Warning: Permanently added '[localhost]:19972' (ECDSA) to the list of known hosts. 2022/10/06 12:00:45 fuzzer started 2022/10/06 12:00:45 dialing manager at localhost:37161 syzkaller login: [ 43.993898] cgroup: Unknown subsys name 'net' [ 44.187810] cgroup: Unknown subsys name 'rlimit' 2022/10/06 12:00:58 syscalls: 2215 2022/10/06 12:00:58 code coverage: enabled 2022/10/06 12:00:58 comparison tracing: enabled 2022/10/06 12:00:58 extra coverage: enabled 2022/10/06 12:00:58 setuid sandbox: enabled 2022/10/06 12:00:58 namespace sandbox: enabled 2022/10/06 12:00:58 Android sandbox: enabled 2022/10/06 12:00:58 fault injection: enabled 2022/10/06 12:00:58 leak checking: enabled 2022/10/06 12:00:58 net packet injection: enabled 2022/10/06 12:00:58 net device setup: enabled 2022/10/06 12:00:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/06 12:00:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/06 12:00:58 USB emulation: enabled 2022/10/06 12:00:58 hci packet injection: enabled 2022/10/06 12:00:58 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006) 2022/10/06 12:00:58 802.15.4 emulation: enabled 2022/10/06 12:00:58 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/06 12:00:59 fetching corpus: 50, signal 29614/32988 (executing program) 2022/10/06 12:00:59 fetching corpus: 100, signal 39517/44259 (executing program) 2022/10/06 12:00:59 fetching corpus: 150, signal 44798/50869 (executing program) 2022/10/06 12:00:59 fetching corpus: 200, signal 50124/57426 (executing program) 2022/10/06 12:00:59 fetching corpus: 250, signal 55799/64186 (executing program) 2022/10/06 12:00:59 fetching corpus: 300, signal 61652/70960 (executing program) 2022/10/06 12:00:59 fetching corpus: 350, signal 66558/76760 (executing program) 2022/10/06 12:00:59 fetching corpus: 400, signal 68404/79670 (executing program) 2022/10/06 12:01:00 fetching corpus: 450, signal 73369/85321 (executing program) 2022/10/06 12:01:00 fetching corpus: 500, signal 79722/92129 (executing program) 2022/10/06 12:01:00 fetching corpus: 550, signal 82366/95556 (executing program) 2022/10/06 12:01:00 fetching corpus: 600, signal 85285/99167 (executing program) 2022/10/06 12:01:00 fetching corpus: 650, signal 87893/102469 (executing program) 2022/10/06 12:01:00 fetching corpus: 700, signal 90056/105347 (executing program) 2022/10/06 12:01:00 fetching corpus: 750, signal 91566/107652 (executing program) 2022/10/06 12:01:00 fetching corpus: 800, signal 93955/110622 (executing program) 2022/10/06 12:01:01 fetching corpus: 850, signal 95647/112977 (executing program) 2022/10/06 12:01:01 fetching corpus: 900, signal 97083/115094 (executing program) 2022/10/06 12:01:01 fetching corpus: 950, signal 99671/118002 (executing program) 2022/10/06 12:01:01 fetching corpus: 1000, signal 102646/121235 (executing program) 2022/10/06 12:01:01 fetching corpus: 1050, signal 104437/123491 (executing program) 2022/10/06 12:01:01 fetching corpus: 1100, signal 106061/125562 (executing program) 2022/10/06 12:01:01 fetching corpus: 1150, signal 107415/127429 (executing program) 2022/10/06 12:01:01 fetching corpus: 1200, signal 109308/129642 (executing program) 2022/10/06 12:01:01 fetching corpus: 1250, signal 110266/131097 (executing program) 2022/10/06 12:01:02 fetching corpus: 1300, signal 113128/133888 (executing program) 2022/10/06 12:01:02 fetching corpus: 1350, signal 114336/135497 (executing program) 2022/10/06 12:01:02 fetching corpus: 1400, signal 116976/138029 (executing program) 2022/10/06 12:01:02 fetching corpus: 1450, signal 117800/139366 (executing program) 2022/10/06 12:01:02 fetching corpus: 1500, signal 118800/140735 (executing program) 2022/10/06 12:01:02 fetching corpus: 1550, signal 120051/142285 (executing program) 2022/10/06 12:01:02 fetching corpus: 1600, signal 121710/144087 (executing program) 2022/10/06 12:01:02 fetching corpus: 1650, signal 122981/145562 (executing program) 2022/10/06 12:01:02 fetching corpus: 1700, signal 126728/148496 (executing program) 2022/10/06 12:01:02 fetching corpus: 1750, signal 127923/149846 (executing program) 2022/10/06 12:01:03 fetching corpus: 1800, signal 129209/151252 (executing program) 2022/10/06 12:01:03 fetching corpus: 1850, signal 130835/152812 (executing program) 2022/10/06 12:01:03 fetching corpus: 1900, signal 131801/154000 (executing program) 2022/10/06 12:01:03 fetching corpus: 1950, signal 133128/155301 (executing program) 2022/10/06 12:01:03 fetching corpus: 2000, signal 135272/157036 (executing program) 2022/10/06 12:01:03 fetching corpus: 2050, signal 136244/158090 (executing program) 2022/10/06 12:01:03 fetching corpus: 2100, signal 137744/159408 (executing program) 2022/10/06 12:01:03 fetching corpus: 2150, signal 138170/160133 (executing program) 2022/10/06 12:01:04 fetching corpus: 2200, signal 140528/161808 (executing program) 2022/10/06 12:01:04 fetching corpus: 2250, signal 141867/162936 (executing program) 2022/10/06 12:01:04 fetching corpus: 2300, signal 142689/163762 (executing program) 2022/10/06 12:01:04 fetching corpus: 2350, signal 144105/164836 (executing program) 2022/10/06 12:01:04 fetching corpus: 2400, signal 144918/165630 (executing program) 2022/10/06 12:01:04 fetching corpus: 2450, signal 146514/166745 (executing program) 2022/10/06 12:01:04 fetching corpus: 2500, signal 148174/167888 (executing program) 2022/10/06 12:01:04 fetching corpus: 2550, signal 149231/168707 (executing program) 2022/10/06 12:01:04 fetching corpus: 2600, signal 149850/169370 (executing program) 2022/10/06 12:01:05 fetching corpus: 2650, signal 150483/169981 (executing program) 2022/10/06 12:01:05 fetching corpus: 2700, signal 151416/170734 (executing program) 2022/10/06 12:01:05 fetching corpus: 2750, signal 152566/171570 (executing program) 2022/10/06 12:01:05 fetching corpus: 2800, signal 153115/172146 (executing program) 2022/10/06 12:01:05 fetching corpus: 2850, signal 153874/172721 (executing program) 2022/10/06 12:01:05 fetching corpus: 2900, signal 154744/173348 (executing program) 2022/10/06 12:01:05 fetching corpus: 2950, signal 156067/174083 (executing program) 2022/10/06 12:01:05 fetching corpus: 3000, signal 157163/174765 (executing program) 2022/10/06 12:01:05 fetching corpus: 3050, signal 157834/175256 (executing program) 2022/10/06 12:01:06 fetching corpus: 3100, signal 158936/175875 (executing program) 2022/10/06 12:01:06 fetching corpus: 3150, signal 160005/176522 (executing program) 2022/10/06 12:01:06 fetching corpus: 3200, signal 160857/177018 (executing program) 2022/10/06 12:01:06 fetching corpus: 3250, signal 161158/177313 (executing program) 2022/10/06 12:01:06 fetching corpus: 3300, signal 161696/177710 (executing program) 2022/10/06 12:01:06 fetching corpus: 3350, signal 162636/178203 (executing program) 2022/10/06 12:01:06 fetching corpus: 3400, signal 163616/178674 (executing program) 2022/10/06 12:01:06 fetching corpus: 3450, signal 164565/179103 (executing program) 2022/10/06 12:01:06 fetching corpus: 3500, signal 165192/179422 (executing program) 2022/10/06 12:01:07 fetching corpus: 3550, signal 165982/179804 (executing program) 2022/10/06 12:01:07 fetching corpus: 3600, signal 166612/180126 (executing program) 2022/10/06 12:01:07 fetching corpus: 3650, signal 167219/180406 (executing program) 2022/10/06 12:01:07 fetching corpus: 3700, signal 167962/180720 (executing program) 2022/10/06 12:01:07 fetching corpus: 3750, signal 168470/180988 (executing program) 2022/10/06 12:01:07 fetching corpus: 3800, signal 169168/181360 (executing program) 2022/10/06 12:01:07 fetching corpus: 3850, signal 169803/181625 (executing program) 2022/10/06 12:01:07 fetching corpus: 3900, signal 170591/181909 (executing program) 2022/10/06 12:01:07 fetching corpus: 3950, signal 171045/182122 (executing program) 2022/10/06 12:01:08 fetching corpus: 4000, signal 172115/182385 (executing program) 2022/10/06 12:01:08 fetching corpus: 4050, signal 173067/182597 (executing program) 2022/10/06 12:01:08 fetching corpus: 4100, signal 173916/182795 (executing program) 2022/10/06 12:01:08 fetching corpus: 4150, signal 174724/182999 (executing program) 2022/10/06 12:01:08 fetching corpus: 4200, signal 175225/183137 (executing program) 2022/10/06 12:01:08 fetching corpus: 4250, signal 175899/183282 (executing program) 2022/10/06 12:01:08 fetching corpus: 4300, signal 176675/183400 (executing program) 2022/10/06 12:01:08 fetching corpus: 4350, signal 177010/183470 (executing program) 2022/10/06 12:01:09 fetching corpus: 4400, signal 177505/183579 (executing program) 2022/10/06 12:01:09 fetching corpus: 4450, signal 178655/183654 (executing program) 2022/10/06 12:01:09 fetching corpus: 4500, signal 179084/183718 (executing program) 2022/10/06 12:01:09 fetching corpus: 4550, signal 179427/183722 (executing program) 2022/10/06 12:01:09 fetching corpus: 4578, signal 179844/183723 (executing program) 2022/10/06 12:01:09 fetching corpus: 4578, signal 179844/183723 (executing program) 2022/10/06 12:01:12 starting 8 fuzzer processes 12:01:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 12:01:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 12:01:12 executing program 2: clock_gettime(0x0, &(0x7f0000003c00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003c40)={0x0, r0+10000000}) 12:01:12 executing program 3: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000400)) [ 70.530532] audit: type=1400 audit(1665057672.379:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:01:12 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00'}) 12:01:12 executing program 5: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000300)) 12:01:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) 12:01:12 executing program 7: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) [ 71.914874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.916927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.919754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.921598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.923191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.926358] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.928130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.929308] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.931035] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.936560] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.957113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.973234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.974806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.980525] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.001958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.002122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.003880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.005759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.008104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.009438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.011514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.013475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.014688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.017257] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.020048] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.021223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.023519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.028318] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.032160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.033803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.035585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.037900] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.041822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.043349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.044886] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.047386] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.049108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.050286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.051919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.054953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.056335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.060978] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.064238] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.064273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.066318] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.067360] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.075218] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.079554] Bluetooth: hci5: HCI_REQ-0x0c1a [ 72.080464] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.987948] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 73.988169] Bluetooth: hci1: command 0x0409 tx timeout [ 73.989375] Bluetooth: hci0: command 0x0409 tx timeout [ 74.116183] Bluetooth: hci6: command 0x0409 tx timeout [ 74.116779] Bluetooth: hci5: command 0x0409 tx timeout [ 74.117249] Bluetooth: hci7: command 0x0409 tx timeout [ 74.117758] Bluetooth: hci4: command 0x0409 tx timeout [ 74.118232] Bluetooth: hci3: command 0x0409 tx timeout [ 76.035717] Bluetooth: hci0: command 0x041b tx timeout [ 76.036659] Bluetooth: hci1: command 0x041b tx timeout [ 76.163718] Bluetooth: hci3: command 0x041b tx timeout [ 76.164154] Bluetooth: hci4: command 0x041b tx timeout [ 76.164506] Bluetooth: hci7: command 0x041b tx timeout [ 76.164890] Bluetooth: hci5: command 0x041b tx timeout [ 76.165251] Bluetooth: hci6: command 0x041b tx timeout [ 77.031122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.035029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.048331] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.059947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.066809] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.068767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.078587] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.083686] Bluetooth: hci1: command 0x040f tx timeout [ 78.084121] Bluetooth: hci0: command 0x040f tx timeout [ 78.211696] Bluetooth: hci6: command 0x040f tx timeout [ 78.212111] Bluetooth: hci5: command 0x040f tx timeout [ 78.212462] Bluetooth: hci7: command 0x040f tx timeout [ 78.212856] Bluetooth: hci4: command 0x040f tx timeout [ 78.213213] Bluetooth: hci3: command 0x040f tx timeout [ 79.107711] Bluetooth: hci2: command 0x0409 tx timeout [ 80.131677] Bluetooth: hci0: command 0x0419 tx timeout [ 80.132090] Bluetooth: hci1: command 0x0419 tx timeout [ 80.259742] Bluetooth: hci3: command 0x0419 tx timeout [ 80.260164] Bluetooth: hci4: command 0x0419 tx timeout [ 80.260520] Bluetooth: hci7: command 0x0419 tx timeout [ 80.261236] Bluetooth: hci5: command 0x0419 tx timeout [ 80.261594] Bluetooth: hci6: command 0x0419 tx timeout [ 81.155755] Bluetooth: hci2: command 0x041b tx timeout [ 83.203766] Bluetooth: hci2: command 0x040f tx timeout [ 85.251679] Bluetooth: hci2: command 0x0419 tx timeout 12:02:05 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x16, 0x9b, 0x0, 0x4, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x148, 0x41, 0x3, 0x7, 0xe88a, 0x7f, 0x6, 0x0, 0xf7b5, 0x0, 0x9}, 0x0, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$mouse(&(0x7f0000000300), 0x5a8, 0x20000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 123.782512] audit: type=1400 audit(1665057725.632:7): avc: denied { open } for pid=3810 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.784210] audit: type=1400 audit(1665057725.632:8): avc: denied { kernel } for pid=3810 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.798001] ------------[ cut here ]------------ [ 123.798020] [ 123.798024] ====================================================== [ 123.798027] WARNING: possible circular locking dependency detected [ 123.798031] 6.0.0-next-20221006 #1 Not tainted [ 123.798037] ------------------------------------------------------ [ 123.798041] syz-executor.1/3812 is trying to acquire lock: [ 123.798047] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 123.798089] [ 123.798089] but task is already holding lock: [ 123.798092] ffff88800f1a8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.798119] [ 123.798119] which lock already depends on the new lock. [ 123.798119] [ 123.798122] [ 123.798122] the existing dependency chain (in reverse order) is: [ 123.798126] [ 123.798126] -> #3 (&ctx->lock){....}-{2:2}: [ 123.798139] _raw_spin_lock+0x2a/0x40 [ 123.798152] __perf_event_task_sched_out+0x53b/0x18d0 [ 123.798163] __schedule+0xedd/0x2470 [ 123.798178] preempt_schedule_common+0x45/0xc0 [ 123.798195] __cond_resched+0x17/0x30 [ 123.798210] __mutex_lock+0xa3/0x14d0 [ 123.798226] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.798237] do_syscall_64+0x3b/0x90 [ 123.798248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.798262] [ 123.798262] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 123.798275] _raw_spin_lock_nested+0x30/0x40 [ 123.798287] raw_spin_rq_lock_nested+0x1e/0x30 [ 123.798301] task_fork_fair+0x63/0x4d0 [ 123.798317] sched_cgroup_fork+0x3d0/0x540 [ 123.798332] copy_process+0x4183/0x6e20 [ 123.798343] kernel_clone+0xe7/0x890 [ 123.798352] user_mode_thread+0xad/0xf0 [ 123.798362] rest_init+0x24/0x250 [ 123.798375] arch_call_rest_init+0xf/0x14 [ 123.798387] start_kernel+0x4c6/0x4eb [ 123.798397] secondary_startup_64_no_verify+0xe0/0xeb [ 123.798411] [ 123.798411] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 123.798424] _raw_spin_lock_irqsave+0x39/0x60 [ 123.798436] try_to_wake_up+0xab/0x1930 [ 123.798449] up+0x75/0xb0 [ 123.798465] __up_console_sem+0x6e/0x80 [ 123.798481] console_unlock+0x46a/0x590 [ 123.798496] vprintk_emit+0x1bd/0x560 [ 123.798512] vprintk+0x84/0xa0 [ 123.798528] _printk+0xba/0xf1 [ 123.798541] regdb_fw_cb.cold+0x6c/0xa7 [ 123.798559] request_firmware_work_func+0x12e/0x240 [ 123.798572] process_one_work+0xa17/0x16a0 [ 123.798589] worker_thread+0x637/0x1260 [ 123.798606] kthread+0x2ed/0x3a0 [ 123.798620] ret_from_fork+0x22/0x30 [ 123.798632] [ 123.798632] -> #0 ((console_sem).lock){....}-{2:2}: [ 123.798645] __lock_acquire+0x2a02/0x5e70 [ 123.798662] lock_acquire+0x1a2/0x530 [ 123.798678] _raw_spin_lock_irqsave+0x39/0x60 [ 123.798690] down_trylock+0xe/0x70 [ 123.798706] __down_trylock_console_sem+0x3b/0xd0 [ 123.798721] vprintk_emit+0x16b/0x560 [ 123.798737] vprintk+0x84/0xa0 [ 123.798753] _printk+0xba/0xf1 [ 123.798764] report_bug.cold+0x72/0xab [ 123.798773] handle_bug+0x3c/0x70 [ 123.798783] exc_invalid_op+0x14/0x50 [ 123.798793] asm_exc_invalid_op+0x16/0x20 [ 123.798807] group_sched_out.part.0+0x2c7/0x460 [ 123.798824] ctx_sched_out+0x8f1/0xc10 [ 123.798841] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.798852] __schedule+0xedd/0x2470 [ 123.798867] preempt_schedule_common+0x45/0xc0 [ 123.798883] __cond_resched+0x17/0x30 [ 123.798898] __mutex_lock+0xa3/0x14d0 [ 123.798914] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.798925] do_syscall_64+0x3b/0x90 [ 123.798935] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.798949] [ 123.798949] other info that might help us debug this: [ 123.798949] [ 123.798951] Chain exists of: [ 123.798951] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 123.798951] [ 123.798966] Possible unsafe locking scenario: [ 123.798966] [ 123.798969] CPU0 CPU1 [ 123.798971] ---- ---- [ 123.798973] lock(&ctx->lock); [ 123.798979] lock(&rq->__lock); [ 123.798985] lock(&ctx->lock); [ 123.798991] lock((console_sem).lock); [ 123.798997] [ 123.798997] *** DEADLOCK *** [ 123.798997] [ 123.798999] 2 locks held by syz-executor.1/3812: [ 123.799005] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 123.799036] #1: ffff88800f1a8020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 123.799062] [ 123.799062] stack backtrace: [ 123.799065] CPU: 1 PID: 3812 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 123.799077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.799084] Call Trace: [ 123.799087] [ 123.799091] dump_stack_lvl+0x8b/0xb3 [ 123.799103] check_noncircular+0x263/0x2e0 [ 123.799119] ? format_decode+0x26c/0xb50 [ 123.799137] ? print_circular_bug+0x450/0x450 [ 123.799154] ? simple_strtoul+0x30/0x30 [ 123.799169] ? __lockdep_reset_lock+0x180/0x180 [ 123.799186] ? format_decode+0x26c/0xb50 [ 123.799204] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 123.799222] __lock_acquire+0x2a02/0x5e70 [ 123.799243] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 123.799265] lock_acquire+0x1a2/0x530 [ 123.799282] ? down_trylock+0xe/0x70 [ 123.799300] ? lock_release+0x750/0x750 [ 123.799318] ? find_held_lock+0x2c/0x110 [ 123.799335] ? vprintk+0x84/0xa0 [ 123.799352] _raw_spin_lock_irqsave+0x39/0x60 [ 123.799365] ? down_trylock+0xe/0x70 [ 123.799382] down_trylock+0xe/0x70 [ 123.799399] ? vprintk+0x84/0xa0 [ 123.799416] __down_trylock_console_sem+0x3b/0xd0 [ 123.799433] vprintk_emit+0x16b/0x560 [ 123.799452] vprintk+0x84/0xa0 [ 123.799469] _printk+0xba/0xf1 [ 123.799481] ? record_print_text.cold+0x16/0x16 [ 123.799496] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 123.799511] ? lock_downgrade+0x6d0/0x6d0 [ 123.799528] ? report_bug.cold+0x66/0xab [ 123.799540] ? group_sched_out.part.0+0x2c7/0x460 [ 123.799558] report_bug.cold+0x72/0xab [ 123.799570] handle_bug+0x3c/0x70 [ 123.799580] exc_invalid_op+0x14/0x50 [ 123.799592] asm_exc_invalid_op+0x16/0x20 [ 123.799605] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.799626] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.799638] RSP: 0018:ffff888021247978 EFLAGS: 00010006 [ 123.799647] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.799654] RDX: ffff888021170000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 123.799662] RBP: ffff888010400000 R08: 0000000000000005 R09: 0000000000000001 [ 123.799669] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f1a8000 [ 123.799676] R13: ffff88806cf3d2c0 R14: ffffffff8547cb60 R15: 0000000000000002 [ 123.799688] ? group_sched_out.part.0+0x2c7/0x460 [ 123.799707] ? group_sched_out.part.0+0x2c7/0x460 [ 123.799727] ctx_sched_out+0x8f1/0xc10 [ 123.799746] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.799761] ? lock_is_held_type+0xd7/0x130 [ 123.799790] ? __perf_cgroup_move+0x160/0x160 [ 123.799801] ? set_next_entity+0x304/0x550 [ 123.799819] ? update_curr+0x267/0x740 [ 123.799837] ? lock_is_held_type+0xd7/0x130 [ 123.799852] __schedule+0xedd/0x2470 [ 123.799870] ? io_schedule_timeout+0x150/0x150 [ 123.799886] ? find_held_lock+0x2c/0x110 [ 123.799903] ? lock_is_held_type+0xd7/0x130 [ 123.799917] ? __cond_resched+0x17/0x30 [ 123.799933] preempt_schedule_common+0x45/0xc0 [ 123.799951] __cond_resched+0x17/0x30 [ 123.799967] __mutex_lock+0xa3/0x14d0 [ 123.799985] ? lock_is_held_type+0xd7/0x130 [ 123.799999] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.800012] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.800030] ? lock_release+0x3b2/0x750 [ 123.800047] ? __up_read+0x192/0x730 [ 123.800062] ? up_write+0x520/0x520 [ 123.800079] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.800094] ? __up_read+0x192/0x730 [ 123.800108] ? perf_compat_ioctl+0x130/0x130 [ 123.800119] ? up_write+0x520/0x520 [ 123.800137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.800152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.800169] do_syscall_64+0x3b/0x90 [ 123.800180] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.800195] RIP: 0033:0x7fb2d073bb19 [ 123.800203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.800214] RSP: 002b:00007fb2cdcb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.800225] RAX: ffffffffffffffda RBX: 00007fb2d084ef60 RCX: 00007fb2d073bb19 [ 123.800233] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 123.800240] RBP: 00007fb2d0795f6d R08: 000000000000000b R09: 0000000000000000 [ 123.800247] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.800254] R13: 00007ffc8263001f R14: 00007fb2cdcb1300 R15: 0000000000022000 [ 123.800267] [ 123.866029] WARNING: CPU: 1 PID: 3812 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 123.866712] Modules linked in: [ 123.866953] CPU: 1 PID: 3812 Comm: syz-executor.1 Not tainted 6.0.0-next-20221006 #1 [ 123.867510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 123.868103] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 123.868503] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 123.869783] RSP: 0018:ffff888021247978 EFLAGS: 00010006 [ 123.870170] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 123.870685] RDX: ffff888021170000 RSI: ffffffff815677b7 RDI: 0000000000000005 [ 123.871200] RBP: ffff888010400000 R08: 0000000000000005 R09: 0000000000000001 [ 123.871711] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f1a8000 [ 123.872223] R13: ffff88806cf3d2c0 R14: ffffffff8547cb60 R15: 0000000000000002 [ 123.872730] FS: 00007fb2cdcb1700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 123.873307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.873718] CR2: 00007fc662497250 CR3: 000000003df3a000 CR4: 0000000000350ee0 [ 123.874239] Call Trace: [ 123.874423] [ 123.874589] ctx_sched_out+0x8f1/0xc10 [ 123.874885] __perf_event_task_sched_out+0x6d0/0x18d0 [ 123.875252] ? lock_is_held_type+0xd7/0x130 [ 123.875568] ? __perf_cgroup_move+0x160/0x160 [ 123.875895] ? set_next_entity+0x304/0x550 [ 123.876217] ? update_curr+0x267/0x740 [ 123.876508] ? lock_is_held_type+0xd7/0x130 [ 123.876831] __schedule+0xedd/0x2470 [ 123.877114] ? io_schedule_timeout+0x150/0x150 [ 123.877457] ? find_held_lock+0x2c/0x110 [ 123.877757] ? lock_is_held_type+0xd7/0x130 [ 123.878079] ? __cond_resched+0x17/0x30 [ 123.878378] preempt_schedule_common+0x45/0xc0 [ 123.878726] __cond_resched+0x17/0x30 [ 123.879012] __mutex_lock+0xa3/0x14d0 [ 123.879296] ? lock_is_held_type+0xd7/0x130 [ 123.879621] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.879997] ? mutex_lock_io_nested+0x1310/0x1310 [ 123.880368] ? lock_release+0x3b2/0x750 [ 123.880678] ? __up_read+0x192/0x730 [ 123.880957] ? up_write+0x520/0x520 [ 123.881229] __do_sys_perf_event_open+0x1eec/0x32c0 [ 123.881607] ? __up_read+0x192/0x730 [ 123.881885] ? perf_compat_ioctl+0x130/0x130 [ 123.882214] ? up_write+0x520/0x520 [ 123.882487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.882870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 123.883249] do_syscall_64+0x3b/0x90 [ 123.883519] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.883901] RIP: 0033:0x7fb2d073bb19 [ 123.884176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 123.885472] RSP: 002b:00007fb2cdcb1188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 123.886024] RAX: ffffffffffffffda RBX: 00007fb2d084ef60 RCX: 00007fb2d073bb19 [ 123.886536] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 123.887054] RBP: 00007fb2d0795f6d R08: 000000000000000b R09: 0000000000000000 [ 123.887559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 123.888097] R13: 00007ffc8263001f R14: 00007fb2cdcb1300 R15: 0000000000022000 [ 123.888621] [ 123.888793] irq event stamp: 650 [ 123.889046] hardirqs last enabled at (649): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 123.889738] hardirqs last disabled at (650): [] __schedule+0x1225/0x2470 [ 123.890333] softirqs last enabled at (638): [] __irq_exit_rcu+0x11b/0x180 [ 123.890935] softirqs last disabled at (441): [] __irq_exit_rcu+0x11b/0x180 [ 123.891549] ---[ end trace 0000000000000000 ]--- [ 123.963410] audit: type=1400 audit(1665057725.813:9): avc: denied { write } for pid=3810 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:02:05 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x16, 0x9b, 0x0, 0x4, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x148, 0x41, 0x3, 0x7, 0xe88a, 0x7f, 0x6, 0x0, 0xf7b5, 0x0, 0x9}, 0x0, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$mouse(&(0x7f0000000300), 0x5a8, 0x20000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:02:05 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x16, 0x9b, 0x0, 0x4, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x148, 0x41, 0x3, 0x7, 0xe88a, 0x7f, 0x6, 0x0, 0xf7b5, 0x0, 0x9}, 0x0, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$mouse(&(0x7f0000000300), 0x5a8, 0x20000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:02:06 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x16, 0x9b, 0x0, 0x4, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x148, 0x41, 0x3, 0x7, 0xe88a, 0x7f, 0x6, 0x0, 0xf7b5, 0x0, 0x9}, 0x0, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$mouse(&(0x7f0000000300), 0x5a8, 0x20000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:02:06 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe57d) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0xff, 0x16, 0x9b, 0x0, 0x4, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000340), 0x9}, 0x148, 0x41, 0x3, 0x7, 0xe88a, 0x7f, 0x6, 0x0, 0xf7b5, 0x0, 0x9}, 0x0, 0xe, r2, 0x2) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_open_dev$mouse(&(0x7f0000000300), 0x5a8, 0x20000) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) VM DIAGNOSIS: 12:02:05 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888021357860 RCX=0000000000000004 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff888021357818 RBP=ffff88800ff58000 RSP=ffff888021357770 R8 =0000000000000001 R9 =ffff8880213577c8 R10=ffffed100426af06 R11=0000000000000001 R12=0000000000000000 R13=ffff8880213577f0 R14=ffff88800ff58000 R15=ffff8880213577c8 RIP=ffffffff84154284 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7a8c992368 CR3=0000000015de6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c0801 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff8880212473c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c07f0 RIP=ffffffff823c0859 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb2cdcb1700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc662497250 CR3=000000003df3a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000