Warning: Permanently added '[localhost]:7318' (ECDSA) to the list of known hosts. 2022/09/12 19:35:12 fuzzer started 2022/09/12 19:35:12 dialing manager at localhost:38027 syzkaller login: [ 46.307794] cgroup: Unknown subsys name 'net' [ 46.419839] cgroup: Unknown subsys name 'rlimit' 2022/09/12 19:35:26 syscalls: 2215 2022/09/12 19:35:26 code coverage: enabled 2022/09/12 19:35:26 comparison tracing: enabled 2022/09/12 19:35:26 extra coverage: enabled 2022/09/12 19:35:26 setuid sandbox: enabled 2022/09/12 19:35:26 namespace sandbox: enabled 2022/09/12 19:35:26 Android sandbox: enabled 2022/09/12 19:35:26 fault injection: enabled 2022/09/12 19:35:26 leak checking: enabled 2022/09/12 19:35:26 net packet injection: enabled 2022/09/12 19:35:26 net device setup: enabled 2022/09/12 19:35:26 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 19:35:26 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 19:35:26 USB emulation: enabled 2022/09/12 19:35:26 hci packet injection: enabled 2022/09/12 19:35:26 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 19:35:26 802.15.4 emulation: enabled 2022/09/12 19:35:26 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 19:35:26 fetching corpus: 50, signal 33768/37336 (executing program) 2022/09/12 19:35:26 fetching corpus: 100, signal 48681/53705 (executing program) 2022/09/12 19:35:26 fetching corpus: 150, signal 57925/64355 (executing program) 2022/09/12 19:35:26 fetching corpus: 200, signal 65679/73472 (executing program) 2022/09/12 19:35:26 fetching corpus: 250, signal 71925/81011 (executing program) 2022/09/12 19:35:27 fetching corpus: 300, signal 78616/88895 (executing program) 2022/09/12 19:35:27 fetching corpus: 350, signal 85476/96854 (executing program) 2022/09/12 19:35:27 fetching corpus: 400, signal 89609/102123 (executing program) 2022/09/12 19:35:27 fetching corpus: 450, signal 93387/106998 (executing program) 2022/09/12 19:35:27 fetching corpus: 500, signal 97527/112206 (executing program) 2022/09/12 19:35:27 fetching corpus: 550, signal 101372/117080 (executing program) 2022/09/12 19:35:27 fetching corpus: 600, signal 104492/121207 (executing program) 2022/09/12 19:35:28 fetching corpus: 650, signal 108303/125905 (executing program) 2022/09/12 19:35:28 fetching corpus: 700, signal 112560/130987 (executing program) 2022/09/12 19:35:28 fetching corpus: 750, signal 116077/135343 (executing program) 2022/09/12 19:35:28 fetching corpus: 800, signal 117916/138183 (executing program) 2022/09/12 19:35:28 fetching corpus: 850, signal 120857/141957 (executing program) 2022/09/12 19:35:28 fetching corpus: 900, signal 122729/144746 (executing program) 2022/09/12 19:35:29 fetching corpus: 950, signal 124911/147792 (executing program) 2022/09/12 19:35:29 fetching corpus: 1000, signal 127502/151150 (executing program) 2022/09/12 19:35:29 fetching corpus: 1050, signal 129324/153775 (executing program) 2022/09/12 19:35:29 fetching corpus: 1100, signal 131166/156481 (executing program) 2022/09/12 19:35:29 fetching corpus: 1150, signal 133165/159213 (executing program) 2022/09/12 19:35:29 fetching corpus: 1200, signal 135710/162434 (executing program) 2022/09/12 19:35:29 fetching corpus: 1250, signal 138847/166070 (executing program) 2022/09/12 19:35:30 fetching corpus: 1300, signal 140745/168662 (executing program) 2022/09/12 19:35:30 fetching corpus: 1350, signal 142653/171276 (executing program) 2022/09/12 19:35:30 fetching corpus: 1400, signal 144408/173699 (executing program) 2022/09/12 19:35:30 fetching corpus: 1450, signal 146559/176415 (executing program) 2022/09/12 19:35:30 fetching corpus: 1500, signal 147558/178243 (executing program) 2022/09/12 19:35:30 fetching corpus: 1550, signal 149822/180979 (executing program) 2022/09/12 19:35:30 fetching corpus: 1600, signal 151722/183436 (executing program) 2022/09/12 19:35:31 fetching corpus: 1650, signal 153059/185489 (executing program) 2022/09/12 19:35:31 fetching corpus: 1700, signal 154930/187846 (executing program) 2022/09/12 19:35:31 fetching corpus: 1750, signal 156156/189713 (executing program) 2022/09/12 19:35:31 fetching corpus: 1800, signal 158801/192645 (executing program) 2022/09/12 19:35:31 fetching corpus: 1850, signal 160885/195120 (executing program) 2022/09/12 19:35:31 fetching corpus: 1900, signal 162309/197058 (executing program) 2022/09/12 19:35:31 fetching corpus: 1950, signal 163521/198829 (executing program) 2022/09/12 19:35:32 fetching corpus: 2000, signal 164884/200704 (executing program) 2022/09/12 19:35:32 fetching corpus: 2050, signal 166491/202695 (executing program) 2022/09/12 19:35:32 fetching corpus: 2100, signal 167713/204454 (executing program) 2022/09/12 19:35:32 fetching corpus: 2150, signal 169180/206357 (executing program) 2022/09/12 19:35:32 fetching corpus: 2200, signal 170582/208214 (executing program) 2022/09/12 19:35:32 fetching corpus: 2250, signal 172580/210409 (executing program) 2022/09/12 19:35:32 fetching corpus: 2300, signal 174364/212403 (executing program) 2022/09/12 19:35:33 fetching corpus: 2350, signal 175827/214207 (executing program) 2022/09/12 19:35:33 fetching corpus: 2400, signal 177591/216171 (executing program) 2022/09/12 19:35:33 fetching corpus: 2450, signal 179070/217944 (executing program) 2022/09/12 19:35:33 fetching corpus: 2500, signal 180248/219487 (executing program) 2022/09/12 19:35:33 fetching corpus: 2550, signal 181606/221116 (executing program) 2022/09/12 19:35:33 fetching corpus: 2600, signal 182820/222738 (executing program) 2022/09/12 19:35:34 fetching corpus: 2650, signal 184656/224638 (executing program) 2022/09/12 19:35:34 fetching corpus: 2700, signal 185668/225993 (executing program) 2022/09/12 19:35:34 fetching corpus: 2750, signal 187674/227956 (executing program) 2022/09/12 19:35:34 fetching corpus: 2800, signal 189031/229544 (executing program) 2022/09/12 19:35:34 fetching corpus: 2850, signal 190497/231157 (executing program) 2022/09/12 19:35:34 fetching corpus: 2900, signal 191487/232442 (executing program) 2022/09/12 19:35:34 fetching corpus: 2950, signal 192820/233939 (executing program) 2022/09/12 19:35:35 fetching corpus: 3000, signal 193710/235104 (executing program) 2022/09/12 19:35:35 fetching corpus: 3050, signal 194307/236155 (executing program) 2022/09/12 19:35:35 fetching corpus: 3100, signal 195445/237511 (executing program) 2022/09/12 19:35:35 fetching corpus: 3150, signal 196418/238730 (executing program) 2022/09/12 19:35:35 fetching corpus: 3200, signal 197181/239775 (executing program) 2022/09/12 19:35:35 fetching corpus: 3250, signal 197998/240892 (executing program) 2022/09/12 19:35:35 fetching corpus: 3300, signal 198931/242045 (executing program) 2022/09/12 19:35:35 fetching corpus: 3350, signal 199860/243172 (executing program) 2022/09/12 19:35:36 fetching corpus: 3400, signal 200737/244313 (executing program) 2022/09/12 19:35:36 fetching corpus: 3450, signal 201890/245576 (executing program) 2022/09/12 19:35:36 fetching corpus: 3500, signal 202803/246651 (executing program) 2022/09/12 19:35:36 fetching corpus: 3550, signal 203862/247806 (executing program) 2022/09/12 19:35:36 fetching corpus: 3600, signal 204929/249003 (executing program) 2022/09/12 19:35:36 fetching corpus: 3650, signal 205786/250000 (executing program) 2022/09/12 19:35:37 fetching corpus: 3700, signal 206737/251071 (executing program) 2022/09/12 19:35:37 fetching corpus: 3750, signal 207452/251974 (executing program) 2022/09/12 19:35:37 fetching corpus: 3800, signal 208053/252862 (executing program) 2022/09/12 19:35:37 fetching corpus: 3850, signal 208774/253783 (executing program) 2022/09/12 19:35:37 fetching corpus: 3900, signal 209489/254656 (executing program) 2022/09/12 19:35:37 fetching corpus: 3950, signal 210634/255760 (executing program) 2022/09/12 19:35:37 fetching corpus: 4000, signal 211595/256702 (executing program) 2022/09/12 19:35:38 fetching corpus: 4050, signal 212408/257622 (executing program) 2022/09/12 19:35:38 fetching corpus: 4100, signal 213027/258507 (executing program) 2022/09/12 19:35:38 fetching corpus: 4150, signal 213651/259309 (executing program) 2022/09/12 19:35:38 fetching corpus: 4200, signal 214443/260193 (executing program) 2022/09/12 19:35:38 fetching corpus: 4250, signal 215074/260992 (executing program) 2022/09/12 19:35:38 fetching corpus: 4300, signal 216112/261948 (executing program) 2022/09/12 19:35:38 fetching corpus: 4350, signal 216846/262857 (executing program) 2022/09/12 19:35:39 fetching corpus: 4400, signal 217429/263623 (executing program) 2022/09/12 19:35:39 fetching corpus: 4450, signal 218510/264596 (executing program) 2022/09/12 19:35:39 fetching corpus: 4500, signal 219481/265502 (executing program) 2022/09/12 19:35:39 fetching corpus: 4550, signal 220110/266221 (executing program) 2022/09/12 19:35:39 fetching corpus: 4600, signal 220880/267044 (executing program) 2022/09/12 19:35:39 fetching corpus: 4650, signal 221779/267849 (executing program) 2022/09/12 19:35:39 fetching corpus: 4700, signal 222523/268606 (executing program) 2022/09/12 19:35:40 fetching corpus: 4750, signal 223272/269324 (executing program) 2022/09/12 19:35:40 fetching corpus: 4800, signal 223975/270031 (executing program) 2022/09/12 19:35:40 fetching corpus: 4850, signal 224696/270714 (executing program) 2022/09/12 19:35:40 fetching corpus: 4900, signal 225447/271393 (executing program) 2022/09/12 19:35:40 fetching corpus: 4950, signal 226190/272106 (executing program) 2022/09/12 19:35:40 fetching corpus: 5000, signal 226815/272746 (executing program) 2022/09/12 19:35:40 fetching corpus: 5050, signal 227556/273443 (executing program) 2022/09/12 19:35:41 fetching corpus: 5100, signal 228137/274053 (executing program) 2022/09/12 19:35:41 fetching corpus: 5150, signal 228670/274643 (executing program) 2022/09/12 19:35:41 fetching corpus: 5200, signal 229238/275241 (executing program) 2022/09/12 19:35:41 fetching corpus: 5250, signal 230230/275924 (executing program) 2022/09/12 19:35:41 fetching corpus: 5300, signal 230832/276544 (executing program) 2022/09/12 19:35:41 fetching corpus: 5350, signal 231208/277072 (executing program) 2022/09/12 19:35:41 fetching corpus: 5400, signal 231691/277612 (executing program) 2022/09/12 19:35:41 fetching corpus: 5450, signal 232513/278242 (executing program) 2022/09/12 19:35:42 fetching corpus: 5500, signal 233418/278889 (executing program) 2022/09/12 19:35:42 fetching corpus: 5550, signal 234018/279493 (executing program) 2022/09/12 19:35:42 fetching corpus: 5600, signal 234664/280051 (executing program) 2022/09/12 19:35:42 fetching corpus: 5650, signal 235079/280570 (executing program) 2022/09/12 19:35:42 fetching corpus: 5700, signal 235468/281059 (executing program) 2022/09/12 19:35:42 fetching corpus: 5750, signal 235865/281522 (executing program) 2022/09/12 19:35:42 fetching corpus: 5800, signal 236775/282062 (executing program) 2022/09/12 19:35:43 fetching corpus: 5850, signal 237270/282579 (executing program) 2022/09/12 19:35:43 fetching corpus: 5900, signal 237749/283049 (executing program) 2022/09/12 19:35:43 fetching corpus: 5950, signal 238430/283616 (executing program) 2022/09/12 19:35:43 fetching corpus: 6000, signal 239292/284161 (executing program) 2022/09/12 19:35:43 fetching corpus: 6050, signal 239956/284619 (executing program) 2022/09/12 19:35:43 fetching corpus: 6100, signal 240728/285153 (executing program) 2022/09/12 19:35:43 fetching corpus: 6150, signal 241321/285620 (executing program) 2022/09/12 19:35:44 fetching corpus: 6200, signal 242118/286111 (executing program) 2022/09/12 19:35:44 fetching corpus: 6250, signal 242633/286503 (executing program) 2022/09/12 19:35:44 fetching corpus: 6300, signal 243138/286911 (executing program) 2022/09/12 19:35:44 fetching corpus: 6350, signal 243826/287313 (executing program) 2022/09/12 19:35:44 fetching corpus: 6400, signal 244336/287725 (executing program) 2022/09/12 19:35:44 fetching corpus: 6450, signal 244730/288107 (executing program) 2022/09/12 19:35:44 fetching corpus: 6500, signal 244999/288488 (executing program) 2022/09/12 19:35:44 fetching corpus: 6550, signal 245578/288924 (executing program) 2022/09/12 19:35:45 fetching corpus: 6600, signal 246020/289286 (executing program) 2022/09/12 19:35:45 fetching corpus: 6650, signal 246552/289652 (executing program) 2022/09/12 19:35:45 fetching corpus: 6700, signal 247294/290026 (executing program) 2022/09/12 19:35:45 fetching corpus: 6750, signal 247814/290381 (executing program) 2022/09/12 19:35:45 fetching corpus: 6800, signal 248403/290729 (executing program) 2022/09/12 19:35:45 fetching corpus: 6850, signal 248815/291064 (executing program) 2022/09/12 19:35:46 fetching corpus: 6900, signal 249242/291397 (executing program) 2022/09/12 19:35:46 fetching corpus: 6950, signal 249911/291699 (executing program) 2022/09/12 19:35:46 fetching corpus: 7000, signal 250440/291997 (executing program) 2022/09/12 19:35:46 fetching corpus: 7050, signal 250810/292288 (executing program) 2022/09/12 19:35:46 fetching corpus: 7100, signal 251349/292578 (executing program) 2022/09/12 19:35:46 fetching corpus: 7150, signal 251927/292712 (executing program) 2022/09/12 19:35:46 fetching corpus: 7200, signal 252539/292739 (executing program) 2022/09/12 19:35:47 fetching corpus: 7250, signal 253254/292759 (executing program) 2022/09/12 19:35:47 fetching corpus: 7300, signal 253655/292797 (executing program) 2022/09/12 19:35:47 fetching corpus: 7350, signal 254111/292830 (executing program) 2022/09/12 19:35:47 fetching corpus: 7400, signal 254712/292830 (executing program) 2022/09/12 19:35:47 fetching corpus: 7450, signal 255584/292833 (executing program) 2022/09/12 19:35:47 fetching corpus: 7500, signal 256183/292836 (executing program) 2022/09/12 19:35:47 fetching corpus: 7550, signal 256725/292860 (executing program) 2022/09/12 19:35:48 fetching corpus: 7600, signal 257434/292880 (executing program) 2022/09/12 19:35:48 fetching corpus: 7650, signal 257898/292887 (executing program) 2022/09/12 19:35:48 fetching corpus: 7700, signal 258240/292912 (executing program) 2022/09/12 19:35:48 fetching corpus: 7750, signal 258741/292912 (executing program) 2022/09/12 19:35:48 fetching corpus: 7800, signal 259259/292955 (executing program) 2022/09/12 19:35:48 fetching corpus: 7850, signal 259708/292962 (executing program) 2022/09/12 19:35:48 fetching corpus: 7900, signal 260104/292966 (executing program) 2022/09/12 19:35:49 fetching corpus: 7950, signal 260651/292968 (executing program) 2022/09/12 19:35:49 fetching corpus: 8000, signal 261078/292970 (executing program) 2022/09/12 19:35:49 fetching corpus: 8050, signal 261504/292970 (executing program) 2022/09/12 19:35:49 fetching corpus: 8100, signal 261918/292975 (executing program) 2022/09/12 19:35:49 fetching corpus: 8150, signal 262723/292979 (executing program) 2022/09/12 19:35:49 fetching corpus: 8200, signal 263283/292993 (executing program) 2022/09/12 19:35:49 fetching corpus: 8250, signal 263805/293016 (executing program) 2022/09/12 19:35:49 fetching corpus: 8300, signal 264144/293023 (executing program) 2022/09/12 19:35:50 fetching corpus: 8350, signal 264519/293026 (executing program) 2022/09/12 19:35:50 fetching corpus: 8400, signal 264973/293053 (executing program) 2022/09/12 19:35:50 fetching corpus: 8450, signal 265339/293053 (executing program) 2022/09/12 19:35:50 fetching corpus: 8500, signal 265717/293057 (executing program) 2022/09/12 19:35:50 fetching corpus: 8550, signal 266093/293061 (executing program) 2022/09/12 19:35:50 fetching corpus: 8600, signal 266590/293169 (executing program) 2022/09/12 19:35:50 fetching corpus: 8650, signal 266905/293193 (executing program) 2022/09/12 19:35:51 fetching corpus: 8700, signal 267226/293198 (executing program) 2022/09/12 19:35:51 fetching corpus: 8750, signal 267690/293213 (executing program) 2022/09/12 19:35:51 fetching corpus: 8800, signal 268018/293216 (executing program) 2022/09/12 19:35:51 fetching corpus: 8850, signal 268427/293301 (executing program) 2022/09/12 19:35:51 fetching corpus: 8900, signal 268847/293367 (executing program) 2022/09/12 19:35:51 fetching corpus: 8950, signal 269227/293367 (executing program) 2022/09/12 19:35:51 fetching corpus: 9000, signal 269642/293379 (executing program) 2022/09/12 19:35:52 fetching corpus: 9050, signal 269971/293391 (executing program) 2022/09/12 19:35:52 fetching corpus: 9100, signal 270576/293404 (executing program) 2022/09/12 19:35:52 fetching corpus: 9150, signal 270899/293409 (executing program) 2022/09/12 19:35:52 fetching corpus: 9200, signal 271286/293425 (executing program) 2022/09/12 19:35:52 fetching corpus: 9250, signal 271746/293444 (executing program) 2022/09/12 19:35:52 fetching corpus: 9300, signal 272255/293510 (executing program) 2022/09/12 19:35:52 fetching corpus: 9350, signal 272637/293525 (executing program) 2022/09/12 19:35:52 fetching corpus: 9400, signal 272965/293533 (executing program) 2022/09/12 19:35:53 fetching corpus: 9450, signal 273342/293535 (executing program) 2022/09/12 19:35:53 fetching corpus: 9500, signal 273594/293546 (executing program) 2022/09/12 19:35:53 fetching corpus: 9550, signal 274068/293580 (executing program) 2022/09/12 19:35:53 fetching corpus: 9600, signal 274379/293628 (executing program) 2022/09/12 19:35:53 fetching corpus: 9650, signal 274774/293639 (executing program) 2022/09/12 19:35:53 fetching corpus: 9700, signal 275430/293648 (executing program) 2022/09/12 19:35:53 fetching corpus: 9750, signal 275823/293648 (executing program) 2022/09/12 19:35:54 fetching corpus: 9800, signal 276454/293709 (executing program) 2022/09/12 19:35:54 fetching corpus: 9850, signal 276891/293717 (executing program) 2022/09/12 19:35:54 fetching corpus: 9900, signal 277252/293729 (executing program) 2022/09/12 19:35:54 fetching corpus: 9950, signal 277702/293734 (executing program) 2022/09/12 19:35:54 fetching corpus: 10000, signal 278233/293740 (executing program) 2022/09/12 19:35:54 fetching corpus: 10050, signal 278739/293746 (executing program) 2022/09/12 19:35:55 fetching corpus: 10100, signal 279148/293748 (executing program) 2022/09/12 19:35:55 fetching corpus: 10150, signal 279425/293769 (executing program) 2022/09/12 19:35:55 fetching corpus: 10200, signal 280047/293780 (executing program) 2022/09/12 19:35:55 fetching corpus: 10250, signal 280419/293786 (executing program) 2022/09/12 19:35:55 fetching corpus: 10300, signal 280840/293796 (executing program) 2022/09/12 19:35:55 fetching corpus: 10350, signal 281222/293796 (executing program) 2022/09/12 19:35:55 fetching corpus: 10400, signal 281635/293801 (executing program) 2022/09/12 19:35:55 fetching corpus: 10450, signal 282115/293825 (executing program) 2022/09/12 19:35:56 fetching corpus: 10458, signal 282165/293825 (executing program) 2022/09/12 19:35:56 fetching corpus: 10458, signal 282165/293825 (executing program) 2022/09/12 19:35:57 starting 8 fuzzer processes 19:35:57 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_io_uring_setup(0x242, &(0x7f0000000200)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000002c0)) 19:35:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000340)) 19:35:57 executing program 2: mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x0, 0x0, 0x0) 19:35:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 19:35:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 19:35:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "e975bf57c90e8b3e88475f6fb9f0e089d8c33124d2138b84352cb6e14438589d116395e328e661077a348e64d34149cef3a6cfd52a9cc2f96ae8df69e442103a15563433f7518b7fd5d0132de8033db10401f8b596e0963423ec8cb9147433ca1971f297888fb2a34376a801ea3d91aaee66f036e45801b7ebe992f309c097be9309bb3a6f1efc21739655dc46aa42ef944258b212d8d08cb09e0b27cab5bfcdefb290a96c44c83ecf346bbe71f67bdc693b06de10e05d98179c8dcd5c03c31c5644301b0bcc23bc55304c0ea57e0f4a55a91d091fcf17610e30d1261ed6641fe336a4128b74e29281528bc687674ecd1661f6522c47aa7b7aae89dcd1a8fde3535c52afabca6016c191a105523cb90e7ea5190069dbb60945f7a04a255563f17eabf273e445bf731f8709bb57230bcab6e5fc962920943e219b038e5cce7205fd60b776415ef5d9d5544ec28c9e5c2f379d34dab919637e1db21677539204b361e0cfc71c63dff8e86f9fc5e5e428fd998dc083b6071e79f58b461d11bd856f4d0ec0bcd14cd0ebe3e4ced695eebef874aca473ff0ab04d142601142cacce269f2c67a6c5b9e04f9b483e456ece5b62e9a1be8aea84ac3ff365e528b4fdbb38e2d3fd2b1249ff1e6ca30e835f4f139b3c5a4c47a309ce7848bf196e03fe50bcf58d962fdf3d81c721c2d3631333696fe7f5492fbf189ce68f5453b51f43b030"}) [ 91.619349] audit: type=1400 audit(1663011358.022:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:35:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 19:35:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0x8) read(r0, 0x0, 0x0) [ 93.025797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.029232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.030762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.033735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.033891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.037775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.045918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.052438] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.054643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.054673] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.057266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.059773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.065156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.067670] Bluetooth: hci1: HCI_REQ-0x0c1a [ 93.070305] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.072193] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.079332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.081858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.083293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.084698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.090146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.094879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.096674] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.103039] Bluetooth: hci4: HCI_REQ-0x0c1a [ 93.104462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.106201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.108456] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.110806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.112134] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.113332] Bluetooth: hci0: HCI_REQ-0x0c1a [ 93.116855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.121397] Bluetooth: hci2: HCI_REQ-0x0c1a [ 93.122325] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.123790] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.128330] Bluetooth: hci6: HCI_REQ-0x0c1a [ 93.168365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.172752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.174686] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.176849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.183040] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.185071] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.186390] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.194160] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.195357] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.198324] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.203850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.210105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.218776] Bluetooth: hci5: HCI_REQ-0x0c1a [ 93.240066] Bluetooth: hci7: HCI_REQ-0x0c1a [ 93.267337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.270074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.271952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.274842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.276738] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.278148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.285658] Bluetooth: hci3: HCI_REQ-0x0c1a [ 95.154385] Bluetooth: hci4: command 0x0409 tx timeout [ 95.154632] Bluetooth: hci6: command 0x0409 tx timeout [ 95.155895] Bluetooth: hci0: command 0x0409 tx timeout [ 95.156206] Bluetooth: hci2: command 0x0409 tx timeout [ 95.157751] Bluetooth: hci1: command 0x0409 tx timeout [ 95.282624] Bluetooth: hci7: command 0x0409 tx timeout [ 95.283715] Bluetooth: hci5: command 0x0409 tx timeout [ 95.345788] Bluetooth: hci3: command 0x0409 tx timeout [ 97.201651] Bluetooth: hci1: command 0x041b tx timeout [ 97.202190] Bluetooth: hci2: command 0x041b tx timeout [ 97.202656] Bluetooth: hci0: command 0x041b tx timeout [ 97.203095] Bluetooth: hci6: command 0x041b tx timeout [ 97.203547] Bluetooth: hci4: command 0x041b tx timeout [ 97.329620] Bluetooth: hci5: command 0x041b tx timeout [ 97.330167] Bluetooth: hci7: command 0x041b tx timeout [ 97.394562] Bluetooth: hci3: command 0x041b tx timeout [ 99.250709] Bluetooth: hci4: command 0x040f tx timeout [ 99.251427] Bluetooth: hci6: command 0x040f tx timeout [ 99.253243] Bluetooth: hci0: command 0x040f tx timeout [ 99.253882] Bluetooth: hci2: command 0x040f tx timeout [ 99.254466] Bluetooth: hci1: command 0x040f tx timeout [ 99.378625] Bluetooth: hci7: command 0x040f tx timeout [ 99.379241] Bluetooth: hci5: command 0x040f tx timeout [ 99.442589] Bluetooth: hci3: command 0x040f tx timeout [ 101.298665] Bluetooth: hci1: command 0x0419 tx timeout [ 101.300619] Bluetooth: hci2: command 0x0419 tx timeout [ 101.301170] Bluetooth: hci0: command 0x0419 tx timeout [ 101.302363] Bluetooth: hci6: command 0x0419 tx timeout [ 101.303347] Bluetooth: hci4: command 0x0419 tx timeout [ 101.426580] Bluetooth: hci5: command 0x0419 tx timeout [ 101.427185] Bluetooth: hci7: command 0x0419 tx timeout [ 101.490638] Bluetooth: hci3: command 0x0419 tx timeout 19:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 19:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) [ 149.069699] audit: type=1400 audit(1663011415.472:7): avc: denied { open } for pid=3735 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.071560] audit: type=1400 audit(1663011415.472:8): avc: denied { kernel } for pid=3735 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 149.095231] ------------[ cut here ]------------ [ 149.095250] [ 149.095253] ====================================================== [ 149.095257] WARNING: possible circular locking dependency detected [ 149.095261] 6.0.0-rc5-next-20220912 #1 Not tainted [ 149.095268] ------------------------------------------------------ [ 149.095271] syz-executor.5/3736 is trying to acquire lock: [ 149.095278] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 149.095315] [ 149.095315] but task is already holding lock: [ 149.095318] ffff888008de0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.095346] [ 149.095346] which lock already depends on the new lock. [ 149.095346] [ 149.095350] [ 149.095350] the existing dependency chain (in reverse order) is: [ 149.095353] [ 149.095353] -> #3 (&ctx->lock){....}-{2:2}: [ 149.095367] _raw_spin_lock+0x2a/0x40 [ 149.095384] __perf_event_task_sched_out+0x53b/0x18d0 [ 149.095397] __schedule+0xedd/0x2470 [ 149.095407] schedule+0xda/0x1b0 [ 149.095416] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.095437] syscall_exit_to_user_mode+0x19/0x40 [ 149.095456] do_syscall_64+0x48/0x90 [ 149.095469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.095487] [ 149.095487] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 149.095501] _raw_spin_lock_nested+0x30/0x40 [ 149.095518] raw_spin_rq_lock_nested+0x1e/0x30 [ 149.095532] task_fork_fair+0x63/0x4d0 [ 149.095549] sched_cgroup_fork+0x3d0/0x540 [ 149.095564] copy_process+0x3f9e/0x6df0 [ 149.095575] kernel_clone+0xe7/0x890 [ 149.095584] user_mode_thread+0xad/0xf0 [ 149.095595] rest_init+0x24/0x250 [ 149.095611] arch_call_rest_init+0xf/0x14 [ 149.095631] start_kernel+0x4c1/0x4e6 [ 149.095648] secondary_startup_64_no_verify+0xe0/0xeb [ 149.095663] [ 149.095663] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 149.095676] _raw_spin_lock_irqsave+0x39/0x60 [ 149.095691] try_to_wake_up+0xab/0x1920 [ 149.095705] up+0x75/0xb0 [ 149.095716] __up_console_sem+0x6e/0x80 [ 149.095733] console_unlock+0x46a/0x590 [ 149.095749] vt_ioctl+0x2822/0x2ca0 [ 149.095762] tty_ioctl+0x7c4/0x1700 [ 149.095773] __x64_sys_ioctl+0x19a/0x210 [ 149.095789] do_syscall_64+0x3b/0x90 [ 149.095802] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.095819] [ 149.095819] -> #0 ((console_sem).lock){....}-{2:2}: [ 149.095832] __lock_acquire+0x2a02/0x5e70 [ 149.095849] lock_acquire+0x1a2/0x530 [ 149.095866] _raw_spin_lock_irqsave+0x39/0x60 [ 149.095880] down_trylock+0xe/0x70 [ 149.095893] __down_trylock_console_sem+0x3b/0xd0 [ 149.095909] vprintk_emit+0x16b/0x560 [ 149.095926] vprintk+0x84/0xa0 [ 149.095942] _printk+0xba/0xf1 [ 149.095960] report_bug.cold+0x72/0xab [ 149.095972] handle_bug+0x3c/0x70 [ 149.095985] exc_invalid_op+0x14/0x50 [ 149.095997] asm_exc_invalid_op+0x16/0x20 [ 149.096014] group_sched_out.part.0+0x2c7/0x460 [ 149.096024] ctx_sched_out+0x8f1/0xc10 [ 149.096034] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.096046] __schedule+0xedd/0x2470 [ 149.096055] schedule+0xda/0x1b0 [ 149.096064] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.096083] syscall_exit_to_user_mode+0x19/0x40 [ 149.096100] do_syscall_64+0x48/0x90 [ 149.096113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.096130] [ 149.096130] other info that might help us debug this: [ 149.096130] [ 149.096132] Chain exists of: [ 149.096132] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 149.096132] [ 149.096147] Possible unsafe locking scenario: [ 149.096147] [ 149.096150] CPU0 CPU1 [ 149.096152] ---- ---- [ 149.096155] lock(&ctx->lock); [ 149.096160] lock(&rq->__lock); [ 149.096167] lock(&ctx->lock); [ 149.096173] lock((console_sem).lock); [ 149.096179] [ 149.096179] *** DEADLOCK *** [ 149.096179] [ 149.096181] 2 locks held by syz-executor.5/3736: [ 149.096188] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 149.096213] #1: ffff888008de0820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 149.096241] [ 149.096241] stack backtrace: [ 149.096243] CPU: 1 PID: 3736 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 149.096256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.096265] Call Trace: [ 149.096268] [ 149.096272] dump_stack_lvl+0x8b/0xb3 [ 149.096286] check_noncircular+0x263/0x2e0 [ 149.096303] ? format_decode+0x26c/0xb50 [ 149.096318] ? print_circular_bug+0x450/0x450 [ 149.096335] ? enable_ptr_key_workfn+0x20/0x20 [ 149.096350] ? format_decode+0x26c/0xb50 [ 149.096365] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 149.096383] __lock_acquire+0x2a02/0x5e70 [ 149.096406] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 149.096428] lock_acquire+0x1a2/0x530 [ 149.096445] ? down_trylock+0xe/0x70 [ 149.096460] ? rcu_read_unlock+0x40/0x40 [ 149.096481] ? vprintk+0x84/0xa0 [ 149.096500] _raw_spin_lock_irqsave+0x39/0x60 [ 149.096515] ? down_trylock+0xe/0x70 [ 149.096529] down_trylock+0xe/0x70 [ 149.096542] ? vprintk+0x84/0xa0 [ 149.096559] __down_trylock_console_sem+0x3b/0xd0 [ 149.096577] vprintk_emit+0x16b/0x560 [ 149.096596] vprintk+0x84/0xa0 [ 149.096614] _printk+0xba/0xf1 [ 149.096632] ? record_print_text.cold+0x16/0x16 [ 149.096654] ? report_bug.cold+0x66/0xab [ 149.096668] ? group_sched_out.part.0+0x2c7/0x460 [ 149.096680] report_bug.cold+0x72/0xab [ 149.096694] handle_bug+0x3c/0x70 [ 149.096708] exc_invalid_op+0x14/0x50 [ 149.096722] asm_exc_invalid_op+0x16/0x20 [ 149.096739] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.096752] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.096763] RSP: 0018:ffff8880202f7c48 EFLAGS: 00010006 [ 149.096773] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.096780] RDX: ffff888041cd0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.096788] RBP: ffff88801d5f0000 R08: 0000000000000005 R09: 0000000000000001 [ 149.096796] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888008de0800 [ 149.096804] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 149.096815] ? group_sched_out.part.0+0x2c7/0x460 [ 149.096828] ? group_sched_out.part.0+0x2c7/0x460 [ 149.096841] ctx_sched_out+0x8f1/0xc10 [ 149.096853] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.096869] ? lock_is_held_type+0xd7/0x130 [ 149.096887] ? __perf_cgroup_move+0x160/0x160 [ 149.096899] ? set_next_entity+0x304/0x550 [ 149.096917] ? update_curr+0x267/0x740 [ 149.096936] ? lock_is_held_type+0xd7/0x130 [ 149.096955] __schedule+0xedd/0x2470 [ 149.096968] ? io_schedule_timeout+0x150/0x150 [ 149.096980] ? __x64_sys_futex_time32+0x480/0x480 [ 149.096994] schedule+0xda/0x1b0 [ 149.097005] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.097025] syscall_exit_to_user_mode+0x19/0x40 [ 149.097045] do_syscall_64+0x48/0x90 [ 149.097061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.097080] RIP: 0033:0x7f3655031b19 [ 149.097089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.097100] RSP: 002b:00007f36525a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.097111] RAX: 0000000000000001 RBX: 00007f3655144f68 RCX: 00007f3655031b19 [ 149.097118] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3655144f6c [ 149.097126] RBP: 00007f3655144f60 R08: 000000000000000e R09: 0000000000000000 [ 149.097133] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3655144f6c [ 149.097140] R13: 00007ffe4731160f R14: 00007f36525a7300 R15: 0000000000022000 [ 149.097153] [ 149.154408] WARNING: CPU: 1 PID: 3736 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 149.155084] Modules linked in: [ 149.155320] CPU: 1 PID: 3736 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 149.155895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 149.156699] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 149.157094] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 149.158376] RSP: 0018:ffff8880202f7c48 EFLAGS: 00010006 [ 149.158765] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 149.159280] RDX: ffff888041cd0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 149.159791] RBP: ffff88801d5f0000 R08: 0000000000000005 R09: 0000000000000001 [ 149.160300] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff888008de0800 [ 149.160807] R13: ffff88806cf3d100 R14: ffffffff8547c7c0 R15: 0000000000000002 [ 149.161319] FS: 00007f36525a7700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 149.161921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.162350] CR2: 00007ff031c98e8f CR3: 000000001b760000 CR4: 0000000000350ee0 [ 149.162908] Call Trace: [ 149.163104] [ 149.163280] ctx_sched_out+0x8f1/0xc10 [ 149.163570] __perf_event_task_sched_out+0x6d0/0x18d0 [ 149.163960] ? lock_is_held_type+0xd7/0x130 [ 149.164288] ? __perf_cgroup_move+0x160/0x160 [ 149.164637] ? set_next_entity+0x304/0x550 [ 149.164963] ? update_curr+0x267/0x740 [ 149.165260] ? lock_is_held_type+0xd7/0x130 [ 149.165619] __schedule+0xedd/0x2470 [ 149.165904] ? io_schedule_timeout+0x150/0x150 [ 149.166241] ? __x64_sys_futex_time32+0x480/0x480 [ 149.166605] schedule+0xda/0x1b0 [ 149.166861] exit_to_user_mode_prepare+0x114/0x1a0 [ 149.167268] syscall_exit_to_user_mode+0x19/0x40 [ 149.167649] do_syscall_64+0x48/0x90 [ 149.167934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 149.168327] RIP: 0033:0x7f3655031b19 [ 149.168608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 149.169962] RSP: 002b:00007f36525a7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.170530] RAX: 0000000000000001 RBX: 00007f3655144f68 RCX: 00007f3655031b19 [ 149.171074] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3655144f6c [ 149.171621] RBP: 00007f3655144f60 R08: 000000000000000e R09: 0000000000000000 [ 149.172162] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f3655144f6c [ 149.172699] R13: 00007ffe4731160f R14: 00007f36525a7300 R15: 0000000000022000 [ 149.173244] [ 149.173433] irq event stamp: 2446 [ 149.173692] hardirqs last enabled at (2445): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 149.174406] hardirqs last disabled at (2446): [] __schedule+0x1225/0x2470 [ 149.175041] softirqs last enabled at (1866): [] __irq_exit_rcu+0x11b/0x180 [ 149.175692] softirqs last disabled at (1857): [] __irq_exit_rcu+0x11b/0x180 [ 149.176330] ---[ end trace 0000000000000000 ]--- 19:36:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x14, 0x66, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 19:36:55 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), 0x4) 19:36:55 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 19:36:55 executing program 5: vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) [ 149.651447] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 19:36:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000640)=[{&(0x7f00000002c0)="02", 0x1}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'xfrm0\x00'}) sendmmsg(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 19:36:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001040)={0x200, 0x0, 0x0, "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"}) [ 149.738679] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.081709] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 156.146540] Bluetooth: hci7: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 19:36:55 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=0000000000000001 RCX=0000000000000dc0 RDX=ffff888007c75000 RSI=ffff88801b54d600 RDI=ffffffff840c8950 RBP=0000000000000000 RSP=ffff8880431a77c0 R8 =00000000ffffffff R9 =0000000000000000 R10=fffffbfff0a99dac R11=0000000000000001 R12=ffff888007c75000 R13=ffff88801b54d600 R14=0000000000000dc0 R15=0000000000000dc0 RIP=ffffffff8177ca92 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1d32cb6260 CR3=00000000428b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880202f7698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f36525a7700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff031c98e8f CR3=000000001b760000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f36551187c0 00007f36551187c8 YMM02=0000000000000000 0000000000000000 00007f36551187e0 00007f36551187c0 YMM03=0000000000000000 0000000000000000 00007f36551187c8 00007f36551187c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000