Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program [*** ] A start job is running for dev-ttyS0.device (46s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (47s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (47s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (48s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (48s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (50s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (50s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (51s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (51s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (52s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (52s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (54s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (54s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (55s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (55s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (56s / 1min 30s)[ 64.715066][ T22] audit: type=1400 audit(1625702773.744:8): avc: denied { execmem } for pid=331 comm="syz-executor369" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 executing program executing program executing program executing program executing program executing program [ *** ] A start job is running for dev-ttyS0.device (56s / 1min 30s)[ 64.774584][ T88] Bluetooth: hci0: sending frame failed (-49) [ 64.791257][ T153] Bluetooth: hci1: Frame reassembly failed (-84) [ 64.803049][ T88] Bluetooth: hci2: sending frame failed (-49) executing program executing program [ 64.828826][ T88] Bluetooth: hci3: sending frame failed (-49) [ 64.857700][ T366] Bluetooth: hci4: sending frame failed (-49) [ ***] A start job is running for dev-ttyS0.device (57s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (57s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (58s / 1min 30s)[ 66.793524][ T67] Bluetooth: hci1: command 0x1003 tx timeout [ 66.793601][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 66.799775][ T369] Bluetooth: hci1: sending frame failed (-49) [ 66.805995][ T370] Bluetooth: hci0: sending frame failed (-49) [ **] A start job is running for dev-ttyS0.device (58s / 1min 30s)[ 66.873560][ T67] Bluetooth: hci4: command 0x1003 tx timeout [ 66.873566][ T12] Bluetooth: hci5: command 0x1003 tx timeout [ 66.873580][ T12] Bluetooth: hci3: command 0x1003 tx timeout [ 66.879686][ T373] Bluetooth: hci4: sending frame failed (-49) [ 66.886931][ T12] Bluetooth: hci2: command 0x1003 tx timeout [ 66.891591][ T373] Bluetooth: hci3: sending frame failed (-49) [ 66.898287][ T374] Bluetooth: hci2: sending frame failed (-49) [ 66.903678][ T370] Bluetooth: hci5: sending frame failed (-49) [ ***] A start job is running for dev-ttyS0.device (59s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (59s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (1min / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (1min / 1min 30s)[ 68.873365][ T67] Bluetooth: hci1: command 0x1001 tx timeout [ 68.873583][ T12] Bluetooth: hci0: command 0x1001 tx timeout [ 68.879488][ T370] Bluetooth: hci1: sending frame failed (-49) [ 68.885441][ T373] Bluetooth: hci0: sending frame failed (-49) [ 68.953327][ T67] Bluetooth: hci5: command 0x1001 tx timeout [ 68.953333][ T12] Bluetooth: hci3: command 0x1001 tx timeout [ 68.953384][ T373] Bluetooth: hci3: sending frame failed (-49) [ 68.959466][ T370] Bluetooth: hci5: sending frame failed (-49) [ 68.965487][ T12] Bluetooth: hci2: command 0x1001 tx timeout [ 68.972880][ T67] Bluetooth: hci4: command 0x1001 tx timeout [ 68.978018][ T370] Bluetooth: hci2: sending frame failed (-49) [ 68.983677][ T373] Bluetooth: hci4: sending frame failed (-49) [** ] A start job is running for dev-ttyS0.device (1min 1s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (1min 1s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[ 70.953233][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 70.953239][ T67] Bluetooth: hci1: command 0x1009 tx timeout [ 71.033173][ T12] Bluetooth: hci2: command 0x1009 tx timeout [ 71.033179][ T67] Bluetooth: hci4: command 0x1009 tx timeout [ 71.033212][ T67] Bluetooth: hci5: command 0x1009 tx timeout [ 71.039181][ T12] Bluetooth: hci3: command 0x1009 tx timeout [ *** ] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)[ 75.273686][ T367] BUG: scheduling while atomic: syz-executor369/367/0x00000002 [ 75.281238][ T367] Modules linked in: [ 75.285151][ T367] Preemption disabled at: [ 75.285161][ T367] [<0000000000000000>] 0x0 [ 75.293869][ T367] CPU: 0 PID: 367 Comm: syz-executor369 Not tainted 5.4.125-syzkaller-00244-g972d251662ee #0 [ 75.303989][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.314038][ T367] Call Trace: [ 75.317317][ T367] dump_stack+0x1d8/0x24e [ 75.321654][ T367] ? devkmsg_release+0x11c/0x11c [ 75.326585][ T367] ? show_regs_print_info+0x12/0x12 [ 75.331765][ T367] ? check_preemption_disabled+0x9e/0x330 [ 75.337467][ T367] ? debug_smp_processor_id+0x20/0x20 [ 75.342873][ T367] ? slab_free_freelist_hook+0x7b/0x150 [ 75.348410][ T367] ? kmem_cache_free+0xb8/0x5f0 [ 75.353255][ T367] __schedule_bug+0x1af/0x240 [ 75.357914][ T367] ? __migrate_task+0x160/0x160 [ 75.362844][ T367] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 75.368291][ T367] ? _raw_spin_lock+0x1b0/0x1b0 [ 75.373124][ T367] __schedule+0xa42/0x1170 [ 75.377522][ T367] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 75.383935][ T367] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 75.389719][ T367] ? is_mmconf_reserved+0x420/0x420 [ 75.394895][ T367] ? check_preemption_disabled+0x9e/0x330 [ 75.400588][ T367] ? debug_smp_processor_id+0x20/0x20 [ 75.405953][ T367] schedule+0x13b/0x1d0 [ 75.410092][ T367] lock_sock_nested+0x1ed/0x310 [ 75.415007][ T367] ? sock_def_destruct+0x10/0x10 [ 75.419937][ T367] ? init_wait_entry+0xd0/0xd0 [ 75.424689][ T367] ? hci_send_to_sock+0x709/0x720 [ 75.429695][ T367] hci_sock_dev_event+0x2da/0x570 [ 75.434701][ T367] hci_unregister_dev+0x2a5/0x13f0 [ 75.439804][ T367] ? rcu_sync_exit+0xc6/0x1a0 [ 75.444456][ T367] hci_uart_tty_close+0x1a2/0x220 [ 75.449457][ T367] ? hci_uart_tty_open+0x2d0/0x2d0 [ 75.454547][ T367] tty_ldisc_release+0x272/0x600 [ 75.459464][ T367] tty_release_struct+0x27/0xd0 [ 75.464290][ T367] tty_release+0xdd7/0x10a0 [ 75.468774][ T367] ? tty_release_struct+0xd0/0xd0 [ 75.473774][ T367] __fput+0x27d/0x6c0 [ 75.477734][ T367] task_work_run+0x186/0x1b0 [ 75.482304][ T367] do_exit+0xcb9/0x2bf0 [ 75.486441][ T367] ? mm_update_next_owner+0x5c0/0x5c0 [ 75.491788][ T367] ? __up_read+0x6f/0x1b0 [ 75.496094][ T367] ? __down_read+0x210/0x210 [ 75.500659][ T367] ? check_preemption_disabled+0x154/0x330 [ 75.506439][ T367] ? debug_smp_processor_id+0x20/0x20 [ 75.511808][ T367] do_group_exit+0x15c/0x2c0 [ 75.516379][ T367] ? do_user_addr_fault+0x6b0/0xb40 [ 75.521558][ T367] __do_sys_exit_group+0x13/0x20 [ 75.526476][ T367] __se_sys_exit_group+0x10/0x10 [ 75.531391][ T367] __x64_sys_exit_group+0x37/0x40 [ 75.536392][ T367] do_syscall_64+0xcb/0x1e0 [ 75.540895][ T367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 75.546764][ T367] RIP: 0033:0x43e949 [ 75.550640][ T367] Code: Bad RIP value. [ 75.554678][ T367] RSP: 002b:00007ffc2be1d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 75.563078][ T367] RAX: ffffffffffffffda RBX: 00000000004b02f0 RCX: 000000000043e949 [ 75.571029][ T367] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 75.578979][ T367] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000001 [ 75.586928][ T367] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000004b02f0 [ 75.594877][ T367] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001