Warning: Permanently added '[localhost]:63397' (ECDSA) to the list of known hosts. [ 65.497450][ T39] audit: type=1400 audit(1660120541.657:75): avc: denied { execute } for pid=3670 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 65.515038][ T39] audit: type=1400 audit(1660120541.667:76): avc: denied { execute_no_trans } for pid=3670 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/08/10 08:35:41 fuzzer started 2022/08/10 08:35:42 connecting to host at localhost:46559 2022/08/10 08:35:42 checking machine... 2022/08/10 08:35:42 checking revisions... [ 66.351097][ T39] audit: type=1400 audit(1660120542.517:77): avc: denied { getattr } for pid=3670 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2022/08/10 08:35:42 testing simple program... [ 66.370018][ T39] audit: type=1400 audit(1660120542.517:78): avc: denied { read } for pid=3670 comm="syz-fuzzer" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.397864][ T39] audit: type=1400 audit(1660120542.517:79): avc: denied { open } for pid=3670 comm="syz-fuzzer" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.406218][ T3685] cgroup: Unknown subsys name 'net' [ 66.422992][ T39] audit: type=1400 audit(1660120542.537:80): avc: denied { read } for pid=3670 comm="syz-fuzzer" name="raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.450729][ T39] audit: type=1400 audit(1660120542.537:81): avc: denied { open } for pid=3670 comm="syz-fuzzer" path="/dev/raw-gadget" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.470482][ T39] audit: type=1400 audit(1660120542.537:82): avc: denied { read } for pid=3670 comm="syz-fuzzer" name="vhci" dev="devtmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.655753][ T3685] cgroup: Unknown subsys name 'rlimit' [ 68.149163][ T3693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.156833][ T3693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.166848][ T3693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.173819][ T3693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.183581][ T3693] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.191109][ T3693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.372322][ T3687] chnl_net:caif_netlink_parms(): no params data found [ 68.489117][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.495456][ T3687] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.503643][ T3687] device bridge_slave_0 entered promiscuous mode [ 68.515021][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.521386][ T3687] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.528381][ T3687] device bridge_slave_1 entered promiscuous mode [ 68.586673][ T3687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.599793][ T3687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.663532][ T3687] team0: Port device team_slave_0 added [ 68.676184][ T3687] team0: Port device team_slave_1 added [ 68.730346][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.742830][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.779762][ T3687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.803677][ T3687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.809210][ T3687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.842291][ T3687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.900070][ T3687] device hsr_slave_0 entered promiscuous mode [ 68.906165][ T3687] device hsr_slave_1 entered promiscuous mode [ 69.101875][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 69.101886][ T39] audit: type=1400 audit(1660120545.267:95): avc: denied { create } for pid=3687 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.107527][ T3687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.124140][ T39] audit: type=1400 audit(1660120545.267:96): avc: denied { write } for pid=3687 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 executing program [ 69.147172][ T39] audit: type=1400 audit(1660120545.267:97): avc: denied { read } for pid=3687 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.155213][ T3687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.179163][ T3687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.191638][ T3687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.230581][ T3687] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.236153][ T3687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.243051][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.249894][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.319450][ T3687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.335330][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.345916][ T2678] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.356555][ T2678] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.369465][ T2678] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.386341][ T3687] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.399021][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.406846][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.414155][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.420067][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.451432][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.459698][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.467258][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.473408][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.480402][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.487584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.494693][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.502311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.509425][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.517510][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.524587][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.531296][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.540984][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.560877][ T3687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.571336][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.580166][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.588065][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.612973][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.621247][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.638686][ T3687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.652393][ T39] audit: type=1400 audit(1660120545.817:98): avc: denied { module_request } for pid=3687 comm="syz-executor.0" kmod="netdev-xfrm0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.682473][ T39] audit: type=1400 audit(1660120545.847:99): avc: denied { sys_module } for pid=3687 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.838564][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.846439][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.868845][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.877166][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.886492][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.893263][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.903612][ T3687] device veth0_vlan entered promiscuous mode [ 69.920762][ T3687] device veth1_vlan entered promiscuous mode [ 69.951394][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.958683][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.965354][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.974071][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.987326][ T3687] device veth0_macvtap entered promiscuous mode [ 69.996813][ T3687] device veth1_macvtap entered promiscuous mode [ 70.025690][ T3687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.035937][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.047942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.054715][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.062893][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.080395][ T3687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.088363][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.095382][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.107960][ T3687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.115344][ T3687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.126031][ T3687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.136723][ T3687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.230176][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.236883][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.246380][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.270464][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.280437][ T3706] Bluetooth: hci0: command 0x0409 tx timeout [ 70.282173][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.294776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.305652][ T39] audit: type=1400 audit(1660120546.467:100): avc: denied { mounton } for pid=3687 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.326224][ T39] audit: type=1400 audit(1660120546.467:101): avc: denied { mount } for pid=3687 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.392945][ T39] audit: type=1400 audit(1660120546.557:102): avc: denied { read write } for pid=3687 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.413190][ T39] audit: type=1400 audit(1660120546.557:103): avc: denied { open } for pid=3687 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 2022/08/10 08:35:46 building call list... [ 70.441745][ T39] audit: type=1400 audit(1660120546.557:104): avc: denied { ioctl } for pid=3687 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.549354][ T3687] ------------[ cut here ]------------ [ 70.554317][ T3687] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: 0x0 [ 70.563467][ T3687] WARNING: CPU: 3 PID: 3687 at lib/debugobjects.c:502 debug_print_object+0x16e/0x250 [ 70.571065][ T3687] Modules linked in: [ 70.574767][ T3687] CPU: 3 PID: 3687 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-13322-gd4252071b97d #0 [ 70.587112][ T3687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 70.597135][ T3687] RIP: 0010:debug_print_object+0x16e/0x250 [ 70.603246][ T3687] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd e0 da 48 8a 4c 89 ee 48 c7 c7 80 ce 48 8a e8 53 72 38 05 <0f> 0b 83 05 e5 93 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 70.619158][ T3687] RSP: 0018:ffffc90002d876e0 EFLAGS: 00010086 [ 70.624098][ T3687] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 70.629902][ T3687] RDX: ffff88801e972180 RSI: ffffffff81611638 RDI: fffff520005b0ece [ 70.635846][ T3687] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 70.642045][ T3687] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeeb60 [ 70.648823][ T3687] R13: ffffffff8a48d540 R14: ffffffff816a47f0 R15: 1ffff920005b0ee7 [ 70.656270][ T3687] FS: 0000000000000000(0000) GS:ffff88802cb00000(0000) knlGS:0000000000000000 [ 70.663571][ T3687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.668508][ T3687] CR2: 000000c000687e80 CR3: 0000000023760000 CR4: 0000000000150ee0 [ 70.675537][ T3687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.683177][ T3687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.688807][ T3687] Call Trace: [ 70.691700][ T3687] [ 70.693332][ T3687] ? do_raw_spin_unlock+0x171/0x230 [ 70.697857][ T3687] debug_object_assert_init+0x1f4/0x2e0 [ 70.701547][ T3687] ? debug_object_init_on_stack+0x20/0x20 [ 70.706647][ T3687] ? lock_downgrade+0x6e0/0x6e0 [ 70.711403][ T3687] ? mark_held_locks+0x9f/0xe0 [ 70.715500][ T3687] ? kfree+0x25b/0x390 [ 70.720220][ T3687] del_timer+0x6d/0x110 [ 70.723935][ T3687] ? detach_if_pending+0x480/0x480 [ 70.728641][ T3687] ? try_to_grab_pending+0xbd/0xd0 [ 70.734181][ T3687] ? lockdep_hardirqs_off+0x90/0xd0 [ 70.739911][ T3687] try_to_grab_pending+0x6d/0xd0 [ 70.744120][ T3687] __cancel_work_timer+0xa6/0x570 [ 70.747899][ T3687] ? cancel_delayed_work+0x20/0x20 [ 70.753498][ T3687] ? mgmt_send_event_skb+0x2fe/0x470 [ 70.759645][ T3687] ? mgmt_send_event+0x13c/0x180 [ 70.765065][ T3687] mgmt_index_removed+0x187/0x2e0 [ 70.771119][ T3687] ? mgmt_index_added+0x290/0x290 [ 70.775837][ T3687] ? lockdep_hardirqs_on+0x79/0x100 [ 70.779645][ T3687] hci_unregister_dev+0x34f/0x4e0 [ 70.784205][ T3687] vhci_release+0x7c/0xf0 [ 70.787219][ T3687] __fput+0x277/0x9d0 [ 70.790882][ T3687] ? vhci_close_dev+0x50/0x50 [ 70.794029][ T3687] task_work_run+0xdd/0x1a0 [ 70.797804][ T3687] do_exit+0xad5/0x29b0 [ 70.800732][ T3687] ? find_held_lock+0x2d/0x110 [ 70.804639][ T3687] ? mm_update_next_owner+0x7a0/0x7a0 [ 70.808432][ T3687] ? lock_downgrade+0x6e0/0x6e0 [ 70.812603][ T3687] do_group_exit+0xd2/0x2f0 [ 70.815645][ T3687] get_signal+0x238c/0x2610 [ 70.819474][ T3687] ? do_raw_spin_unlock+0x171/0x230 [ 70.823006][ T3687] ? exit_signals+0x8b0/0x8b0 [ 70.827279][ T3687] ? debug_check_no_obj_freed+0x20c/0x420 [ 70.830900][ T3687] arch_do_signal_or_restart+0x82/0x2300 [ 70.835402][ T3687] ? putname+0xfe/0x140 [ 70.838880][ T3687] ? get_sigframe_size+0x10/0x10 [ 70.842482][ T3687] ? __ia32_sys_rmdir+0x110/0x110 [ 70.846450][ T3687] ? exit_to_user_mode_prepare+0x137/0x250 [ 70.850678][ T3687] exit_to_user_mode_prepare+0x15f/0x250 [ 70.854991][ T3687] syscall_exit_to_user_mode+0x19/0x50 [ 70.858946][ T3687] do_syscall_64+0x42/0xb0 [ 70.862778][ T3687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 70.866752][ T3687] RIP: 0033:0x7f71da088bb7 [ 70.870705][ T3687] Code: Unable to access opcode bytes at RIP 0x7f71da088b8d. [ 70.875953][ T3687] RSP: 002b:00007ffc8dd70c48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 70.882275][ T3687] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f71da088bb7 [ 70.888323][ T3687] RDX: 00007ffc8dd70c80 RSI: 00007ffc8dd70c80 RDI: 00007ffc8dd70d10 [ 70.894374][ T3687] RBP: 00007ffc8dd70d10 R08: 0000000000000001 R09: 00007ffc8dd70ae0 [ 70.900732][ T3687] R10: 0000555556fb5853 R11: 0000000000000206 R12: 00007f71da0e22ce [ 70.906979][ T3687] R13: 00007ffc8dd71dd0 R14: 0000555556fb5810 R15: 00007ffc8dd71e10 [ 70.913205][ T3687] [ 70.915177][ T3687] Kernel panic - not syncing: panic_on_warn set ... [ 70.920753][ T3687] CPU: 3 PID: 3687 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-13322-gd4252071b97d #0 [ 70.928368][ T3687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 70.935030][ T3687] Call Trace: [ 70.937252][ T3687] [ 70.939409][ T3687] dump_stack_lvl+0xcd/0x134 [ 70.943668][ T3687] panic+0x2c8/0x627 [ 70.946174][ T3687] ? panic_print_sys_info.part.0+0x10b/0x10b [ 70.951252][ T3687] ? __warn.cold+0x248/0x2c4 [ 70.953939][ T3687] ? debug_print_object+0x16e/0x250 [ 70.958257][ T3687] __warn.cold+0x259/0x2c4 [ 70.960999][ T3687] ? __wake_up_klogd.part.0+0x99/0xf0 [ 70.965861][ T3687] ? debug_print_object+0x16e/0x250 [ 70.969729][ T3687] report_bug+0x1bc/0x210 [ 70.973078][ T3687] handle_bug+0x3c/0x60 [ 70.976038][ T3687] exc_invalid_op+0x14/0x40 [ 70.979819][ T3687] asm_exc_invalid_op+0x16/0x20 [ 70.983170][ T3687] RIP: 0010:debug_print_object+0x16e/0x250 [ 70.989600][ T3687] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 af 00 00 00 48 8b 14 dd e0 da 48 8a 4c 89 ee 48 c7 c7 80 ce 48 8a e8 53 72 38 05 <0f> 0b 83 05 e5 93 dd 09 01 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e c3 [ 71.006095][ T3687] RSP: 0018:ffffc90002d876e0 EFLAGS: 00010086 [ 71.010296][ T3687] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 71.016641][ T3687] RDX: ffff88801e972180 RSI: ffffffff81611638 RDI: fffff520005b0ece [ 71.022401][ T3687] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 71.028440][ T3687] R10: 0000000080000000 R11: 0000000000000000 R12: ffffffff89eeeb60 [ 71.034216][ T3687] R13: ffffffff8a48d540 R14: ffffffff816a47f0 R15: 1ffff920005b0ee7 [ 71.040234][ T3687] ? calc_wheel_index+0x3d0/0x3d0 [ 71.044438][ T3687] ? vprintk+0x88/0x90 [ 71.047255][ T3687] ? do_raw_spin_unlock+0x171/0x230 [ 71.051277][ T3687] debug_object_assert_init+0x1f4/0x2e0 [ 71.054902][ T3687] ? debug_object_init_on_stack+0x20/0x20 [ 71.059232][ T3687] ? lock_downgrade+0x6e0/0x6e0 [ 71.062297][ T3687] ? mark_held_locks+0x9f/0xe0 [ 71.066167][ T3687] ? kfree+0x25b/0x390 [ 71.069069][ T3687] del_timer+0x6d/0x110 [ 71.071885][ T3687] ? detach_if_pending+0x480/0x480 [ 71.076089][ T3687] ? try_to_grab_pending+0xbd/0xd0 [ 71.079014][ T3687] ? lockdep_hardirqs_off+0x90/0xd0 [ 71.083674][ T3687] try_to_grab_pending+0x6d/0xd0 [ 71.086722][ T3687] __cancel_work_timer+0xa6/0x570 [ 71.091068][ T3687] ? cancel_delayed_work+0x20/0x20 [ 71.094160][ T3687] ? mgmt_send_event_skb+0x2fe/0x470 [ 71.098763][ T3687] ? mgmt_send_event+0x13c/0x180 [ 71.101832][ T3687] mgmt_index_removed+0x187/0x2e0 [ 71.106303][ T3687] ? mgmt_index_added+0x290/0x290 [ 71.109494][ T3687] ? lockdep_hardirqs_on+0x79/0x100 [ 71.113958][ T3687] hci_unregister_dev+0x34f/0x4e0 [ 71.117533][ T3687] vhci_release+0x7c/0xf0 [ 71.121136][ T3687] __fput+0x277/0x9d0 [ 71.123964][ T3687] ? vhci_close_dev+0x50/0x50 [ 71.128048][ T3687] task_work_run+0xdd/0x1a0 [ 71.131313][ T3687] do_exit+0xad5/0x29b0 [ 71.134997][ T3687] ? find_held_lock+0x2d/0x110 [ 71.138416][ T3687] ? mm_update_next_owner+0x7a0/0x7a0 [ 71.142864][ T3687] ? lock_downgrade+0x6e0/0x6e0 [ 71.146709][ T3687] do_group_exit+0xd2/0x2f0 [ 71.150103][ T3687] get_signal+0x238c/0x2610 [ 71.153806][ T3687] ? do_raw_spin_unlock+0x171/0x230 [ 71.157457][ T3687] ? exit_signals+0x8b0/0x8b0 [ 71.161280][ T3687] ? debug_check_no_obj_freed+0x20c/0x420 [ 71.165181][ T3687] arch_do_signal_or_restart+0x82/0x2300 [ 71.169893][ T3687] ? putname+0xfe/0x140 [ 71.172699][ T3687] ? get_sigframe_size+0x10/0x10 [ 71.177000][ T3687] ? __ia32_sys_rmdir+0x110/0x110 [ 71.180919][ T3687] ? exit_to_user_mode_prepare+0x137/0x250 [ 71.185313][ T3687] exit_to_user_mode_prepare+0x15f/0x250 [ 71.190114][ T3687] syscall_exit_to_user_mode+0x19/0x50 [ 71.193568][ T3687] do_syscall_64+0x42/0xb0 [ 71.197506][ T3687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 71.201525][ T3687] RIP: 0033:0x7f71da088bb7 [ 71.205320][ T3687] Code: Unable to access opcode bytes at RIP 0x7f71da088b8d. [ 71.210145][ T3687] RSP: 002b:00007ffc8dd70c48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 71.216412][ T3687] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f71da088bb7 [ 71.224110][ T3687] RDX: 00007ffc8dd70c80 RSI: 00007ffc8dd70c80 RDI: 00007ffc8dd70d10 [ 71.232126][ T3687] RBP: 00007ffc8dd70d10 R08: 0000000000000001 R09: 00007ffc8dd70ae0 [ 71.239780][ T3687] R10: 0000555556fb5853 R11: 0000000000000206 R12: 00007f71da0e22ce [ 71.247329][ T3687] R13: 00007ffc8dd71dd0 R14: 0000555556fb5810 R15: 00007ffc8dd71e10 [ 71.254784][ T3687] [ 71.259874][ T3687] Kernel Offset: disabled [ 71.263122][ T3687] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:35:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802cb3f7a0 RCX=0000000000000000 RDX=ffff888012522180 RSI=ffffffff81707ce1 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000063f948 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005967ef5 R13=0000000000000003 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff81707ce3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056316130a608 CR3=000000000bc8e000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=eb00809fb06bd3a0684c3342fea188ac XMM01=00000000000000000000000000000000 XMM02=0000000000000000414fffffe0000000 XMM03=32322035312e322e302e303120303431 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff920005c6fb9 RCX=ffffffff815ea088 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff8ddda4d0 RBP=0000000000000001 RSP=ffffc90002e37d98 R8 =0000000000000000 R9 =ffffffff8ddda4d7 R10=fffffbfff1bbb49a R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff88801c0e27c0 R15=0000000000000000 RIP=ffffffff816574f1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c00047e090 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c0007d7000 CR3=0000000023760000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000c000427bc8000000c000427bc0 XMM02=000000c000427bc0000000c000427bb8 XMM03=000000c000427bd0000000c000427bc8 XMM04=000000c000427ba8000000c000427ba0 XMM05=000000c000427bb8000000c000427bb0 XMM06=000000c000427bc8000000c000427bc0 XMM07=000000c000427bd8000000c000427bd0 XMM08=000000c000426a60000000c000426990 XMM09=000000c000426a88000000c00009d300 XMM10=000000c000426a98000000c000426a90 XMM11=000000c000426b30000000c000426ae0 XMM12=000000c00009d310000000c000426be0 XMM13=000000c000426c08000000c000426c00 XMM14=000000c000426d50000000c00009d400 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=ffff888025dba1c0 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff897daffb RBP=ffffc90002d97bc8 RSP=ffffc90002d97ba0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff897dbaa6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c00002e490 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000910000 CR3=0000000023760000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a6b7361745f656572665f746e657665 XMM01=65645f746e6576655f66726570205420 XMM02=72657020542030643466663931386666 XMM03=70205420303535666639313866666666 XMM04=30303030303030303030303030303030 XMM05=20306138366361313866666666666666 XMM06=6666666666660a7075647274736b2054 XMM07=74736b20542030313936636131386666 XMM08=66666666660a74736e6f635f70756472 XMM09=736b2054203039393663613138666666 XMM10=3866666666666666660a7075646e7274 XMM11=7075646d656d20542030396136636131 XMM12=313866666666666666660a726573755f XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff846045a1 RDI=ffffffff91479080 RBP=ffffffff91479040 RSP=ffffc90002d87080 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000061 R14=ffffffff84604540 R15=0000000000000000 RIP=ffffffff846045cb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c000687e80 CR3=0000000023760000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000c00009dfd0000000c00006c120 XMM01=000000c00009dfe0000000c0000ab370 XMM02=000000c00009dfe0000000c0000ab370 XMM03=000000c00009dff0000000c0000ab380 XMM04=000000c00054b460000000c000426e50 XMM05=000000c000427098000000c000427090 XMM06=000000c0004270b0000000c0004270a0 XMM07=000000c0004270e8000000c0004270e0 XMM08=000000c000427108000000c000427100 XMM09=000000c000427118000000c000427110 XMM10=000000c000427138000000c00009d470 XMM11=000000c000427148000000c000427140 XMM12=000000c000427178000000c000427150 XMM13=000000c0000ab440000000c000308668 XMM14=000000c0000ab448000000c000308678 XMM15=00000000000000000000000000000000