Warning: Permanently added '[localhost]:19610' (ECDSA) to the list of known hosts. 2022/09/14 14:10:01 fuzzer started 2022/09/14 14:10:01 dialing manager at localhost:33849 syzkaller login: [ 41.904856] cgroup: Unknown subsys name 'net' [ 42.048069] cgroup: Unknown subsys name 'rlimit' 2022/09/14 14:10:16 syscalls: 2215 2022/09/14 14:10:16 code coverage: enabled 2022/09/14 14:10:16 comparison tracing: enabled 2022/09/14 14:10:16 extra coverage: enabled 2022/09/14 14:10:16 setuid sandbox: enabled 2022/09/14 14:10:16 namespace sandbox: enabled 2022/09/14 14:10:16 Android sandbox: enabled 2022/09/14 14:10:16 fault injection: enabled 2022/09/14 14:10:16 leak checking: enabled 2022/09/14 14:10:16 net packet injection: enabled 2022/09/14 14:10:16 net device setup: enabled 2022/09/14 14:10:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 14:10:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 14:10:16 USB emulation: enabled 2022/09/14 14:10:16 hci packet injection: enabled 2022/09/14 14:10:16 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 14:10:16 802.15.4 emulation: enabled 2022/09/14 14:10:16 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 14:10:17 fetching corpus: 50, signal 28699/32333 (executing program) 2022/09/14 14:10:17 fetching corpus: 100, signal 45036/50086 (executing program) 2022/09/14 14:10:17 fetching corpus: 150, signal 56109/62496 (executing program) 2022/09/14 14:10:17 fetching corpus: 200, signal 62734/70454 (executing program) 2022/09/14 14:10:17 fetching corpus: 250, signal 69954/78907 (executing program) 2022/09/14 14:10:17 fetching corpus: 300, signal 73387/83702 (executing program) 2022/09/14 14:10:17 fetching corpus: 350, signal 81088/92327 (executing program) 2022/09/14 14:10:18 fetching corpus: 400, signal 86512/98783 (executing program) 2022/09/14 14:10:18 fetching corpus: 450, signal 90368/103711 (executing program) 2022/09/14 14:10:18 fetching corpus: 500, signal 94847/109162 (executing program) 2022/09/14 14:10:18 fetching corpus: 550, signal 100507/115587 (executing program) 2022/09/14 14:10:18 fetching corpus: 600, signal 103277/119306 (executing program) 2022/09/14 14:10:18 fetching corpus: 650, signal 106950/123746 (executing program) 2022/09/14 14:10:19 fetching corpus: 700, signal 111845/129275 (executing program) 2022/09/14 14:10:19 fetching corpus: 750, signal 115646/133754 (executing program) 2022/09/14 14:10:19 fetching corpus: 800, signal 118035/136956 (executing program) 2022/09/14 14:10:19 fetching corpus: 850, signal 121436/141099 (executing program) 2022/09/14 14:10:19 fetching corpus: 900, signal 123993/144360 (executing program) 2022/09/14 14:10:19 fetching corpus: 950, signal 126181/147243 (executing program) 2022/09/14 14:10:19 fetching corpus: 1000, signal 127808/149664 (executing program) 2022/09/14 14:10:20 fetching corpus: 1050, signal 130365/152794 (executing program) 2022/09/14 14:10:20 fetching corpus: 1100, signal 132665/155686 (executing program) 2022/09/14 14:10:20 fetching corpus: 1150, signal 134058/157823 (executing program) 2022/09/14 14:10:20 fetching corpus: 1200, signal 136138/160487 (executing program) 2022/09/14 14:10:20 fetching corpus: 1250, signal 138645/163481 (executing program) 2022/09/14 14:10:20 fetching corpus: 1300, signal 141023/166313 (executing program) 2022/09/14 14:10:20 fetching corpus: 1350, signal 142470/168360 (executing program) 2022/09/14 14:10:21 fetching corpus: 1400, signal 146068/172024 (executing program) 2022/09/14 14:10:21 fetching corpus: 1450, signal 146952/173587 (executing program) 2022/09/14 14:10:21 fetching corpus: 1500, signal 148398/175553 (executing program) 2022/09/14 14:10:21 fetching corpus: 1550, signal 149345/177105 (executing program) 2022/09/14 14:10:21 fetching corpus: 1600, signal 150752/178970 (executing program) 2022/09/14 14:10:21 fetching corpus: 1650, signal 152507/181056 (executing program) 2022/09/14 14:10:21 fetching corpus: 1700, signal 154325/183210 (executing program) 2022/09/14 14:10:22 fetching corpus: 1750, signal 156002/185206 (executing program) 2022/09/14 14:10:22 fetching corpus: 1800, signal 157754/187310 (executing program) 2022/09/14 14:10:22 fetching corpus: 1850, signal 159754/189515 (executing program) 2022/09/14 14:10:22 fetching corpus: 1900, signal 160818/191069 (executing program) 2022/09/14 14:10:22 fetching corpus: 1950, signal 162579/193058 (executing program) 2022/09/14 14:10:22 fetching corpus: 2000, signal 163788/194638 (executing program) 2022/09/14 14:10:22 fetching corpus: 2050, signal 165168/196309 (executing program) 2022/09/14 14:10:23 fetching corpus: 2100, signal 167593/198681 (executing program) 2022/09/14 14:10:23 fetching corpus: 2150, signal 168648/200088 (executing program) 2022/09/14 14:10:23 fetching corpus: 2200, signal 169688/201476 (executing program) 2022/09/14 14:10:23 fetching corpus: 2250, signal 171734/203508 (executing program) 2022/09/14 14:10:23 fetching corpus: 2300, signal 172783/204829 (executing program) 2022/09/14 14:10:23 fetching corpus: 2350, signal 173737/206073 (executing program) 2022/09/14 14:10:23 fetching corpus: 2400, signal 174651/207317 (executing program) 2022/09/14 14:10:24 fetching corpus: 2450, signal 175795/208726 (executing program) 2022/09/14 14:10:24 fetching corpus: 2500, signal 176944/209996 (executing program) 2022/09/14 14:10:24 fetching corpus: 2550, signal 178717/211674 (executing program) 2022/09/14 14:10:24 fetching corpus: 2600, signal 179452/212693 (executing program) 2022/09/14 14:10:24 fetching corpus: 2650, signal 180592/213995 (executing program) 2022/09/14 14:10:24 fetching corpus: 2700, signal 181390/215069 (executing program) 2022/09/14 14:10:24 fetching corpus: 2750, signal 182514/216263 (executing program) 2022/09/14 14:10:25 fetching corpus: 2800, signal 183621/217484 (executing program) 2022/09/14 14:10:25 fetching corpus: 2850, signal 185214/218898 (executing program) 2022/09/14 14:10:25 fetching corpus: 2900, signal 186179/219995 (executing program) 2022/09/14 14:10:25 fetching corpus: 2950, signal 187243/221133 (executing program) 2022/09/14 14:10:25 fetching corpus: 3000, signal 188310/222299 (executing program) 2022/09/14 14:10:25 fetching corpus: 3050, signal 189289/223365 (executing program) 2022/09/14 14:10:25 fetching corpus: 3100, signal 190269/224451 (executing program) 2022/09/14 14:10:26 fetching corpus: 3150, signal 191494/225670 (executing program) 2022/09/14 14:10:26 fetching corpus: 3200, signal 192450/226698 (executing program) 2022/09/14 14:10:26 fetching corpus: 3250, signal 193319/227596 (executing program) 2022/09/14 14:10:26 fetching corpus: 3300, signal 194766/228731 (executing program) 2022/09/14 14:10:26 fetching corpus: 3350, signal 196153/229842 (executing program) 2022/09/14 14:10:26 fetching corpus: 3400, signal 197050/230690 (executing program) 2022/09/14 14:10:27 fetching corpus: 3450, signal 198059/231617 (executing program) 2022/09/14 14:10:27 fetching corpus: 3500, signal 199168/232587 (executing program) 2022/09/14 14:10:27 fetching corpus: 3550, signal 199761/233315 (executing program) 2022/09/14 14:10:27 fetching corpus: 3600, signal 201196/234334 (executing program) 2022/09/14 14:10:27 fetching corpus: 3650, signal 202199/235257 (executing program) 2022/09/14 14:10:27 fetching corpus: 3700, signal 203117/236031 (executing program) 2022/09/14 14:10:27 fetching corpus: 3750, signal 204637/237035 (executing program) 2022/09/14 14:10:27 fetching corpus: 3800, signal 205641/237851 (executing program) 2022/09/14 14:10:28 fetching corpus: 3850, signal 206189/238493 (executing program) 2022/09/14 14:10:28 fetching corpus: 3900, signal 206781/239132 (executing program) 2022/09/14 14:10:28 fetching corpus: 3950, signal 208110/240020 (executing program) 2022/09/14 14:10:28 fetching corpus: 4000, signal 209108/240782 (executing program) 2022/09/14 14:10:28 fetching corpus: 4050, signal 209585/241347 (executing program) 2022/09/14 14:10:28 fetching corpus: 4100, signal 210629/242101 (executing program) 2022/09/14 14:10:28 fetching corpus: 4150, signal 211734/242856 (executing program) 2022/09/14 14:10:29 fetching corpus: 4200, signal 212891/243632 (executing program) 2022/09/14 14:10:29 fetching corpus: 4250, signal 213666/244316 (executing program) 2022/09/14 14:10:29 fetching corpus: 4300, signal 214408/244897 (executing program) 2022/09/14 14:10:29 fetching corpus: 4350, signal 215039/245493 (executing program) 2022/09/14 14:10:29 fetching corpus: 4400, signal 215657/245971 (executing program) 2022/09/14 14:10:29 fetching corpus: 4450, signal 216460/246552 (executing program) 2022/09/14 14:10:29 fetching corpus: 4500, signal 217079/247005 (executing program) 2022/09/14 14:10:30 fetching corpus: 4550, signal 217922/247502 (executing program) 2022/09/14 14:10:30 fetching corpus: 4600, signal 218926/248070 (executing program) 2022/09/14 14:10:30 fetching corpus: 4650, signal 219648/248556 (executing program) 2022/09/14 14:10:30 fetching corpus: 4700, signal 220404/249036 (executing program) 2022/09/14 14:10:30 fetching corpus: 4750, signal 220922/249482 (executing program) 2022/09/14 14:10:30 fetching corpus: 4800, signal 221306/249849 (executing program) 2022/09/14 14:10:30 fetching corpus: 4850, signal 221926/250291 (executing program) 2022/09/14 14:10:31 fetching corpus: 4900, signal 222599/250740 (executing program) 2022/09/14 14:10:31 fetching corpus: 4950, signal 223269/251135 (executing program) 2022/09/14 14:10:31 fetching corpus: 5000, signal 223836/251518 (executing program) 2022/09/14 14:10:31 fetching corpus: 5050, signal 224177/251851 (executing program) 2022/09/14 14:10:31 fetching corpus: 5100, signal 224624/252190 (executing program) 2022/09/14 14:10:31 fetching corpus: 5150, signal 225367/252581 (executing program) 2022/09/14 14:10:31 fetching corpus: 5200, signal 226312/253030 (executing program) 2022/09/14 14:10:31 fetching corpus: 5250, signal 226830/253335 (executing program) 2022/09/14 14:10:31 fetching corpus: 5300, signal 227345/253650 (executing program) 2022/09/14 14:10:31 fetching corpus: 5350, signal 228157/253977 (executing program) 2022/09/14 14:10:32 fetching corpus: 5400, signal 229378/254422 (executing program) 2022/09/14 14:10:32 fetching corpus: 5450, signal 229900/254719 (executing program) 2022/09/14 14:10:32 fetching corpus: 5500, signal 230151/254994 (executing program) 2022/09/14 14:10:32 fetching corpus: 5550, signal 231312/255424 (executing program) 2022/09/14 14:10:32 fetching corpus: 5600, signal 231915/255715 (executing program) 2022/09/14 14:10:32 fetching corpus: 5650, signal 232528/256093 (executing program) 2022/09/14 14:10:32 fetching corpus: 5700, signal 233220/256352 (executing program) 2022/09/14 14:10:33 fetching corpus: 5750, signal 233849/256647 (executing program) 2022/09/14 14:10:33 fetching corpus: 5800, signal 234458/256917 (executing program) 2022/09/14 14:10:33 fetching corpus: 5850, signal 235026/257150 (executing program) 2022/09/14 14:10:33 fetching corpus: 5900, signal 236072/257374 (executing program) 2022/09/14 14:10:33 fetching corpus: 5950, signal 236976/257570 (executing program) 2022/09/14 14:10:33 fetching corpus: 6000, signal 237708/257575 (executing program) 2022/09/14 14:10:33 fetching corpus: 6050, signal 238613/257580 (executing program) 2022/09/14 14:10:34 fetching corpus: 6100, signal 239169/257634 (executing program) 2022/09/14 14:10:34 fetching corpus: 6150, signal 239445/257639 (executing program) 2022/09/14 14:10:34 fetching corpus: 6200, signal 239958/257656 (executing program) 2022/09/14 14:10:34 fetching corpus: 6250, signal 240526/257677 (executing program) 2022/09/14 14:10:34 fetching corpus: 6300, signal 241037/257683 (executing program) 2022/09/14 14:10:34 fetching corpus: 6350, signal 241438/257686 (executing program) 2022/09/14 14:10:34 fetching corpus: 6400, signal 242059/257702 (executing program) 2022/09/14 14:10:34 fetching corpus: 6450, signal 242769/257708 (executing program) 2022/09/14 14:10:35 fetching corpus: 6500, signal 243230/257735 (executing program) 2022/09/14 14:10:35 fetching corpus: 6550, signal 244055/257735 (executing program) 2022/09/14 14:10:35 fetching corpus: 6600, signal 245380/257749 (executing program) 2022/09/14 14:10:35 fetching corpus: 6650, signal 245981/257755 (executing program) 2022/09/14 14:10:35 fetching corpus: 6700, signal 246473/257757 (executing program) 2022/09/14 14:10:36 fetching corpus: 6750, signal 247029/257770 (executing program) 2022/09/14 14:10:36 fetching corpus: 6800, signal 247614/257781 (executing program) 2022/09/14 14:10:36 fetching corpus: 6850, signal 248415/257891 (executing program) 2022/09/14 14:10:36 fetching corpus: 6900, signal 249271/257942 (executing program) 2022/09/14 14:10:36 fetching corpus: 6919, signal 249464/257943 (executing program) 2022/09/14 14:10:36 fetching corpus: 6919, signal 249464/257943 (executing program) 2022/09/14 14:10:38 starting 8 fuzzer processes 14:10:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}, {0x0, 0x0, 0x9}], 0x0, 0x0) chdir(0x0) mount$cgroup(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x86091, &(0x7f00000007c0)=ANY=[@ANYBLOB="636c11d04d478eab95046472656e2c616c6c2c6e6f7072656669782c72656c656173655f6167656e743d2e2f66696c65312c6e6f7072656669782c616c6c2c66736d616769633d3078303030303030303030303030303130312c7569643e", @ANYRESDEC=0x0, @ANYBLOB="2c61756469742c6d61736b3d5e5be1ea336e491c524d652bec0a3bf017f0597ee593d6f9f83d519609312daaf06e280ff293c15770bbe997047461f07485829824346bf13ce9635e319da471b47e6f2090256c1595177a901781175eb4941f1d299255353ecce1c76d3e1cb134c11f60a8d4b95120616164d501b1bde9aeb858a692fe0b464c40f77e7f6d9e7e13124d7951377daebf6987d7dd0c6e813b57849e8f841e04cfef8596029a2ff8bbd36ebc98b5551df8333b1060c69a9062f2b98fad226f4491f5b0a1327f528959738d5ab816c7ddd58c0300370ec9139ff97f586a08b73b00"/244]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "1047c359a4f1acb11cad4ebfd27f6921c592f1"}) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x8) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x4, 0x1) openat(0xffffffffffffffff, 0x0, 0x101080, 0x100) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000580)="8a145cdc040d0a4ac50c37bace22fc092b248ee0e334529d007e2c451fd12932d86b78630671286a05ead28b26813d5711b3d991f9a23498d1608d23073efef183d1651ce1f1a134ab578c49191061", 0x4f}, 0x68) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0) 14:10:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x14, 0x0) 14:10:38 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="315ec9"]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 14:10:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0) 14:10:38 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) [ 78.491192] audit: type=1400 audit(1663164638.506:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:10:38 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$P9_RXATTRWALK(r0, 0x0, 0x0) 14:10:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f00000000c0)=0x300) 14:10:38 executing program 6: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000001240)=@hsc={0x1, 0x0, "fbfa740c8bc1c37ff672"}) [ 79.763422] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.764553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.766572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.767168] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.768552] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.769183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.771650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.773267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.774141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.781501] Bluetooth: hci0: HCI_REQ-0x0c1a [ 79.798980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.801283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.802898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.849456] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.854489] Bluetooth: hci1: HCI_REQ-0x0c1a [ 79.854667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.856353] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.856697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.857783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.871000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.872631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.873542] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.875114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.875866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.877440] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.878149] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.879455] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.881474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.883248] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.890966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.892379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.893282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.894502] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.897105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.897708] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 79.899100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.900243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 79.901431] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.902131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.902723] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.903859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.904519] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.905946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.906867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.909346] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.912032] Bluetooth: hci5: HCI_REQ-0x0c1a [ 79.914007] Bluetooth: hci6: HCI_REQ-0x0c1a [ 79.918247] Bluetooth: hci4: HCI_REQ-0x0c1a [ 79.925687] Bluetooth: hci2: HCI_REQ-0x0c1a [ 81.850895] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 81.851438] Bluetooth: hci0: command 0x0409 tx timeout [ 81.914985] Bluetooth: hci1: command 0x0409 tx timeout [ 81.979800] Bluetooth: hci6: command 0x0409 tx timeout [ 81.979850] Bluetooth: hci4: command 0x0409 tx timeout [ 81.980610] Bluetooth: hci7: command 0x0409 tx timeout [ 81.981000] Bluetooth: hci2: command 0x0409 tx timeout [ 81.982796] Bluetooth: hci5: command 0x0409 tx timeout [ 83.898828] Bluetooth: hci0: command 0x041b tx timeout [ 83.962933] Bluetooth: hci1: command 0x041b tx timeout [ 84.026793] Bluetooth: hci2: command 0x041b tx timeout [ 84.026821] Bluetooth: hci5: command 0x041b tx timeout [ 84.027903] Bluetooth: hci7: command 0x041b tx timeout [ 84.028307] Bluetooth: hci4: command 0x041b tx timeout [ 84.028694] Bluetooth: hci6: command 0x041b tx timeout [ 85.946808] Bluetooth: hci0: command 0x040f tx timeout [ 86.011459] Bluetooth: hci1: command 0x040f tx timeout [ 86.074839] Bluetooth: hci2: command 0x040f tx timeout [ 86.075832] Bluetooth: hci6: command 0x040f tx timeout [ 86.076309] Bluetooth: hci4: command 0x040f tx timeout [ 86.076718] Bluetooth: hci7: command 0x040f tx timeout [ 86.077150] Bluetooth: hci5: command 0x040f tx timeout [ 87.227929] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 87.995563] Bluetooth: hci0: command 0x0419 tx timeout [ 88.058877] Bluetooth: hci1: command 0x0419 tx timeout [ 88.122843] Bluetooth: hci5: command 0x0419 tx timeout [ 88.123499] Bluetooth: hci7: command 0x0419 tx timeout [ 88.124154] Bluetooth: hci4: command 0x0419 tx timeout [ 88.124776] Bluetooth: hci6: command 0x0419 tx timeout [ 88.125366] Bluetooth: hci2: command 0x0419 tx timeout [ 90.238444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.239464] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.240507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.242667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.244422] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.245287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.249627] Bluetooth: hci3: HCI_REQ-0x0c1a [ 92.282924] Bluetooth: hci3: command 0x0409 tx timeout [ 94.330924] Bluetooth: hci3: command 0x041b tx timeout [ 96.379860] Bluetooth: hci3: command 0x040f tx timeout [ 98.426867] Bluetooth: hci3: command 0x0419 tx timeout [ 134.637052] audit: type=1400 audit(1663164694.652:7): avc: denied { open } for pid=3490 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.638566] audit: type=1400 audit(1663164694.653:8): avc: denied { kernel } for pid=3490 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 134.650621] ------------[ cut here ]------------ [ 134.650640] [ 134.650643] ====================================================== [ 134.650646] WARNING: possible circular locking dependency detected [ 134.650650] 6.0.0-rc5-next-20220914 #1 Not tainted [ 134.650656] ------------------------------------------------------ [ 134.650660] syz-executor.2/3491 is trying to acquire lock: [ 134.650666] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 134.650704] [ 134.650704] but task is already holding lock: [ 134.650707] ffff888008a23820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.650737] [ 134.650737] which lock already depends on the new lock. [ 134.650737] [ 134.650740] [ 134.650740] the existing dependency chain (in reverse order) is: [ 134.650744] [ 134.650744] -> #3 (&ctx->lock){....}-{2:2}: [ 134.650758] _raw_spin_lock+0x2a/0x40 [ 134.650775] __perf_event_task_sched_out+0x53b/0x18d0 [ 134.650788] __schedule+0xedd/0x2470 [ 134.650798] schedule+0xda/0x1b0 [ 134.650808] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.650828] syscall_exit_to_user_mode+0x19/0x40 [ 134.650846] do_syscall_64+0x48/0x90 [ 134.650859] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.650877] [ 134.650877] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 134.650891] _raw_spin_lock_nested+0x30/0x40 [ 134.650905] raw_spin_rq_lock_nested+0x1e/0x30 [ 134.650919] task_fork_fair+0x63/0x4d0 [ 134.650935] sched_cgroup_fork+0x3d0/0x540 [ 134.650949] copy_process+0x4183/0x6e20 [ 134.650959] kernel_clone+0xe7/0x890 [ 134.650969] user_mode_thread+0xad/0xf0 [ 134.650979] rest_init+0x24/0x250 [ 134.650995] arch_call_rest_init+0xf/0x14 [ 134.651007] start_kernel+0x4c1/0x4e6 [ 134.651016] secondary_startup_64_no_verify+0xe0/0xeb [ 134.651031] [ 134.651031] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 134.651045] _raw_spin_lock_irqsave+0x39/0x60 [ 134.651059] try_to_wake_up+0xab/0x1920 [ 134.651072] up+0x75/0xb0 [ 134.651083] __up_console_sem+0x6e/0x80 [ 134.651099] console_unlock+0x46a/0x590 [ 134.651115] vprintk_emit+0x1bd/0x560 [ 134.651130] vprintk+0x84/0xa0 [ 134.651146] _printk+0xba/0xf1 [ 134.651163] kauditd_hold_skb.cold+0x3f/0x4e [ 134.651178] kauditd_send_queue+0x233/0x290 [ 134.651192] kauditd_thread+0x5da/0x9a0 [ 134.651206] kthread+0x2ed/0x3a0 [ 134.651220] ret_from_fork+0x22/0x30 [ 134.651232] [ 134.651232] -> #0 ((console_sem).lock){....}-{2:2}: [ 134.651246] __lock_acquire+0x2a02/0x5e70 [ 134.651262] lock_acquire+0x1a2/0x530 [ 134.651277] _raw_spin_lock_irqsave+0x39/0x60 [ 134.651293] down_trylock+0xe/0x70 [ 134.651307] __down_trylock_console_sem+0x3b/0xd0 [ 134.651324] vprintk_emit+0x16b/0x560 [ 134.651340] vprintk+0x84/0xa0 [ 134.651355] _printk+0xba/0xf1 [ 134.651371] report_bug.cold+0x72/0xab [ 134.651383] handle_bug+0x3c/0x70 [ 134.651396] exc_invalid_op+0x14/0x50 [ 134.651409] asm_exc_invalid_op+0x16/0x20 [ 134.651424] group_sched_out.part.0+0x2c7/0x460 [ 134.651435] ctx_sched_out+0x8f1/0xc10 [ 134.651444] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.651456] __schedule+0xedd/0x2470 [ 134.651466] schedule+0xda/0x1b0 [ 134.651475] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.651494] syscall_exit_to_user_mode+0x19/0x40 [ 134.651510] do_syscall_64+0x48/0x90 [ 134.651523] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.651539] [ 134.651539] other info that might help us debug this: [ 134.651539] [ 134.651542] Chain exists of: [ 134.651542] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 134.651542] [ 134.651557] Possible unsafe locking scenario: [ 134.651557] [ 134.651560] CPU0 CPU1 [ 134.651562] ---- ---- [ 134.651564] lock(&ctx->lock); [ 134.651570] lock(&rq->__lock); [ 134.651577] lock(&ctx->lock); [ 134.651583] lock((console_sem).lock); [ 134.651588] [ 134.651588] *** DEADLOCK *** [ 134.651588] [ 134.651590] 2 locks held by syz-executor.2/3491: [ 134.651598] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 134.651623] #1: ffff888008a23820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 134.651651] [ 134.651651] stack backtrace: [ 134.651654] CPU: 1 PID: 3491 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220914 #1 [ 134.651666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.651675] Call Trace: [ 134.651678] [ 134.651682] dump_stack_lvl+0x8b/0xb3 [ 134.651697] check_noncircular+0x263/0x2e0 [ 134.651713] ? format_decode+0x26c/0xb50 [ 134.651728] ? print_circular_bug+0x450/0x450 [ 134.651745] ? enable_ptr_key_workfn+0x20/0x20 [ 134.651758] ? __lockdep_reset_lock+0x180/0x180 [ 134.651775] ? format_decode+0x26c/0xb50 [ 134.651790] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 134.651807] __lock_acquire+0x2a02/0x5e70 [ 134.651828] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.651850] lock_acquire+0x1a2/0x530 [ 134.651867] ? down_trylock+0xe/0x70 [ 134.651881] ? rcu_read_unlock+0x40/0x40 [ 134.651897] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 134.651918] ? vprintk+0x84/0xa0 [ 134.651936] _raw_spin_lock_irqsave+0x39/0x60 [ 134.651951] ? down_trylock+0xe/0x70 [ 134.651964] down_trylock+0xe/0x70 [ 134.651977] ? vprintk+0x84/0xa0 [ 134.651993] __down_trylock_console_sem+0x3b/0xd0 [ 134.652011] vprintk_emit+0x16b/0x560 [ 134.652027] ? lock_downgrade+0x6d0/0x6d0 [ 134.652045] vprintk+0x84/0xa0 [ 134.652062] _printk+0xba/0xf1 [ 134.652079] ? record_print_text.cold+0x16/0x16 [ 134.652099] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 134.652113] ? lock_downgrade+0x6d0/0x6d0 [ 134.652130] ? report_bug.cold+0x66/0xab [ 134.652144] ? group_sched_out.part.0+0x2c7/0x460 [ 134.652155] report_bug.cold+0x72/0xab [ 134.652170] handle_bug+0x3c/0x70 [ 134.652183] exc_invalid_op+0x14/0x50 [ 134.652197] asm_exc_invalid_op+0x16/0x20 [ 134.652214] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.652227] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.652239] RSP: 0018:ffff8880187a7c48 EFLAGS: 00010006 [ 134.652248] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.652256] RDX: ffff88801faf0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.652264] RBP: ffff888041e88000 R08: 0000000000000005 R09: 0000000000000001 [ 134.652271] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008a23800 [ 134.652279] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.652290] ? group_sched_out.part.0+0x2c7/0x460 [ 134.652303] ? group_sched_out.part.0+0x2c7/0x460 [ 134.652321] ctx_sched_out+0x8f1/0xc10 [ 134.652334] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.652349] ? lock_is_held_type+0xd7/0x130 [ 134.652367] ? __perf_cgroup_move+0x160/0x160 [ 134.652379] ? set_next_entity+0x304/0x550 [ 134.652396] ? update_curr+0x267/0x740 [ 134.652414] ? lock_is_held_type+0xd7/0x130 [ 134.652432] __schedule+0xedd/0x2470 [ 134.652445] ? io_schedule_timeout+0x150/0x150 [ 134.652458] ? __x64_sys_futex_time32+0x480/0x480 [ 134.652472] schedule+0xda/0x1b0 [ 134.652483] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.652503] syscall_exit_to_user_mode+0x19/0x40 [ 134.652520] do_syscall_64+0x48/0x90 [ 134.652534] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.652551] RIP: 0033:0x7f2141322b19 [ 134.652560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.652571] RSP: 002b:00007f213e898218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.652582] RAX: 0000000000000001 RBX: 00007f2141435f68 RCX: 00007f2141322b19 [ 134.652589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2141435f6c [ 134.652597] RBP: 00007f2141435f60 R08: 000000000000000e R09: 0000000000000000 [ 134.652604] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f2141435f6c [ 134.652611] R13: 00007ffd0dd8eccf R14: 00007f213e898300 R15: 0000000000022000 [ 134.652624] [ 134.711051] WARNING: CPU: 1 PID: 3491 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 134.711750] Modules linked in: [ 134.712000] CPU: 1 PID: 3491 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220914 #1 [ 134.712605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 134.713448] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 134.713856] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 134.715208] RSP: 0018:ffff8880187a7c48 EFLAGS: 00010006 [ 134.715604] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.716126] RDX: ffff88801faf0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 134.716669] RBP: ffff888041e88000 R08: 0000000000000005 R09: 0000000000000001 [ 134.717206] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008a23800 [ 134.717739] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 134.718287] FS: 00007f213e898700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 134.718893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.719334] CR2: 000055561bf9d080 CR3: 000000003634c000 CR4: 0000000000350ee0 [ 134.719866] Call Trace: [ 134.720068] [ 134.720247] ctx_sched_out+0x8f1/0xc10 [ 134.720553] __perf_event_task_sched_out+0x6d0/0x18d0 [ 134.720948] ? lock_is_held_type+0xd7/0x130 [ 134.721289] ? __perf_cgroup_move+0x160/0x160 [ 134.721642] ? set_next_entity+0x304/0x550 [ 134.721970] ? update_curr+0x267/0x740 [ 134.722283] ? lock_is_held_type+0xd7/0x130 [ 134.722623] __schedule+0xedd/0x2470 [ 134.722907] ? io_schedule_timeout+0x150/0x150 [ 134.723259] ? __x64_sys_futex_time32+0x480/0x480 [ 134.723623] schedule+0xda/0x1b0 [ 134.723884] exit_to_user_mode_prepare+0x114/0x1a0 [ 134.724269] syscall_exit_to_user_mode+0x19/0x40 [ 134.724649] do_syscall_64+0x48/0x90 [ 134.724938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 134.725334] RIP: 0033:0x7f2141322b19 [ 134.725620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 134.726979] RSP: 002b:00007f213e898218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 134.727549] RAX: 0000000000000001 RBX: 00007f2141435f68 RCX: 00007f2141322b19 [ 134.728077] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2141435f6c [ 134.728620] RBP: 00007f2141435f60 R08: 000000000000000e R09: 0000000000000000 [ 134.729149] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f2141435f6c [ 134.729681] R13: 00007ffd0dd8eccf R14: 00007f213e898300 R15: 0000000000022000 [ 134.730218] [ 134.730404] irq event stamp: 1902 [ 134.730670] hardirqs last enabled at (1901): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 134.731389] hardirqs last disabled at (1902): [] __schedule+0x1225/0x2470 [ 134.732011] softirqs last enabled at (1576): [] __irq_exit_rcu+0x11b/0x180 [ 134.732655] softirqs last disabled at (1571): [] __irq_exit_rcu+0x11b/0x180 [ 134.733299] ---[ end trace 0000000000000000 ]--- [ 134.848753] hrtimer: interrupt took 16090 ns 14:11:35 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="315ec9"]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 14:11:36 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100", @ANYRES32, @ANYBLOB="315ec9"]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 14:11:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) 14:11:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) 14:11:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) 14:11:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000040)=@secondary) 14:11:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8917, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8918, &(0x7f0000000000)={'lo\x00'}) 14:11:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x2, 0x20002) write$selinux_attr(r0, &(0x7f0000000040)='/sbin/dhclient\x00', 0xf) [ 137.905718] loop0: detected capacity change from 0 to 40 [ 140.329528] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 143.354896] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 143.482800] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 143.483708] Bluetooth: hci4: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 14:11:34 Registers: info registers vcpu 0 RAX=1ffffffff0bbf366 RBX=ffffffff85df9b30 RCX=ffffffff8423de2a RDX=0000000000000000 RSI=ffffffff8623c6cc RDI=ffffffff85df9b30 RBP=ffffffff85df9b30 RSP=ffff8880184c7788 R8 =ffffffff8623c6cc R9 =ffffffff85e44792 R10=ffffed1003098f17 R11=000000000003603d R12=ffffffff85df9b30 R13=ffffffff85df9b30 R14=ffffffff85df9b30 R15=dffffc0000000000 RIP=ffffffff8111ac7f RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb73d546028 CR3=0000000038e7e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff8880187a7698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006f R11=0000000000000001 R12=000000000000006f R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f213e898700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055561bf9d080 CR3=000000003634c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f21414097c0 00007f21414097c8 YMM02=0000000000000000 0000000000000000 00007f21414097e0 00007f21414097c0 YMM03=0000000000000000 0000000000000000 00007f21414097c8 00007f21414097c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000