1: command 0x040f tx timeout [ 127.504837] Bluetooth: hci7: command 0x040f tx timeout [ 127.695822] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 129.167961] Bluetooth: hci0: command 0x0419 tx timeout [ 129.232826] Bluetooth: hci4: command 0x0419 tx timeout [ 129.295978] Bluetooth: hci6: command 0x0419 tx timeout [ 129.297566] Bluetooth: hci5: command 0x0419 tx timeout [ 129.298619] Bluetooth: hci3: command 0x0419 tx timeout [ 129.299181] Bluetooth: hci1: command 0x0419 tx timeout [ 129.551931] Bluetooth: hci7: command 0x0419 tx timeout [ 130.336511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.352525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.365410] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.382730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.405033] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.408447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.422585] Bluetooth: hci2: HCI_REQ-0x0c1a [ 132.432855] Bluetooth: hci2: command 0x0409 tx timeout [ 134.479848] Bluetooth: hci2: command 0x041b tx timeout [ 136.528814] Bluetooth: hci2: command 0x040f tx timeout [ 138.575941] Bluetooth: hci2: command 0x0419 tx timeout [ 179.471906] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.472640] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.473198] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.473930] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.474723] Call Trace: [ 179.475014] [ 179.475249] __schedule+0x893/0x2470 [ 179.475643] ? io_schedule_timeout+0x150/0x150 [ 179.476142] ? do_raw_spin_lock+0x121/0x260 [ 179.476571] ? rwlock_bug.part.0+0x90/0x90 [ 179.477025] schedule+0xda/0x1b0 [ 179.477388] rescuer_thread+0x851/0xdb0 [ 179.477812] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.478294] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.478814] ? lockdep_hardirqs_on+0x79/0x100 [ 179.479256] ? worker_thread+0x1260/0x1260 [ 179.479671] kthread+0x2ed/0x3a0 [ 179.480085] ? kthread_complete_and_exit+0x40/0x40 [ 179.480569] ret_from_fork+0x22/0x30 [ 179.481018] [ 179.481277] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.481969] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.482697] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.483587] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.484427] Call Trace: [ 179.484649] [ 179.484867] __schedule+0x893/0x2470 [ 179.485203] ? io_schedule_timeout+0x150/0x150 [ 179.485613] ? do_raw_spin_lock+0x121/0x260 [ 179.486056] ? rwlock_bug.part.0+0x90/0x90 [ 179.486456] schedule+0xda/0x1b0 [ 179.486821] rescuer_thread+0x851/0xdb0 [ 179.487196] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.487663] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.488424] ? lockdep_hardirqs_on+0x79/0x100 [ 179.488876] ? worker_thread+0x1260/0x1260 [ 179.489282] kthread+0x2ed/0x3a0 [ 179.489610] ? kthread_complete_and_exit+0x40/0x40 [ 179.490103] ret_from_fork+0x22/0x30 [ 179.490472] [ 179.490699] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.491314] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.491823] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.492539] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.493302] Call Trace: [ 179.493546] [ 179.493795] __schedule+0x893/0x2470 [ 179.494167] ? io_schedule_timeout+0x150/0x150 [ 179.494593] ? do_raw_spin_lock+0x121/0x260 [ 179.495031] ? rwlock_bug.part.0+0x90/0x90 [ 179.495442] schedule+0xda/0x1b0 [ 179.495826] rescuer_thread+0x851/0xdb0 [ 179.496222] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.496683] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.497183] ? lockdep_hardirqs_on+0x79/0x100 [ 179.497608] ? worker_thread+0x1260/0x1260 [ 179.498035] kthread+0x2ed/0x3a0 [ 179.498355] ? kthread_complete_and_exit+0x40/0x40 [ 179.502323] ret_from_fork+0x22/0x30 [ 179.502713] [ 179.502980] INFO: task netns:6 blocked for more than 143 seconds. [ 179.503539] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.508173] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.508908] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.509680] Call Trace: [ 179.509970] [ 179.510208] __schedule+0x893/0x2470 [ 179.510595] ? io_schedule_timeout+0x150/0x150 [ 179.511075] ? do_raw_spin_lock+0x121/0x260 [ 179.511542] ? rwlock_bug.part.0+0x90/0x90 [ 179.516196] schedule+0xda/0x1b0 [ 179.516555] rescuer_thread+0x851/0xdb0 [ 179.516991] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.517484] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.518011] ? lockdep_hardirqs_on+0x79/0x100 [ 179.518461] ? worker_thread+0x1260/0x1260 [ 179.518924] kthread+0x2ed/0x3a0 [ 179.519273] ? kthread_complete_and_exit+0x40/0x40 [ 179.519790] ret_from_fork+0x22/0x30 [ 179.524302] [ 179.524552] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.525233] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.525761] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.526474] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 179.527326] Workqueue: 0x0 (events_highpri) [ 179.527793] Call Trace: [ 179.532171] [ 179.532413] __schedule+0x893/0x2470 [ 179.532838] ? io_schedule_timeout+0x150/0x150 [ 179.533339] schedule+0xda/0x1b0 [ 179.533691] worker_thread+0x15f/0x1260 [ 179.534149] ? process_one_work+0x16a0/0x16a0 [ 179.534605] kthread+0x2ed/0x3a0 [ 179.534985] ? kthread_complete_and_exit+0x40/0x40 [ 179.535489] ret_from_fork+0x22/0x30 [ 179.535932] [ 179.536192] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.536882] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.537414] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.538165] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.539011] Call Trace: [ 179.539269] [ 179.539502] __schedule+0x893/0x2470 [ 179.540002] ? io_schedule_timeout+0x150/0x150 [ 179.540484] ? do_raw_spin_lock+0x121/0x260 [ 179.540952] ? rwlock_bug.part.0+0x90/0x90 [ 179.541426] schedule+0xda/0x1b0 [ 179.541806] rescuer_thread+0x851/0xdb0 [ 179.542219] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.542722] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.543289] ? lockdep_hardirqs_on+0x79/0x100 [ 179.543834] ? worker_thread+0x1260/0x1260 [ 179.544284] kthread+0x2ed/0x3a0 [ 179.544622] ? kthread_complete_and_exit+0x40/0x40 [ 179.545127] ret_from_fork+0x22/0x30 [ 179.545515] [ 179.545778] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.546393] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.546917] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.547690] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.548592] Call Trace: [ 179.548902] [ 179.549151] __schedule+0x893/0x2470 [ 179.549575] ? io_schedule_timeout+0x150/0x150 [ 179.550099] ? mark_held_locks+0x9e/0xe0 [ 179.550542] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.551068] schedule+0xda/0x1b0 [ 179.551397] rcu_tasks_one_gp+0x3db/0xc10 [ 179.551880] rcu_tasks_kthread+0x80/0xa0 [ 179.552284] ? rcu_tasks_postscan+0x10/0x10 [ 179.552780] kthread+0x2ed/0x3a0 [ 179.553145] ? kthread_complete_and_exit+0x40/0x40 [ 179.553662] ret_from_fork+0x22/0x30 [ 179.554117] [ 179.554379] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.555078] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.555605] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.556396] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 179.557265] Workqueue: 0x0 (kblockd) [ 179.557668] Call Trace: [ 179.557980] [ 179.558237] __schedule+0x893/0x2470 [ 179.558654] ? io_schedule_timeout+0x150/0x150 [ 179.559205] schedule+0xda/0x1b0 [ 179.559586] worker_thread+0x15f/0x1260 [ 179.560125] ? process_one_work+0x16a0/0x16a0 [ 179.560608] kthread+0x2ed/0x3a0 [ 179.561019] ? kthread_complete_and_exit+0x40/0x40 [ 179.561548] ret_from_fork+0x22/0x30 [ 179.562014] [ 179.562282] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.563019] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.563575] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.564380] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.565271] Call Trace: [ 179.565550] [ 179.565824] __schedule+0x893/0x2470 [ 179.566233] ? io_schedule_timeout+0x150/0x150 [ 179.566710] ? do_raw_spin_lock+0x121/0x260 [ 179.567220] ? rwlock_bug.part.0+0x90/0x90 [ 179.567690] schedule+0xda/0x1b0 [ 179.568152] rescuer_thread+0x851/0xdb0 [ 179.568591] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.569158] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.569680] ? lockdep_hardirqs_on+0x79/0x100 [ 179.570185] ? worker_thread+0x1260/0x1260 [ 179.570643] kthread+0x2ed/0x3a0 [ 179.571038] ? kthread_complete_and_exit+0x40/0x40 [ 179.571566] ret_from_fork+0x22/0x30 [ 179.572057] [ 179.572441] INFO: task kblockd:31 blocked for more than 143 seconds. [ 179.573207] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.573872] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.574639] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 179.575536] Call Trace: [ 179.575867] [ 179.576118] __schedule+0x893/0x2470 [ 179.576541] ? io_schedule_timeout+0x150/0x150 [ 179.577082] ? do_raw_spin_lock+0x121/0x260 [ 179.577585] ? rwlock_bug.part.0+0x90/0x90 [ 179.578064] schedule+0xda/0x1b0 [ 179.578445] rescuer_thread+0x851/0xdb0 [ 179.578904] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.579482] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.580081] ? lockdep_hardirqs_on+0x79/0x100 [ 179.580536] ? worker_thread+0x1260/0x1260 [ 179.580984] kthread+0x2ed/0x3a0 [ 179.581342] ? kthread_complete_and_exit+0x40/0x40 [ 179.581878] ret_from_fork+0x22/0x30 [ 179.582281] [ 179.980847] [ 179.980847] Showing all locks held in the system: [ 179.981626] 1 lock held by rcu_tasks_kthre/11: [ 179.982102] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.985079] 1 lock held by khungtaskd/25: [ 179.985532] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.986476] 2 locks held by kworker/u4:1/26: [ 179.987086] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.988396] #1: ffff888009037db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.989488] 2 locks held by kworker/u4:2/33: [ 179.991150] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.992265] #1: ffff8880092dfdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.993336] 2 locks held by kworker/u4:3/47: [ 179.996179] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.997238] #1: ffff88800f90fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.999014] 1 lock held by kmemleak/55: [ 179.999417] 1 lock held by in:imklog/192: [ 179.999876] 2 locks held by kworker/u4:4/326: [ 180.000327] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 180.001391] #1: ffff88801db97db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 180.002479] 2 locks held by kworker/u4:7/339: [ 180.002951] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 180.004712] #1: ffff88801849fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 180.005846] 2 locks held by kworker/u4:8/341: [ 180.006285] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 180.009610] #1: ffff888017c87db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 180.010693] 2 locks held by kworker/u4:9/363: [ 180.011179] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 180.013011] #1: ffff88801b9dfdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 180.014140] 2 locks held by kworker/u4:10/482: [ 180.014602] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 180.015672] #1: ffff888020627db0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 180.016799] 1 lock held by syz-executor.6/3158: [ 180.017266] 1 lock held by syz-executor.2/3159: [ 180.017730] 1 lock held by syz-executor.4/3160: [ 180.019039] 1 lock held by syz-executor.0/3161: [ 180.019495] 1 lock held by syz-executor.7/3162: [ 180.019990] 1 lock held by syz-executor.5/3163: [ 180.020454] 1 lock held by syz-executor.1/3165: [ 180.020973] 1 lock held by modprobe/6478: [ 180.022038] 3 locks held by modprobe/6479: [ 180.022457] 1 lock held by modprobe/6480: [ 180.022898] 1 lock held by modprobe/6481: [ 180.023320] 1 lock held by modprobe/6482: [ 180.023723] 1 lock held by modprobe/6483: [ 180.024164] [ 180.024349] ============================================= [ 180.024349] [ 183.653914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.656180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.658338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.662834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.664915] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.666362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.670329] Bluetooth: hci1: HCI_REQ-0x0c1a [ 183.772496] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.795712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.795811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.805430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.805587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.810638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.813818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.819568] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.876483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.888895] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.891576] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 183.894353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.899578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.909126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.911578] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 183.914073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.915143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.918647] Bluetooth: hci3: HCI_REQ-0x0c1a [ 183.918834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.931854] Bluetooth: hci5: HCI_REQ-0x0c1a [ 183.939850] Bluetooth: hci7: HCI_REQ-0x0c1a 02:15:57 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 02:15:57 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 02:15:57 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 02:15:58 executing program 3: keyctl$revoke(0x1d, 0x0) 02:15:58 executing program 3: keyctl$revoke(0x1d, 0x0) 02:15:58 executing program 3: keyctl$revoke(0x1d, 0x0) 02:15:58 executing program 3: keyctl$revoke(0x1d, 0x0) 02:15:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x3b8}], 0x1) [ 185.200063] audit: type=1400 audit(1664590558.356:7): avc: denied { open } for pid=6655 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 185.208158] audit: type=1400 audit(1664590558.357:8): avc: denied { kernel } for pid=6655 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 185.216197] ------------[ cut here ]------------ [ 185.216226] [ 185.216231] ====================================================== [ 185.216236] WARNING: possible circular locking dependency detected [ 185.216241] 6.0.0-rc7-next-20220930 #1 Not tainted [ 185.216250] ------------------------------------------------------ [ 185.216255] syz-executor.3/6656 is trying to acquire lock: [ 185.216264] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 185.216313] [ 185.216313] but task is already holding lock: [ 185.216317] ffff88800ff8a020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 185.216355] [ 185.216355] which lock already depends on the new lock. [ 185.216355] [ 185.216360] [ 185.216360] the existing dependency chain (in reverse order) is: [ 185.216364] [ 185.216364] -> #3 (&ctx->lock){....}-{2:2}: [ 185.216385] _raw_spin_lock+0x2a/0x40 [ 185.216402] __perf_event_task_sched_out+0x53b/0x18d0 [ 185.216419] __schedule+0xedd/0x2470 [ 185.216439] schedule+0xda/0x1b0 [ 185.216460] exit_to_user_mode_prepare+0x114/0x1a0 [ 185.216477] syscall_exit_to_user_mode+0x19/0x40 [ 185.216496] do_syscall_64+0x48/0x90 [ 185.216522] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 185.216542] [ 185.216542] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 185.216564] _raw_spin_lock_nested+0x30/0x40 [ 185.216580] raw_spin_rq_lock_nested+0x1e/0x30 [ 185.216599] task_fork_fair+0x63/0x4d0 [ 185.216625] sched_cgroup_fork+0x3d0/0x540 [ 185.216647] copy_process+0x4183/0x6e20 [ 185.216662] kernel_clone+0xe7/0x890 [ 185.216677] user_mode_thread+0xad/0xf0 [ 185.216694] rest_init+0x24/0x250 [ 185.216712] arch_call_rest_init+0xf/0x14 [ 185.216737] start_kernel+0x4c6/0x4eb [ 185.216761] secondary_startup_64_no_verify+0xe0/0xeb [ 185.216781] [ 185.216781] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 185.216803] _raw_spin_lock_irqsave+0x39/0x60 [ 185.216820] try_to_wake_up+0xab/0x1930 [ 185.216840] up+0x75/0xb0 [ 185.216862] __up_console_sem+0x6e/0x80 [ 185.216886] console_unlock+0x46a/0x590 [ 185.216910] vprintk_emit+0x1bd/0x560 [ 185.216935] vprintk+0x84/0xa0 [ 185.216959] _printk+0xba/0xf1 [ 185.216977] kauditd_hold_skb.cold+0x3f/0x4e [ 185.217001] kauditd_send_queue+0x233/0x290 [ 185.217027] kauditd_thread+0x5f9/0x9c0 [ 185.217047] kthread+0x2ed/0x3a0 [ 185.217069] ret_from_fork+0x22/0x30 [ 185.217086] [ 185.217086] -> #0 ((console_sem).lock){....}-{2:2}: [ 185.217109] __lock_acquire+0x2a02/0x5e70 [ 185.217131] lock_acquire+0x1a2/0x530 [ 185.217155] _raw_spin_lock_irqsave+0x39/0x60 [ 185.217172] down_trylock+0xe/0x70 [ 185.217195] __down_trylock_console_sem+0x3b/0xd0 [ 185.217220] vprintk_emit+0x16b/0x560 [ 185.217244] vprintk+0x84/0xa0 [ 185.217269] _printk+0xba/0xf1 [ 185.217284] report_bug.cold+0x72/0xab [ 185.217307] handle_bug+0x3c/0x70 [ 185.217332] exc_invalid_op+0x14/0x50 [ 185.217359] asm_exc_invalid_op+0x16/0x20 [ 185.217377] group_sched_out.part.0+0x2c7/0x460 [ 185.217404] ctx_sched_out+0x8f1/0xc10 [ 185.217429] __perf_event_task_sched_out+0x6d0/0x18d0 [ 185.217446] __schedule+0xedd/0x2470 [ 185.217467] schedule+0xda/0x1b0 [ 185.217487] exit_to_user_mode_prepare+0x114/0x1a0 [ 185.217504] syscall_exit_to_user_mode+0x19/0x40 [ 185.217524] do_syscall_64+0x48/0x90 [ 185.217548] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 185.217568] [ 185.217568] other info that might help us debug this: [ 185.217568] [ 185.217572] Chain exists of: [ 185.217572] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 185.217572] [ 185.217595] Possible unsafe locking scenario: [ 185.217595] [ 185.217599] CPU0 CPU1 [ 185.217602] ---- ---- [ 185.217605] lock(&ctx->lock); [ 185.217613] lock(&rq->__lock); [ 185.217623] lock(&ctx->lock); [ 185.217632] lock((console_sem).lock); [ 185.217641] [ 185.217641] *** DEADLOCK *** [ 185.217641] [ 185.217644] 2 locks held by syz-executor.3/6656: [ 185.217654] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 185.217700] #1: ffff88800ff8a020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 185.217740] [ 185.217740] stack backtrace: [ 185.217744] CPU: 1 PID: 6656 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.217763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 185.217774] Call Trace: [ 185.217779] [ 185.217786] dump_stack_lvl+0x8b/0xb3 [ 185.217814] check_noncircular+0x263/0x2e0 [ 185.217840] ? format_decode+0x26c/0xb50 [ 185.217864] ? print_circular_bug+0x450/0x450 [ 185.217890] ? simple_strtoul+0x30/0x30 [ 185.217916] ? __lockdep_reset_lock+0x180/0x180 [ 185.217941] ? format_decode+0x26c/0xb50 [ 185.217967] ? memcpy+0x39/0x60 [ 185.217993] ? vsnprintf+0x4ba/0x1600 [ 185.218021] __lock_acquire+0x2a02/0x5e70 [ 185.218055] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 185.218090] lock_acquire+0x1a2/0x530 [ 185.218116] ? down_trylock+0xe/0x70 [ 185.218143] ? lock_release+0x750/0x750 [ 185.218170] ? find_held_lock+0x2c/0x110 [ 185.218194] ? vprintk+0x84/0xa0 [ 185.218222] _raw_spin_lock_irqsave+0x39/0x60 [ 185.218240] ? down_trylock+0xe/0x70 [ 185.218264] down_trylock+0xe/0x70 [ 185.218286] ? vprintk+0x84/0xa0 [ 185.218310] __down_trylock_console_sem+0x3b/0xd0 [ 185.218336] vprintk_emit+0x16b/0x560 [ 185.218366] vprintk+0x84/0xa0 [ 185.218392] _printk+0xba/0xf1 [ 185.218410] ? record_print_text.cold+0x16/0x16 [ 185.218431] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 185.218451] ? lock_downgrade+0x6d0/0x6d0 [ 185.218476] ? report_bug.cold+0x66/0xab [ 185.218501] ? group_sched_out.part.0+0x2c7/0x460 [ 185.218525] report_bug.cold+0x72/0xab [ 185.218554] handle_bug+0x3c/0x70 [ 185.218579] exc_invalid_op+0x14/0x50 [ 185.218605] asm_exc_invalid_op+0x16/0x20 [ 185.218623] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 185.218653] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 185.218670] RSP: 0018:ffff88803786fc48 EFLAGS: 00010006 [ 185.218684] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 185.218695] RDX: ffff8880206e9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 185.218707] RBP: ffff888037bf8000 R08: 0000000000000005 R09: 0000000000000001 [ 185.218719] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ff8a000 [ 185.218730] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 185.218746] ? group_sched_out.part.0+0x2c7/0x460 [ 185.218776] ? group_sched_out.part.0+0x2c7/0x460 [ 185.218807] ctx_sched_out+0x8f1/0xc10 [ 185.218838] __perf_event_task_sched_out+0x6d0/0x18d0 [ 185.218860] ? lock_is_held_type+0xd7/0x130 [ 185.218881] ? __perf_cgroup_move+0x160/0x160 [ 185.218897] ? set_next_entity+0x304/0x550 [ 185.218925] ? update_curr+0x267/0x740 [ 185.218958] ? lock_is_held_type+0xd7/0x130 [ 185.218982] __schedule+0xedd/0x2470 [ 185.219009] ? io_schedule_timeout+0x150/0x150 [ 185.219039] schedule+0xda/0x1b0 [ 185.219061] exit_to_user_mode_prepare+0x114/0x1a0 [ 185.219080] syscall_exit_to_user_mode+0x19/0x40 [ 185.219101] do_syscall_64+0x48/0x90 [ 185.219129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 185.219148] RIP: 0033:0x7f428343fb19 [ 185.219162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.219179] RSP: 002b:00007f42809b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 185.219196] RAX: 0000000000000003 RBX: 00007f4283552f60 RCX: 00007f428343fb19 [ 185.219208] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 185.219219] RBP: 00007f4283499f6d R08: 0000000000000000 R09: 0000000000000000 [ 185.219231] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 185.219242] R13: 00007ffebf3c52cf R14: 00007f42809b5300 R15: 0000000000022000 [ 185.219259] [ 185.235964] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 185.236588] WARNING: CPU: 1 PID: 6656 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 185.419395] Modules linked in: [ 185.419703] CPU: 1 PID: 6656 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.420512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 185.421508] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 185.422063] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 185.423876] RSP: 0018:ffff88803786fc48 EFLAGS: 00010006 [ 185.424457] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 185.425225] RDX: ffff8880206e9ac0 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 185.425950] RBP: ffff888037bf8000 R08: 0000000000000005 R09: 0000000000000001 [ 185.426668] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ff8a000 [ 185.427396] R13: ffff88806cf3d2c0 R14: ffffffff8547c960 R15: 0000000000000002 [ 185.428159] FS: 00007f42809b5700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 185.428965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.429582] CR2: 00007f4283553018 CR3: 000000003781c000 CR4: 0000000000350ee0 [ 185.430338] Call Trace: [ 185.430606] [ 185.430838] ctx_sched_out+0x8f1/0xc10 [ 185.431258] __perf_event_task_sched_out+0x6d0/0x18d0 [ 185.431775] ? lock_is_held_type+0xd7/0x130 [ 185.432225] ? __perf_cgroup_move+0x160/0x160 [ 185.432714] ? set_next_entity+0x304/0x550 [ 185.433197] ? update_curr+0x267/0x740 [ 185.433619] ? lock_is_held_type+0xd7/0x130 [ 185.434104] __schedule+0xedd/0x2470 [ 185.434526] ? io_schedule_timeout+0x150/0x150 [ 185.435049] schedule+0xda/0x1b0 [ 185.435433] exit_to_user_mode_prepare+0x114/0x1a0 [ 185.435987] syscall_exit_to_user_mode+0x19/0x40 [ 185.436501] do_syscall_64+0x48/0x90 [ 185.436903] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 185.437463] RIP: 0033:0x7f428343fb19 [ 185.437864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.439643] RSP: 002b:00007f42809b5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 185.440388] RAX: 0000000000000003 RBX: 00007f4283552f60 RCX: 00007f428343fb19 [ 185.441018] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 185.441732] RBP: 00007f4283499f6d R08: 0000000000000000 R09: 0000000000000000 [ 185.442597] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 185.443345] R13: 00007ffebf3c52cf R14: 00007f42809b5300 R15: 0000000000022000 [ 185.444127] [ 185.444373] irq event stamp: 562 [ 185.444851] hardirqs last enabled at (561): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 185.445835] hardirqs last disabled at (562): [] __schedule+0x1225/0x2470 [ 185.446646] softirqs last enabled at (170): [] __irq_exit_rcu+0x11b/0x180 [ 185.447527] softirqs last disabled at (165): [] __irq_exit_rcu+0x11b/0x180 [ 185.448418] ---[ end trace 0000000000000000 ]--- [ 185.679801] Bluetooth: hci1: command 0x0409 tx timeout [ 185.807843] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 185.809064] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 185.935826] Bluetooth: hci3: command 0x0409 tx timeout [ 186.000800] Bluetooth: hci7: command 0x0409 tx timeout [ 186.002275] Bluetooth: hci5: command 0x0409 tx timeout [ 187.727797] Bluetooth: hci1: command 0x041b tx timeout [ 187.983942] Bluetooth: hci3: command 0x041b tx timeout [ 188.048033] Bluetooth: hci5: command 0x041b tx timeout [ 188.048059] Bluetooth: hci7: command 0x041b tx timeout VM DIAGNOSIS: 02:15:52 Registers: info registers vcpu 0 RAX=0000000000000003 RBX=0000000000000001 RCX=1ffffffff0e0c0d8 RDX=0000000000000004 RSI=ffff8880103ff8e8 RDI=0000000000000001 RBP=ffff8880103f8000 RSP=ffff8880103ff4f0 R8 =ffffffff85ee0570 R9 =ffffffff85ee0574 R10=ffffed100207febd R11=ffff8880103ff5c0 R12=ffff8880103ff5c1 R13=ffff8880103ff5e0 R14=ffff8880103ff580 R15=0000000000000005 RIP=ffffffff81203615 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f08d5870260 CR3=000000003da30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000018 RCX=ffffffff812bf1ee RDX=ffff888008901ac0 RSI=0000000000000000 RDI=0000000000000006 RBP=0000000000000018 RSP=ffff88800902f8d8 R8 =0000000000000006 R9 =0000000000000018 R10=0000000000000018 R11=0000000000000001 R12=ffffffff8701fbe0 R13=000000000000000f R14=0000000000000400 R15=0000000000000028 RIP=ffffffff814607cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055baf7cb04c8 CR3=000000003db5c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000