Warning: Permanently added '[localhost]:29585' (ECDSA) to the list of known hosts. 2022/10/03 09:46:16 fuzzer started 2022/10/03 09:46:16 dialing manager at localhost:35095 syzkaller login: [ 44.015666] cgroup: Unknown subsys name 'net' [ 44.102088] cgroup: Unknown subsys name 'rlimit' 2022/10/03 09:46:31 syscalls: 2215 2022/10/03 09:46:31 code coverage: enabled 2022/10/03 09:46:31 comparison tracing: enabled 2022/10/03 09:46:31 extra coverage: enabled 2022/10/03 09:46:31 setuid sandbox: enabled 2022/10/03 09:46:31 namespace sandbox: enabled 2022/10/03 09:46:31 Android sandbox: enabled 2022/10/03 09:46:31 fault injection: enabled 2022/10/03 09:46:31 leak checking: enabled 2022/10/03 09:46:31 net packet injection: enabled 2022/10/03 09:46:31 net device setup: enabled 2022/10/03 09:46:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 09:46:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 09:46:31 USB emulation: enabled 2022/10/03 09:46:31 hci packet injection: enabled 2022/10/03 09:46:31 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 09:46:31 802.15.4 emulation: enabled 2022/10/03 09:46:31 fetching corpus: 50, signal 20759/22609 (executing program) 2022/10/03 09:46:31 fetching corpus: 100, signal 37220/40689 (executing program) 2022/10/03 09:46:31 fetching corpus: 150, signal 44996/50061 (executing program) 2022/10/03 09:46:31 fetching corpus: 200, signal 51386/57991 (executing program) 2022/10/03 09:46:32 fetching corpus: 250, signal 56776/64879 (executing program) 2022/10/03 09:46:32 fetching corpus: 300, signal 62095/71605 (executing program) 2022/10/03 09:46:32 fetching corpus: 350, signal 66743/77629 (executing program) 2022/10/03 09:46:32 fetching corpus: 400, signal 69190/81472 (executing program) 2022/10/03 09:46:32 fetching corpus: 450, signal 72059/85676 (executing program) 2022/10/03 09:46:32 fetching corpus: 500, signal 77087/91887 (executing program) 2022/10/03 09:46:32 fetching corpus: 550, signal 81994/97897 (executing program) 2022/10/03 09:46:32 fetching corpus: 600, signal 85442/102515 (executing program) 2022/10/03 09:46:33 fetching corpus: 650, signal 87810/106086 (executing program) 2022/10/03 09:46:33 fetching corpus: 700, signal 89797/109283 (executing program) 2022/10/03 09:46:33 fetching corpus: 750, signal 93536/113994 (executing program) 2022/10/03 09:46:33 fetching corpus: 800, signal 94887/116578 (executing program) 2022/10/03 09:46:33 fetching corpus: 850, signal 96316/119201 (executing program) 2022/10/03 09:46:33 fetching corpus: 900, signal 98346/122331 (executing program) 2022/10/03 09:46:33 fetching corpus: 950, signal 100706/125796 (executing program) 2022/10/03 09:46:33 fetching corpus: 1000, signal 103904/129915 (executing program) 2022/10/03 09:46:33 fetching corpus: 1050, signal 105097/132255 (executing program) 2022/10/03 09:46:34 fetching corpus: 1100, signal 106301/134565 (executing program) 2022/10/03 09:46:34 fetching corpus: 1150, signal 108412/137631 (executing program) 2022/10/03 09:46:34 fetching corpus: 1200, signal 110021/140244 (executing program) 2022/10/03 09:46:34 fetching corpus: 1250, signal 111455/142757 (executing program) 2022/10/03 09:46:34 fetching corpus: 1300, signal 112839/145131 (executing program) 2022/10/03 09:46:34 fetching corpus: 1350, signal 116342/149288 (executing program) 2022/10/03 09:46:34 fetching corpus: 1400, signal 118494/152263 (executing program) 2022/10/03 09:46:34 fetching corpus: 1450, signal 122188/156460 (executing program) 2022/10/03 09:46:35 fetching corpus: 1500, signal 124412/159373 (executing program) 2022/10/03 09:46:35 fetching corpus: 1550, signal 125116/161077 (executing program) 2022/10/03 09:46:35 fetching corpus: 1600, signal 126153/163025 (executing program) 2022/10/03 09:46:35 fetching corpus: 1650, signal 127331/165126 (executing program) 2022/10/03 09:46:35 fetching corpus: 1700, signal 128863/167473 (executing program) 2022/10/03 09:46:35 fetching corpus: 1750, signal 131185/170358 (executing program) 2022/10/03 09:46:35 fetching corpus: 1800, signal 132029/172098 (executing program) 2022/10/03 09:46:35 fetching corpus: 1850, signal 132928/173899 (executing program) 2022/10/03 09:46:35 fetching corpus: 1900, signal 134926/176496 (executing program) 2022/10/03 09:46:35 fetching corpus: 1950, signal 135784/178221 (executing program) 2022/10/03 09:46:36 fetching corpus: 2000, signal 136493/179854 (executing program) 2022/10/03 09:46:36 fetching corpus: 2050, signal 137499/181675 (executing program) 2022/10/03 09:46:36 fetching corpus: 2100, signal 139090/183867 (executing program) 2022/10/03 09:46:36 fetching corpus: 2150, signal 140702/186086 (executing program) 2022/10/03 09:46:36 fetching corpus: 2200, signal 141843/187943 (executing program) 2022/10/03 09:46:36 fetching corpus: 2250, signal 144716/191025 (executing program) 2022/10/03 09:46:36 fetching corpus: 2300, signal 145480/192622 (executing program) 2022/10/03 09:46:36 fetching corpus: 2350, signal 146546/194387 (executing program) 2022/10/03 09:46:36 fetching corpus: 2400, signal 147325/195929 (executing program) 2022/10/03 09:46:36 fetching corpus: 2450, signal 147974/197386 (executing program) 2022/10/03 09:46:37 fetching corpus: 2500, signal 148952/199069 (executing program) 2022/10/03 09:46:37 fetching corpus: 2550, signal 150300/200995 (executing program) 2022/10/03 09:46:37 fetching corpus: 2600, signal 152060/203079 (executing program) 2022/10/03 09:46:37 fetching corpus: 2650, signal 153926/205229 (executing program) 2022/10/03 09:46:37 fetching corpus: 2700, signal 154971/206888 (executing program) 2022/10/03 09:46:37 fetching corpus: 2750, signal 155776/208344 (executing program) 2022/10/03 09:46:37 fetching corpus: 2800, signal 157513/210403 (executing program) 2022/10/03 09:46:38 fetching corpus: 2850, signal 157887/211598 (executing program) 2022/10/03 09:46:38 fetching corpus: 2900, signal 159029/213258 (executing program) 2022/10/03 09:46:38 fetching corpus: 2950, signal 159490/214517 (executing program) 2022/10/03 09:46:38 fetching corpus: 3000, signal 160279/215987 (executing program) 2022/10/03 09:46:38 fetching corpus: 3050, signal 161083/217498 (executing program) 2022/10/03 09:46:38 fetching corpus: 3100, signal 161860/218906 (executing program) 2022/10/03 09:46:38 fetching corpus: 3150, signal 162511/220223 (executing program) 2022/10/03 09:46:38 fetching corpus: 3200, signal 163232/221527 (executing program) 2022/10/03 09:46:38 fetching corpus: 3250, signal 164275/223040 (executing program) 2022/10/03 09:46:38 fetching corpus: 3300, signal 165175/224470 (executing program) 2022/10/03 09:46:39 fetching corpus: 3350, signal 166030/225851 (executing program) 2022/10/03 09:46:39 fetching corpus: 3400, signal 167320/227460 (executing program) 2022/10/03 09:46:39 fetching corpus: 3450, signal 168030/228718 (executing program) 2022/10/03 09:46:39 fetching corpus: 3500, signal 169296/230277 (executing program) 2022/10/03 09:46:39 fetching corpus: 3550, signal 170462/231723 (executing program) 2022/10/03 09:46:39 fetching corpus: 3600, signal 171096/232912 (executing program) 2022/10/03 09:46:39 fetching corpus: 3650, signal 172238/234390 (executing program) 2022/10/03 09:46:39 fetching corpus: 3700, signal 173178/235749 (executing program) 2022/10/03 09:46:39 fetching corpus: 3750, signal 173618/236820 (executing program) 2022/10/03 09:46:40 fetching corpus: 3800, signal 175072/238387 (executing program) 2022/10/03 09:46:40 fetching corpus: 3850, signal 176228/239778 (executing program) 2022/10/03 09:46:40 fetching corpus: 3900, signal 177056/241026 (executing program) 2022/10/03 09:46:40 fetching corpus: 3950, signal 177850/242220 (executing program) 2022/10/03 09:46:40 fetching corpus: 4000, signal 179094/243599 (executing program) 2022/10/03 09:46:40 fetching corpus: 4050, signal 179768/244798 (executing program) 2022/10/03 09:46:40 fetching corpus: 4100, signal 180993/246143 (executing program) 2022/10/03 09:46:40 fetching corpus: 4150, signal 181574/247243 (executing program) 2022/10/03 09:46:41 fetching corpus: 4200, signal 182582/248517 (executing program) 2022/10/03 09:46:41 fetching corpus: 4250, signal 183511/249697 (executing program) 2022/10/03 09:46:41 fetching corpus: 4300, signal 184029/250713 (executing program) 2022/10/03 09:46:41 fetching corpus: 4350, signal 184767/251768 (executing program) 2022/10/03 09:46:41 fetching corpus: 4400, signal 185768/252993 (executing program) 2022/10/03 09:46:41 fetching corpus: 4450, signal 186551/254080 (executing program) 2022/10/03 09:46:41 fetching corpus: 4500, signal 186956/255010 (executing program) 2022/10/03 09:46:41 fetching corpus: 4550, signal 187838/256103 (executing program) 2022/10/03 09:46:42 fetching corpus: 4600, signal 188484/257093 (executing program) 2022/10/03 09:46:42 fetching corpus: 4650, signal 189146/258081 (executing program) 2022/10/03 09:46:42 fetching corpus: 4700, signal 189630/259035 (executing program) 2022/10/03 09:46:42 fetching corpus: 4750, signal 190515/260071 (executing program) 2022/10/03 09:46:42 fetching corpus: 4800, signal 191110/261024 (executing program) 2022/10/03 09:46:42 fetching corpus: 4850, signal 192293/262193 (executing program) 2022/10/03 09:46:42 fetching corpus: 4900, signal 192801/263109 (executing program) 2022/10/03 09:46:42 fetching corpus: 4950, signal 194206/264317 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/265250 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/265962 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/266686 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/267437 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/268161 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/268857 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/269540 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/270242 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/270991 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/271714 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/272439 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/273131 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/273839 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/274559 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/275281 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/275965 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/276690 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/277385 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/278110 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/278851 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/279566 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/280303 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/280997 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/281742 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/282455 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/283164 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/283863 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/284590 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/285298 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/285990 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/286721 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/287419 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/288122 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/288867 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/289545 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/290240 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/290912 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/291660 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/292392 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/293094 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/293789 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/294465 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/295171 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/295840 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/296551 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/297256 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/297976 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/298703 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/299378 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/299531 (executing program) 2022/10/03 09:46:43 fetching corpus: 4998, signal 194783/299531 (executing program) 2022/10/03 09:46:46 starting 8 fuzzer processes 09:46:46 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040801) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x10003, 0x0) mount_setattr(r4, &(0x7f0000000300)='./file0\x00', 0x1980, &(0x7f0000000340)={0x7a, 0x200004, 0x100000, {r3}}, 0x20) r5 = openat(r0, &(0x7f0000000380)='.\x00', 0x1a1200, 0x80) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40004) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/vlan/vlan1\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x11c, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x91}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8c45}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffc01}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8b}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x890) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x20000000) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r1, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x55}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x404001, 0x0) r10 = mq_open(&(0x7f0000000b00)='\x00', 0x2, 0x10, &(0x7f0000000b40)={0x2000000000000, 0x0, 0x2, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) 09:46:46 executing program 0: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_proto_private(r1, 0x89ea, &(0x7f0000000080)="5669a29865b9c211f65c67112e1b574712f87264fd4590eac47a089e68db420b5e7290e2f0501af4b9c540522ad74bf73cbe1936416a5afabc00838f248f") connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x1c) recvmsg$unix(r1, &(0x7f00000027c0)={&(0x7f0000000100), 0x6e, &(0x7f0000002680)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/240, 0xf0}, {&(0x7f0000001280)=""/128, 0x80}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/94, 0x5e}, {&(0x7f0000002380)=""/78, 0x4e}, {&(0x7f0000002400)=""/162, 0xa2}, {&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/229, 0xe5}], 0x9, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x2002) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000002ac0)=[{{&(0x7f0000002800)={0xa, 0x4e24, 0x6, @remote, 0xff}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000002840)="d9a0920fa92b9f678562d506f71320854c1537252b10d7ad540b9997dbb16f9e8c0e82458cfea44008ab1a0b20a682d2da532db972ce436a01c1e1e57088d758c46173ac8a10054c984eba5d61028385ee1a54f51d03694a02756612cbef81887b673a193460abbb9f2b858627fc150ff960ae40970500af91607a959b5bca05e58b241a083d5840720e8916ce442d2f5da7bc474850f668cee7466e861f00f2d20f2e10e88daf7d59656e34a0a06c582df529b5158f23066448", 0xba}, {&(0x7f0000002900)="3dea20ee933f662953aa698b822759474e158b617155ff742d91af72fdb91a270cf8ca423c", 0x25}, {&(0x7f0000002940)="8ee645bd8c2437df50f9d58f616d16215eddd1e38e9d8eef3b852166dcda42ab7bfc774b3f54ee7eac8b93e985d35f2c8dfa13c562b75c13570d1f51cb7df3448d4586fdd762ebd3278558486e23907bd9d8f93f1dcde79eeda9a7dfa97d0de96ee46548ed240e81ae2e445d114b6e123e4385c2707a013fd3d8482ca2b3665629992a19b410c314cb17de56addabf4d088c7b21ef55cbcc87eb6c1781ff0e7ec5efa9f0927e90d87e7c682f90a3a71e03beb8d7575fd9c095c4143be24120943ddd9ba62451e806ecd9c304c86b962116a906c56b5de0989de5fc", 0xdb}], 0x3, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000002b00)=0x7fffffff) r3 = syz_open_dev$hidraw(&(0x7f0000002b40), 0x5, 0x10480) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002b80)) r4 = dup(r3) sendmsg$inet6(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002d80)="7e47a964ad8951", 0x7}], 0x1}, 0x40000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000002e40)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x633316d5) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002e80), 0x1110c2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000002f40)={{r6}, 0x9, &(0x7f0000002ec0)=[0x3db, 0x6, 0x5, 0x6, 0x1, 0x1, 0x5, 0x0, 0x3ff], 0x9, 0x6, [0x100000001, 0x1, 0x2, 0x200]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000002fc0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) syz_io_uring_setup(0x16ee, &(0x7f0000003000)={0x0, 0x80ef, 0x0, 0x3, 0x32, 0x0, r7}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003080), &(0x7f00000030c0)) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000003100)={0xc, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x1aca}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1f}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x18, {0x3, 0x4, 0xc9, 0x5cce, [0x1000, 0x7bd1]}}]}, 0x58) 09:46:46 executing program 2: r0 = socket$inet(0x2, 0x1, 0x1000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000680)=@add_del={0x2, &(0x7f0000000640)='veth0_macvtap\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @multicast2}, {0x1}, 0x7c, {0x2, 0x4e22, @broadcast}, 'veth0_macvtap\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000740)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000840)=""/210, &(0x7f0000000940)=0xd2) r1 = signalfd(r0, &(0x7f0000000980)={[0x6]}, 0x8) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000009c0)={{0x2, 0x4e23, @empty}, {0x6, @link_local}, 0x40, {0x2, 0x4e24, @multicast1}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000a40)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x6, {0x2, 0x4e23, @empty}, 'netpci0\x00'}) r2 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x80000001, 0x400000) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000b00)={0x2c, @empty, 0x4e24, 0x2, 'lblc\x00', 0x4, 0x2, 0x2c}, 0x2c) recvmmsg(r1, &(0x7f0000004c40)=[{{&(0x7f0000000b40)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/212, 0xd4}, {&(0x7f0000000cc0)=""/107, 0x6b}], 0x2}, 0x6}, {{&(0x7f0000000d80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000000e00)=""/210, 0xd2}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/42, 0x2a}, {&(0x7f0000001f40)=""/58, 0x3a}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/130, 0x82}, {&(0x7f0000003040)=""/71, 0x47}], 0x7}, 0x5}, {{&(0x7f0000003140)=@nfc_llcp, 0x80, &(0x7f0000003640)=[{&(0x7f00000031c0)=""/143, 0x8f}, {&(0x7f0000003280)=""/233, 0xe9}, {&(0x7f0000003380)=""/40, 0x28}, {&(0x7f00000033c0)=""/208, 0xd0}, {&(0x7f00000034c0)=""/218, 0xda}, {&(0x7f00000035c0)=""/98, 0x62}], 0x6, &(0x7f00000036c0)=""/68, 0x44}, 0xffffffff}, {{&(0x7f0000003740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f00000037c0)=""/21, 0x15}, {&(0x7f0000003800)=""/230, 0xe6}, {&(0x7f0000003900)=""/217, 0xd9}, {&(0x7f0000003a00)=""/72, 0x48}, {&(0x7f0000003a80)=""/112, 0x70}, {&(0x7f0000003b00)=""/2, 0x2}, {&(0x7f0000003b40)=""/128, 0x80}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x8}, 0x4}], 0x4, 0x12081, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000004d40)='hybla\x00', 0x6) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000004d80)={0x87, @empty, 0x4e20, 0x4, 'fo\x00', 0x2, 0x8001, 0x58}, 0x2c) connect(r2, &(0x7f0000004dc0)=@caif, 0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000004e40)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) sendto$inet(r4, &(0x7f0000004e80)="cee2860e02035700a91956e38c243a73e6e809912340ba58b2192e5eb36d8b9642b9d607d54dc43e6c257cadd0da4527aef7cd7d70632d8721239de54e01544d80f3e7d132e8c2a45ffdbc72ad08ee76ef5aa5c0436cfb044f252c6f9591136994a9f6cf1c281748159b98b1ba5bbdd0fc2f409d2f8440bf4de9441106caca0305fe2717c100a8cf907dcd2c97674ae0504b43de69fe2ee748ac08294674421a610ca19ede0236f1a94de20d8c390d875564ff609a7c92323717e40a0a9b63a19678d35be82ca9122f764d1480c43a85f1f51f0e0ad3003c7e6e1b1ee5dc0dffc837e0df3d70", 0xe6, 0x4801, &(0x7f0000004f80)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000004fc0)="63cb2fb107f0298b7402e7deba7d1c4b2c7cfc96389346d411a84207da4b2828a27b24583f658d4038ab5f", 0x2b) sendto(r4, &(0x7f0000005000)="3a669e07ba9176e00a8bcc6e30928740025ee57576d9d5d682b7ecbeca6c7726c7d5ccbcbe90152055822d69495df8d8c2884e6df1531ca7ab04dd8d20df5a813e3ca63070d3411b3bcde3aaa5e1548729272bfbf0afb3b03b4f6d43aef770b7ab8e39162e75ab5ec48f3f7b04c2e44bc6b1c7915c074fe8274be0ef49f15099e93a9dec1ab4dbd1a529519a01781c835e7afc", 0x93, 0x80, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000050c0)) 09:46:46 executing program 4: munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() munlockall() 09:46:46 executing program 3: fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r1 = memfd_secret(0x0) close_range(r1, r0, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x0, @multicast1}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x448000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x7, 0x1f, 0x65, 0x0, 0x0, 0x804, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0xf070}, 0x602, 0x9, 0x400, 0x2, 0x5a, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x9}, r0, 0xc, r3, 0x0) sendfile(r1, r4, &(0x7f0000000180)=0x1f, 0xa6) close(r3) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000200)='\x00', 0x0, r6) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000280)={0x10, 0x6, {0x8, @usage=0x7, 0x0, 0x8, 0x6, 0x4, 0x7fffffff, 0xc9, 0x44b, @usage=0x5, 0x1, 0x7fff, [0x5, 0x4, 0x3, 0x81, 0xeb, 0x4]}, {0x9b4c, @usage=0xe6, 0x0, 0x7, 0x9, 0x1f, 0x6f5, 0x100000001, 0x400, @struct={0x6, 0x1f}, 0x100000, 0x7, [0x8, 0x80000000, 0x3, 0xf5b5, 0x6, 0x1]}, {0x55f, @usage=0x101, 0x0, 0x2, 0x4a8, 0x800, 0x6, 0xffffffffffff8001, 0x48b, @usage=0x6, 0x3, 0x7, [0x3995cb6f, 0x2, 0x3f, 0x1, 0x200, 0x5]}, {0x69, 0x7, 0xfff}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000680)={r7, "fc02342984254f056afe1b2f212c0eda"}) pipe2$9p(&(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000016c0)={0x0, r1, 0x462, 0x3, 0x10000, 0x8000}) r9 = creat(&(0x7f0000001700)='./file0\x00', 0x56) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r9, 0x3) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) [ 73.771976] audit: type=1400 audit(1664790406.609:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:46:46 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIOCLEX(r1, 0x5451) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0x4, 0x5052}, 0x100, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000180)={0x0, 0x80000001, 0x4, 0x1}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x8001, 0x40, 0x1}, 0x18) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000640)=0xad7843b45cb227ad) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCSBRK(r5, 0x5427) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000006c0)) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20048881}, 0x4000000) r6 = fork() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000800)={'\x00', 0x200, 0x1, 0x7468, 0x1000, 0x8, r6}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000ac0)='.pending_reads\x00', 0x0, 0x81) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000b00)={0x4, 0x0, 0x1000, 0x7, 0x8, 0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000b80)={0x2, 0x0, &(0x7f0000000b40)=[0xffffffffffffffff]}, 0x1) 09:46:46 executing program 6: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0xc0080) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', 0xc8000) io_submit(0x0, 0x1, &(0x7f0000001100)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x80, r0, &(0x7f0000000080)="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", 0x1000, 0x0, 0x0, 0x0, r1}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x410001, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000011c0)={0x0, @private, @private}, &(0x7f0000001200)=0xc) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001240), 0x880, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000001280)={r3, 0x1, 0x6, @broadcast}, 0x10) signalfd4(r1, &(0x7f00000012c0)={[0x6]}, 0x8, 0x800) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000001300), &(0x7f0000001340), 0x2, 0x2) pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r7 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000001400)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x51, r3}) io_pgetevents(0x0, 0x3, 0x6, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000001540)={&(0x7f0000001500)={[0xfffffff000000000]}, 0x8}) openat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x0, 0x20) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f00000015c0)) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001640), 0x121100, 0x0) fallocate(r8, 0x18, 0x5ed6, 0x1) 09:46:46 executing program 7: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x20, 0x8000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x72a4) r3 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x9, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="e639cdbbb8af062d20be8789e9a9e44f0ce612a6736801d9f7d536db1327c7cd2b232970a5dec7675a12488303f51b33f7bb1d1636960c6c12926d3f5f834990383471c7145fd2f60317e921a5390a4e6daf64bf244039c9071daa1abdc1abfaf58b1421244f554f62850370ac003c0a64c668247df1ebdc88533aa9b4d0c49f2fbed1e97e04bfc8b031b95e03f58d79c08e9eb5dd88f6cf28288f3b2352cfd753fba8011a5ceae2076973b753623ae7f2d9079a1da0fd186646d0a9fa9ae5c896d408961f84cbb7a944021cd4f9c31383895f8ea96a152bb43740b22e20", 0xde, 0x4}, {&(0x7f0000000340)="faa99654f6e2ca245a7436abd35c6b9865493c88fe8d1a7fb02e7ed2c9", 0x1d, 0x101}, {&(0x7f0000000380)="298b2cf4c43d74d3380d19a7ad818cd86624b9d93d6e09c2fb2273e0a9e1262a432245da3edea93d560bde278296915bb4f7d7f6da28c68bf06b49859ff32a6d70f7afcba7c5822fe5188af2f4bb793112e265836ebf107e027216f84649ced702c0a586", 0x64, 0x3}], 0x1020000, &(0x7f0000000480)={[{'):}\'#\t.-}.'}, {'/dev/input/mouse#\x00'}, {}, {'^\x1e\'%}^'}, {'}'}, {'/dev/input/mouse#\x00'}, {}, {'/dev/input/mouse#\x00'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/mouse#\x00'}}, {@seclabel}, {@fsmagic}, {@pcr={'pcr', 0x3d, 0xa}}, {@fowner_eq}]}) r4 = openat(r3, &(0x7f0000000580)='./file0\x00', 0x0, 0x1) r5 = socket$netlink(0x10, 0x3, 0xb) write$binfmt_aout(r5, &(0x7f00000005c0)={{0xcc, 0x6, 0x6, 0x2b4, 0x1f8, 0xec82, 0x3d8, 0x5}, "faad76e78e359b7930f41d177d8e833309e90296245eb5e2568db1e0933de7941fb713b343031bbcc6b59055d2b7f26b73f0ef1c80aaea298872b2c56eb92340435b295728ad7c9aea95478ba383ac05361d4ad0cc9b54e98c4bfa617b69b79b47c469a108df7f0bb92d91c94cfd7476050a7577e70ddb5ecab353cb7e123fa667607e3907c6c8f106fa3b11c6fac86eb98bf29ed5c1af5b95cde804167749438c4434e4d83e69d55fa2e2fc2f", ['\x00', '\x00', '\x00']}, 0x3cd) perf_event_open(&(0x7f00000009c0)={0x4, 0x80, 0x3, 0x2, 0x7f, 0x7, 0x0, 0x401, 0x54028, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x6, 0x3ff}, 0x8001, 0x4, 0xffffffff, 0x0, 0x9, 0xfff, 0x4, 0x0, 0xffffffff, 0x0, 0x20}, 0xffffffffffffffff, 0x8, r4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x4000, 0x58) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000a80)={0xffff9486, 0x20, 0x4, 0x8, 0x6a9c, 0x1000}) r6 = open$dir(&(0x7f0000000ac0)='./file0/file0\x00', 0x12040, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x10, 0x3f2, 0xa00, 0x70bd2c, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x74, 0x17, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048040}, 0x40) unlinkat(r7, &(0x7f0000000d80)='./file0\x00', 0x200) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000e00)={{0x6f0, 0x9}, 0x100, './file0\x00'}) [ 75.119362] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.121769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.123584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.127263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.130057] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.132030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.138787] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.174723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.181096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.182509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.184399] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.187453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.189527] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.191262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.192593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.196471] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.209057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.212023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.213930] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.216814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.279861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.288603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.291544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.293043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.295677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.297469] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.298813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.302741] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.310344] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.344941] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.347844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.363159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.365508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.367243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.374786] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.420323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.434369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.438300] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.470898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.484871] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.486574] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.503598] Bluetooth: hci6: HCI_REQ-0x0c1a [ 77.200846] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 77.200972] Bluetooth: hci0: command 0x0409 tx timeout [ 77.201859] Bluetooth: hci2: command 0x0409 tx timeout [ 77.202789] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 77.329892] Bluetooth: hci3: command 0x0409 tx timeout [ 77.330481] Bluetooth: hci7: command 0x0409 tx timeout [ 77.392690] Bluetooth: hci5: command 0x0409 tx timeout [ 77.584685] Bluetooth: hci6: command 0x0409 tx timeout [ 79.248676] Bluetooth: hci0: command 0x041b tx timeout [ 79.250682] Bluetooth: hci2: command 0x041b tx timeout [ 79.377734] Bluetooth: hci7: command 0x041b tx timeout [ 79.378189] Bluetooth: hci3: command 0x041b tx timeout [ 79.440658] Bluetooth: hci5: command 0x041b tx timeout [ 79.632997] Bluetooth: hci6: command 0x041b tx timeout [ 80.287470] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.288760] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.290214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.292787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.293985] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.294681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.311670] Bluetooth: hci1: HCI_REQ-0x0c1a [ 80.442522] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.456405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.457387] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.490386] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.495789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.497083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.501698] Bluetooth: hci4: HCI_REQ-0x0c1a [ 81.297756] Bluetooth: hci2: command 0x040f tx timeout [ 81.298225] Bluetooth: hci0: command 0x040f tx timeout [ 81.425674] Bluetooth: hci3: command 0x040f tx timeout [ 81.426125] Bluetooth: hci7: command 0x040f tx timeout [ 81.489694] Bluetooth: hci5: command 0x040f tx timeout [ 81.681664] Bluetooth: hci6: command 0x040f tx timeout [ 82.321807] Bluetooth: hci1: command 0x0409 tx timeout [ 82.513690] Bluetooth: hci4: command 0x0409 tx timeout [ 83.345683] Bluetooth: hci0: command 0x0419 tx timeout [ 83.346125] Bluetooth: hci2: command 0x0419 tx timeout [ 83.473677] Bluetooth: hci7: command 0x0419 tx timeout [ 83.474129] Bluetooth: hci3: command 0x0419 tx timeout [ 83.537659] Bluetooth: hci5: command 0x0419 tx timeout [ 83.729744] Bluetooth: hci6: command 0x0419 tx timeout [ 84.369682] Bluetooth: hci1: command 0x041b tx timeout [ 84.561711] Bluetooth: hci4: command 0x041b tx timeout [ 86.417664] Bluetooth: hci1: command 0x040f tx timeout [ 86.609676] Bluetooth: hci4: command 0x040f tx timeout [ 88.465714] Bluetooth: hci1: command 0x0419 tx timeout [ 88.657704] Bluetooth: hci4: command 0x0419 tx timeout 09:47:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = semget$private(0x0, 0x2, 0x0) semop(r1, &(0x7f0000000040)=[{}], 0x1) 09:47:40 executing program 5: r0 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000380)="dcf83f59a5179d20e8b30d337aaa3f7f0572c7890f56f69320136005c274637b2ec3af4ac226c028618deb", 0x2b}], 0x1, 0xbefe, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2000, 0x8, 0x1, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000180)="f4b752b48fcc060fbe08c865e936c2a852a33c9b6fe4f4e6e30f92cabc2c1c", 0x1f}, {&(0x7f0000000300)="0f1de089b38acb66690fb0e53e16b958dd6b258d0e2f6ef0c6c7edb6356431a0d0c88c943e0a6344c6a1f54f4e919eefc8c016301d6e5bde974e7a888315576ca9c192177fddbb08c60a032b55735326021045c54a288a1b3ef761", 0x5b}, {&(0x7f00000001c0)="16db73f6834de5c6e309822a97ab86edace1f0fc395c9efbcbc8", 0x1a}, {&(0x7f0000000440)="ecc08bbb8162a1ece884a7ceaca00b367d9c3b1ffbf1f2b48d6cf29fd2b15f8e1c1429844501048356112fc5137b8bd725866692ef3036f327aa78644655b750d0acc2a041ff8a492dce1b72087370bb89b5c0ea46ff2cdda7eb1b870c609b9b10836b1679b23753c260609e", 0x6c}, {&(0x7f0000000240)="8b5802b25968a225fe61652b2672eb195e8e735eeade5ee1fdad7f569728994afc5628a6d8784c6786c87f448899e66d31c04c6f2dd6", 0x36}, {&(0x7f00000004c0)="dd763354b4cf7ca3ca73041348f03b43aba9c4cb3b0c4196ec6c0de7d17b44f64245295ffe813fd5f7d989898961024841895c894b605762cc38063b33643b2c7cbc49e05c12ba2156516d98d0cba0c5fa8c9cc80b", 0x55}], 0x7) r6 = gettid() sendmmsg$unix(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00}}}], 0x38, 0x2404c855}}], 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) [ 127.632323] audit: type=1400 audit(1664790460.470:7): avc: denied { open } for pid=3656 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.633904] audit: type=1400 audit(1664790460.470:8): avc: denied { kernel } for pid=3656 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.650582] ------------[ cut here ]------------ [ 127.650604] [ 127.650609] ====================================================== [ 127.650613] WARNING: possible circular locking dependency detected [ 127.650617] 6.0.0-rc7-next-20220930 #1 Not tainted [ 127.650624] ------------------------------------------------------ [ 127.650627] syz-executor.5/3659 is trying to acquire lock: [ 127.650633] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 127.650677] [ 127.650677] but task is already holding lock: [ 127.650680] ffff88800f977420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.650707] [ 127.650707] which lock already depends on the new lock. [ 127.650707] [ 127.650710] [ 127.650710] the existing dependency chain (in reverse order) is: [ 127.650713] [ 127.650713] -> #3 (&ctx->lock){....}-{2:2}: [ 127.650727] _raw_spin_lock+0x2a/0x40 [ 127.650738] __perf_event_task_sched_out+0x53b/0x18d0 [ 127.650749] __schedule+0xedd/0x2470 [ 127.650763] preempt_schedule_common+0x45/0xc0 [ 127.650780] __cond_resched+0x17/0x30 [ 127.650795] __mutex_lock+0xa3/0x14d0 [ 127.650812] __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.650823] do_syscall_64+0x3b/0x90 [ 127.650840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.650853] [ 127.650853] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 127.650867] _raw_spin_lock_nested+0x30/0x40 [ 127.650877] raw_spin_rq_lock_nested+0x1e/0x30 [ 127.650891] task_fork_fair+0x63/0x4d0 [ 127.650907] sched_cgroup_fork+0x3d0/0x540 [ 127.650922] copy_process+0x4183/0x6e20 [ 127.650933] kernel_clone+0xe7/0x890 [ 127.650942] user_mode_thread+0xad/0xf0 [ 127.650952] rest_init+0x24/0x250 [ 127.650964] arch_call_rest_init+0xf/0x14 [ 127.650982] start_kernel+0x4c6/0x4eb [ 127.650997] secondary_startup_64_no_verify+0xe0/0xeb [ 127.651011] [ 127.651011] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 127.651025] _raw_spin_lock_irqsave+0x39/0x60 [ 127.651036] try_to_wake_up+0xab/0x1930 [ 127.651049] up+0x75/0xb0 [ 127.651063] __up_console_sem+0x6e/0x80 [ 127.651079] console_unlock+0x46a/0x590 [ 127.651095] vprintk_emit+0x1bd/0x560 [ 127.651111] vprintk+0x84/0xa0 [ 127.651126] _printk+0xba/0xf1 [ 127.651138] regdb_fw_cb.cold+0x6c/0xa7 [ 127.651155] request_firmware_work_func+0x12e/0x240 [ 127.651175] process_one_work+0xa17/0x16a0 [ 127.651193] worker_thread+0x637/0x1260 [ 127.651209] kthread+0x2ed/0x3a0 [ 127.651223] ret_from_fork+0x22/0x30 [ 127.651235] [ 127.651235] -> #0 ((console_sem).lock){....}-{2:2}: [ 127.651248] __lock_acquire+0x2a02/0x5e70 [ 127.651265] lock_acquire+0x1a2/0x530 [ 127.651281] _raw_spin_lock_irqsave+0x39/0x60 [ 127.651292] down_trylock+0xe/0x70 [ 127.651306] __down_trylock_console_sem+0x3b/0xd0 [ 127.651322] vprintk_emit+0x16b/0x560 [ 127.651338] vprintk+0x84/0xa0 [ 127.651354] _printk+0xba/0xf1 [ 127.651364] report_bug.cold+0x72/0xab [ 127.651380] handle_bug+0x3c/0x70 [ 127.651396] exc_invalid_op+0x14/0x50 [ 127.651412] asm_exc_invalid_op+0x16/0x20 [ 127.651424] group_sched_out.part.0+0x2c7/0x460 [ 127.651442] ctx_sched_out+0x8f1/0xc10 [ 127.651459] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.651470] __schedule+0xedd/0x2470 [ 127.651483] preempt_schedule_common+0x45/0xc0 [ 127.651498] __cond_resched+0x17/0x30 [ 127.651511] __mutex_lock+0xa3/0x14d0 [ 127.651526] __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.651537] do_syscall_64+0x3b/0x90 [ 127.651553] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.651566] [ 127.651566] other info that might help us debug this: [ 127.651566] [ 127.651568] Chain exists of: [ 127.651568] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 127.651568] [ 127.651583] Possible unsafe locking scenario: [ 127.651583] [ 127.651586] CPU0 CPU1 [ 127.651588] ---- ---- [ 127.651591] lock(&ctx->lock); [ 127.651596] lock(&rq->__lock); [ 127.651603] lock(&ctx->lock); [ 127.651609] lock((console_sem).lock); [ 127.651615] [ 127.651615] *** DEADLOCK *** [ 127.651615] [ 127.651617] 2 locks held by syz-executor.5/3659: [ 127.651624] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 127.651653] #1: ffff88800f977420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.651679] [ 127.651679] stack backtrace: [ 127.651682] CPU: 1 PID: 3659 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 127.651694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.651702] Call Trace: [ 127.651706] [ 127.651709] dump_stack_lvl+0x8b/0xb3 [ 127.651728] check_noncircular+0x263/0x2e0 [ 127.651744] ? format_decode+0x26c/0xb50 [ 127.651760] ? print_circular_bug+0x450/0x450 [ 127.651777] ? simple_strtoul+0x30/0x30 [ 127.651792] ? lock_release+0x547/0x750 [ 127.651809] ? format_decode+0x26c/0xb50 [ 127.651826] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 127.651843] __lock_acquire+0x2a02/0x5e70 [ 127.651864] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.651887] lock_acquire+0x1a2/0x530 [ 127.651903] ? down_trylock+0xe/0x70 [ 127.651920] ? lock_release+0x750/0x750 [ 127.651940] ? vprintk+0x84/0xa0 [ 127.651958] _raw_spin_lock_irqsave+0x39/0x60 [ 127.651969] ? down_trylock+0xe/0x70 [ 127.651985] down_trylock+0xe/0x70 [ 127.652000] ? vprintk+0x84/0xa0 [ 127.652017] __down_trylock_console_sem+0x3b/0xd0 [ 127.652034] vprintk_emit+0x16b/0x560 [ 127.652052] vprintk+0x84/0xa0 [ 127.652070] _printk+0xba/0xf1 [ 127.652081] ? record_print_text.cold+0x16/0x16 [ 127.652097] ? report_bug.cold+0x66/0xab [ 127.652114] ? group_sched_out.part.0+0x2c7/0x460 [ 127.652132] report_bug.cold+0x72/0xab [ 127.652151] handle_bug+0x3c/0x70 [ 127.652168] exc_invalid_op+0x14/0x50 [ 127.652186] asm_exc_invalid_op+0x16/0x20 [ 127.652199] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.652220] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.652231] RSP: 0018:ffff888017faf978 EFLAGS: 00010006 [ 127.652240] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.652247] RDX: ffff88801b2a5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 127.652255] RBP: ffff888040548000 R08: 0000000000000005 R09: 0000000000000001 [ 127.652262] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800f977400 [ 127.652270] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 127.652281] ? group_sched_out.part.0+0x2c7/0x460 [ 127.652301] ? group_sched_out.part.0+0x2c7/0x460 [ 127.652320] ctx_sched_out+0x8f1/0xc10 [ 127.652340] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.652354] ? lock_is_held_type+0xd7/0x130 [ 127.652368] ? __perf_cgroup_move+0x160/0x160 [ 127.652378] ? set_next_entity+0x304/0x550 [ 127.652396] ? update_curr+0x267/0x740 [ 127.652414] ? lock_is_held_type+0xd7/0x130 [ 127.652428] __schedule+0xedd/0x2470 [ 127.652445] ? io_schedule_timeout+0x150/0x150 [ 127.652460] ? find_held_lock+0x2c/0x110 [ 127.652476] ? lock_is_held_type+0xd7/0x130 [ 127.652489] ? __cond_resched+0x17/0x30 [ 127.652504] preempt_schedule_common+0x45/0xc0 [ 127.652520] __cond_resched+0x17/0x30 [ 127.652535] __mutex_lock+0xa3/0x14d0 [ 127.652551] ? lock_is_held_type+0xd7/0x130 [ 127.652564] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.652577] ? mutex_lock_io_nested+0x1310/0x1310 [ 127.652594] ? lock_release+0x3b2/0x750 [ 127.652611] ? __up_read+0x192/0x730 [ 127.652626] ? up_write+0x520/0x520 [ 127.652640] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 127.652654] __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.652670] ? perf_compat_ioctl+0x130/0x130 [ 127.652681] ? xfd_validate_state+0x59/0x180 [ 127.652704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.652717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.652733] do_syscall_64+0x3b/0x90 [ 127.652750] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.652764] RIP: 0033:0x7f605c6acb19 [ 127.652772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.652783] RSP: 002b:00007f6059c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 127.652793] RAX: ffffffffffffffda RBX: 00007f605c7bff60 RCX: 00007f605c6acb19 [ 127.652801] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 127.652808] RBP: 00007f605c706f6d R08: 0000000000000000 R09: 0000000000000000 [ 127.652815] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 127.652823] R13: 00007ffd4af210ef R14: 00007f6059c22300 R15: 0000000000022000 [ 127.652835] [ 127.716179] WARNING: CPU: 1 PID: 3659 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.716888] Modules linked in: [ 127.717134] CPU: 1 PID: 3659 Comm: syz-executor.5 Not tainted 6.0.0-rc7-next-20220930 #1 [ 127.717729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.718576] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.718998] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.720367] RSP: 0018:ffff888017faf978 EFLAGS: 00010006 [ 127.720774] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.721314] RDX: ffff88801b2a5040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 127.721850] RBP: ffff888040548000 R08: 0000000000000005 R09: 0000000000000001 [ 127.722387] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800f977400 [ 127.722942] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 127.723484] FS: 00007f6059c22700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 127.724097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.724546] CR2: 00007f6dd404d060 CR3: 000000003f7fc000 CR4: 0000000000350ee0 [ 127.725115] Call Trace: [ 127.725326] [ 127.725516] ctx_sched_out+0x8f1/0xc10 [ 127.725847] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.726278] ? lock_is_held_type+0xd7/0x130 [ 127.726639] ? __perf_cgroup_move+0x160/0x160 [ 127.726995] ? set_next_entity+0x304/0x550 [ 127.727331] ? update_curr+0x267/0x740 [ 127.727653] ? lock_is_held_type+0xd7/0x130 [ 127.727992] __schedule+0xedd/0x2470 [ 127.728294] ? io_schedule_timeout+0x150/0x150 [ 127.728631] ? find_held_lock+0x2c/0x110 [ 127.728936] ? lock_is_held_type+0xd7/0x130 [ 127.729254] ? __cond_resched+0x17/0x30 [ 127.729551] preempt_schedule_common+0x45/0xc0 [ 127.729893] __cond_resched+0x17/0x30 [ 127.730180] __mutex_lock+0xa3/0x14d0 [ 127.730469] ? lock_is_held_type+0xd7/0x130 [ 127.730786] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.731168] ? mutex_lock_io_nested+0x1310/0x1310 [ 127.731520] ? lock_release+0x3b2/0x750 [ 127.731818] ? __up_read+0x192/0x730 [ 127.732100] ? up_write+0x520/0x520 [ 127.732379] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 127.732748] __do_sys_perf_event_open+0x1eec/0x32c0 [ 127.733120] ? perf_compat_ioctl+0x130/0x130 [ 127.733443] ? xfd_validate_state+0x59/0x180 [ 127.733773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.734153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 127.734535] do_syscall_64+0x3b/0x90 [ 127.734827] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.735204] RIP: 0033:0x7f605c6acb19 [ 127.735475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.736796] RSP: 002b:00007f6059c22188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 127.737346] RAX: ffffffffffffffda RBX: 00007f605c7bff60 RCX: 00007f605c6acb19 [ 127.737858] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 127.738377] RBP: 00007f605c706f6d R08: 0000000000000000 R09: 0000000000000000 [ 127.738904] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 127.739416] R13: 00007ffd4af210ef R14: 00007f6059c22300 R15: 0000000000022000 [ 127.739917] [ 127.740087] irq event stamp: 1264 [ 127.740349] hardirqs last enabled at (1263): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 127.741073] hardirqs last disabled at (1264): [] __schedule+0x1225/0x2470 [ 127.741707] softirqs last enabled at (1044): [] __irq_exit_rcu+0x11b/0x180 [ 127.742371] softirqs last disabled at (979): [] __irq_exit_rcu+0x11b/0x180 [ 127.743044] ---[ end trace 0000000000000000 ]--- 09:47:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002840), 0x0, &(0x7f0000002700)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000000)={0x0, 0xfffffffffffffff8, 0x1}) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001580)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) accept$unix(r1, &(0x7f00000015c0)=@abs, &(0x7f0000001640)=0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)) sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220) close_range(r0, 0xffffffffffffffff, 0x0) 09:47:41 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000000c0)={&(0x7f0000000100)=""/178, 0xb2}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000064c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) [ 129.772717] loop7: detected capacity change from 0 to 1 [ 129.797954] loop7: detected capacity change from 0 to 1 VM DIAGNOSIS: 09:47:40 Registers: info registers vcpu 0 RAX=0000000000000004 RBX=00000000cfa2ce76 RCX=0000000000000010 RDX=000000000002ce76 RSI=ffff88804051f6d8 RDI=ffffffff817bc30d RBP=0000000000000000 RSP=ffff88804051f600 R8 =0000000000000010 R9 =ffff88800fbbc370 R10=ffff88806c4673b0 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=0000000000092cc0 R15=ffff88804051f660 RIP=ffffffff8217ab62 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f16d51710 CR3=000000001db38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888017faf3c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6059c22700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6dd404d060 CR3=000000003f7fc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffff00ffffffffff ffffffffffff00ff YMM02=0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000470035 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000