Warning: Permanently added '[localhost]:17674' (ECDSA) to the list of known hosts. 2022/10/03 19:08:53 fuzzer started 2022/10/03 19:08:54 dialing manager at localhost:35095 syzkaller login: [ 36.215358] cgroup: Unknown subsys name 'net' [ 36.302199] cgroup: Unknown subsys name 'rlimit' 2022/10/03 19:09:08 syscalls: 2215 2022/10/03 19:09:08 code coverage: enabled 2022/10/03 19:09:08 comparison tracing: enabled 2022/10/03 19:09:08 extra coverage: enabled 2022/10/03 19:09:08 setuid sandbox: enabled 2022/10/03 19:09:08 namespace sandbox: enabled 2022/10/03 19:09:08 Android sandbox: enabled 2022/10/03 19:09:08 fault injection: enabled 2022/10/03 19:09:08 leak checking: enabled 2022/10/03 19:09:08 net packet injection: enabled 2022/10/03 19:09:08 net device setup: enabled 2022/10/03 19:09:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 19:09:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 19:09:08 USB emulation: enabled 2022/10/03 19:09:08 hci packet injection: enabled 2022/10/03 19:09:08 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 19:09:08 802.15.4 emulation: enabled 2022/10/03 19:09:08 fetching corpus: 50, signal 27894/29710 (executing program) 2022/10/03 19:09:08 fetching corpus: 100, signal 37619/41123 (executing program) 2022/10/03 19:09:08 fetching corpus: 150, signal 46044/51118 (executing program) 2022/10/03 19:09:08 fetching corpus: 200, signal 52937/59554 (executing program) 2022/10/03 19:09:08 fetching corpus: 250, signal 59201/67243 (executing program) 2022/10/03 19:09:08 fetching corpus: 300, signal 62610/72117 (executing program) 2022/10/03 19:09:08 fetching corpus: 350, signal 66082/77013 (executing program) 2022/10/03 19:09:09 fetching corpus: 400, signal 71242/83471 (executing program) 2022/10/03 19:09:09 fetching corpus: 450, signal 75032/88554 (executing program) 2022/10/03 19:09:09 fetching corpus: 500, signal 80076/94795 (executing program) 2022/10/03 19:09:09 fetching corpus: 550, signal 83331/99293 (executing program) 2022/10/03 19:09:09 fetching corpus: 600, signal 85650/102886 (executing program) 2022/10/03 19:09:09 fetching corpus: 650, signal 87826/106355 (executing program) 2022/10/03 19:09:09 fetching corpus: 700, signal 91520/111184 (executing program) 2022/10/03 19:09:09 fetching corpus: 750, signal 92948/113837 (executing program) 2022/10/03 19:09:09 fetching corpus: 800, signal 95088/117131 (executing program) 2022/10/03 19:09:09 fetching corpus: 850, signal 96784/120031 (executing program) 2022/10/03 19:09:10 fetching corpus: 900, signal 99491/123812 (executing program) 2022/10/03 19:09:10 fetching corpus: 950, signal 102383/127658 (executing program) 2022/10/03 19:09:10 fetching corpus: 1000, signal 103534/129991 (executing program) 2022/10/03 19:09:10 fetching corpus: 1050, signal 104747/132328 (executing program) 2022/10/03 19:09:10 fetching corpus: 1100, signal 106896/135469 (executing program) 2022/10/03 19:09:10 fetching corpus: 1150, signal 108587/138187 (executing program) 2022/10/03 19:09:10 fetching corpus: 1200, signal 110086/140749 (executing program) 2022/10/03 19:09:10 fetching corpus: 1250, signal 112248/143867 (executing program) 2022/10/03 19:09:10 fetching corpus: 1300, signal 115052/147506 (executing program) 2022/10/03 19:09:11 fetching corpus: 1350, signal 117065/150406 (executing program) 2022/10/03 19:09:11 fetching corpus: 1400, signal 120735/154671 (executing program) 2022/10/03 19:09:11 fetching corpus: 1450, signal 123033/157733 (executing program) 2022/10/03 19:09:11 fetching corpus: 1500, signal 123832/159609 (executing program) 2022/10/03 19:09:11 fetching corpus: 1550, signal 125091/161775 (executing program) 2022/10/03 19:09:11 fetching corpus: 1600, signal 126112/163803 (executing program) 2022/10/03 19:09:11 fetching corpus: 1650, signal 128229/166669 (executing program) 2022/10/03 19:09:11 fetching corpus: 1700, signal 130056/169251 (executing program) 2022/10/03 19:09:12 fetching corpus: 1750, signal 130867/171052 (executing program) 2022/10/03 19:09:12 fetching corpus: 1800, signal 132018/173025 (executing program) 2022/10/03 19:09:12 fetching corpus: 1850, signal 133827/175542 (executing program) 2022/10/03 19:09:12 fetching corpus: 1900, signal 134733/177383 (executing program) 2022/10/03 19:09:12 fetching corpus: 1950, signal 135476/179070 (executing program) 2022/10/03 19:09:12 fetching corpus: 2000, signal 136443/180890 (executing program) 2022/10/03 19:09:12 fetching corpus: 2050, signal 138401/183475 (executing program) 2022/10/03 19:09:12 fetching corpus: 2100, signal 139757/185554 (executing program) 2022/10/03 19:09:12 fetching corpus: 2150, signal 140871/187479 (executing program) 2022/10/03 19:09:13 fetching corpus: 2200, signal 143752/190579 (executing program) 2022/10/03 19:09:13 fetching corpus: 2250, signal 144520/192234 (executing program) 2022/10/03 19:09:13 fetching corpus: 2300, signal 145710/194154 (executing program) 2022/10/03 19:09:13 fetching corpus: 2350, signal 146435/195719 (executing program) 2022/10/03 19:09:13 fetching corpus: 2400, signal 147090/197222 (executing program) 2022/10/03 19:09:13 fetching corpus: 2450, signal 148108/199002 (executing program) 2022/10/03 19:09:13 fetching corpus: 2500, signal 149472/200949 (executing program) 2022/10/03 19:09:14 fetching corpus: 2550, signal 151521/203336 (executing program) 2022/10/03 19:09:14 fetching corpus: 2600, signal 153129/205426 (executing program) 2022/10/03 19:09:14 fetching corpus: 2650, signal 154207/207194 (executing program) 2022/10/03 19:09:14 fetching corpus: 2700, signal 155132/208878 (executing program) 2022/10/03 19:09:14 fetching corpus: 2750, signal 156784/210968 (executing program) 2022/10/03 19:09:14 fetching corpus: 2800, signal 157362/212317 (executing program) 2022/10/03 19:09:14 fetching corpus: 2850, signal 158319/213891 (executing program) 2022/10/03 19:09:14 fetching corpus: 2900, signal 158789/215152 (executing program) 2022/10/03 19:09:15 fetching corpus: 2950, signal 159791/216838 (executing program) 2022/10/03 19:09:15 fetching corpus: 3000, signal 160411/218260 (executing program) 2022/10/03 19:09:15 fetching corpus: 3050, signal 161248/219788 (executing program) 2022/10/03 19:09:15 fetching corpus: 3100, signal 162011/221213 (executing program) 2022/10/03 19:09:15 fetching corpus: 3150, signal 162578/222498 (executing program) 2022/10/03 19:09:15 fetching corpus: 3200, signal 163606/224012 (executing program) 2022/10/03 19:09:15 fetching corpus: 3250, signal 164522/225489 (executing program) 2022/10/03 19:09:15 fetching corpus: 3300, signal 165383/226907 (executing program) 2022/10/03 19:09:16 fetching corpus: 3350, signal 166663/228602 (executing program) 2022/10/03 19:09:16 fetching corpus: 3400, signal 167630/230023 (executing program) 2022/10/03 19:09:16 fetching corpus: 3450, signal 168657/231484 (executing program) 2022/10/03 19:09:16 fetching corpus: 3500, signal 169824/233011 (executing program) 2022/10/03 19:09:16 fetching corpus: 3550, signal 170438/234263 (executing program) 2022/10/03 19:09:16 fetching corpus: 3600, signal 171595/235808 (executing program) 2022/10/03 19:09:16 fetching corpus: 3650, signal 172531/237197 (executing program) 2022/10/03 19:09:16 fetching corpus: 3700, signal 172967/238313 (executing program) 2022/10/03 19:09:17 fetching corpus: 3749, signal 174913/240178 (executing program) 2022/10/03 19:09:17 fetching corpus: 3799, signal 175590/241382 (executing program) 2022/10/03 19:09:17 fetching corpus: 3849, signal 176413/242651 (executing program) 2022/10/03 19:09:17 fetching corpus: 3899, signal 177230/243944 (executing program) 2022/10/03 19:09:17 fetching corpus: 3949, signal 178516/245479 (executing program) 2022/10/03 19:09:17 fetching corpus: 3999, signal 179216/246750 (executing program) 2022/10/03 19:09:17 fetching corpus: 4049, signal 180427/248189 (executing program) 2022/10/03 19:09:17 fetching corpus: 4099, signal 180992/249275 (executing program) 2022/10/03 19:09:18 fetching corpus: 4149, signal 182062/250612 (executing program) 2022/10/03 19:09:18 fetching corpus: 4199, signal 182990/251802 (executing program) 2022/10/03 19:09:18 fetching corpus: 4249, signal 183597/252928 (executing program) 2022/10/03 19:09:18 fetching corpus: 4299, signal 184232/254023 (executing program) 2022/10/03 19:09:18 fetching corpus: 4349, signal 185285/255275 (executing program) 2022/10/03 19:09:18 fetching corpus: 4399, signal 186023/256385 (executing program) 2022/10/03 19:09:18 fetching corpus: 4449, signal 186429/257349 (executing program) 2022/10/03 19:09:18 fetching corpus: 4499, signal 187314/258477 (executing program) 2022/10/03 19:09:18 fetching corpus: 4549, signal 187957/259530 (executing program) 2022/10/03 19:09:19 fetching corpus: 4599, signal 188617/260554 (executing program) 2022/10/03 19:09:19 fetching corpus: 4649, signal 189108/261502 (executing program) 2022/10/03 19:09:19 fetching corpus: 4699, signal 190041/262646 (executing program) 2022/10/03 19:09:19 fetching corpus: 4749, signal 190630/263634 (executing program) 2022/10/03 19:09:19 fetching corpus: 4799, signal 191830/264791 (executing program) 2022/10/03 19:09:19 fetching corpus: 4849, signal 192319/265729 (executing program) 2022/10/03 19:09:19 fetching corpus: 4899, signal 193729/267005 (executing program) 2022/10/03 19:09:19 fetching corpus: 4949, signal 194334/267956 (executing program) 2022/10/03 19:09:20 fetching corpus: 4999, signal 194783/268877 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/269582 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/270382 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/271095 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/271844 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/272575 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/273280 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/274006 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/274740 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/275496 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/276246 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/276954 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/277716 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/278433 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/279170 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/279908 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/280633 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/281388 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/282116 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/282842 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/283577 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/284295 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/285039 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/285761 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/286481 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/287227 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/287954 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/288706 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/289476 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/290200 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/290930 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/291675 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/292412 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/293186 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/293916 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/294667 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/295423 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/296162 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/296916 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/297637 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/298391 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/299142 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/299938 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/300699 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/301429 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/302148 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/302895 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/303602 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/304311 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/305060 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/305814 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/306536 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/307306 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/307446 (executing program) 2022/10/03 19:09:20 fetching corpus: 5000, signal 194785/307446 (executing program) 2022/10/03 19:09:23 starting 8 fuzzer processes 19:09:23 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x70900, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3, 0xb7, 0x9, 0xffff7a89}, {0x3, 0x0, 0x7d, 0x6}, {0x1, 0x1f, 0x13, 0x10001}, {0x4, 0x40, 0x18, 0x8}, {0x300, 0x20, 0x81, 0x3}]}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "1efa95386299afccca56aef6bff57e716e22e85317f4e120b6250c83ee44e577204c8616549ad1d4d8ff629ca165e680e06983dc4e7bfab7f2b6d2eb351e3107cb0c2e15bcf630090c0d064c0d3582996632fffde548329a600b1a9e20aae3ce04e854bdc231e4e321331717832aa39d9fdae0250f7fd622c7426e36167d3af195491d64186834e82d1bbea91f37b493c014f1a1b5d7ab239ecc801cdce2ec240f045b4b19c4220604fe99152b34040dc7bc17b9b36faa472c73ee35afebcc46a285e79a2b54c3e4ee1b237ffe2c78a8d1d1a1544f4316938d7615ebb7104fd72b4626e4c06381542c2aecd17abd6a135838ec4c5bfe9bc221e0e0efff9faa6f", "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"}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000010c0)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001100)={0x0, 0x1, 0x6, @random="e150b1f03c7a"}, 0x10) r1 = openat$cgroup_pressure(r0, &(0x7f0000001140)='memory.pressure\x00', 0x2, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r2, {0xcd, 0x9}}, './file0\x00'}) fcntl$notify(r2, 0x402, 0x80000004) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x27efba45) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f00000012c0)=""/58, 0x3a}, {&(0x7f0000001300)=""/209, 0xd1}, {&(0x7f0000001400)=""/227, 0xe3}, {&(0x7f0000001500)=""/139, 0x8b}, {&(0x7f00000015c0)=""/71, 0x47}], 0x7) fsetxattr$security_capability(r2, &(0x7f00000016c0), &(0x7f0000001700)=@v2={0x2000000, [{0x6, 0x10001}, {0x0, 0x10000}]}, 0x14, 0x3) dup3(r2, r3, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000001740)={0xcb, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000002a80)={0x0, 0x1, 0x6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000002b40)={'ip6_vti0\x00', &(0x7f0000002ac0)={'ip6gre0\x00', 0x0, 0x2b, 0x5, 0x4, 0x20, 0xc, @mcast1, @remote, 0x20, 0x8, 0x1c2a, 0x3}}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002b80), 0x302, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000002c00)={0x0, @isdn={0x22, 0x1f, 0x0, 0xd0, 0xb8}, @ethernet={0x6, @local}, @ax25={0x3, @bcast, 0x3}, 0xdca, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002bc0)='xfrm0\x00', 0xffffffff7fffffff, 0x8, 0x200}) 19:09:23 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008, 0x20010, r0, 0x9a9d9000) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x8, 0xffff, 0x2e, 0x7, 0x100]}, &(0x7f0000000100)=0x54) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @local, 0x1c}, 0x1c) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x840) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x12000, 0x0) sendfile(r4, r0, 0x0, 0x5e550d46) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/node', 0x101000, 0x180) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x5, 0x20011, r5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) fchownat(r4, &(0x7f0000000540)='./file0\x00', 0xee00, 0xee00, 0x1000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f00000005c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) [ 65.431227] audit: type=1400 audit(1664824163.591:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:09:23 executing program 4: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000040)=0x8001) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000080)={0x3}) flock(0xffffffffffffffff, 0x4) r0 = pidfd_open(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000001c0)) pidfd_send_signal(r1, 0x37, &(0x7f0000000200)={0x13, 0x5, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0xe) fcntl$setstatus(r0, 0x4, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth0_to_team\x00'}) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000300)=0x1, 0x4) rt_sigtimedwait(&(0x7f0000000340)={[0x5]}, &(0x7f0000000380), &(0x7f0000000400)={0x0, 0x989680}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000004c0)={0x1370, 0x14, 0x4, 0x70bd28, 0x25dfdbfe, {0x1a, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xed, 0x1, "036adccde3c8a7e43f32b14a818a188b0f18a813c6c1e7240a70a998d30168fce0dd4ec8606c14818ee96731b4f4a6f10333f632e5aebf4cdb6f84a1b4c5dcd9e7c24cc6e28ba3d9b74b06e8ed64832838b822cbbe4079ba0f0bc79211e7ad3e7bc0bf09f31597b42107ecbe8f3eb092005cbe10407bd22e690898163ea3a5ce29faaa448f95ac9774fb32b8bb249f2fff051ed8cdeec6dd73dd50a47f82af5f1b5eaa3d11ac10b83c9db06eee1d1d209cf9dd5f4214b5c26a2bbb1970123c8f8cd76a6f20d1ae19c70662cf62978b0f977344384ffd09fa5e7e5b45982d52b28db6d13c15aa0aa28a"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "f19059b15b3d2d95295c585a1f5539080c87e63eaca4ac4c1c8b03de355861712e8229b113998e8bf43a1354b7b3d4f417e27cbc8d357629dbe784e212a517b396159f7c98373206c9"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "1db70a10610802f198c0c175925671bd38bfc9a2ae6a420e0eda98de7c258ef1eb1b19023a7d707edf4a684f66ace6252c81"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "ce6a25e8e33df27453dc4ea199cd82bb89b6f1a41e29eb05411c18244b8d29b7c14f7238abcfea0030e71e4008a3764342ea6f5dcb0d49017ec5ece5f5c9b0aa35951c506312580fd02a63afd00d0ddbd2f4d5cbfa33fe0768104d7567dda02795c3e3b0ebb62d57d31b1c2139bac364398a26efc8a7b222bc421b17aef9c047b56cd42f1ff75c45bfd328c9f48651693af4de87cf4b2c67ab2a778db95ec1f00677984b160a4c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "a80056a5697b25363320ea1f90cfc9f47d7353129ae6f111d32fd764d755c92e8c339357b6c4568832592befd06d5d1b9e86b1614221e32a480b37876e01a745ffb97169c3ca75edd29fc63d996b669a5c81d17ada24389b497b"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "668c46a937c632f61cc08c71c114d43f2ffa57ad22b6daa58338f340b18739afc508d4d4a7753a617fcbee855cba5c3dfa2f52ce70177b5e77abff5467813f79ac8c9a1ae2ecad352d225c8761d7a8fb193d9e96"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "95e0bf6dcfc7f2a76db3a39ccbe24a67a1f9766188b6deb80824b0e1019d6164390610097cd8dd657ba45c76cde9932cf1c6dc1c"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "427c8f947b79c87e102e0348c59f31b37cc953995036b5eea7a516f5e5487cc500e92d74a02534f45cd22cb1416629c4c112bfd4b7a25284f29a0541cae2"}]}, 0x1370}, 0x1, 0x0, 0x0, 0x40000}, 0x4004094) 19:09:23 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x490502) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x220002, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) recvmmsg$unix(r1, &(0x7f0000006540)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/131, 0x83}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000001840)=[{&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/27, 0x1b}, {&(0x7f0000001500)=""/190, 0xbe}, {&(0x7f00000015c0)=""/112, 0x70}, {&(0x7f0000001640)=""/154, 0x9a}, {&(0x7f0000001700)=""/226, 0xe2}, {&(0x7f0000001800)}], 0xa, &(0x7f0000001900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000001a00)=""/249, 0xf9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/119, 0x77}, {&(0x7f0000002b80)=""/131, 0x83}, {&(0x7f0000002c40)=""/4, 0x4}, {&(0x7f0000002c80)=""/66, 0x42}, {&(0x7f0000002d00)=""/157, 0x9d}, {&(0x7f0000002dc0)=""/254, 0xfe}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x9, &(0x7f0000003f80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x130}}, {{&(0x7f00000040c0)=@abs, 0x6e, &(0x7f0000006480)=[{&(0x7f0000004140)=""/224, 0xe0}, {&(0x7f0000004240)=""/71, 0x47}, {&(0x7f00000042c0)=""/19, 0x13}, {&(0x7f0000004300)=""/75, 0x4b}, {&(0x7f0000004380)=""/4096, 0x1000}, {&(0x7f0000005380)=""/114, 0x72}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/111, 0x6f}], 0x8, &(0x7f0000006500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x2160, &(0x7f0000006640)={0x77359400}) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000006680)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000066c0)={'vxcan1\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000006740)={0x9c4, 0x40, '\x00', 0x0, &(0x7f0000006700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000006d00)={&(0x7f0000006780)=@abs, 0x6e, &(0x7f0000006c00)=[{&(0x7f0000006800)=""/155, 0x9b}, {&(0x7f00000068c0)=""/50, 0x32}, {&(0x7f0000006900)=""/232, 0xe8}, {&(0x7f0000006a00)=""/191, 0xbf}, {&(0x7f0000006ac0)=""/26, 0x1a}, {&(0x7f0000006b00)=""/202, 0xca}], 0x6, &(0x7f0000006c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_mount_image$iso9660(&(0x7f0000006d40), &(0x7f0000006d80)='./file0\x00', 0x6a, 0x1, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)="037dab5943db83b6f80582b561db9cc87174a6ea98ef8ba7bc4a0bd5b5a4f399d62e7a85310913fee3aa5d1efcd82a5e884558514be3b8d3caaf9eb2855c5a90a5500b358d93ee0b3ffcf6e871b90d1094fc0d7c7e8844fc0d46f7dda7598950d5fc48a54227b6eb9f9ba598059d1dc33651a05e30dd03cbd53089541902b213be47e6f7e6b982c7b2825a34bd3f8a6ec6cbe1f13418158a5dc51305011368b2ba923cb68154c6f3eef39473faa7efd1ab595b4b87a6084041fa94097664e3ab38b8", 0xc2, 0xfff}], 0x201020, &(0x7f0000006f00)={[{@gid={'gid', 0x3d, r5}}, {@session={'session', 0x3d, 0x1a}}, {@nocompress}, {@cruft}, {@utf8}, {@nojoliet}, {@map_normal}, {@nocompress}], [{@subj_type={'subj_type', 0x3d, '.'}}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}]}) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000006fc0)={0x22, 0x9, 0x2, 0x0, 0x0, [{{r8}, 0x7b35}, {{r9}, 0x9704}]}) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000007040), 0x800c2, 0x0) pwrite64(r10, &(0x7f0000007080)="7e501bb74e05d0", 0x7, 0xff) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000007100)={'raw\x00', 0x0, [0xf7c, 0x5, 0x1000, 0x0, 0x9]}, &(0x7f0000007180)=0x54) 19:09:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x3f}}, './file0\x00'}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x0, 0xff, 0x1, 0xe286, 0x1b, "ac074f6438efa7b292a659354e4e570a280c36"}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2300) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x944, 0x9, 0x0, 0xffffffff}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x40, {{0xa, 0x4e20, 0x9, @mcast1, 0x80000001}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000280)) r3 = accept$unix(r2, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) recvfrom$unix(r4, &(0x7f00000003c0)=""/93, 0x5d, 0x40000040, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) connect(r0, &(0x7f00000004c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000580)={0x4}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000600)={0x0, 0x8, '\x00', 0x1, &(0x7f00000005c0)=[0x0]}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000680)={0x3, 0x100000001, 0x2a, &(0x7f0000000640)=""/42}) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000006c0), &(0x7f0000000700)={0x0, 0xfb, 0x15, 0x6, 0x0, "cb7f1f0638288039d1566d3003b6421e"}, 0x15, 0x3) 19:09:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50001, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x400}}, {@loose}, {@cache_fscache}, {@msize={'msize', 0x3d, 0x8}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x37, 0x64, 0x63, 0x63, 0x9e478924bf42b156, 0x64], 0x2d, [0x64, 0x0, 0x38, 0x73387fd371b9886f], 0x2d, [0x35, 0x61, 0x0, 0x64], 0x2d, [0x51, 0x64, 0x38, 0x65], 0x2d, [0x32, 0x31, 0x63, 0x31, 0x30, 0x33, 0x33, 0x37]}}}]}}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000180)={{0x5, 0x400}, 0x100, './file0\x00'}) fchdir(r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r2 = epoll_create(0xb3900) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000300)={0x1, 0xea}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000340)={0x8, 'veth0_to_team\x00', {'vcan0\x00'}, 0xe0d9}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000380)) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x8, 0x1) r5 = accept4$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x10, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000740)) r6 = fcntl$dupfd(r4, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000780)={0x70002004}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24080098}, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014000}, 0x4000) 19:09:23 executing program 5: ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x70103) fcntl$getown(r0, 0x9) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000000100), 0x6e, &(0x7f0000003340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/17, 0x11}, {&(0x7f0000003280)=""/132, 0x84}], 0x7, &(0x7f00000033c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xa8}, 0x40010100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000034c0)={0x5, 0x3, 0x7, 0x0, 0x1}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) flistxattr(r8, &(0x7f0000003540)=""/126, 0x7e) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000035c0)={r8, 0x183, 0x6, 0x80000000}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000003600)={0x0, 0xfffffffffffffffc, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000003a00)={r10, 0xffffffffffffff8c, 0x8000}) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000004040)={'veth1_macvtap\x00', &(0x7f0000003e00)=@ethtool_per_queue_op={0x4b, 0xe, [0xb362, 0xfff, 0x6, 0x0, 0x5aa, 0x5, 0x8001, 0x3, 0x9b, 0x9, 0x8, 0x2, 0x0, 0x1ff, 0x4, 0x1, 0xee058fa, 0x1, 0xfffffc01, 0x2, 0x5, 0x7fe0, 0x4, 0x3, 0x6, 0x200, 0x9, 0xb3, 0x10, 0x80000001, 0x80, 0xffff0001, 0x7fffffff, 0xaf3a, 0x9, 0x2, 0x2, 0x280a, 0x10001, 0x5, 0xc59, 0x1000, 0x2, 0x2c35, 0xb75, 0x7, 0x1, 0x1, 0x19, 0x0, 0x7fff, 0x800, 0x1, 0x2, 0x6, 0x9, 0x0, 0xeb, 0xd6, 0x0, 0x8, 0x7388, 0x7, 0x1, 0x88ef, 0x3, 0xaf, 0x1, 0x80000, 0x4, 0x7, 0xa001, 0xffff, 0x1, 0x8, 0xfffffffe, 0x7fffffff, 0x8, 0x9, 0x7, 0x1, 0x8, 0xff, 0x4, 0x1, 0x684, 0x8, 0x7, 0x8, 0x1ff, 0x2, 0x4, 0x7, 0x3, 0x5, 0x7, 0x6, 0x4f, 0x94, 0xfffffff9, 0x2a64, 0x8, 0x2c, 0x4, 0x40, 0xfffffffb, 0x0, 0xf3, 0x5, 0x2, 0x0, 0x74f7, 0x10001, 0x80000001, 0x100, 0x21, 0x7, 0x6, 0x8b, 0x2, 0x200, 0x7, 0x0, 0x40, 0xff, 0x2, 0x7, 0xafe], "4ef7af06ec798d8a2f9b0f2085cb470756a4b623099637edafb81c9a6e7ac065c5b73bcbcf45"}}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000004080)) r12 = syz_open_procfs(r7, &(0x7f00000040c0)='net/ip6_tables_matches\x00') sendmsg$FOU_CMD_GET(r12, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r13 = accept4(r6, &(0x7f0000004200)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000004280)=0x80, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000004300)={'lo\x00', &(0x7f00000042c0)=@ethtool_eeprom={0xb, 0x8, 0x1, 0x5, "4d28ce11a1"}}) fork() syz_mount_image$nfs(&(0x7f0000004340), &(0x7f0000004380)='./file0\x00', 0x0, 0x6, &(0x7f0000004800)=[{&(0x7f00000043c0)="b274199594c42b7cd221f675e787e05637b909a38aca20ff07defe0b75d5e098645397b459d3d7b3eff0e61f6b026052abf607683c8ad91377f02e369c8cd78f5e2822bfd5b9e9d09221ed16fb28fe012139291799b75c0079ecc6f1134b97e5da0093e3590d6ce402", 0x69, 0x3f}, {&(0x7f0000004440)="f69bbad5ac6b3191da2f4ce85823055d67e856b83d87c9eb2f967d418f15ac72b87e0bf23b2eec57cf1a63be01d09740203b82818ca2548a9a7c68bba6065c9c05bad355ad8cca2b29cd806f7d125b9866b8558e72b0884eaf23b56269f550a3a2bdbcdb279134c25f71126a142eac7392fc0ab1159ada154585c6e0325f4b8a5cb33d261c2047008f177bfbf53c0b529d4d1cc7ad48d5", 0x97, 0x1}, {&(0x7f0000004500)="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", 0xfa, 0x2}, {&(0x7f0000004600)="4e8fd649c1abbcf65730ca61d9fc87a65a580cbf13b64a01f5d988bcf6ee616d2127ea79b6b31ff714880f0e2e95ce4c33c120c994c611c426376ce9ef7dbf970be7e6f7b097f200269f4c2f9fb9e88137c11d7b2ee05f33d200c4caa24efcff770428bab3fc7e596099758ff5c02bb2ccc9425348f9178dd315f92164054881c055deb34ec4ff88dd42f6953430656ceb535620c9119d85c3d6965e82f8f0536d5f1a9060d7b32f4c83213dbbe0d0ef1333b6c916e14510f91c8786", 0xbc, 0x728c}, {&(0x7f00000046c0)="87bd7e4fe3daafda063394acf4367df8fb3991f2ed641bd6af91209bc8f67176ab89c342c9056492d4e2d50245a517cfc818b5ffd3d59efaecb63a95235c648074be44d4318a0937f22306e565bc71330aa67be52dcbcf4c2b491814e7e6a4ea0c6066ebf3d1249bd4001e329c8e508e353d994ef0418ee159a8e6ff47e6b40d12543eb368df2c8911355904ada5f86c9a9e0a55ba539a7aef9c8ab20ef215c812357abcd25c3773dd4f8f83c01b61e3e72c66f0cc82d82f34567557bb3c3e0fad1c5c375e1338a2a04c6613c5f2579f23b2a91146cc424e91f5a356b9addaed296207988e23c76651f15df21707db39413005994a051a15e4d893a3fcf1b3", 0xff, 0x800}, {&(0x7f00000047c0)="ac58192c91eb0ffd0be0c6dcf0ea1e796e889a74ed009953b8966f14e9bc7e", 0x1f, 0x100000000}], 0x840000, &(0x7f00000048c0)={[{'#'}], [{@appraise_type}, {@audit}, {@euid_gt={'euid>', r5}}]}) 19:09:23 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20842, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f00000002c0)={0x1}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) r6 = dup2(r2, r2) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x8800, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000800)={0x0, 0x3, r7, 0x80000000}) pread64(0xffffffffffffffff, &(0x7f0000000840)=""/231, 0xe7, 0xff) r8 = fcntl$getown(r2, 0x9) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000cc0)={&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="265242118731cb1665d39af4d170709b916e6ed5d42740311c945c1f6f5a1f9d72b0ebcebdf2790a764d25040cc4b214f602d26f07915ba787671b8cfee5e5cb39266e4b65b2442b2cc7a1e0c63d663e439165565e2ec4536ed9e4a7dd1836685512d49c201a9c59a1667081359658d7368bd8610947f485a9da486cfe1475013d54c42b20af7d428903a66d0dd3760e7d26ddc1a9bbaad3e7f84a23f7f9d12c2ed864608532e7a116df14b995c43dae01f9431f", 0xb4}, {&(0x7f0000000a80)="5e81ea74f576289b3ee3caf5c6ee84b7d8781b0ad8ae13842b07d98f7f09a449c7bac22e270e546147a4a10bc083fc7f610e687d67d8e5ff49e677bac2d3c06a8c759b9c922b30f36bdb9187bdfc358643", 0x51}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r10}}}], 0x40, 0xc000}, 0x24048046) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) [ 66.862855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.865979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.894527] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.895728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.896730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.898574] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.900884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.902922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.904678] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.906061] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.907711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.908744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.909719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.910949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.912581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.913911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.915032] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.916166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.917290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.920226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.921656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.923029] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.924145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.925185] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.931751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.933309] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.936998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.938707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.940550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.942490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.943988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.945441] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.946596] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.956251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.957391] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.958632] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.959655] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.961106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.962309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.964562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.965683] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.966798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.967930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.969243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.970309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.971473] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.977313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.982361] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.983932] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.985953] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.987500] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.988410] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.991301] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.992243] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.004261] Bluetooth: hci7: HCI_REQ-0x0c1a [ 67.005279] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.043741] Bluetooth: hci7: command 0x0409 tx timeout [ 69.045097] Bluetooth: hci1: command 0x0409 tx timeout [ 69.045876] Bluetooth: hci6: command 0x0409 tx timeout [ 69.046463] Bluetooth: hci5: command 0x0409 tx timeout [ 69.046680] Bluetooth: hci3: command 0x0409 tx timeout [ 69.047286] Bluetooth: hci0: command 0x0409 tx timeout [ 69.048242] Bluetooth: hci2: command 0x0409 tx timeout [ 69.048866] Bluetooth: hci4: command 0x0409 tx timeout [ 71.091399] Bluetooth: hci4: command 0x041b tx timeout [ 71.091583] Bluetooth: hci2: command 0x041b tx timeout [ 71.091859] Bluetooth: hci0: command 0x041b tx timeout [ 71.092426] Bluetooth: hci3: command 0x041b tx timeout [ 71.092807] Bluetooth: hci6: command 0x041b tx timeout [ 71.093389] Bluetooth: hci5: command 0x041b tx timeout [ 71.093769] Bluetooth: hci1: command 0x041b tx timeout [ 71.094446] Bluetooth: hci7: command 0x041b tx timeout [ 73.139539] Bluetooth: hci7: command 0x040f tx timeout [ 73.140435] Bluetooth: hci1: command 0x040f tx timeout [ 73.140804] Bluetooth: hci5: command 0x040f tx timeout [ 73.141216] Bluetooth: hci6: command 0x040f tx timeout [ 73.141608] Bluetooth: hci3: command 0x040f tx timeout [ 73.141966] Bluetooth: hci0: command 0x040f tx timeout [ 73.142481] Bluetooth: hci2: command 0x040f tx timeout [ 73.142849] Bluetooth: hci4: command 0x040f tx timeout [ 75.187669] Bluetooth: hci4: command 0x0419 tx timeout [ 75.188490] Bluetooth: hci2: command 0x0419 tx timeout [ 75.189202] Bluetooth: hci0: command 0x0419 tx timeout [ 75.189999] Bluetooth: hci3: command 0x0419 tx timeout [ 75.190751] Bluetooth: hci6: command 0x0419 tx timeout [ 75.191547] Bluetooth: hci5: command 0x0419 tx timeout [ 75.192250] Bluetooth: hci1: command 0x0419 tx timeout [ 75.193023] Bluetooth: hci7: command 0x0419 tx timeout 19:10:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x960c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioperm(0x0, 0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) [ 124.284301] audit: type=1400 audit(1664824222.444:7): avc: denied { open } for pid=3761 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.286357] audit: type=1400 audit(1664824222.444:8): avc: denied { kernel } for pid=3761 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.317065] ------------[ cut here ]------------ [ 124.317093] [ 124.317097] ====================================================== [ 124.317101] WARNING: possible circular locking dependency detected [ 124.317106] 6.0.0-rc7-next-20220930 #1 Not tainted [ 124.317115] ------------------------------------------------------ [ 124.317119] syz-executor.1/3762 is trying to acquire lock: [ 124.317127] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.317178] [ 124.317178] but task is already holding lock: [ 124.317182] ffff88803eae7020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.317214] [ 124.317214] which lock already depends on the new lock. [ 124.317214] [ 124.317218] [ 124.317218] the existing dependency chain (in reverse order) is: [ 124.317222] [ 124.317222] -> #3 (&ctx->lock){....}-{2:2}: [ 124.317239] _raw_spin_lock+0x2a/0x40 [ 124.317253] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.317267] __schedule+0xedd/0x2470 [ 124.317284] schedule+0xda/0x1b0 [ 124.317301] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.317319] syscall_exit_to_user_mode+0x19/0x40 [ 124.317335] do_syscall_64+0x48/0x90 [ 124.317356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.317372] [ 124.317372] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.317389] _raw_spin_lock_nested+0x30/0x40 [ 124.317402] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.317418] task_fork_fair+0x63/0x4d0 [ 124.317438] sched_cgroup_fork+0x3d0/0x540 [ 124.317455] copy_process+0x4183/0x6e20 [ 124.317468] kernel_clone+0xe7/0x890 [ 124.317480] user_mode_thread+0xad/0xf0 [ 124.317495] rest_init+0x24/0x250 [ 124.317512] arch_call_rest_init+0xf/0x14 [ 124.317534] start_kernel+0x4c6/0x4eb [ 124.317552] secondary_startup_64_no_verify+0xe0/0xeb [ 124.317569] [ 124.317569] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.317586] _raw_spin_lock_irqsave+0x39/0x60 [ 124.317599] try_to_wake_up+0xab/0x1930 [ 124.317615] up+0x75/0xb0 [ 124.317632] __up_console_sem+0x6e/0x80 [ 124.317652] console_unlock+0x46a/0x590 [ 124.317671] vprintk_emit+0x1bd/0x560 [ 124.317690] vprintk+0x84/0xa0 [ 124.317709] _printk+0xba/0xf1 [ 124.317724] __ext4_msg.cold+0x51/0xa7 [ 124.317737] ext4_reconfigure+0xf65/0x2900 [ 124.317755] reconfigure_super+0x40c/0xa50 [ 124.317769] path_mount+0x181e/0x1e20 [ 124.317791] __x64_sys_mount+0x282/0x300 [ 124.317812] do_syscall_64+0x3b/0x90 [ 124.317832] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.317847] [ 124.317847] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.317864] __lock_acquire+0x2a02/0x5e70 [ 124.317885] lock_acquire+0x1a2/0x530 [ 124.317904] _raw_spin_lock_irqsave+0x39/0x60 [ 124.317917] down_trylock+0xe/0x70 [ 124.317935] __down_trylock_console_sem+0x3b/0xd0 [ 124.317954] vprintk_emit+0x16b/0x560 [ 124.317974] vprintk+0x84/0xa0 [ 124.317993] _printk+0xba/0xf1 [ 124.318005] report_bug.cold+0x72/0xab [ 124.318025] handle_bug+0x3c/0x70 [ 124.318045] exc_invalid_op+0x14/0x50 [ 124.318065] asm_exc_invalid_op+0x16/0x20 [ 124.318080] group_sched_out.part.0+0x2c7/0x460 [ 124.318102] ctx_sched_out+0x8f1/0xc10 [ 124.318122] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.318135] __schedule+0xedd/0x2470 [ 124.318152] schedule+0xda/0x1b0 [ 124.318168] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.318181] syscall_exit_to_user_mode+0x19/0x40 [ 124.318196] do_syscall_64+0x48/0x90 [ 124.318216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.318232] [ 124.318232] other info that might help us debug this: [ 124.318232] [ 124.318235] Chain exists of: [ 124.318235] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.318235] [ 124.318253] Possible unsafe locking scenario: [ 124.318253] [ 124.318256] CPU0 CPU1 [ 124.318259] ---- ---- [ 124.318262] lock(&ctx->lock); [ 124.318269] lock(&rq->__lock); [ 124.318277] lock(&ctx->lock); [ 124.318284] lock((console_sem).lock); [ 124.318291] [ 124.318291] *** DEADLOCK *** [ 124.318291] [ 124.318293] 2 locks held by syz-executor.1/3762: [ 124.318302] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.318338] #1: ffff88803eae7020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.318370] [ 124.318370] stack backtrace: [ 124.318373] CPU: 0 PID: 3762 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.318389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.318399] Call Trace: [ 124.318403] [ 124.318408] dump_stack_lvl+0x8b/0xb3 [ 124.318430] check_noncircular+0x263/0x2e0 [ 124.318451] ? format_decode+0x26c/0xb50 [ 124.318471] ? print_circular_bug+0x450/0x450 [ 124.318491] ? simple_strtoul+0x30/0x30 [ 124.318511] ? format_decode+0x26c/0xb50 [ 124.318534] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.318556] __lock_acquire+0x2a02/0x5e70 [ 124.318582] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.318609] lock_acquire+0x1a2/0x530 [ 124.318629] ? down_trylock+0xe/0x70 [ 124.318650] ? lock_release+0x750/0x750 [ 124.318675] ? vprintk+0x84/0xa0 [ 124.318697] _raw_spin_lock_irqsave+0x39/0x60 [ 124.318710] ? down_trylock+0xe/0x70 [ 124.318730] down_trylock+0xe/0x70 [ 124.318749] ? vprintk+0x84/0xa0 [ 124.318769] __down_trylock_console_sem+0x3b/0xd0 [ 124.318790] vprintk_emit+0x16b/0x560 [ 124.318813] vprintk+0x84/0xa0 [ 124.318834] _printk+0xba/0xf1 [ 124.318848] ? record_print_text.cold+0x16/0x16 [ 124.318867] ? report_bug.cold+0x66/0xab [ 124.318889] ? group_sched_out.part.0+0x2c7/0x460 [ 124.318911] report_bug.cold+0x72/0xab [ 124.318934] handle_bug+0x3c/0x70 [ 124.318955] exc_invalid_op+0x14/0x50 [ 124.318977] asm_exc_invalid_op+0x16/0x20 [ 124.318992] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.319017] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.319030] RSP: 0018:ffff88801ed5fc48 EFLAGS: 00010006 [ 124.319041] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.319051] RDX: ffff888018655040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.319060] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 124.319069] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803eae7000 [ 124.319078] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.319092] ? group_sched_out.part.0+0x2c7/0x460 [ 124.319116] ? group_sched_out.part.0+0x2c7/0x460 [ 124.319140] ctx_sched_out+0x8f1/0xc10 [ 124.319163] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.319181] ? lock_is_held_type+0xd7/0x130 [ 124.319197] ? __perf_cgroup_move+0x160/0x160 [ 124.319210] ? set_next_entity+0x304/0x550 [ 124.319232] ? update_curr+0x267/0x740 [ 124.319254] ? lock_is_held_type+0xd7/0x130 [ 124.319271] __schedule+0xedd/0x2470 [ 124.319292] ? io_schedule_timeout+0x150/0x150 [ 124.319312] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.319337] schedule+0xda/0x1b0 [ 124.319355] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.319370] syscall_exit_to_user_mode+0x19/0x40 [ 124.319387] do_syscall_64+0x48/0x90 [ 124.319408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.319424] RIP: 0033:0x7f2fd1355b19 [ 124.319434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.319447] RSP: 002b:00007f2fce8cb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.319461] RAX: 0000000000000001 RBX: 00007f2fd1468f68 RCX: 00007f2fd1355b19 [ 124.319470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2fd1468f6c [ 124.319478] RBP: 00007f2fd1468f60 R08: 000000000000000e R09: 0000000000000000 [ 124.319487] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2fd1468f6c [ 124.319496] R13: 00007fff4590c1af R14: 00007f2fce8cb300 R15: 0000000000022000 [ 124.319511] [ 124.385530] WARNING: CPU: 0 PID: 3762 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.386314] Modules linked in: [ 124.386592] CPU: 0 PID: 3762 Comm: syz-executor.1 Not tainted 6.0.0-rc7-next-20220930 #1 [ 124.387269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.388215] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.388684] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.390196] RSP: 0018:ffff88801ed5fc48 EFLAGS: 00010006 [ 124.390643] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.391230] RDX: ffff888018655040 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 124.391814] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 124.392400] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803eae7000 [ 124.392983] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 124.393573] FS: 00007f2fce8cb700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 124.394240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.394724] CR2: 00007f569c2041f0 CR3: 000000003e812000 CR4: 0000000000350ef0 [ 124.395307] Call Trace: [ 124.395523] [ 124.395716] ctx_sched_out+0x8f1/0xc10 [ 124.396065] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.396497] ? lock_is_held_type+0xd7/0x130 [ 124.396864] ? __perf_cgroup_move+0x160/0x160 [ 124.397246] ? set_next_entity+0x304/0x550 [ 124.397609] ? update_curr+0x267/0x740 [ 124.397954] ? lock_is_held_type+0xd7/0x130 [ 124.398328] __schedule+0xedd/0x2470 [ 124.398651] ? io_schedule_timeout+0x150/0x150 [ 124.399039] ? rcu_read_lock_sched_held+0x3e/0x80 [ 124.399461] schedule+0xda/0x1b0 [ 124.399756] exit_to_user_mode_prepare+0x114/0x1a0 [ 124.400190] syscall_exit_to_user_mode+0x19/0x40 [ 124.400583] do_syscall_64+0x48/0x90 [ 124.400915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.401344] RIP: 0033:0x7f2fd1355b19 [ 124.401662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.403177] RSP: 002b:00007f2fce8cb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.403819] RAX: 0000000000000001 RBX: 00007f2fd1468f68 RCX: 00007f2fd1355b19 [ 124.404420] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2fd1468f6c [ 124.405029] RBP: 00007f2fd1468f60 R08: 000000000000000e R09: 0000000000000000 [ 124.405617] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f2fd1468f6c [ 124.406211] R13: 00007fff4590c1af R14: 00007f2fce8cb300 R15: 0000000000022000 [ 124.406823] [ 124.407028] irq event stamp: 856 [ 124.407317] hardirqs last enabled at (855): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 124.408092] hardirqs last disabled at (856): [] __schedule+0x1225/0x2470 [ 124.408785] softirqs last enabled at (702): [] __irq_exit_rcu+0x11b/0x180 [ 124.409484] softirqs last disabled at (693): [] __irq_exit_rcu+0x11b/0x180 [ 124.410193] ---[ end trace 0000000000000000 ]--- 19:10:22 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b036f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="c0", 0x1, 0x75d6) r2 = syz_io_uring_setup(0xfa7, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r7 = pidfd_getfd(r1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r5, &(0x7f0000000400)=0x80, &(0x7f00000005c0)=@isdn, 0x0, 0x80800, 0x1, {0x0, r8}}, 0x3) syz_io_uring_submit(r3, r6, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, 0x101) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={r10, 0x1, 0x6, @broadcast}, 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x6b0343432449f113, 0x0, r9, 0x80, &(0x7f0000000180)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}}, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) 19:10:22 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000180)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x220, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x204, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1e}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x3f, 0x9, 0xffffffff}, {0x9826, 0x7, 0x1, 0x7fffffff}, {0x1, 0x6, 0xd5, 0x944}, {0x6, 0x1f, 0x0, 0x80000000}, {0x7, 0x3d, 0x8a, 0x1ff}, {0x8, 0xe1, 0x4, 0x81}]}}}]}}]}, 0x220}}, 0x4800) [ 124.753054] device syz_tun entered promiscuous mode [ 124.753830] device syz_tun left promiscuous mode [ 124.760408] device syz_tun entered promiscuous mode [ 124.760906] device syz_tun left promiscuous mode [ 124.767369] loop6: detected capacity change from 0 to 40 19:10:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer, 0x0) io_uring_enter(r2, 0x1, 0x0, 0xf, 0x0, 0x18) [ 124.815898] device syz_tun entered promiscuous mode [ 124.816907] syz-executor.6: attempt to access beyond end of device [ 124.816907] loop6: rw=2049, sector=88, nr_sectors = 4 limit=40 [ 124.821430] device syz_tun left promiscuous mode [ 124.826603] device syz_tun entered promiscuous mode [ 124.832105] device syz_tun left promiscuous mode [ 124.839007] device syz_tun entered promiscuous mode [ 124.842493] device syz_tun entered promiscuous mode [ 124.842678] syz-executor.6: attempt to access beyond end of device [ 124.842678] loop6: rw=2049, sector=88, nr_sectors = 4 limit=40 [ 124.844073] device syz_tun left promiscuous mode [ 124.847875] device syz_tun left promiscuous mode 19:10:23 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="c3b9715f7d8aed5bf4226f6bdfd19521f4700bc5da8a3feba702a923dfef5179e2c45bf2494478ce3ec8d65c0ad8bc2d92770240595b74f125277a55dbedd570e119f3175be8ced9f2da901a43f89711500d86a4285f8f6f575ab9218ba52609608b6a68513a8d27e93716034cf0e3948f5711fa660558a5e24f66acb044afd66fe6c00b8a16272dae20497082d3fbe0d3438667840a1eadc7158bf745a109", 0x9f) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0) dup3(r3, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0xb0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth0_to_bridge\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 19:10:23 executing program 6: syz_emit_ethernet(0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd74230008003b2c0000000000000000000000000000000000fe8000000000000000000000000000aa8903000000000000c2040000ee00ac61f71a5a12dc0223c08a0080c2040000100000010004018c01060000000000e1ff01000000000000232cc946"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) [ 124.895629] kworker/u4:11: attempt to access beyond end of device [ 124.895629] loop6: rw=1, sector=92, nr_sectors = 32 limit=40 [ 124.896932] kworker/u4:11: attempt to access beyond end of device [ 124.896932] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 124.897835] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 124.906517] loop5: detected capacity change from 0 to 264192 19:10:23 executing program 6: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x4, 0xfffffff9, 0xffffffffffff36cf, 0x9, 0x80000000, 0x4ee, 0x4}, 0x0) r0 = fork() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x10000000, 0x7, 0x6, 0x9, 0xffffffffffffff80, 0x0, 0x6, 0x200}, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x10000000) fork() r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x10010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x1, 0x1, {0x0, r3}}, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup3(r5, r6, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000200)) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0xffffffff, 0xcaf, 0x8, 0x1f, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4c, 0x10001, 0x1, 0x1, 0x8001, 0x4, 0x2, 0x9}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x5d36, &(0x7f0000000240)={0x0, 0x3f76, 0x8, 0x0, 0x143}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 19:10:23 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="c3b9715f7d8aed5bf4226f6bdfd19521f4700bc5da8a3feba702a923dfef5179e2c45bf2494478ce3ec8d65c0ad8bc2d92770240595b74f125277a55dbedd570e119f3175be8ced9f2da901a43f89711500d86a4285f8f6f575ab9218ba52609608b6a68513a8d27e93716034cf0e3948f5711fa660558a5e24f66acb044afd66fe6c00b8a16272dae20497082d3fbe0d3438667840a1eadc7158bf745a109", 0x9f) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r2, 0x0) dup3(r3, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0xb0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth0_to_bridge\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) [ 130.035380] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 130.099375] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 130.099372] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 130.099500] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 130.100480] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 134.259525] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 134.323366] Bluetooth: hci2: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 19:10:22 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88801ed5f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2fce8cb700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f569c2041f0 CR3=000000003e812000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f2fd143c7c0 00007f2fd143c7c8 YMM02=0000000000000000 0000000000000000 00007f2fd143c7e0 00007f2fd143c7c0 YMM03=0000000000000000 0000000000000000 00007f2fd143c7c8 00007f2fd143c7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800851c000 RCX=ffffffff817a8924 RDX=1ffffffff0b60d94 RSI=0000000000000008 RDI=ffffffff85b06ca0 RBP=ffffea0000f7d540 RSP=ffff88803ef47a80 R8 =0000000000000000 R9 =ffffea0000f7d547 R10=fffff940001efaa8 R11=0000000000000001 R12=ffff88803ef47b20 R13=0000000000000000 R14=ffff88801d526210 R15=ffffea0000f7d540 RIP=ffffffff817a8999 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f27fce7b6f4 CR3=000000001bbd0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000