syzkaller login: [ 43.320764] sshd (243) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:20272' (ECDSA) to the list of known hosts. 2022/09/12 18:48:09 fuzzer started 2022/09/12 18:48:09 dialing manager at localhost:38027 [ 45.515141] cgroup: Unknown subsys name 'net' [ 45.620546] cgroup: Unknown subsys name 'rlimit' 2022/09/12 18:48:24 syscalls: 2215 2022/09/12 18:48:24 code coverage: enabled 2022/09/12 18:48:24 comparison tracing: enabled 2022/09/12 18:48:24 extra coverage: enabled 2022/09/12 18:48:24 setuid sandbox: enabled 2022/09/12 18:48:24 namespace sandbox: enabled 2022/09/12 18:48:24 Android sandbox: enabled 2022/09/12 18:48:24 fault injection: enabled 2022/09/12 18:48:24 leak checking: enabled 2022/09/12 18:48:24 net packet injection: enabled 2022/09/12 18:48:24 net device setup: enabled 2022/09/12 18:48:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 18:48:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 18:48:24 USB emulation: enabled 2022/09/12 18:48:24 hci packet injection: enabled 2022/09/12 18:48:24 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 18:48:24 802.15.4 emulation: enabled 2022/09/12 18:48:24 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 18:48:24 fetching corpus: 50, signal 29848/33383 (executing program) 2022/09/12 18:48:24 fetching corpus: 100, signal 44768/49791 (executing program) 2022/09/12 18:48:24 fetching corpus: 150, signal 58894/65208 (executing program) 2022/09/12 18:48:25 fetching corpus: 200, signal 64747/72366 (executing program) 2022/09/12 18:48:25 fetching corpus: 250, signal 72020/80857 (executing program) 2022/09/12 18:48:25 fetching corpus: 300, signal 75678/85839 (executing program) 2022/09/12 18:48:25 fetching corpus: 350, signal 83734/94859 (executing program) 2022/09/12 18:48:25 fetching corpus: 400, signal 89160/101302 (executing program) 2022/09/12 18:48:25 fetching corpus: 450, signal 95012/108053 (executing program) 2022/09/12 18:48:25 fetching corpus: 500, signal 99005/113062 (executing program) 2022/09/12 18:48:26 fetching corpus: 550, signal 102043/117099 (executing program) 2022/09/12 18:48:26 fetching corpus: 600, signal 105716/121679 (executing program) 2022/09/12 18:48:26 fetching corpus: 650, signal 108579/125533 (executing program) 2022/09/12 18:48:26 fetching corpus: 700, signal 111144/129003 (executing program) 2022/09/12 18:48:26 fetching corpus: 750, signal 114778/133401 (executing program) 2022/09/12 18:48:26 fetching corpus: 800, signal 117617/137100 (executing program) 2022/09/12 18:48:27 fetching corpus: 850, signal 120115/140472 (executing program) 2022/09/12 18:48:27 fetching corpus: 900, signal 122099/143303 (executing program) 2022/09/12 18:48:27 fetching corpus: 950, signal 124980/146922 (executing program) 2022/09/12 18:48:27 fetching corpus: 1000, signal 127988/150617 (executing program) 2022/09/12 18:48:27 fetching corpus: 1050, signal 132657/155651 (executing program) 2022/09/12 18:48:27 fetching corpus: 1100, signal 135820/159324 (executing program) 2022/09/12 18:48:27 fetching corpus: 1150, signal 138862/162884 (executing program) 2022/09/12 18:48:28 fetching corpus: 1200, signal 141850/166387 (executing program) 2022/09/12 18:48:28 fetching corpus: 1250, signal 143252/168538 (executing program) 2022/09/12 18:48:28 fetching corpus: 1300, signal 144355/170431 (executing program) 2022/09/12 18:48:28 fetching corpus: 1350, signal 145900/172621 (executing program) 2022/09/12 18:48:28 fetching corpus: 1400, signal 146967/174428 (executing program) 2022/09/12 18:48:28 fetching corpus: 1450, signal 149313/177215 (executing program) 2022/09/12 18:48:28 fetching corpus: 1500, signal 150941/179436 (executing program) 2022/09/12 18:48:29 fetching corpus: 1550, signal 152893/181862 (executing program) 2022/09/12 18:48:29 fetching corpus: 1600, signal 154746/184237 (executing program) 2022/09/12 18:48:29 fetching corpus: 1650, signal 155739/185935 (executing program) 2022/09/12 18:48:29 fetching corpus: 1700, signal 157444/188176 (executing program) 2022/09/12 18:48:29 fetching corpus: 1750, signal 159697/190726 (executing program) 2022/09/12 18:48:29 fetching corpus: 1800, signal 161320/192729 (executing program) 2022/09/12 18:48:29 fetching corpus: 1850, signal 162745/194587 (executing program) 2022/09/12 18:48:29 fetching corpus: 1900, signal 164972/197053 (executing program) 2022/09/12 18:48:30 fetching corpus: 1950, signal 166594/198993 (executing program) 2022/09/12 18:48:30 fetching corpus: 2000, signal 167770/200659 (executing program) 2022/09/12 18:48:30 fetching corpus: 2050, signal 169024/202356 (executing program) 2022/09/12 18:48:30 fetching corpus: 2100, signal 170411/204113 (executing program) 2022/09/12 18:48:30 fetching corpus: 2150, signal 172267/206245 (executing program) 2022/09/12 18:48:30 fetching corpus: 2200, signal 173317/207696 (executing program) 2022/09/12 18:48:30 fetching corpus: 2250, signal 174438/209319 (executing program) 2022/09/12 18:48:31 fetching corpus: 2300, signal 175568/210845 (executing program) 2022/09/12 18:48:31 fetching corpus: 2350, signal 176528/212236 (executing program) 2022/09/12 18:48:31 fetching corpus: 2400, signal 177558/213675 (executing program) 2022/09/12 18:48:31 fetching corpus: 2450, signal 178451/214995 (executing program) 2022/09/12 18:48:31 fetching corpus: 2500, signal 179987/216671 (executing program) 2022/09/12 18:48:31 fetching corpus: 2550, signal 181100/218069 (executing program) 2022/09/12 18:48:31 fetching corpus: 2600, signal 182163/219453 (executing program) 2022/09/12 18:48:32 fetching corpus: 2650, signal 183657/221015 (executing program) 2022/09/12 18:48:32 fetching corpus: 2700, signal 184776/222405 (executing program) 2022/09/12 18:48:32 fetching corpus: 2750, signal 185939/223862 (executing program) 2022/09/12 18:48:32 fetching corpus: 2800, signal 187313/225292 (executing program) 2022/09/12 18:48:32 fetching corpus: 2850, signal 188283/226510 (executing program) 2022/09/12 18:48:32 fetching corpus: 2900, signal 189133/227642 (executing program) 2022/09/12 18:48:33 fetching corpus: 2950, signal 189981/228735 (executing program) 2022/09/12 18:48:33 fetching corpus: 3000, signal 190980/229966 (executing program) 2022/09/12 18:48:33 fetching corpus: 3050, signal 192059/231209 (executing program) 2022/09/12 18:48:33 fetching corpus: 3100, signal 192853/232306 (executing program) 2022/09/12 18:48:33 fetching corpus: 3150, signal 193982/233549 (executing program) 2022/09/12 18:48:33 fetching corpus: 3200, signal 195052/234769 (executing program) 2022/09/12 18:48:33 fetching corpus: 3250, signal 196018/235895 (executing program) 2022/09/12 18:48:33 fetching corpus: 3300, signal 196696/236844 (executing program) 2022/09/12 18:48:34 fetching corpus: 3350, signal 197805/238070 (executing program) 2022/09/12 18:48:34 fetching corpus: 3400, signal 198834/239209 (executing program) 2022/09/12 18:48:34 fetching corpus: 3450, signal 199997/240359 (executing program) 2022/09/12 18:48:34 fetching corpus: 3500, signal 200874/241427 (executing program) 2022/09/12 18:48:34 fetching corpus: 3550, signal 202407/242739 (executing program) 2022/09/12 18:48:34 fetching corpus: 3600, signal 203286/243726 (executing program) 2022/09/12 18:48:35 fetching corpus: 3650, signal 204050/244688 (executing program) 2022/09/12 18:48:35 fetching corpus: 3700, signal 205002/245697 (executing program) 2022/09/12 18:48:35 fetching corpus: 3750, signal 205671/246513 (executing program) 2022/09/12 18:48:35 fetching corpus: 3800, signal 206450/247435 (executing program) 2022/09/12 18:48:35 fetching corpus: 3850, signal 207730/248608 (executing program) 2022/09/12 18:48:35 fetching corpus: 3900, signal 208761/249525 (executing program) 2022/09/12 18:48:36 fetching corpus: 3950, signal 209386/250303 (executing program) 2022/09/12 18:48:36 fetching corpus: 4000, signal 210107/251150 (executing program) 2022/09/12 18:48:36 fetching corpus: 4050, signal 210722/251932 (executing program) 2022/09/12 18:48:36 fetching corpus: 4100, signal 211576/252835 (executing program) 2022/09/12 18:48:36 fetching corpus: 4150, signal 212371/253685 (executing program) 2022/09/12 18:48:36 fetching corpus: 4200, signal 213042/254437 (executing program) 2022/09/12 18:48:36 fetching corpus: 4250, signal 213991/255304 (executing program) 2022/09/12 18:48:37 fetching corpus: 4300, signal 214915/256159 (executing program) 2022/09/12 18:48:37 fetching corpus: 4350, signal 215505/256890 (executing program) 2022/09/12 18:48:37 fetching corpus: 4400, signal 216201/257601 (executing program) 2022/09/12 18:48:37 fetching corpus: 4450, signal 217084/258388 (executing program) 2022/09/12 18:48:37 fetching corpus: 4500, signal 218042/259150 (executing program) 2022/09/12 18:48:37 fetching corpus: 4550, signal 218648/259825 (executing program) 2022/09/12 18:48:37 fetching corpus: 4600, signal 219430/260528 (executing program) 2022/09/12 18:48:38 fetching corpus: 4650, signal 220131/261267 (executing program) 2022/09/12 18:48:38 fetching corpus: 4700, signal 220645/261845 (executing program) 2022/09/12 18:48:38 fetching corpus: 4750, signal 221229/262481 (executing program) 2022/09/12 18:48:38 fetching corpus: 4800, signal 222038/263188 (executing program) 2022/09/12 18:48:38 fetching corpus: 4850, signal 222519/263778 (executing program) 2022/09/12 18:48:38 fetching corpus: 4900, signal 222992/264346 (executing program) 2022/09/12 18:48:38 fetching corpus: 4950, signal 223595/264906 (executing program) 2022/09/12 18:48:39 fetching corpus: 5000, signal 224529/265610 (executing program) 2022/09/12 18:48:39 fetching corpus: 5050, signal 225230/266214 (executing program) 2022/09/12 18:48:39 fetching corpus: 5100, signal 225689/266724 (executing program) 2022/09/12 18:48:39 fetching corpus: 5150, signal 226362/267293 (executing program) 2022/09/12 18:48:39 fetching corpus: 5200, signal 226957/267838 (executing program) 2022/09/12 18:48:39 fetching corpus: 5250, signal 227444/268315 (executing program) 2022/09/12 18:48:39 fetching corpus: 5300, signal 227822/268834 (executing program) 2022/09/12 18:48:39 fetching corpus: 5350, signal 228524/269455 (executing program) 2022/09/12 18:48:40 fetching corpus: 5400, signal 229086/269970 (executing program) 2022/09/12 18:48:40 fetching corpus: 5450, signal 229461/270438 (executing program) 2022/09/12 18:48:40 fetching corpus: 5500, signal 230098/270940 (executing program) 2022/09/12 18:48:40 fetching corpus: 5550, signal 230665/271474 (executing program) 2022/09/12 18:48:40 fetching corpus: 5600, signal 231142/271949 (executing program) 2022/09/12 18:48:40 fetching corpus: 5650, signal 231950/272432 (executing program) 2022/09/12 18:48:40 fetching corpus: 5700, signal 232769/272962 (executing program) 2022/09/12 18:48:41 fetching corpus: 5750, signal 233682/273459 (executing program) 2022/09/12 18:48:41 fetching corpus: 5800, signal 234366/273913 (executing program) 2022/09/12 18:48:41 fetching corpus: 5850, signal 235144/274395 (executing program) 2022/09/12 18:48:41 fetching corpus: 5900, signal 235854/274824 (executing program) 2022/09/12 18:48:41 fetching corpus: 5950, signal 236448/275271 (executing program) 2022/09/12 18:48:41 fetching corpus: 6000, signal 236935/275656 (executing program) 2022/09/12 18:48:41 fetching corpus: 6050, signal 237579/276076 (executing program) 2022/09/12 18:48:42 fetching corpus: 6100, signal 238043/276427 (executing program) 2022/09/12 18:48:42 fetching corpus: 6150, signal 239184/277005 (executing program) 2022/09/12 18:48:42 fetching corpus: 6200, signal 239821/277367 (executing program) 2022/09/12 18:48:42 fetching corpus: 6250, signal 240253/277737 (executing program) 2022/09/12 18:48:42 fetching corpus: 6300, signal 240832/278095 (executing program) 2022/09/12 18:48:42 fetching corpus: 6350, signal 241200/278406 (executing program) 2022/09/12 18:48:42 fetching corpus: 6400, signal 241754/278766 (executing program) 2022/09/12 18:48:42 fetching corpus: 6450, signal 243079/279196 (executing program) 2022/09/12 18:48:43 fetching corpus: 6500, signal 243632/279486 (executing program) 2022/09/12 18:48:43 fetching corpus: 6550, signal 244033/279784 (executing program) 2022/09/12 18:48:43 fetching corpus: 6600, signal 244710/280069 (executing program) 2022/09/12 18:48:43 fetching corpus: 6650, signal 245257/280381 (executing program) 2022/09/12 18:48:43 fetching corpus: 6700, signal 245881/280670 (executing program) 2022/09/12 18:48:43 fetching corpus: 6750, signal 246392/280939 (executing program) 2022/09/12 18:48:43 fetching corpus: 6800, signal 246866/281176 (executing program) 2022/09/12 18:48:44 fetching corpus: 6850, signal 247228/281235 (executing program) 2022/09/12 18:48:44 fetching corpus: 6900, signal 247476/281285 (executing program) 2022/09/12 18:48:44 fetching corpus: 6950, signal 248125/281298 (executing program) 2022/09/12 18:48:44 fetching corpus: 7000, signal 248480/281301 (executing program) 2022/09/12 18:48:44 fetching corpus: 7050, signal 249019/281325 (executing program) 2022/09/12 18:48:44 fetching corpus: 7100, signal 249651/281333 (executing program) 2022/09/12 18:48:45 fetching corpus: 7150, signal 250251/281381 (executing program) 2022/09/12 18:48:45 fetching corpus: 7200, signal 250757/281418 (executing program) 2022/09/12 18:48:45 fetching corpus: 7250, signal 251226/281421 (executing program) 2022/09/12 18:48:45 fetching corpus: 7300, signal 251717/281430 (executing program) 2022/09/12 18:48:45 fetching corpus: 7350, signal 252055/281456 (executing program) 2022/09/12 18:48:45 fetching corpus: 7400, signal 252447/281456 (executing program) 2022/09/12 18:48:45 fetching corpus: 7450, signal 252946/281456 (executing program) 2022/09/12 18:48:45 fetching corpus: 7500, signal 253514/281464 (executing program) 2022/09/12 18:48:45 fetching corpus: 7550, signal 254223/281490 (executing program) 2022/09/12 18:48:46 fetching corpus: 7600, signal 254742/281521 (executing program) 2022/09/12 18:48:46 fetching corpus: 7650, signal 255112/281531 (executing program) 2022/09/12 18:48:46 fetching corpus: 7700, signal 255459/281532 (executing program) 2022/09/12 18:48:46 fetching corpus: 7750, signal 255919/281566 (executing program) 2022/09/12 18:48:46 fetching corpus: 7800, signal 256437/281569 (executing program) 2022/09/12 18:48:46 fetching corpus: 7850, signal 256764/281600 (executing program) 2022/09/12 18:48:46 fetching corpus: 7900, signal 257324/281647 (executing program) 2022/09/12 18:48:47 fetching corpus: 7950, signal 257853/281662 (executing program) 2022/09/12 18:48:47 fetching corpus: 8000, signal 258374/281675 (executing program) 2022/09/12 18:48:47 fetching corpus: 8050, signal 258916/281702 (executing program) 2022/09/12 18:48:47 fetching corpus: 8100, signal 259372/281709 (executing program) 2022/09/12 18:48:47 fetching corpus: 8150, signal 259766/281721 (executing program) 2022/09/12 18:48:47 fetching corpus: 8200, signal 260242/281722 (executing program) 2022/09/12 18:48:47 fetching corpus: 8250, signal 260548/281734 (executing program) 2022/09/12 18:48:48 fetching corpus: 8300, signal 260904/281744 (executing program) 2022/09/12 18:48:48 fetching corpus: 8350, signal 261323/281766 (executing program) 2022/09/12 18:48:48 fetching corpus: 8400, signal 261794/281768 (executing program) 2022/09/12 18:48:48 fetching corpus: 8450, signal 262188/281851 (executing program) 2022/09/12 18:48:48 fetching corpus: 8500, signal 262393/281852 (executing program) 2022/09/12 18:48:48 fetching corpus: 8550, signal 262719/281867 (executing program) 2022/09/12 18:48:48 fetching corpus: 8600, signal 263041/281869 (executing program) 2022/09/12 18:48:49 fetching corpus: 8650, signal 263525/281916 (executing program) 2022/09/12 18:48:49 fetching corpus: 8700, signal 263871/281948 (executing program) 2022/09/12 18:48:49 fetching corpus: 8750, signal 264439/281971 (executing program) 2022/09/12 18:48:49 fetching corpus: 8800, signal 264902/281973 (executing program) 2022/09/12 18:48:49 fetching corpus: 8850, signal 265306/281998 (executing program) 2022/09/12 18:48:49 fetching corpus: 8900, signal 266080/282001 (executing program) 2022/09/12 18:48:49 fetching corpus: 8950, signal 266400/282020 (executing program) 2022/09/12 18:48:50 fetching corpus: 9000, signal 266782/282029 (executing program) 2022/09/12 18:48:50 fetching corpus: 9050, signal 267113/282049 (executing program) 2022/09/12 18:48:50 fetching corpus: 9100, signal 267788/282052 (executing program) 2022/09/12 18:48:50 fetching corpus: 9150, signal 268089/282054 (executing program) 2022/09/12 18:48:50 fetching corpus: 9200, signal 268606/282090 (executing program) 2022/09/12 18:48:50 fetching corpus: 9250, signal 269178/282092 (executing program) 2022/09/12 18:48:50 fetching corpus: 9300, signal 269477/282092 (executing program) 2022/09/12 18:48:51 fetching corpus: 9350, signal 269810/282126 (executing program) 2022/09/12 18:48:51 fetching corpus: 9400, signal 270100/282149 (executing program) 2022/09/12 18:48:51 fetching corpus: 9450, signal 270399/282153 (executing program) 2022/09/12 18:48:51 fetching corpus: 9500, signal 270762/282203 (executing program) 2022/09/12 18:48:51 fetching corpus: 9550, signal 271205/282229 (executing program) 2022/09/12 18:48:51 fetching corpus: 9554, signal 271220/282229 (executing program) 2022/09/12 18:48:51 fetching corpus: 9554, signal 271220/282229 (executing program) 2022/09/12 18:48:54 starting 8 fuzzer processes 18:48:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000240)=@known='system.sockprotoname\x00', 0x0, 0x0) 18:48:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r2 = io_uring_setup(0x5766, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r2, 0x4, 0x0, 0xfffffeed) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r5 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x195300, 0x21) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r6 = openat2(r5, &(0x7f0000000200)='./file1\x00', &(0x7f0000000300)={0x620802, 0x80, 0x3}, 0x18) r7 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1/file0\x00', 0x7fffffff, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000400)="7dcc9c6f7f52ad1949b962f5dfdea52455ef62ee4b6722c0393ab390db5bbd9132b7587a0d7aa76aeb5bb94639998e64974b150fc51163503ed0e79fc30eab4f3ffd78715e431b70137ec2f607ba4fe10efeaad36d7d37964cdbfdc75c3b6630c331a1b5e048a322118b7dd3a41740dd2410332bda77b1e44695f66873049f9e736573da19cea8eb400bbf88d4476c", 0x8f, 0x60097166}], 0x4c000, &(0x7f0000000500)={[{@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@nodots}, {@dots}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$\xb3\\'}}, {@fowner_lt}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@dont_appraise}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}]}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r7, {0x3, 0x1}}, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0x100000) 18:48:54 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e2ff7696c6530"]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x44, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) 18:48:54 executing program 2: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x20000891) fork() 18:48:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 18:48:54 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) dup3(r1, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x725a, 0x5, &(0x7f0000000800)=[{&(0x7f0000000400)="ed049a1c43a8ff23bc73c75ae201f2c4d383bc59d765f36a82ac9ecccabd07cb9b25c5ff0c65d06934b9ade45b63866336f31181e786a40a8677b523d3025a18236f3224475404e0a1526277eb57346bd27a5c050ee9f899bcf85cf2aff152d2d2ada189d2bf7f13f3b4eeea5bcc7408f0fec1cce481a80632e4832d94b90deadbf792fb554bc0cf7650731482", 0x8d, 0x9}, {&(0x7f00000004c0)="88eadeec3ca0756880519382257f87a8c864b0b961ca91350b901a302e8cd51e097cd05acebe14d4269efac244a3a82d281d6110c008cf6925d40a0567bb969d2b24923ae4457c74ee4d3596520cc9d69f5f65c7ea79818f0423d631ff1e549c590a84118d8f8b71da1754e4782fa18277d439877af8643404c062505a705640db009479f11708f9b36fcb5ce8c8da7bc24f3c2e192a384be267db8202acb1f7820658c352dc82b01867195a8c11906475a7633ffab8f4cbe7c2a45089aec43872a8b3a6d74be6fc0e487aa2c223", 0xce, 0x8}, {&(0x7f0000000600)="8cb223a632a8f4b64ca4aacc5ff64d56ac83a6b02a653ca1c9e4067e84dc7a99ad187d4ba2211cf9ef7cd889ddd8c97a0c6c4c3eba807ad30ad764402856a63d6b5df17394c4c09b71581ef68e1e85f3a7878b8e4bd4396148351bcaf0ef1bf94c7c4766e9abb72d9c508e88dffa644d23916404e5404c0043736a4f728f4569593ab8c5a3dc2d677ccc5648edc77afdab1596c326c6ae303f9cd03dc217dca1058f32252e26fa5c7a21", 0xaa, 0x2}, {&(0x7f00000006c0)="a82e86b2ca2a8591e2e8f3ca833c828d8fa13b5d403bbb49939c6534f1c1d74bbf0ce6af16fb049cff16e46fb3115e058052fd082ec40a628d6b8605f6516c17900b158b4f925524ca08e072cb701a9fa6c8fd000d4d257e7c54acd1bb0e2e49587de1adfd441a7c4bb1109dc82b070390df0a378d9b2fb24bcc8c238f63f24ed0eb80a6bb458b2b13c42d8ebd7a1cdc8358a4722653f42f0fe64d39c2139f9a5e0de2c566976e3cfb2bdd76a21139e291e3570254c5382314199c73f621007c79110174d386aebf98a5", 0xca, 0x8}, {&(0x7f00000007c0)="13bdc9c558e60f11fc552e5fcbe6dfc2ba0a582601adef2595baf8a728458ee02126de56f53a055ea64c0e1de69ab6dab6d11ff16a9d05", 0x37, 0x8cf}], 0x8010, &(0x7f0000000880)={[{@jqfmt_vfsv0}, {@auto_da_alloc}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x6}}, {@nomblk_io_submit}, {@grpquota}], [{@euid_gt}, {@euid_gt}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) pwrite64(r1, &(0x7f0000000300)="89959bbf6b41fbdbb8d3b2476ab22e75f43c50b58ef7d02ac08c714d671536c09c143421a3d8fe3f7e7ba0680d57907800a7b3540ea57701f2910b72af44b050b0c952ad09c834367192b2ee83a8099b789942a9d16f5e60cbc2e971a185a83295d49a", 0x63, 0x3) [ 89.971120] audit: type=1400 audit(1663008534.353:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:48:54 executing program 6: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 18:48:54 executing program 7: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) [ 91.321454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.324995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.327971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.330141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.333268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.334858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.339183] Bluetooth: hci0: HCI_REQ-0x0c1a [ 91.400860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.403151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.405573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.407608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.408979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.410743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.413823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.415227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.416905] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.418623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.419810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.421173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.423758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.424896] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.426231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.427498] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.428731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.429818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.434212] Bluetooth: hci5: HCI_REQ-0x0c1a [ 91.451786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.452804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.454175] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.458236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.460091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.461732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.462734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.464712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.466518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.467477] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.470313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.471342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.472572] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.473813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.474877] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.476151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.477336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.478583] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.479535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.480717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.481922] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.485670] Bluetooth: hci4: HCI_REQ-0x0c1a [ 91.491292] Bluetooth: hci1: HCI_REQ-0x0c1a [ 91.503921] Bluetooth: hci2: HCI_REQ-0x0c1a [ 91.504589] Bluetooth: hci6: HCI_REQ-0x0c1a [ 91.512251] Bluetooth: hci3: HCI_REQ-0x0c1a [ 91.514328] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.533385] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.542366] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.550950] Bluetooth: hci7: HCI_REQ-0x0c1a [ 93.405547] Bluetooth: hci0: command 0x0409 tx timeout [ 93.469082] Bluetooth: hci5: command 0x0409 tx timeout [ 93.532160] Bluetooth: hci4: command 0x0409 tx timeout [ 93.533049] Bluetooth: hci1: command 0x0409 tx timeout [ 93.596123] Bluetooth: hci6: command 0x0409 tx timeout [ 93.596152] Bluetooth: hci7: command 0x0409 tx timeout [ 93.596564] Bluetooth: hci2: command 0x0409 tx timeout [ 93.597618] Bluetooth: hci3: command 0x0409 tx timeout [ 95.452133] Bluetooth: hci0: command 0x041b tx timeout [ 95.516125] Bluetooth: hci5: command 0x041b tx timeout [ 95.580162] Bluetooth: hci1: command 0x041b tx timeout [ 95.580757] Bluetooth: hci4: command 0x041b tx timeout [ 95.644083] Bluetooth: hci3: command 0x041b tx timeout [ 95.644599] Bluetooth: hci2: command 0x041b tx timeout [ 95.645392] Bluetooth: hci7: command 0x041b tx timeout [ 95.645826] Bluetooth: hci6: command 0x041b tx timeout [ 97.500139] Bluetooth: hci0: command 0x040f tx timeout [ 97.564075] Bluetooth: hci5: command 0x040f tx timeout [ 97.628071] Bluetooth: hci4: command 0x040f tx timeout [ 97.628614] Bluetooth: hci1: command 0x040f tx timeout [ 97.692380] Bluetooth: hci6: command 0x040f tx timeout [ 97.693373] Bluetooth: hci7: command 0x040f tx timeout [ 97.694409] Bluetooth: hci2: command 0x040f tx timeout [ 97.694835] Bluetooth: hci3: command 0x040f tx timeout [ 99.548057] Bluetooth: hci0: command 0x0419 tx timeout [ 99.612162] Bluetooth: hci5: command 0x0419 tx timeout [ 99.676067] Bluetooth: hci1: command 0x0419 tx timeout [ 99.676549] Bluetooth: hci4: command 0x0419 tx timeout [ 99.740081] Bluetooth: hci3: command 0x0419 tx timeout [ 99.740608] Bluetooth: hci2: command 0x0419 tx timeout [ 99.741548] Bluetooth: hci7: command 0x0419 tx timeout [ 99.741961] Bluetooth: hci6: command 0x0419 tx timeout 18:49:52 executing program 7: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:52 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:53 executing program 7: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:53 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:53 executing program 7: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:53 executing program 2: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x19008, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) 18:49:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000300)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) syz_io_uring_setup(0x75e8, &(0x7f0000000200)={0x0, 0xa1dc, 0x10, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000780)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) [ 149.013996] audit: type=1400 audit(1663008593.396:7): avc: denied { open } for pid=3819 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.018402] audit: type=1400 audit(1663008593.396:8): avc: denied { kernel } for pid=3819 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.034966] ------------[ cut here ]------------ [ 149.034988] [ 149.034991] ====================================================== [ 149.034995] WARNING: possible circular locking dependency detected [ 149.034999] 6.0.0-rc5-next-20220912 #1 Not tainted [ 149.035009] ------------------------------------------------------ [ 149.035013] syz-executor.7/3822 is trying to acquire lock: [ 149.035020] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 149.035058] [ 149.035058] but task is already holding lock: [ 149.035061] ffff88800d437820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.035091] [ 149.035091] which lock already depends on the new lock. [ 149.035091] [ 149.035094] [ 149.035094] the existing dependency chain (in reverse order) is: [ 149.035097] [ 149.035097] -> #3 (&ctx->lock){....}-{2:2}: [ 149.035112] _raw_spin_lock+0x2a/0x40 [ 149.035130] __perf_event_task_sched_out+0x53b/0x18d0 [ 149.035143] __schedule+0xedd/0x2470 [ 149.035154] schedule+0xda/0x1b0 [ 149.035164] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.035186] syscall_exit_to_user_mode+0x19/0x40 [ 149.035205] do_syscall_64+0x48/0x90 [ 149.035219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.035238] [ 149.035238] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 149.035252] _raw_spin_lock_nested+0x30/0x40 [ 149.035268] raw_spin_rq_lock_nested+0x1e/0x30 [ 149.035282] task_fork_fair+0x63/0x4d0 [ 149.035301] sched_cgroup_fork+0x3d0/0x540 [ 149.035319] copy_process+0x3f9e/0x6df0 [ 149.035331] kernel_clone+0xe7/0x890 [ 149.035341] user_mode_thread+0xad/0xf0 [ 149.035352] rest_init+0x24/0x250 [ 149.035369] arch_call_rest_init+0xf/0x14 [ 149.035390] start_kernel+0x4c1/0x4e6 [ 149.035408] secondary_startup_64_no_verify+0xe0/0xeb [ 149.035424] [ 149.035424] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 149.035438] _raw_spin_lock_irqsave+0x39/0x60 [ 149.035454] try_to_wake_up+0xab/0x1920 [ 149.035469] up+0x75/0xb0 [ 149.035481] __up_console_sem+0x6e/0x80 [ 149.035499] console_unlock+0x46a/0x590 [ 149.035520] vprintk_emit+0x1bd/0x560 [ 149.035546] vprintk+0x84/0xa0 [ 149.035568] _printk+0xba/0xf1 [ 149.035591] kauditd_hold_skb.cold+0x3f/0x4e [ 149.035609] kauditd_send_queue+0x233/0x290 [ 149.035629] kauditd_thread+0x5da/0x9a0 [ 149.035644] kthread+0x2ed/0x3a0 [ 149.035660] ret_from_fork+0x22/0x30 [ 149.035692] [ 149.035692] -> #0 ((console_sem).lock){....}-{2:2}: [ 149.035707] __lock_acquire+0x2a02/0x5e70 [ 149.035726] lock_acquire+0x1a2/0x530 [ 149.035744] _raw_spin_lock_irqsave+0x39/0x60 [ 149.035760] down_trylock+0xe/0x70 [ 149.035774] __down_trylock_console_sem+0x3b/0xd0 [ 149.035792] vprintk_emit+0x16b/0x560 [ 149.035810] vprintk+0x84/0xa0 [ 149.035828] _printk+0xba/0xf1 [ 149.035846] report_bug.cold+0x72/0xab [ 149.035859] handle_bug+0x3c/0x70 [ 149.035873] exc_invalid_op+0x14/0x50 [ 149.035887] asm_exc_invalid_op+0x16/0x20 [ 149.035905] group_sched_out.part.0+0x2c7/0x460 [ 149.035916] ctx_sched_out+0x8f1/0xc10 [ 149.035927] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.035940] __schedule+0xedd/0x2470 [ 149.035950] schedule+0xda/0x1b0 [ 149.035960] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.035981] syscall_exit_to_user_mode+0x19/0x40 [ 149.036000] do_syscall_64+0x48/0x90 [ 149.036013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.036032] [ 149.036032] other info that might help us debug this: [ 149.036032] [ 149.036035] Chain exists of: [ 149.036035] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 149.036035] [ 149.036051] Possible unsafe locking scenario: [ 149.036051] [ 149.036053] CPU0 CPU1 [ 149.036056] ---- ---- [ 149.036058] lock(&ctx->lock); [ 149.036064] lock(&rq->__lock); [ 149.036071] lock(&ctx->lock); [ 149.036078] lock((console_sem).lock); [ 149.036084] [ 149.036084] *** DEADLOCK *** [ 149.036084] [ 149.036086] 2 locks held by syz-executor.7/3822: [ 149.036093] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 149.036121] #1: ffff88800d437820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.036151] [ 149.036151] stack backtrace: [ 149.036154] CPU: 1 PID: 3822 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1 [ 149.036168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.036177] Call Trace: [ 149.036180] [ 149.036185] dump_stack_lvl+0x8b/0xb3 [ 149.036200] check_noncircular+0x263/0x2e0 [ 149.036219] ? format_decode+0x26c/0xb50 [ 149.036235] ? print_circular_bug+0x450/0x450 [ 149.036254] ? enable_ptr_key_workfn+0x20/0x20 [ 149.036270] ? perf_swevent_event+0x6c/0x550 [ 149.036291] ? format_decode+0x26c/0xb50 [ 149.036307] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 149.036327] __lock_acquire+0x2a02/0x5e70 [ 149.036351] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 149.036376] lock_acquire+0x1a2/0x530 [ 149.036395] ? down_trylock+0xe/0x70 [ 149.036411] ? rcu_read_unlock+0x40/0x40 [ 149.036435] ? vprintk+0x84/0xa0 [ 149.036455] _raw_spin_lock_irqsave+0x39/0x60 [ 149.036472] ? down_trylock+0xe/0x70 [ 149.036487] down_trylock+0xe/0x70 [ 149.036501] ? vprintk+0x84/0xa0 [ 149.036520] __down_trylock_console_sem+0x3b/0xd0 [ 149.036541] vprintk_emit+0x16b/0x560 [ 149.036571] vprintk+0x84/0xa0 [ 149.036591] _printk+0xba/0xf1 [ 149.036610] ? record_print_text.cold+0x16/0x16 [ 149.036634] ? report_bug.cold+0x66/0xab [ 149.036649] ? group_sched_out.part.0+0x2c7/0x460 [ 149.036662] report_bug.cold+0x72/0xab [ 149.036678] handle_bug+0x3c/0x70 [ 149.036692] exc_invalid_op+0x14/0x50 [ 149.036708] asm_exc_invalid_op+0x16/0x20 [ 149.036727] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.036742] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.036754] RSP: 0018:ffff8880205b7c48 EFLAGS: 00010006 [ 149.036764] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.036773] RDX: ffff888042593580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.036781] RBP: ffff888015d50000 R08: 0000000000000005 R09: 0000000000000001 [ 149.036789] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800d437800 [ 149.036798] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 149.036810] ? group_sched_out.part.0+0x2c7/0x460 [ 149.036824] ? group_sched_out.part.0+0x2c7/0x460 [ 149.036838] ctx_sched_out+0x8f1/0xc10 [ 149.036851] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.036868] ? lock_is_held_type+0xd7/0x130 [ 149.036888] ? __perf_cgroup_move+0x160/0x160 [ 149.036901] ? set_next_entity+0x304/0x550 [ 149.036921] ? update_curr+0x267/0x740 [ 149.036942] ? lock_is_held_type+0xd7/0x130 [ 149.036962] __schedule+0xedd/0x2470 [ 149.036976] ? io_schedule_timeout+0x150/0x150 [ 149.036989] ? trace_rcu_dyntick+0x1a7/0x250 [ 149.037013] schedule+0xda/0x1b0 [ 149.037024] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.037047] syscall_exit_to_user_mode+0x19/0x40 [ 149.037067] do_syscall_64+0x48/0x90 [ 149.037082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.037101] RIP: 0033:0x7fcdcf767b19 [ 149.037111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.037122] RSP: 002b:00007fcdcccdd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.037134] RAX: 0000000000000001 RBX: 00007fcdcf87af68 RCX: 00007fcdcf767b19 [ 149.037143] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcdcf87af6c [ 149.037151] RBP: 00007fcdcf87af60 R08: 000000000000000e R09: 0000000000000000 [ 149.037159] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcdcf87af6c [ 149.037167] R13: 00007ffff34a8acf R14: 00007fcdcccdd300 R15: 0000000000022000 [ 149.037181] [ 149.098545] WARNING: CPU: 1 PID: 3822 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 149.099245] Modules linked in: [ 149.099514] CPU: 1 PID: 3822 Comm: syz-executor.7 Not tainted 6.0.0-rc5-next-20220912 #1 [ 149.100156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.101015] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.101430] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.102834] RSP: 0018:ffff8880205b7c48 EFLAGS: 00010006 [ 149.103243] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.103818] RDX: ffff888042593580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.104367] RBP: ffff888015d50000 R08: 0000000000000005 R09: 0000000000000001 [ 149.104910] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800d437800 [ 149.105457] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 149.106015] FS: 00007fcdcccdd700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 149.106630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.107081] CR2: 00007f908729fbd8 CR3: 000000000f240000 CR4: 0000000000350ee0 [ 149.107645] Call Trace: [ 149.107853] [ 149.108034] ctx_sched_out+0x8f1/0xc10 [ 149.108341] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.108749] ? lock_is_held_type+0xd7/0x130 [ 149.109087] ? __perf_cgroup_move+0x160/0x160 [ 149.109439] ? set_next_entity+0x304/0x550 [ 149.109781] ? update_curr+0x267/0x740 [ 149.110095] ? lock_is_held_type+0xd7/0x130 [ 149.110435] __schedule+0xedd/0x2470 [ 149.110744] ? io_schedule_timeout+0x150/0x150 [ 149.111102] ? trace_rcu_dyntick+0x1a7/0x250 [ 149.111453] schedule+0xda/0x1b0 [ 149.111737] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.112130] syscall_exit_to_user_mode+0x19/0x40 [ 149.112505] do_syscall_64+0x48/0x90 [ 149.112803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.113205] RIP: 0033:0x7fcdcf767b19 [ 149.113497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.114906] RSP: 002b:00007fcdcccdd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.115484] RAX: 0000000000000001 RBX: 00007fcdcf87af68 RCX: 00007fcdcf767b19 [ 149.116042] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcdcf87af6c [ 149.116586] RBP: 00007fcdcf87af60 R08: 000000000000000e R09: 0000000000000000 [ 149.117129] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fcdcf87af6c [ 149.117670] R13: 00007ffff34a8acf R14: 00007fcdcccdd300 R15: 0000000000022000 [ 149.118243] [ 149.118427] irq event stamp: 690 [ 149.118682] hardirqs last enabled at (689): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 149.119406] hardirqs last disabled at (690): [] __schedule+0x1225/0x2470 [ 149.120055] softirqs last enabled at (560): [] __irq_exit_rcu+0x11b/0x180 [ 149.120700] softirqs last disabled at (479): [] __irq_exit_rcu+0x11b/0x180 [ 149.121347] ---[ end trace 0000000000000000 ]--- 18:49:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(0xffffffffffffffff, 0x0) [ 154.524104] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 154.588038] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 154.588052] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 154.652044] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 154.652072] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 158.812142] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 158.940071] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 159.004056] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 159.004271] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 159.005785] Bluetooth: hci3: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 18:49:53 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8425f1a7 RDX=ffffed100d9e6f99 RSI=0000000000000004 RDI=ffff88806cf37cc0 RBP=ffff88806cf37cc0 RSP=ffff88801ba7fab8 R8 =0000000000000000 R9 =ffff88806cf37cc3 R10=ffffed100d9e6f98 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9e6f98 R14=0000000000000001 R15=1ffff1100374ff58 RIP=ffffffff8425f224 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555d18400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f15d8f61b70 CR3=000000003fca2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880205b7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcdcccdd700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f908729fbd8 CR3=000000000f240000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fcdcf84e7c0 00007fcdcf84e7c8 YMM02=0000000000000000 0000000000000000 00007fcdcf84e7e0 00007fcdcf84e7c0 YMM03=0000000000000000 0000000000000000 00007fcdcf84e7c8 00007fcdcf84e7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000