Warning: Permanently added '[localhost]:53203' (ECDSA) to the list of known hosts. 2022/09/27 05:20:50 fuzzer started 2022/09/27 05:20:50 dialing manager at localhost:38881 syzkaller login: [ 39.507253] cgroup: Unknown subsys name 'net' [ 39.615663] cgroup: Unknown subsys name 'rlimit' 2022/09/27 05:21:04 syscalls: 2215 2022/09/27 05:21:04 code coverage: enabled 2022/09/27 05:21:04 comparison tracing: enabled 2022/09/27 05:21:04 extra coverage: enabled 2022/09/27 05:21:04 setuid sandbox: enabled 2022/09/27 05:21:04 namespace sandbox: enabled 2022/09/27 05:21:04 Android sandbox: enabled 2022/09/27 05:21:04 fault injection: enabled 2022/09/27 05:21:04 leak checking: enabled 2022/09/27 05:21:04 net packet injection: enabled 2022/09/27 05:21:04 net device setup: enabled 2022/09/27 05:21:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/27 05:21:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/27 05:21:04 USB emulation: enabled 2022/09/27 05:21:04 hci packet injection: enabled 2022/09/27 05:21:04 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923) 2022/09/27 05:21:04 802.15.4 emulation: enabled 2022/09/27 05:21:04 fetching corpus: 50, signal 23422/25252 (executing program) 2022/09/27 05:21:04 fetching corpus: 100, signal 32549/36075 (executing program) 2022/09/27 05:21:04 fetching corpus: 150, signal 44574/49639 (executing program) 2022/09/27 05:21:04 fetching corpus: 200, signal 51653/58165 (executing program) 2022/09/27 05:21:05 fetching corpus: 250, signal 55837/63817 (executing program) 2022/09/27 05:21:05 fetching corpus: 300, signal 63958/73187 (executing program) 2022/09/27 05:21:05 fetching corpus: 350, signal 69957/80393 (executing program) 2022/09/27 05:21:05 fetching corpus: 400, signal 74705/86334 (executing program) 2022/09/27 05:21:05 fetching corpus: 450, signal 77382/90302 (executing program) 2022/09/27 05:21:05 fetching corpus: 500, signal 81361/95415 (executing program) 2022/09/27 05:21:05 fetching corpus: 550, signal 84729/99913 (executing program) 2022/09/27 05:21:05 fetching corpus: 600, signal 87408/103730 (executing program) 2022/09/27 05:21:06 fetching corpus: 650, signal 88763/106322 (executing program) 2022/09/27 05:21:06 fetching corpus: 700, signal 91225/109854 (executing program) 2022/09/27 05:21:06 fetching corpus: 750, signal 93236/112981 (executing program) 2022/09/27 05:21:06 fetching corpus: 800, signal 95478/116295 (executing program) 2022/09/27 05:21:06 fetching corpus: 850, signal 98347/120094 (executing program) 2022/09/27 05:21:06 fetching corpus: 900, signal 100511/123270 (executing program) 2022/09/27 05:21:06 fetching corpus: 950, signal 102296/126041 (executing program) 2022/09/27 05:21:06 fetching corpus: 1000, signal 104102/128828 (executing program) 2022/09/27 05:21:06 fetching corpus: 1050, signal 106958/132432 (executing program) 2022/09/27 05:21:07 fetching corpus: 1100, signal 108562/134981 (executing program) 2022/09/27 05:21:07 fetching corpus: 1150, signal 110703/137968 (executing program) 2022/09/27 05:21:07 fetching corpus: 1200, signal 112318/140532 (executing program) 2022/09/27 05:21:07 fetching corpus: 1250, signal 114879/143826 (executing program) 2022/09/27 05:21:07 fetching corpus: 1300, signal 118399/147847 (executing program) 2022/09/27 05:21:07 fetching corpus: 1350, signal 119932/150243 (executing program) 2022/09/27 05:21:07 fetching corpus: 1400, signal 120979/152220 (executing program) 2022/09/27 05:21:07 fetching corpus: 1450, signal 122550/154535 (executing program) 2022/09/27 05:21:08 fetching corpus: 1500, signal 124007/156746 (executing program) 2022/09/27 05:21:08 fetching corpus: 1550, signal 125468/158996 (executing program) 2022/09/27 05:21:08 fetching corpus: 1600, signal 126524/160889 (executing program) 2022/09/27 05:21:08 fetching corpus: 1650, signal 127759/162922 (executing program) 2022/09/27 05:21:08 fetching corpus: 1700, signal 129574/165381 (executing program) 2022/09/27 05:21:08 fetching corpus: 1750, signal 132429/168514 (executing program) 2022/09/27 05:21:08 fetching corpus: 1800, signal 134137/170814 (executing program) 2022/09/27 05:21:08 fetching corpus: 1850, signal 134806/172371 (executing program) 2022/09/27 05:21:09 fetching corpus: 1900, signal 135977/174227 (executing program) 2022/09/27 05:21:09 fetching corpus: 1950, signal 137003/175960 (executing program) 2022/09/27 05:21:09 fetching corpus: 2000, signal 138038/177722 (executing program) 2022/09/27 05:21:09 fetching corpus: 2050, signal 139253/179578 (executing program) 2022/09/27 05:21:09 fetching corpus: 2100, signal 140896/181693 (executing program) 2022/09/27 05:21:09 fetching corpus: 2150, signal 141474/183086 (executing program) 2022/09/27 05:21:09 fetching corpus: 2200, signal 142616/184840 (executing program) 2022/09/27 05:21:09 fetching corpus: 2250, signal 144152/186812 (executing program) 2022/09/27 05:21:09 fetching corpus: 2300, signal 146476/189305 (executing program) 2022/09/27 05:21:10 fetching corpus: 2350, signal 147282/190726 (executing program) 2022/09/27 05:21:10 fetching corpus: 2400, signal 148591/192514 (executing program) 2022/09/27 05:21:10 fetching corpus: 2450, signal 149704/194126 (executing program) 2022/09/27 05:21:10 fetching corpus: 2500, signal 151663/196268 (executing program) 2022/09/27 05:21:10 fetching corpus: 2550, signal 152152/197510 (executing program) 2022/09/27 05:21:10 fetching corpus: 2600, signal 153310/199131 (executing program) 2022/09/27 05:21:10 fetching corpus: 2650, signal 154369/200668 (executing program) 2022/09/27 05:21:10 fetching corpus: 2700, signal 155198/202034 (executing program) 2022/09/27 05:21:11 fetching corpus: 2750, signal 155925/203355 (executing program) 2022/09/27 05:21:11 fetching corpus: 2800, signal 156745/204676 (executing program) 2022/09/27 05:21:11 fetching corpus: 2850, signal 157566/206083 (executing program) 2022/09/27 05:21:11 fetching corpus: 2900, signal 157997/207192 (executing program) 2022/09/27 05:21:11 fetching corpus: 2950, signal 159380/208844 (executing program) 2022/09/27 05:21:11 fetching corpus: 3000, signal 160022/210041 (executing program) 2022/09/27 05:21:11 fetching corpus: 3050, signal 160871/211325 (executing program) 2022/09/27 05:21:11 fetching corpus: 3100, signal 161761/212664 (executing program) 2022/09/27 05:21:11 fetching corpus: 3150, signal 162914/214080 (executing program) 2022/09/27 05:21:11 fetching corpus: 3200, signal 163251/215057 (executing program) 2022/09/27 05:21:12 fetching corpus: 3250, signal 164068/216325 (executing program) 2022/09/27 05:21:12 fetching corpus: 3300, signal 164682/217413 (executing program) 2022/09/27 05:21:12 fetching corpus: 3350, signal 165143/218525 (executing program) 2022/09/27 05:21:12 fetching corpus: 3400, signal 165759/219636 (executing program) 2022/09/27 05:21:12 fetching corpus: 3450, signal 166534/220863 (executing program) 2022/09/27 05:21:12 fetching corpus: 3500, signal 167612/222153 (executing program) 2022/09/27 05:21:12 fetching corpus: 3550, signal 168136/223226 (executing program) 2022/09/27 05:21:12 fetching corpus: 3600, signal 168763/224294 (executing program) 2022/09/27 05:21:12 fetching corpus: 3650, signal 169206/225251 (executing program) 2022/09/27 05:21:13 fetching corpus: 3700, signal 170475/226608 (executing program) 2022/09/27 05:21:13 fetching corpus: 3750, signal 171810/227987 (executing program) 2022/09/27 05:21:13 fetching corpus: 3800, signal 172809/229165 (executing program) 2022/09/27 05:21:13 fetching corpus: 3850, signal 174054/230419 (executing program) 2022/09/27 05:21:13 fetching corpus: 3900, signal 175309/231657 (executing program) 2022/09/27 05:21:13 fetching corpus: 3950, signal 176129/232775 (executing program) 2022/09/27 05:21:13 fetching corpus: 4000, signal 176877/233805 (executing program) 2022/09/27 05:21:13 fetching corpus: 4050, signal 177547/234759 (executing program) 2022/09/27 05:21:14 fetching corpus: 4100, signal 177824/235537 (executing program) 2022/09/27 05:21:14 fetching corpus: 4150, signal 178894/236689 (executing program) 2022/09/27 05:21:14 fetching corpus: 4200, signal 179253/237546 (executing program) 2022/09/27 05:21:14 fetching corpus: 4250, signal 179656/238405 (executing program) 2022/09/27 05:21:14 fetching corpus: 4300, signal 180563/239410 (executing program) 2022/09/27 05:21:14 fetching corpus: 4350, signal 181341/240374 (executing program) 2022/09/27 05:21:14 fetching corpus: 4400, signal 182012/241309 (executing program) 2022/09/27 05:21:14 fetching corpus: 4450, signal 183037/242328 (executing program) 2022/09/27 05:21:14 fetching corpus: 4500, signal 183683/243204 (executing program) 2022/09/27 05:21:15 fetching corpus: 4550, signal 184412/244123 (executing program) 2022/09/27 05:21:15 fetching corpus: 4600, signal 185219/245111 (executing program) 2022/09/27 05:21:15 fetching corpus: 4650, signal 186789/246312 (executing program) 2022/09/27 05:21:15 fetching corpus: 4700, signal 187367/247150 (executing program) 2022/09/27 05:21:15 fetching corpus: 4750, signal 187875/247959 (executing program) 2022/09/27 05:21:15 fetching corpus: 4800, signal 188480/248779 (executing program) 2022/09/27 05:21:15 fetching corpus: 4850, signal 189425/249701 (executing program) 2022/09/27 05:21:15 fetching corpus: 4900, signal 190202/250542 (executing program) 2022/09/27 05:21:16 fetching corpus: 4950, signal 190896/251375 (executing program) 2022/09/27 05:21:16 fetching corpus: 5000, signal 191325/252074 (executing program) 2022/09/27 05:21:16 fetching corpus: 5050, signal 191972/252866 (executing program) 2022/09/27 05:21:16 fetching corpus: 5100, signal 192394/253608 (executing program) 2022/09/27 05:21:16 fetching corpus: 5150, signal 192929/254350 (executing program) 2022/09/27 05:21:16 fetching corpus: 5200, signal 193616/255126 (executing program) 2022/09/27 05:21:16 fetching corpus: 5250, signal 194152/255889 (executing program) 2022/09/27 05:21:16 fetching corpus: 5300, signal 194562/256567 (executing program) 2022/09/27 05:21:16 fetching corpus: 5350, signal 194978/257255 (executing program) 2022/09/27 05:21:17 fetching corpus: 5400, signal 195338/257916 (executing program) 2022/09/27 05:21:17 fetching corpus: 5450, signal 196053/258640 (executing program) 2022/09/27 05:21:17 fetching corpus: 5500, signal 196543/259325 (executing program) 2022/09/27 05:21:17 fetching corpus: 5550, signal 197130/260009 (executing program) 2022/09/27 05:21:17 fetching corpus: 5600, signal 197514/260697 (executing program) 2022/09/27 05:21:17 fetching corpus: 5650, signal 198034/261348 (executing program) 2022/09/27 05:21:17 fetching corpus: 5700, signal 198444/261992 (executing program) 2022/09/27 05:21:17 fetching corpus: 5750, signal 199263/262654 (executing program) 2022/09/27 05:21:17 fetching corpus: 5800, signal 199768/263252 (executing program) 2022/09/27 05:21:18 fetching corpus: 5850, signal 200104/263885 (executing program) 2022/09/27 05:21:18 fetching corpus: 5900, signal 200971/264715 (executing program) 2022/09/27 05:21:18 fetching corpus: 5950, signal 201245/265297 (executing program) 2022/09/27 05:21:18 fetching corpus: 6000, signal 201665/265869 (executing program) 2022/09/27 05:21:18 fetching corpus: 6050, signal 202220/266475 (executing program) 2022/09/27 05:21:18 fetching corpus: 6100, signal 202727/267020 (executing program) 2022/09/27 05:21:18 fetching corpus: 6150, signal 203053/267556 (executing program) 2022/09/27 05:21:18 fetching corpus: 6200, signal 203510/268095 (executing program) 2022/09/27 05:21:18 fetching corpus: 6250, signal 204080/268693 (executing program) 2022/09/27 05:21:19 fetching corpus: 6300, signal 204792/269337 (executing program) 2022/09/27 05:21:19 fetching corpus: 6350, signal 205284/269900 (executing program) 2022/09/27 05:21:19 fetching corpus: 6400, signal 205857/270464 (executing program) 2022/09/27 05:21:19 fetching corpus: 6450, signal 206446/271047 (executing program) 2022/09/27 05:21:19 fetching corpus: 6500, signal 207029/271566 (executing program) 2022/09/27 05:21:19 fetching corpus: 6550, signal 207486/272078 (executing program) 2022/09/27 05:21:19 fetching corpus: 6600, signal 208360/272612 (executing program) 2022/09/27 05:21:19 fetching corpus: 6650, signal 209130/273087 (executing program) 2022/09/27 05:21:19 fetching corpus: 6700, signal 209522/273571 (executing program) 2022/09/27 05:21:20 fetching corpus: 6750, signal 209906/274077 (executing program) 2022/09/27 05:21:20 fetching corpus: 6800, signal 210430/274422 (executing program) 2022/09/27 05:21:20 fetching corpus: 6850, signal 210711/274422 (executing program) 2022/09/27 05:21:20 fetching corpus: 6900, signal 211225/274423 (executing program) 2022/09/27 05:21:20 fetching corpus: 6950, signal 211666/274439 (executing program) 2022/09/27 05:21:20 fetching corpus: 7000, signal 212103/274461 (executing program) 2022/09/27 05:21:20 fetching corpus: 7050, signal 212603/274461 (executing program) 2022/09/27 05:21:20 fetching corpus: 7100, signal 212844/274463 (executing program) 2022/09/27 05:21:21 fetching corpus: 7150, signal 213786/274467 (executing program) 2022/09/27 05:21:21 fetching corpus: 7200, signal 214318/274468 (executing program) 2022/09/27 05:21:21 fetching corpus: 7250, signal 214653/274471 (executing program) 2022/09/27 05:21:21 fetching corpus: 7300, signal 215255/274500 (executing program) 2022/09/27 05:21:21 fetching corpus: 7350, signal 215902/274500 (executing program) 2022/09/27 05:21:21 fetching corpus: 7400, signal 216459/274515 (executing program) 2022/09/27 05:21:21 fetching corpus: 7450, signal 216875/274516 (executing program) 2022/09/27 05:21:21 fetching corpus: 7500, signal 217401/274516 (executing program) 2022/09/27 05:21:22 fetching corpus: 7545, signal 217810/274516 (executing program) 2022/09/27 05:21:22 fetching corpus: 7545, signal 217810/274516 (executing program) 2022/09/27 05:21:24 starting 8 fuzzer processes 05:21:24 executing program 0: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x6) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x2d) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x10000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0xffffffff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x3ff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x74) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0xe3) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0xf1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000300)=0xff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0xffff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000380)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000400)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000440)=0xffffc456) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000480)=0x7fffffff) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000004c0)=0x7) 05:21:24 executing program 1: ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = inotify_init() fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6, 0x80000001}}, './file0\x00'}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000140)={0x0, 0xffffffff, 0xb6}) r2 = memfd_secret(0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x1f, 0x9, 0x1, 0x34, @dev={0xfe, 0x80, '\x00', 0x41}, @loopback, 0xf818, 0x1f, 0x2, 0x3fb}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'macvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x170, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3e215bd70b1d8c12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000880)=0x40) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f00000008c0)) memfd_create(&(0x7f0000000900)='veth1_to_bridge\x00', 0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000940)={[0xd2]}, 0x8, 0x80000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x401}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4) poll(&(0x7f0000000ac0)=[{r0, 0x149c}, {r2, 0x42}, {r0, 0x625}], 0x3, 0xc5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 05:21:24 executing program 2: ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x6, 0x7d) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x5f, 0x10c0) r4 = fcntl$dupfd(r0, 0x0, r3) fallocate(r2, 0x20, 0x80000000, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x81}, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000200)={{r3}, "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"}) sendmsg$AUDIT_GET(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001300), 0x4000, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000001440)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r4) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x110, r7, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x875f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00', 0xfffff000}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24000041}, 0x8001) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(0xffffffffffffffff, &(0x7f00000016c0), r8, &(0x7f0000001700)=0x9, 0x8, 0x5) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x20004040) [ 73.267922] audit: type=1400 audit(1664256084.490:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:21:24 executing program 4: ustat(0x9, &(0x7f0000000000)) ustat(0x401, &(0x7f0000000040)) ustat(0x5, &(0x7f0000000080)) ustat(0x0, &(0x7f00000000c0)) ustat(0x800, &(0x7f0000000100)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x9, 0x9, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x3f}, 0x44080, 0x9, 0x6, 0x3, 0x80000001, 0x6, 0xa4, 0x0, 0x20, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4, 0x4, 0x2, 0x6, 0x0, 0xe8, 0x20000, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0xffffffff00000001, 0x258c}, 0x8, 0x7, 0xb7, 0x3, 0x3, 0x200, 0x20, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xd) ustat(0x31ac, &(0x7f0000000280)) ustat(0x4, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x2, 0x5, 0xff, 0x0, 0x1000, 0xe0104, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x4, 0xc0b}, 0x1, 0x401, 0x80, 0x0, 0xfffffffffffffff7, 0x244d, 0x5, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x0) ustat(0x2, &(0x7f0000000380)) r3 = dup(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x4000040) ustat(0x9, &(0x7f0000000500)) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x9, 0x1f, 0x0, 0x8, 0x0, 0x2d, 0x12010, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000540), 0x8}, 0x44180, 0x5, 0x4, 0x1, 0x3, 0x8, 0xff, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x10, r2, 0xe) ustat(0x6, &(0x7f0000000600)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ustat(0x0, &(0x7f0000000640)) 05:21:24 executing program 3: modify_ldt$write(0x1, &(0x7f0000000000)={0xbac, 0x20000800, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0xfff, 0x20001000, 0x1000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080)={0x5, 0x100000, 0x400, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000000c0)={0x540, 0x20000800, 0x400, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000100)={0xffffffff, 0x1000, 0x2000, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000140)={0x7de, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000180)={0x4, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3f, 0x20000800, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200)={0x6, 0x20001000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000240)={0x7fffffff, 0x20000000, 0x400, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000280)={0x9, 0x20000000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000002c0)={0x3f, 0x20001000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0x8, 0x20000000, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) get_thread_area(&(0x7f0000000340)={0x3, 0xffffffffffffffff, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}) modify_ldt$write(0x1, &(0x7f0000000380)={0x7, 0x100000, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000003c0)={0x632, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000400)={0xc1, 0x20000000, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000440)={0x7, 0x20000000, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000480)={0x0, 0x20000000, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f00000004c0)={0x40, 0x20000800, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) 05:21:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0xc880) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "c016e476ec3e96a4074efea259dce12e4ba612fe3f442783487866770a322d19"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r6) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0xcd18af2ed09c8c61, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8011) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c851}, 0x4041010) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r11) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) 05:21:24 executing program 6: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000000)={{}, 0x0, 0x18, @unused=[0x0, 0x10000, 0x2, 0x1], @devid}) r0 = openat2(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x40400, 0xa9, 0x9}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001080), 0x280000, 0x0) r2 = dup(r1) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$SNAPSHOT_FREE(r2, 0x3305) r3 = signalfd(0xffffffffffffffff, &(0x7f00000010c0)={[0xfffffffffffffffe]}, 0x8) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0xf1a) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000001100)={0x7, 0x200}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001140)={{r1}, 0x2, 0xc58, 0x3}) ioctl$CDROMCLOSETRAY(r2, 0x5319) writev(r3, &(0x7f0000001380)=[{&(0x7f0000001180)="0a30696158885fab186e034b399c16fae935707eb5180b37cece6294826e98a9c173f250afacfb82a2f18bce67aa243eca7d2befad14b8d06adbe5f214fa94e05a9728fdcf199aefb9210e67413c6f287aba12227236208c438f139cfe522aa3df3abae364b9ad2d78f17649350d3985ac2c58b0a3d3ec001c7bfd905248a1dc2f6d4a0fa31e0f710f004f9bf7f46524f8", 0x91}, {&(0x7f0000001240)="a6707705fd68b9857129548325caeef5f6d92f416487f3cd437f53ebdbd7b32ec0b9fe7735afd7bac3b34e5aea0ed4f199ba78496514c3acca5bdf66c0abc7ce47a9229d8156abdbd23ac1c90237", 0x4e}, {&(0x7f00000012c0)="6bde3e6c4555a01252fa912c13c3db8c3c7edb35cdc7460b8aa10d035f36f06da21b1616855f1bf985066dfc7fb32ad267d7a6418a62119bf6a9d8277cfcd133472d12db2d3ba050da584a9051eecc67d5d6019f18e99af3524031992bbdbb9be88a7243b7aa5827e6027f9891a007abdaee", 0x72}, {&(0x7f0000001340)="19e7d3b33b6530228b8d21d3ea78ee0f6c4e670cd14cc0b34f95b82a2a36a0c2", 0x20}], 0x4) r4 = dup2(r0, r1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000013c0)={0x40002008}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) r6 = openat$cgroup_freezer_state(r2, &(0x7f0000001400), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000001440)=0x1) ioctl$SNAPSHOT_FREE(r3, 0x3305) pwritev(r4, &(0x7f0000001580)=[{&(0x7f0000001480)="b3a8bb688e5e369c45364e9da482ebae4b8a1674c8e6e47249d7185abb58285be7220428b6ad90c6ce1501c08e7b5387f6becdbb54a35a966c48cfc8a47143087f41f1d2e796f673dc20e36be42e3e6dcd1f318a1665925aaf2948cf8352296a1f4ba7b2f13a7334387bc2f7a29f2b1f78e6e8b059c986c8bd3daa5383a344190457e102d01a2dc04e20e69a9a1fa17579bf47a9780caf01f3f8900b86075f1a6c5384e9ae259ba0a141a62d0bb84651a3efbdffb693c0b304ff41b4ad", 0xbd}, {&(0x7f0000001540)="91f50312e64634ea6b18bb778999839c1af2f392b1aecf2f0080e20246925c76a9d4a7340316c0b1e81fd479", 0x2c}], 0x2, 0x10000, 0x4) 05:21:24 executing program 7: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0xd8, 0x98, 0x1, 'queue1\x00', 0x20}) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/101, 0x65, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000140)={0x9, 0x10001, 0x1, 'queue1\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0xaa8b, 0x5, 0x7f}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000300)={0x0, 0x2, 'client1\x00', 0x1, "94f678b2c00b5c5a", "4dc9bc2da25f0592b244348f13c1b414c0acf42e4dc3224ff2b19656de4c51c8", 0x4, 0x4}) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x4, 0x12}, 0x18) lremovexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='trusted.overlay.upper\x00') r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) recvmmsg$unix(r2, &(0x7f0000006080)=[{{&(0x7f0000000840), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000940)=""/206, 0xce}, {&(0x7f0000000a40)=""/167, 0xa7}, {&(0x7f0000000b00)=""/145, 0x91}], 0x4, &(0x7f0000000c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d40)=""/99, 0x63}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/254, 0xfe}, {&(0x7f0000000fc0)=""/141, 0x8d}], 0x4}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/3, 0x3}, {&(0x7f0000001240)=""/69, 0x45}, {&(0x7f00000012c0)=""/47, 0x2f}, {&(0x7f0000001300)=""/33, 0x21}], 0x5, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/31, 0x1f}, {&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/29, 0x1d}], 0x3, &(0x7f0000001700)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/253, 0xfd}, {&(0x7f00000018c0)=""/168, 0xa8}], 0x2, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000001a40)=""/144, 0x90}, {&(0x7f0000001b00)=""/103, 0x67}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x4, &(0x7f0000003bc0)}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000003c00)=""/179, 0xb3}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/66, 0x42}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x4, &(0x7f0000005d80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005dc0)=@abs, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000005e40)=""/30, 0x1e}, {&(0x7f0000005e80)=""/71, 0x47}], 0x2, &(0x7f0000005f40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x8, 0x40, 0x0) write$P9_RSTATu(r4, &(0x7f0000006280)={0x70, 0x7d, 0x2, {{0x0, 0x45, 0x6, 0x40, {0xcf731ca118bcf709, 0x1, 0x2}, 0x40000, 0x101, 0x5, 0x5, 0x2, '/&', 0x1, '^', 0xa, '-!,#)-[{}]', 0x5, '\xf4(+@%'}, 0x16, 'trusted.overlay.upper\x00', r7, r3, r11}}, 0x70) openat(r9, &(0x7f0000006300)='.\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r12, 0xc04c5349, &(0x7f0000006340)={0x401, 0x9}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000063c0)={r6, r5, "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", "c444276dd291df299831fafd0ec88b6031fda016229b80f50833fe3213a1746acb53563f9b03613a64a8f084bf17a250e5da05e9f34d62f9c9da7e06e5ae76467874db2849cde8dfce920dcfa216844d03c0eeaa223671796ef33446ecb808eb729862e2ad188d3145bbfed359fad3c53f9d47e87561e47f5a5c078c64303b371bea242a4497d2fcacfec8b8c42335147f59d95b538a17b8065a4f67f1c82a23e3ae8f905fa3c69e83e2a5a7e2e74b3b8d9b5ffa7ad0d5a3d99f6dc279e74324fcc0dee8048ca0cf58fb94075b4d83b48ef3ea736e665b15daad8e1a4b5c2dcbad08eabc85515f50b1da3cf82f494c04bd7be80b4c330ed7c94af430d401e2c1479712ca90a1fb826d1b2e77ad91b0c3050b8d3e7e3d9d9cbfd5c5e1f9e387c12f37715024f0c1216a8329520378300f28403b03e09ad7b2ccc73931fdefddba789cbe05708499beccc4c8933d80ca1d00bb42dafda4708cd9d837eb31e8651c00f3e1a4483d363cb97563db594d6f415e6ce3473125b2ca1a9235c077767acde0ecafe88cff49bec3e139930f70f9dec399118d7056d8ebc010d242666a932f7267145cca491f3ea63e77027ca0d08c622bf8ce8e9cca549fd46d133125d0b42e234ef650e9a92e76c9be61ce817aea28b8a5e2e09e2f35279839e78b4135276a2da32f56afe51345e49d093e24211a403e867a1537f91c8351c07711c236118ae629d82217110bf55d024c9698958f1be75772b74857af75bb5648e6aeaeaf639765b1b16e21c5ec46bcccdfb2616b3621f8a385295a58d9184726733f6b870fad9269fe4dd5916df1ec531de6388c79fabea9778cc23f0ce6e5c943bb978e622729146cdccd08bed3d645b3bc499619a109033fc8333f70b8a8777ccdb83a94b4ab7e4b936017730a17f4d71ac760a7e5d5a236eff9139942e81e4185b772539ec25b5b5936a77dcddf7458eab797ef611237923bc38d32db8463bb858c4224c40ea6e71bce0f0f9ea8c60e04eb0f51760cc3573469048a7e5623910ab895d44ce2ea7ab29bdb33f050fe0ac156b4804388f7ba6e68ec6e954c8fd1694705c8d0cfe51ddcd67cff29f8a35e5cfec3ace9e0a4a9f8baeaab63207b34d9bc9250f9d05cfe5717afaa09c2b19569633ca24e0bd4180d84fb727a6007290c7d0f7420dd7ef4e57a0c3216117670c0442802f7b8df9c0d259fdc6222c055ffa880238bc54e4a720e2f5b3b5e925af47f9d99ef65a75209798cdd83b5d0293b7d78ce8bf22ef301ea9ec29a0aabefacdce07bd0b88c1923452ddead3c14e4b5d53ffc66ea4627d0adc5d761d6269e0ca3b72d9579bf00cbe60f7fb5b9105dbe07b88bd0055a75c9787d0395b7deb12ac6eaaf070c40cb9ae6e9a2455e203d88d2cbfc005f99c3a1f32de6c31265938be87b2fe6da5341529e5beb0532b6689ef0c81c94a05240d9ad0f2ae598c830a1f5a930c19f5d81e73176516c3c2ac82f102de7fadf318d522631b469c4eefcaec3e44af6dcb0fb2d8c3f47e4f04ef2cb90cd6a467d6284fe20cae010839f2c4b26be4dfa9bf2b6ee01fd5df38d2239a7d1ce0f2cd0daf6ae191afcdeaeb858ea8fc4677bfd7c96a22284ebb183444109a3e335ffa1171573cf65d39a5094828aa7b399c72e77584e59c4b709c17eeb5b33eb8d0e39b7daefb5b31eca0159fb1c414e3abb0f62d2e90fbaacbc2b1ae2369a05df56aae69cced3a4e355fb6dcda654215995d44523a808e835ac0d33ab69655a9f5b8658d32cb15af4b939353b05e979b1d1a39688bcb48c6fcfe154eb4afd3b1af14235ac77fa1b29cb7a8ba11f36e0292ecc338e0367dfeaaf49534dbce41a6e3f6786794ff74114f9334b2fb33e62a3f4be3765f657b1af0a8c56f9b54398312de056639608c02f97e2fb1048801111f33d37d1ecea8e5f2ca055097350ef8e1ddfb9cf8c6a00265696ec7e376b7db8f0d079d3b199c47e1d59e292157ddfbd38d8fcd4ae51cd8dae6319aea446453140d4ba24996f42e034a279a100991bd47645235dd25a8cdac87f313f2f8336e345edd6c4ff8e9115418b5659a39d65daff095ad4e1196bf50a4f860e62d334f544fefcf0155bb128992624a84a1e23ac4cc3c7470e47ca834058fde08849e12b57e7a07b1959900830ce1eeb1045e5e09c17ca6635828cee46f580608f022bd194b04200938779d1e3dcd749a8d7c1b02f8941fc06816a75a18dfa7e14a693227b80332060389a86721a70d4017e3a63038d81d958243d74c2701fe1e130727f0b8121a901f2f4c5624e4a9a01119ca6b1457d107efb1574f7f5d0f7fe1d80b02d7a61a00102bc6d63805e1b8f65527897215eccf9e34d2d420b569156fac7d59ae8d32960ee99b17efd56e53f72b08baea358b845644f5363d3cec4c7bee7166f69fb115ecfb77f68eab9d810fe9362b420e484dd1a8b6fc3fae441e86704e1d87ca0fcf765041d794e918fb1450934975b1470bf7b2e4c782ea8af4ffeb7eadbc41b16a1d2fed444be43581374d7ef640ec28f30cc785b0a8ac93a2c5f7fa1effeeab476f02e491961d8b6fb95e1827b7a4c10d4376acfcc50a97d9eca31568475acea05efb61782d53963e46f46efa9d3545fd2ba2d53c0a85575bd7b2f0c0699153e8ee5940d56165b6adf1d4b64c1412d99a41d1bc03feeef6ad0e13aca72e5d481785de6c5bd4a428cdb198cc018b4f4b1984217b6a0afb0115af1094636cf875523aa9357b998040bd4ee2bf5b6f14b6a32211d31937a0d9e655083a3c8e67444a3d3c37cf3b9dc4214b74d04f62938887c5ff60e155469f0438eb683332df3951da298a8c9a68cf9bec7253db9d4504f4ec4f3b28093fc35d5f77649085180addf025b62eef2cfa8496ad32e2ffe21ee702dadc65475fd73dc4a581cdd3ad3c21ec2e1b9e760e36dd892397faa4ad3cbcde1e638999f703a8a2f8a2680786b616b855f03f5f0f8f49bc1767d194cbcba31d072f76f80b5c2adc59a9ed6494f6db863c35d22de9365baa35bcb24d1ff4bc01ad3da02d776ea6c0aeedf140341c1201eeefe9c1638984291916953b3e1db02e3d28753b8c957336f3b08414bd554ea32c989d01083b19095540cd4b8a8e079611f55c8d97ae63c476d3776d89b4d5c27e6807fde140eaf01f635e946f7f240b948ba71c4b0db6095687b7f57ca398b39cc5a8e7370f85696074ea592faed786bcfdbb42037e2f3869dbf258dfeb13de77571afd6783ba8868225ed600ac5112f55bf36bcb79767308143972b107fbd28ad15b10d4e0e716fad0c3cc2bfb1dca932a5b3cba2cbd5dd7312fc4b47ca31d1ff5f872a2e227f9363218194e82bdc99d2d8319ea047f253ac524235625d8d2fa4b6b6b2d8c93684b5fead99d87f3a31becde8ec19c0c43a444bca0e85753cee63ed3cdb8d71804d8c695a611316f88bedba4e4694d76274e716df009de7cbb9fa555d8c1badc67a5ee4db95aba70f178689312586402dbfa25ba5e9f636c50d6e766b2444590388ab2f78a4713f6a78e7266f6e49e5efeacc681abec76f50267f0605b4518cf4ec56802f7409627ca2ef6c093f85cbea5fdc3d1e2ce71d970cc38974b92b0cd11f7b54b171f731d25b1909ebbd75dd8c2b2a4b0b61a5ae99d5ab487812ffcc4eb535776cd0b38ddeb436c36a1bfe919d28f3e03a3057dd537552fc4b40c56193fa1a2de74d9a958e248480f384600419f6dd6c730242c82d38fcc0cb0047e9b1c581db506323d38b3af6f82cb326b5138fa19339805bf7421ceaa62ecb59f152febaee959dda53572227fc8cac1518a10a730de1c6c27e9c588ee3ab463a3099d9f101639bbbcfb73eb069d5124fc9736018352d2a03630ad275a967c48b41e3898bc62ca535b75199e8714de10fb164f268c032ba65915d5976843da7068b778154201cfc99ca5222aed2becf0b85fb2ff497cc05c8f395452bbf7d8cf015603e6bb1f6c70c617fb7618b63eea068543f57f22c4cbf5359b9db98e800cb25df826114910254e668e1901d0d29ee5f62b730b5cf36093ec6ab0fc536da145427a4779972341dd0482351071c8322b9e731ba3fbae5fed77d049534566bbf088b9c1bcacd7ec754f882f7327d8398ae193208190661e3e1fb3950a8067ac29825c09bdd55f93238a074c19e71d0972ecec610b63add680b255781ae27bbce94ab052cf5a2caf19f186e31c0824b8e2d83452b3337c6f948ff5cf5661caedb854d295fc5ce06aa3d94c9a05d958184507c28d456d5b21b71a5b586254cdb538ffef15bc22146d15e1c4a14c5cad27e68ff5f973321bae464834c770b5fda7cd1ff5914d02d77acd70a1cce5de504cd1ed5029a119aedfed26fee2dccafa748a3f0ff6ed0969d8b2acb40e04b0631e5bb0faceb7cd25972a40ce7e896d15eb5e24bb8376029d89885e0b5171904bca5feb304e295c55a51b5dc0badc5c0488ff3d963856bb1b117d132960e81f1cc494c33b5e7272b722c602aa4cb6f457c4fe6634faa75e9baefc29631fcbac3040c5fc019a1d50eadd685aef3700dde36322b29e8f3f703d473f730a9d7743287c0e88a8871a0f7e4921ed7152efdc1c93540f305207c975b998583f555211a4263ef14eebc99452afdec597f6fce29ef72d74e36176af3b0067393cdb113d161f3f49a72fe3d89e4c56db7ab2ec00c05021742f160fbcfdc899ba234b64d1eaea3f032178e42fb30dbb7aa7fc536217045b1a761c9c7b7d0a44f6b585f7baebe58ac9558c0a08bfb2fe88342c51ef20dbd5c3c64cc08796c23c5c6bbb9a665dce3b01240500365f1cb2ecb0c7595a6f5d1063d1fb5d85cd2bcd16d3e9610b460b0e3323056b2b77005708b0e2ff681bdf129ce95c9792a7f599441bac1d89833dbb29d940479abf2f8b56da6f63395d759330338b213092b7e1fa9fffa8d9001f01a5ce328aedd02abf1fbc5de2ee0f28f4b84a6523e1ebe398aa1cf48ab8059784f72fc1e27dd7a3c94bed49e5b9cddda89afb0cc129278629e611b1ee19fc01e419d5fec51475cbc2bca157cd8cfa0f69ef9c668a0087a84dddbe86cb00c9a33865d6d2598c1c92588f7989bd2fbfa34f11992dc5d49a56e70814add5ab8a6c1c2d97cb79f79d2414a04f27dab56014d579ef11be1e75c5a4c33980890f07176bdbbd497edc25dd1a7113ec71881e2aee20926117e7a12c9d64a99695a997313a609d73150c55aa42bbf9b0a46b8fd04a1e3a100ec4f429ad1b16c5a3628677801d5ba119cd29c23657b2a5092374d16276ad5f42e514378d96b85bffbef3bd60d38e5cd786e5be15b2a56c5bad51ff4c97de24eda60f4d4de880a47cffa293ec3016ccd7eb14b1f632e6d3e8e28d040dc9e1d7108e1cc3cd3c5bb8e6260a83c9ba25185"}) preadv(r8, &(0x7f0000008840)=[{&(0x7f00000073c0)=""/240, 0xf0}, {&(0x7f00000074c0)}, {&(0x7f0000007500)=""/161, 0xa1}, {&(0x7f00000075c0)=""/96, 0x60}, {&(0x7f0000007640)=""/129, 0x81}, {&(0x7f0000007700)=""/103, 0x67}, {&(0x7f0000007780)=""/154, 0x9a}, {&(0x7f0000007840)=""/4096, 0x1000}], 0x8, 0x8a, 0x506e) [ 74.529492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.531842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.533572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.535185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.536380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.537997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.539098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.540280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.544430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.546149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.547404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.549412] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.550864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.554258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.555643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.557832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.580938] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.583797] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.584724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.586502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.588180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.590081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.591347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.592981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.594591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.598259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.600289] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.600514] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.602846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.608867] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.662785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.662866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.665710] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.667254] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.671315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.672621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.676532] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.677736] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.678961] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.680137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.687763] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.689943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.691688] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.696577] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.698823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.707732] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.709757] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.711392] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.745083] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.807337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.809315] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.811203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.814099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.815747] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.817146] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.822588] Bluetooth: hci7: HCI_REQ-0x0c1a [ 76.605910] Bluetooth: hci1: command 0x0409 tx timeout [ 76.669719] Bluetooth: hci2: command 0x0409 tx timeout [ 76.670703] Bluetooth: hci4: command 0x0409 tx timeout [ 76.671666] Bluetooth: hci0: command 0x0409 tx timeout [ 76.733645] Bluetooth: hci5: command 0x0409 tx timeout [ 76.734606] Bluetooth: hci3: command 0x0409 tx timeout [ 76.797589] Bluetooth: hci6: command 0x0409 tx timeout [ 76.861564] Bluetooth: hci7: command 0x0409 tx timeout [ 78.653952] Bluetooth: hci1: command 0x041b tx timeout [ 78.717609] Bluetooth: hci0: command 0x041b tx timeout [ 78.718137] Bluetooth: hci4: command 0x041b tx timeout [ 78.718666] Bluetooth: hci2: command 0x041b tx timeout [ 78.781606] Bluetooth: hci3: command 0x041b tx timeout [ 78.782104] Bluetooth: hci5: command 0x041b tx timeout [ 78.846515] Bluetooth: hci6: command 0x041b tx timeout [ 78.909500] Bluetooth: hci7: command 0x041b tx timeout [ 80.701618] Bluetooth: hci1: command 0x040f tx timeout [ 80.765601] Bluetooth: hci2: command 0x040f tx timeout [ 80.766334] Bluetooth: hci4: command 0x040f tx timeout [ 80.767108] Bluetooth: hci0: command 0x040f tx timeout [ 80.829563] Bluetooth: hci5: command 0x040f tx timeout [ 80.830294] Bluetooth: hci3: command 0x040f tx timeout [ 80.893629] Bluetooth: hci6: command 0x040f tx timeout [ 80.957642] Bluetooth: hci7: command 0x040f tx timeout [ 82.749538] Bluetooth: hci1: command 0x0419 tx timeout [ 82.813541] Bluetooth: hci0: command 0x0419 tx timeout [ 82.813990] Bluetooth: hci4: command 0x0419 tx timeout [ 82.814397] Bluetooth: hci2: command 0x0419 tx timeout [ 82.877565] Bluetooth: hci3: command 0x0419 tx timeout [ 82.878000] Bluetooth: hci5: command 0x0419 tx timeout [ 82.942546] Bluetooth: hci6: command 0x0419 tx timeout [ 83.005500] Bluetooth: hci7: command 0x0419 tx timeout 05:22:17 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x3000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 05:22:18 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000004d40)=[{&(0x7f0000004640)="da", 0x1}, {&(0x7f0000004740)='g', 0x1}, {&(0x7f0000004ac0)="b3", 0x1, 0xffffffffffffff81}], 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000000) [ 126.882033] loop6: detected capacity change from 0 to 16383 [ 126.894212] loop6: detected capacity change from 0 to 16383 05:22:18 executing program 6: r0 = syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x161941, 0x2) r2 = openat$sr(0xffffffffffffff9c, 0x0, 0x1cd802, 0x0) openat2(r0, 0x0, &(0x7f00000001c0)={0x119800, 0x101, 0x31}, 0x18) openat(r2, &(0x7f0000000040)='./file1\x00', 0x88040, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0x1000) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000180)='./file1\x00', 0x0) [ 127.037986] audit: type=1400 audit(1664256138.260:7): avc: denied { open } for pid=3867 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.039678] audit: type=1400 audit(1664256138.260:8): avc: denied { kernel } for pid=3867 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.045261] ------------[ cut here ]------------ [ 127.045286] [ 127.045289] ====================================================== [ 127.045293] WARNING: possible circular locking dependency detected [ 127.045297] 6.0.0-rc6-next-20220923 #1 Not tainted [ 127.045304] ------------------------------------------------------ [ 127.045307] syz-executor.6/3869 is trying to acquire lock: [ 127.045314] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 127.045354] [ 127.045354] but task is already holding lock: [ 127.045357] ffff88800f210020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.045386] [ 127.045386] which lock already depends on the new lock. [ 127.045386] [ 127.045389] [ 127.045389] the existing dependency chain (in reverse order) is: [ 127.045392] [ 127.045392] -> #3 (&ctx->lock){....}-{2:2}: [ 127.045406] _raw_spin_lock+0x2a/0x40 [ 127.045425] __perf_event_task_sched_out+0x53b/0x18d0 [ 127.045438] __schedule+0xedd/0x2470 [ 127.045454] schedule+0xda/0x1b0 [ 127.045466] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.045478] syscall_exit_to_user_mode+0x19/0x40 [ 127.045491] do_syscall_64+0x48/0x90 [ 127.045507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.045520] [ 127.045520] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 127.045533] _raw_spin_lock_nested+0x30/0x40 [ 127.045551] raw_spin_rq_lock_nested+0x1e/0x30 [ 127.045564] task_fork_fair+0x63/0x4d0 [ 127.045581] sched_cgroup_fork+0x3d0/0x540 [ 127.045595] copy_process+0x4183/0x6e20 [ 127.045606] kernel_clone+0xe7/0x890 [ 127.045615] user_mode_thread+0xad/0xf0 [ 127.045625] rest_init+0x24/0x250 [ 127.045636] arch_call_rest_init+0xf/0x14 [ 127.045654] start_kernel+0x4c1/0x4e6 [ 127.045669] secondary_startup_64_no_verify+0xe0/0xeb [ 127.045683] [ 127.045683] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 127.045696] _raw_spin_lock_irqsave+0x39/0x60 [ 127.045714] try_to_wake_up+0xab/0x1930 [ 127.045727] up+0x75/0xb0 [ 127.045741] __up_console_sem+0x6e/0x80 [ 127.045756] console_unlock+0x46a/0x590 [ 127.045772] do_con_write+0xc05/0x1d50 [ 127.045784] con_write+0x21/0x40 [ 127.045794] n_tty_write+0x4d4/0xfe0 [ 127.045807] file_tty_write.constprop.0+0x49c/0x8f0 [ 127.045820] vfs_write+0x9c3/0xd90 [ 127.045838] ksys_write+0x127/0x250 [ 127.045854] do_syscall_64+0x3b/0x90 [ 127.045870] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.045882] [ 127.045882] -> #0 ((console_sem).lock){....}-{2:2}: [ 127.045896] __lock_acquire+0x2a02/0x5e70 [ 127.045912] lock_acquire+0x1a2/0x530 [ 127.045928] _raw_spin_lock_irqsave+0x39/0x60 [ 127.045946] down_trylock+0xe/0x70 [ 127.045960] __down_trylock_console_sem+0x3b/0xd0 [ 127.045976] vprintk_emit+0x16b/0x560 [ 127.045992] vprintk+0x84/0xa0 [ 127.046007] _printk+0xba/0xf1 [ 127.046018] report_bug.cold+0x72/0xab [ 127.046034] handle_bug+0x3c/0x70 [ 127.046050] exc_invalid_op+0x14/0x50 [ 127.046066] asm_exc_invalid_op+0x16/0x20 [ 127.046077] group_sched_out.part.0+0x2c7/0x460 [ 127.046088] ctx_sched_out+0x8f1/0xc10 [ 127.046098] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.046110] __schedule+0xedd/0x2470 [ 127.046123] schedule+0xda/0x1b0 [ 127.046136] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.046146] syscall_exit_to_user_mode+0x19/0x40 [ 127.046158] do_syscall_64+0x48/0x90 [ 127.046174] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.046186] [ 127.046186] other info that might help us debug this: [ 127.046186] [ 127.046189] Chain exists of: [ 127.046189] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 127.046189] [ 127.046204] Possible unsafe locking scenario: [ 127.046204] [ 127.046206] CPU0 CPU1 [ 127.046208] ---- ---- [ 127.046211] lock(&ctx->lock); [ 127.046217] lock(&rq->__lock); [ 127.046223] lock(&ctx->lock); [ 127.046229] lock((console_sem).lock); [ 127.046235] [ 127.046235] *** DEADLOCK *** [ 127.046235] [ 127.046237] 2 locks held by syz-executor.6/3869: [ 127.046244] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 127.046272] #1: ffff88800f210020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 127.046299] [ 127.046299] stack backtrace: [ 127.046302] CPU: 0 PID: 3869 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 127.046315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.046323] Call Trace: [ 127.046326] [ 127.046330] dump_stack_lvl+0x8b/0xb3 [ 127.046348] check_noncircular+0x263/0x2e0 [ 127.046364] ? format_decode+0x26c/0xb50 [ 127.046380] ? print_circular_bug+0x450/0x450 [ 127.046397] ? enable_ptr_key_workfn+0x20/0x20 [ 127.046412] ? __lockdep_reset_lock+0x180/0x180 [ 127.046429] ? format_decode+0x26c/0xb50 [ 127.046445] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 127.046463] __lock_acquire+0x2a02/0x5e70 [ 127.046484] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.046506] lock_acquire+0x1a2/0x530 [ 127.046522] ? down_trylock+0xe/0x70 [ 127.046538] ? lock_release+0x750/0x750 [ 127.046555] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 127.046575] ? vprintk+0x84/0xa0 [ 127.046593] _raw_spin_lock_irqsave+0x39/0x60 [ 127.046612] ? down_trylock+0xe/0x70 [ 127.046627] down_trylock+0xe/0x70 [ 127.046642] ? vprintk+0x84/0xa0 [ 127.046659] __down_trylock_console_sem+0x3b/0xd0 [ 127.046675] vprintk_emit+0x16b/0x560 [ 127.046692] ? lock_downgrade+0x6d0/0x6d0 [ 127.046710] vprintk+0x84/0xa0 [ 127.046727] _printk+0xba/0xf1 [ 127.046738] ? record_print_text.cold+0x16/0x16 [ 127.046751] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 127.046765] ? lock_downgrade+0x6d0/0x6d0 [ 127.046783] ? report_bug.cold+0x66/0xab [ 127.046800] ? group_sched_out.part.0+0x2c7/0x460 [ 127.046811] report_bug.cold+0x72/0xab [ 127.046830] handle_bug+0x3c/0x70 [ 127.046846] exc_invalid_op+0x14/0x50 [ 127.046864] asm_exc_invalid_op+0x16/0x20 [ 127.046876] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.046889] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.046901] RSP: 0018:ffff88804161fc48 EFLAGS: 00010006 [ 127.046910] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.046917] RDX: ffff888018248000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 127.046925] RBP: ffff888008668b90 R08: 0000000000000005 R09: 0000000000000001 [ 127.046933] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f210000 [ 127.046941] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 127.046951] ? group_sched_out.part.0+0x2c7/0x460 [ 127.046965] ? group_sched_out.part.0+0x2c7/0x460 [ 127.046978] ctx_sched_out+0x8f1/0xc10 [ 127.046990] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.047006] ? lock_is_held_type+0xd7/0x130 [ 127.047019] ? __perf_cgroup_move+0x160/0x160 [ 127.047031] ? set_next_entity+0x304/0x550 [ 127.047048] ? update_curr+0x267/0x740 [ 127.047066] ? lock_is_held_type+0xd7/0x130 [ 127.047079] __schedule+0xedd/0x2470 [ 127.047096] ? io_schedule_timeout+0x150/0x150 [ 127.047112] ? __x64_sys_futex_time32+0x480/0x480 [ 127.047126] schedule+0xda/0x1b0 [ 127.047140] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.047152] syscall_exit_to_user_mode+0x19/0x40 [ 127.047165] do_syscall_64+0x48/0x90 [ 127.047182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.047194] RIP: 0033:0x7f2cc0a5bb19 [ 127.047203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.047214] RSP: 002b:00007f2cbdfd1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.047224] RAX: 0000000000000001 RBX: 00007f2cc0b6ef68 RCX: 00007f2cc0a5bb19 [ 127.047232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cc0b6ef6c [ 127.047239] RBP: 00007f2cc0b6ef60 R08: 000000000000000e R09: 0000000000000000 [ 127.047246] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f2cc0b6ef6c [ 127.047253] R13: 00007ffdcc26fc7f R14: 00007f2cbdfd1300 R15: 0000000000022000 [ 127.047266] [ 127.106011] WARNING: CPU: 0 PID: 3869 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 127.106700] Modules linked in: [ 127.106944] CPU: 0 PID: 3869 Comm: syz-executor.6 Not tainted 6.0.0-rc6-next-20220923 #1 [ 127.107549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 127.108383] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 127.108793] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 127.110142] RSP: 0018:ffff88804161fc48 EFLAGS: 00010006 [ 127.110540] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 127.111069] RDX: ffff888018248000 RSI: ffffffff81564fb7 RDI: 0000000000000005 [ 127.111614] RBP: ffff888008668b90 R08: 0000000000000005 R09: 0000000000000001 [ 127.112146] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f210000 [ 127.112678] R13: ffff88806ce3d140 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 127.113214] FS: 00007f2cbdfd1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 127.113814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.114257] CR2: 00007f2ddbadaa70 CR3: 000000001f0f6000 CR4: 0000000000350ef0 [ 127.114793] Call Trace: [ 127.114988] [ 127.115165] ctx_sched_out+0x8f1/0xc10 [ 127.115471] __perf_event_task_sched_out+0x6d0/0x18d0 [ 127.115869] ? lock_is_held_type+0xd7/0x130 [ 127.116197] ? __perf_cgroup_move+0x160/0x160 [ 127.116542] ? set_next_entity+0x304/0x550 [ 127.116867] ? update_curr+0x267/0x740 [ 127.117168] ? lock_is_held_type+0xd7/0x130 [ 127.117496] __schedule+0xedd/0x2470 [ 127.117783] ? io_schedule_timeout+0x150/0x150 [ 127.118135] ? __x64_sys_futex_time32+0x480/0x480 [ 127.118501] schedule+0xda/0x1b0 [ 127.118764] exit_to_user_mode_prepare+0x114/0x1a0 [ 127.119131] syscall_exit_to_user_mode+0x19/0x40 [ 127.119510] do_syscall_64+0x48/0x90 [ 127.119802] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.120206] RIP: 0033:0x7f2cc0a5bb19 [ 127.120496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.121843] RSP: 002b:00007f2cbdfd1218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.122417] RAX: 0000000000000001 RBX: 00007f2cc0b6ef68 RCX: 00007f2cc0a5bb19 [ 127.122952] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cc0b6ef6c [ 127.123496] RBP: 00007f2cc0b6ef60 R08: 000000000000000e R09: 0000000000000000 [ 127.124040] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f2cc0b6ef6c [ 127.124577] R13: 00007ffdcc26fc7f R14: 00007f2cbdfd1300 R15: 0000000000022000 [ 127.125116] [ 127.125308] irq event stamp: 1848 [ 127.125564] hardirqs last enabled at (1847): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 127.126293] hardirqs last disabled at (1848): [] __schedule+0x1225/0x2470 [ 127.126922] softirqs last enabled at (1712): [] __irq_exit_rcu+0x11b/0x180 [ 127.127593] softirqs last disabled at (1631): [] __irq_exit_rcu+0x11b/0x180 [ 127.128221] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 05:22:18 Registers: info registers vcpu 0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88804161f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000032 R11=0000000000000001 R12=0000000000000032 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0 RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2cbdfd1700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ddbadaa70 CR3=000000001f0f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff888041647388 RCX=0000000000000000 RDX=1ffff110082c8e7c RSI=ffff8880416476d0 RDI=ffffffff81784981 RBP=ffff8880416473e0 RSP=ffff888041647370 R8 =ffffffff85edd4bc R9 =ffffffff85edd4c0 R10=ffffed10082c8e7e R11=ffff8880416473c8 R12=ffff888041647450 R13=0000000000000000 R14=ffff888041085040 R15=0000000000092cc0 RIP=ffffffff8111a033 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f971b48b620 CR3=0000000040908000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000